$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: sbgvr4k/JcURYXpYW4EDWcuWfTJc4rWXjqGvnnxFxXU= Subject key identifier: 09:77:31:48:35:57:93:9E:75:09:66:5F:AC:A3:8C:8F:31:B9:87:1C Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 01A01C7850B5ADC6B3006106AF02C60EE747 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A57 Signing time: Thu 20 Aug 2026 00:00:42 +0000 Manifest this update: Thu 20 Aug 2026 00:00:42 +0000 Manifest next update: Fri 21 Aug 2026 00:00:42 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: 7NF23yC3q9ReheBfsbDWneNW6xgZhKCQ6lDE5uYbPjA=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (hash: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=) 6: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 7: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 8: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 9: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 10: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 11: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Aug 2026 22:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:1c:78:50:b5:ad:c6:b3:00:61:06:af:02:c6:0e:e7:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 20 00:00:42 2026 GMT Not After : Aug 21 00:00:42 2026 GMT Subject: CN=097731483557939e7509665faca38c8f31b9871c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:fd:fd:58:a7:40:7d:57:ae:03:c8:72:93: 31:cc:f6:fb:43:49:9d:e3:6e:6e:61:26:76:a5:93: 48:ed:c4:58:67:1d:29:86:db:e1:96:4a:3a:52:f4: 55:64:ed:b3:36:8f:44:e0:62:79:f9:51:11:4b:c3: 74:fe:84:73:35:4e:15:f5:95:99:39:ce:a1:71:6a: d2:db:44:88:a7:56:7c:2e:46:99:79:9d:4c:5f:d4: db:cb:a6:38:fd:da:70:d4:9c:e8:77:f9:9a:94:4a: de:9f:41:fd:9e:28:70:e4:62:ed:d2:04:3c:56:fd: 72:dd:d6:70:79:f3:80:2d:33:8a:20:c0:0a:58:f4: 6f:10:be:c5:f0:1d:48:b6:a7:b7:59:e9:54:5c:f2: 11:8a:cb:d6:b4:86:68:ca:ea:f8:73:86:12:91:0d: 5a:36:6f:a8:c4:fd:74:43:09:c6:31:37:3a:46:01: 7f:37:cc:96:16:20:97:ac:0c:56:f7:79:41:87:49: d8:cf:0d:0d:94:3d:86:83:a2:47:c9:f9:32:6e:23: 23:ca:d9:97:8f:3a:fe:8f:96:f4:e0:e0:ad:d3:da: 14:2f:38:14:ec:69:46:ef:e7:38:4d:79:09:9b:83: 40:2b:7d:ac:03:3c:d0:f4:68:24:e4:c7:b4:b5:00: e9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:77:31:48:35:57:93:9E:75:09:66:5F:AC:A3:8C:8F:31:B9:87:1C X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:72:dc:01:2e:50:0d:15:a8:7d:60:04:af:67:f9:70:ce:2d: d5:2b:e2:5b:e6:fa:d8:b0:6a:54:5f:f7:e2:0e:41:eb:ad:00: 11:5c:16:4f:20:8d:64:19:f3:8e:d3:10:87:a9:42:1c:1f:5a: 2c:d4:7c:67:b9:9a:9d:1a:ae:d8:77:04:92:d9:05:1e:ef:f7: e9:34:13:8b:ee:38:be:f1:d6:30:1d:fc:3c:36:be:67:0d:45: 3a:b8:9a:16:3a:96:3c:ca:b7:ee:c0:02:59:a5:20:bf:69:59: e1:fe:0d:4f:d8:d1:16:5e:01:83:ec:2e:68:c9:b1:01:85:61: 1b:ba:77:4c:cf:32:ab:78:a8:28:b3:66:dd:07:91:17:7c:a0: f3:c9:c1:a9:a2:c3:11:f1:69:21:e9:c3:c1:89:68:eb:50:41: e9:3f:52:59:e7:4f:34:d4:51:7b:35:7c:41:ed:32:b4:9d:1b: 0f:aa:da:33:b9:20:e5:82:6c:21:a7:96:04:31:82:83:40:83: ca:b2:b9:91:49:70:9f:a7:5a:2c:b8:ba:ad:c3:11:97:e3:0f: 9a:b5:49:00:e3:88:76:cc:8d:d8:15:76:94:ac:a2:c3:62:aa: d6:24:d6:b3:a5:7d:85:df:b1:63:f0:88:ed:c9:1c:e2:52:15: 79:18:55:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAceFC1rcazAGEGrwLGDudHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwODIwMDAwMDQyWhcNMjYwODIxMDAwMDQyWjAzMTEwLwYDVQQD EygwOTc3MzE0ODM1NTc5MzllNzUwOTY2NWZhY2EzOGM4ZjMxYjk4NzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVv9/VinQH1XrgPIcpMxzPb7Q0md 425uYSZ2pZNI7cRYZx0phtvhlko6UvRVZO2zNo9E4GJ5+VERS8N0/oRzNU4V9ZWZ Oc6hcWrS20SIp1Z8LkaZeZ1MX9Tby6Y4/dpw1Jzod/malEren0H9nihw5GLt0gQ8 Vv1y3dZwefOALTOKIMAKWPRvEL7F8B1Itqe3WelUXPIRisvWtIZoyur4c4YSkQ1a Nm+oxP10QwnGMTc6RgF/N8yWFiCXrAxW93lBh0nYzw0NlD2Gg6JHyfkybiMjytmX jzr+j5b04OCt09oULzgU7GlG7+c4TXkJm4NAK32sAzzQ9Ggk5Me0tQDpZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAl3MUg1V5OedQlmX6yjjI8xuYccMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHLcAS5Q DRWofWAEr2f5cM4t1SviW+b62LBqVF/34g5B660AEVwWTyCNZBnzjtMQh6lCHB9a LNR8Z7manRqu2HcEktkFHu/36TQTi+44vvHWMB38PDa+Zw1FOriaFjqWPMq37sAC WaUgv2lZ4f4NT9jRFl4Bg+wuaMmxAYVhG7p3TM8yq3ioKLNm3QeRF3yg88nBqaLD EfFpIenDwYlo61BB6T9SWedPNNRRezV8Qe0ytJ0bD6raM7kg5YJsIaeWBDGCg0CD yrK5kUlwn6daLLi6rcMRl+MPmrVJAOOIdsyN2BV2lKyiw2Kq1iTWs6V9hd+xY/CI 7ckc4lIVeRhVng== -----END CERTIFICATE-----Generated at Thu Aug 20 05:03:03 2026 by rpki-client