$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: 7SFj+2rDm+/rQ2reUNrJJLYlJrEsD4igKgICG2eJUDw= Subject key identifier: 0A:88:25:7D:B0:04:5E:C2:48:4D:85:55:2B:E2:4D:96:93:75:6E:E2 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019FD20406FB16796CD112EA2A928EF82321 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A30 Signing time: Wed 05 Aug 2026 13:01:46 +0000 Manifest this update: Wed 05 Aug 2026 13:01:46 +0000 Manifest next update: Thu 06 Aug 2026 13:01:46 +0000 Files and hashes: 1: 2jdLcJNa2rxtyqaeCiOQarFpRYI.roa (hash: 43Ap5prXIyDRPzEflFt9hAlDMzca3oA+KKkhyqilYqY=) 2: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: 1rIUVVqiVV5AejrdwcrM6CW30vt7DwhbJkftzVXd/08=) 5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 6: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 7: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 8: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 9: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 10: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 11: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Aug 2026 13:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:d2:04:06:fb:16:79:6c:d1:12:ea:2a:92:8e:f8:23:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 5 13:01:46 2026 GMT Not After : Aug 6 13:01:46 2026 GMT Subject: CN=0a88257db0045ec2484d85552be24d9693756ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3f:1d:8e:30:9e:2c:77:2e:53:47:4a:c8:55: fd:69:a0:7e:57:01:da:c6:de:df:2d:dc:4f:c8:41: 22:00:37:df:2a:a1:a3:96:75:d6:5a:c2:dc:ad:11: 07:d0:26:ea:2d:9c:68:78:da:69:34:95:92:b2:ec: 25:9c:88:dd:42:17:c5:f6:e9:f8:7d:b2:e1:40:c7: 11:b4:2b:c9:1c:98:4c:f3:90:e1:13:86:b2:31:68: 5b:1a:e4:6b:4f:af:0e:1c:1a:9d:12:8b:36:aa:84: 0b:70:47:64:8f:39:50:f0:05:2c:19:47:fc:d0:48: d4:01:be:37:38:0a:fc:60:ae:ae:32:50:4b:b9:17: 00:a8:8b:f9:7b:9f:c3:72:8f:03:75:f0:a7:96:74: 4b:6d:59:0b:cf:d4:53:90:63:50:00:bd:ab:6a:94: 2f:69:43:47:74:0e:e8:98:ff:ff:ee:78:85:12:f8: 67:b9:cf:75:22:ea:57:e4:51:8c:6c:db:9e:02:1c: 57:68:e7:80:06:0c:f2:19:f2:d1:c2:13:dc:62:75: dc:4b:98:43:27:e5:5e:b0:a3:2b:d0:b1:2f:ae:3c: 00:ef:3b:aa:a4:58:35:aa:f3:5e:d9:d0:48:de:7b: e8:11:d4:a9:d9:d8:4c:93:47:05:bc:d9:7d:74:23: 48:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:88:25:7D:B0:04:5E:C2:48:4D:85:55:2B:E2:4D:96:93:75:6E:E2 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b3:92:61:ef:ae:3f:15:8d:19:f8:e3:a3:3b:f6:4f:de:18: 0e:0c:c8:90:31:8d:12:b6:3f:37:94:a7:1d:58:af:41:9d:03: 47:da:13:77:83:89:db:78:78:1a:58:71:8e:40:76:ce:6c:87: da:f3:06:d1:d1:cc:d9:9f:02:db:16:1f:35:a1:fd:1f:c7:5f: e0:e8:91:3a:5d:59:55:12:a6:40:55:b3:ea:96:6d:fd:b2:13: 72:9f:f1:e8:ea:37:ce:1e:73:91:c7:c3:1a:56:87:58:b4:8f: 3c:db:9f:82:6e:6a:5c:b5:34:c2:98:3e:fd:04:4a:49:0c:f6: 7f:5c:1f:e7:c0:2f:a2:03:b5:da:e0:2f:70:f9:49:14:79:b5: 27:aa:9a:89:b4:fe:84:e9:b1:36:99:df:3d:7c:c5:78:79:bc: 4b:ed:1f:f8:25:75:b7:40:44:07:15:86:36:18:4a:59:3c:2a: d5:86:b9:e4:36:9a:7c:12:cb:04:04:71:3d:80:df:c7:8c:91: 1f:20:91:30:f5:fb:33:9c:bb:fc:e4:ee:70:e8:4e:a6:e0:d0: 6f:23:82:e0:30:0c:31:34:7b:56:97:cb:6e:4e:d3:a9:5e:73: 9f:17:6c:42:22:c5:31:bd:ec:54:99:85:8f:21:a3:5b:96:42: 73:99:b9:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/SBAb7Fnls0RLqKpKO+CMhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwODA1MTMwMTQ2WhcNMjYwODA2MTMwMTQ2WjAzMTEwLwYDVQQD EygwYTg4MjU3ZGIwMDQ1ZWMyNDg0ZDg1NTUyYmUyNGQ5NjkzNzU2ZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT8djjCeLHcuU0dKyFX9aaB+VwHa xt7fLdxPyEEiADffKqGjlnXWWsLcrREH0CbqLZxoeNppNJWSsuwlnIjdQhfF9un4 fbLhQMcRtCvJHJhM85DhE4ayMWhbGuRrT68OHBqdEos2qoQLcEdkjzlQ8AUsGUf8 0EjUAb43OAr8YK6uMlBLuRcAqIv5e5/Dco8DdfCnlnRLbVkLz9RTkGNQAL2rapQv aUNHdA7omP//7niFEvhnuc91IupX5FGMbNueAhxXaOeABgzyGfLRwhPcYnXcS5hD J+VesKMr0LEvrjwA7zuqpFg1qvNe2dBI3nvoEdSp2dhMk0cFvNl9dCNIsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqIJX2wBF7CSE2FVSviTZaTdW7iMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLOSYe+u PxWNGfjjozv2T94YDgzIkDGNErY/N5SnHVivQZ0DR9oTd4OJ23h4GlhxjkB2zmyH 2vMG0dHM2Z8C2xYfNaH9H8df4OiROl1ZVRKmQFWz6pZt/bITcp/x6Oo3zh5zkcfD GlaHWLSPPNufgm5qXLU0wpg+/QRKSQz2f1wf58AvogO12uAvcPlJFHm1J6qaibT+ hOmxNpnfPXzFeHm8S+0f+CV1t0BEBxWGNhhKWTwq1Ya55DaafBLLBARxPYDfx4yR HyCRMPX7M5y7/OTucOhOpuDQbyOC4DAMMTR7VpfLbk7TqV5znxdsQiLFMb3sVJmF jyGjW5ZCc5m54A== -----END CERTIFICATE-----Generated at Wed Aug 5 17:29:56 2026 by rpki-client