$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: Xxo1wRsMtpuBV9T44PzFLw/AbkqrIxM38xnglt/k7mI= Subject key identifier: 78:0B:8B:4C:06:A6:4D:7E:19:0A:C8:B6:9B:4F:87:D4:4F:2F:1A:32 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019FDBABDA42E22E04051CCE5C674FF67776 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A35 Signing time: Fri 07 Aug 2026 10:01:40 +0000 Manifest this update: Fri 07 Aug 2026 10:01:40 +0000 Manifest next update: Sat 08 Aug 2026 10:01:40 +0000 Files and hashes: 1: 2jdLcJNa2rxtyqaeCiOQarFpRYI.roa (hash: 43Ap5prXIyDRPzEflFt9hAlDMzca3oA+KKkhyqilYqY=) 2: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: p4jfoKz6NbQRdjV0uw5/OAS8mgGxzaXB0BDk0B5ZodU=) 5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 6: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 7: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 8: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 9: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 10: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 11: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 08 Aug 2026 10:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:db:ab:da:42:e2:2e:04:05:1c:ce:5c:67:4f:f6:77:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 7 10:01:40 2026 GMT Not After : Aug 8 10:01:40 2026 GMT Subject: CN=780b8b4c06a64d7e190ac8b69b4f87d44f2f1a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cb:21:8a:95:72:37:e1:60:0a:2c:4e:c2:86: 8c:1b:a9:ab:67:4d:37:49:ab:fb:01:16:8b:e2:c7: 8f:d3:1d:fe:1c:13:99:fa:1b:bc:06:cb:51:ed:03: 93:5c:f1:18:2d:1b:62:ee:eb:aa:9c:47:f8:7d:48: fa:f9:ae:4a:be:a3:67:bd:92:b7:c8:46:93:4e:60: 8b:d3:ef:b1:df:e3:23:6b:7b:6e:3c:e9:43:60:f2: 13:75:95:84:0f:0e:99:b5:f4:98:b8:d0:06:dd:41: 31:c7:37:d0:41:0b:f9:3f:51:07:cf:94:da:8a:ae: f1:d3:15:0d:95:4b:c4:a4:6b:9c:79:80:4a:e8:e3: 1e:d2:32:18:d4:26:30:76:4e:bd:35:27:3d:9a:f8: d9:02:e7:e0:07:a5:4e:9f:27:fc:eb:45:85:ea:b1: 5a:fc:ef:c1:5d:3e:d3:6b:ab:d2:f1:f0:f3:85:36: 97:b9:a9:88:9a:d7:4f:f3:b0:74:79:22:d1:6b:06: 7b:99:39:23:1b:8a:bd:df:94:42:75:7a:38:1e:a2: b7:fa:a8:e1:c3:50:bd:7e:48:bb:aa:13:e1:31:41: 17:b2:b5:b1:9f:8c:fe:2d:44:4b:07:da:ab:f7:24: 55:a2:de:f5:b1:97:14:33:33:3a:43:df:a3:15:bb: 53:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0B:8B:4C:06:A6:4D:7E:19:0A:C8:B6:9B:4F:87:D4:4F:2F:1A:32 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:9b:eb:a8:d6:0a:5e:a2:6a:30:e5:5e:3a:52:97:72:bc:32: e1:8f:74:ab:94:7e:09:b0:53:7d:e6:94:3b:40:11:9f:0f:d2: ca:2b:4b:e9:63:16:c4:e4:48:69:79:e2:9a:9e:8c:15:73:97: ab:91:10:4b:1d:90:e3:0f:3b:92:c9:85:c0:8d:1a:29:71:f7: 72:37:81:04:48:9f:51:3e:b6:d2:13:6b:78:67:ae:1e:25:d3: 76:24:e2:67:1f:1f:9a:b7:9f:49:80:da:c8:81:ee:19:f5:fa: 69:af:11:93:ff:a7:3c:41:b7:d4:0e:88:a6:d7:de:e1:d4:cf: 77:f2:c4:7d:f4:2f:0e:85:bb:ed:6e:e8:51:9d:ce:c1:d3:57: 4d:ff:c5:20:de:cf:72:7e:05:85:ab:41:d8:c2:a3:13:30:60: b4:10:3d:e8:99:10:93:7e:d6:00:19:d5:5d:99:ab:f2:a6:5c: e5:cf:a1:0e:2a:51:cc:b4:46:7a:0f:d3:1a:84:9f:92:eb:5b: 00:90:3d:7f:5d:f0:d5:a7:4d:95:1d:44:df:78:1d:30:31:78: bb:31:fc:65:75:d1:71:8a:84:9a:16:a4:b1:bd:37:67:07:b4: 16:19:ce:c3:c6:04:9b:18:c5:57:7b:cf:40:73:fb:97:b2:48: d5:63:da:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/bq9pC4i4EBRzOXGdP9nd2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwODA3MTAwMTQwWhcNMjYwODA4MTAwMTQwWjAzMTEwLwYDVQQD Eyg3ODBiOGI0YzA2YTY0ZDdlMTkwYWM4YjY5YjRmODdkNDRmMmYxYTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cshipVyN+FgCixOwoaMG6mrZ003 Sav7ARaL4seP0x3+HBOZ+hu8BstR7QOTXPEYLRti7uuqnEf4fUj6+a5KvqNnvZK3 yEaTTmCL0++x3+Mja3tuPOlDYPITdZWEDw6ZtfSYuNAG3UExxzfQQQv5P1EHz5Ta iq7x0xUNlUvEpGuceYBK6OMe0jIY1CYwdk69NSc9mvjZAufgB6VOnyf860WF6rFa /O/BXT7Ta6vS8fDzhTaXuamImtdP87B0eSLRawZ7mTkjG4q935RCdXo4HqK3+qjh w1C9fki7qhPhMUEXsrWxn4z+LURLB9qr9yRVot71sZcUMzM6Q9+jFbtT8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgLi0wGpk1+GQrItptPh9RPLxoyMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZvrqNYK XqJqMOVeOlKXcrwy4Y90q5R+CbBTfeaUO0ARnw/SyitL6WMWxORIaXnimp6MFXOX q5EQSx2Q4w87ksmFwI0aKXH3cjeBBEifUT620hNreGeuHiXTdiTiZx8fmrefSYDa yIHuGfX6aa8Rk/+nPEG31A6Iptfe4dTPd/LEffQvDoW77W7oUZ3OwdNXTf/FIN7P cn4FhatB2MKjEzBgtBA96JkQk37WABnVXZmr8qZc5c+hDipRzLRGeg/TGoSfkutb AJA9f13w1adNlR1E33gdMDF4uzH8ZXXRcYqEmhaksb03Zwe0FhnOw8YEmxjFV3vP QHP7l7JI1WPasQ== -----END CERTIFICATE-----Generated at Fri Aug 7 18:12:08 2026 by rpki-client