$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: 4G02ekrWNajulYu6IlMZvrQY6wbAUe8In8WYp6fZM7A= Subject key identifier: E6:83:7F:2B:A3:43:08:93:6D:A7:79:EE:EC:35:5B:FF:E1:60:9A:D6 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019FF2D86AD8879C51EFD1C95E463540E8F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A41 Signing time: Tue 11 Aug 2026 22:01:37 +0000 Manifest this update: Tue 11 Aug 2026 22:01:37 +0000 Manifest next update: Wed 12 Aug 2026 22:01:37 +0000 Files and hashes: 1: 2jdLcJNa2rxtyqaeCiOQarFpRYI.roa (hash: 43Ap5prXIyDRPzEflFt9hAlDMzca3oA+KKkhyqilYqY=) 2: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: XIAtfM/M2ZouZ8K+IXzZhD8TaXuuksFVjeLx7RhWTx0=) 5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 6: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 7: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 8: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 9: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 10: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 11: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 12 Aug 2026 21:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:f2:d8:6a:d8:87:9c:51:ef:d1:c9:5e:46:35:40:e8:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 11 22:01:37 2026 GMT Not After : Aug 12 22:01:37 2026 GMT Subject: CN=e6837f2ba34308936da779eeec355bffe1609ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:99:59:f7:f8:92:99:af:5a:1a:39:10:77:8d: 3b:e8:cb:06:09:9f:ca:ae:88:27:8c:2d:53:dc:65: b8:50:11:21:3d:7b:78:c5:1f:33:59:0a:ef:35:e3: d3:09:e4:cd:cb:e6:43:ee:95:d3:82:07:11:cf:b1: 39:a9:c4:24:65:09:bb:d5:ee:19:45:06:6a:ca:a2: e1:78:bd:5a:c6:75:b0:2e:95:9f:a3:4c:81:7a:08: 86:23:c9:aa:4b:b0:0b:c4:e0:7e:1c:60:85:93:e3: 73:4e:f0:26:f9:50:06:8a:3f:82:47:53:3c:9d:ca: 70:52:5a:29:8e:77:28:e7:e5:41:51:d3:d2:74:af: 23:22:87:23:9a:e3:cb:e4:84:53:f4:df:10:36:38: 5a:51:9b:7d:2a:bd:28:a4:6b:ad:49:9f:f7:9f:2b: c6:dc:c1:db:89:3d:80:32:1f:5b:54:4a:a0:fb:4a: 44:70:f7:89:64:46:26:c6:f9:07:cd:93:70:82:f4: 04:79:90:1e:4a:d8:e1:05:e4:1f:b8:7e:fc:e3:40: fd:d3:8b:a9:4f:32:0b:04:3b:98:f5:46:1c:26:49: 8e:2b:dd:62:fb:22:5c:3a:6e:f9:06:47:2e:16:68: af:26:04:bd:1b:6d:c5:86:60:9a:a5:79:70:53:53: 6d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:83:7F:2B:A3:43:08:93:6D:A7:79:EE:EC:35:5B:FF:E1:60:9A:D6 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0d:fb:42:0b:d3:41:fa:32:5a:48:a0:bb:70:42:b4:11:c1: 3b:10:aa:aa:64:b2:db:3b:24:ac:00:82:15:84:09:9e:12:d9: 5d:44:c5:08:4d:ed:29:50:4f:b0:4e:eb:3f:18:41:ad:d1:06: a0:71:ed:6f:32:0b:b6:f1:7f:58:70:be:f0:63:11:30:78:af: 50:e7:fc:9d:7d:a0:76:90:ea:8e:c8:a0:ad:b2:f5:40:69:28: f0:ef:6c:7f:0a:e6:79:d1:e3:ba:ba:bc:08:3d:91:9c:3e:ed: 7b:c3:38:0d:bd:6e:22:23:1a:26:81:47:15:ce:dd:a1:57:d6: 6b:22:17:6e:b8:ce:1f:35:97:75:96:ed:ce:ac:4c:a7:b5:2c: dd:af:5b:ff:48:f8:1f:b3:c7:0f:53:db:c2:77:2d:15:a6:23: 9d:84:88:b7:03:7e:a2:a2:6a:b9:b6:cf:49:cc:3b:81:f9:a1: f2:57:cb:22:8d:a7:3b:84:1c:bd:e7:90:5c:97:07:c8:46:c8: 30:64:99:36:2f:a5:ac:4e:0c:ba:bc:69:89:d0:01:41:f2:09: 19:e9:cc:79:ea:4c:08:92:90:5a:0d:ab:c4:63:a5:bf:8f:b8: c6:53:46:d7:b8:3d:d5:2f:f1:12:19:60:c6:b2:26:58:fc:de: d5:5f:eb:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/y2GrYh5xR79HJXkY1QOjxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwODExMjIwMTM3WhcNMjYwODEyMjIwMTM3WjAzMTEwLwYDVQQD EyhlNjgzN2YyYmEzNDMwODkzNmRhNzc5ZWVlYzM1NWJmZmUxNjA5YWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5lZ9/iSma9aGjkQd4076MsGCZ/K rognjC1T3GW4UBEhPXt4xR8zWQrvNePTCeTNy+ZD7pXTggcRz7E5qcQkZQm71e4Z RQZqyqLheL1axnWwLpWfo0yBegiGI8mqS7ALxOB+HGCFk+NzTvAm+VAGij+CR1M8 ncpwUlopjnco5+VBUdPSdK8jIocjmuPL5IRT9N8QNjhaUZt9Kr0opGutSZ/3nyvG 3MHbiT2AMh9bVEqg+0pEcPeJZEYmxvkHzZNwgvQEeZAeStjhBeQfuH7840D904up TzILBDuY9UYcJkmOK91i+yJcOm75BkcuFmivJgS9G23FhmCapXlwU1NtlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaDfyujQwiTbad57uw1W//hYJrWMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACw37QgvT QfoyWkigu3BCtBHBOxCqqmSy2zskrACCFYQJnhLZXUTFCE3tKVBPsE7rPxhBrdEG oHHtbzILtvF/WHC+8GMRMHivUOf8nX2gdpDqjsigrbL1QGko8O9sfwrmedHjurq8 CD2RnD7te8M4Db1uIiMaJoFHFc7doVfWayIXbrjOHzWXdZbtzqxMp7Us3a9b/0j4 H7PHD1PbwnctFaYjnYSItwN+oqJqubbPScw7gfmh8lfLIo2nO4QcveeQXJcHyEbI MGSZNi+lrE4MurxpidABQfIJGenMeepMCJKQWg2rxGOlv4+4xlNG17g91S/xEhlg xrImWPze1V/rOw== -----END CERTIFICATE-----Generated at Tue Aug 11 23:56:01 2026 by rpki-client