$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: frdBHqxlYwsxxQGZBR1RtvwHnyw2YuEpSj+f4vZCH8I= Subject key identifier: 66:97:C2:27:FF:7B:59:E0:3D:5B:99:D0:08:CB:B6:4D:E7:0F:21:8C Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 01A070B1E2026F7D9CA7D92073CAA3A7DF85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A87 Signing time: Sat 05 Sep 2026 08:31:40 +0000 Manifest this update: Sat 05 Sep 2026 08:31:40 +0000 Manifest next update: Sun 06 Sep 2026 08:31:40 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: 9xcDq5BERTPl-taAcvBbAPdIa2s.roa (hash: /rCSnPIAiOhKYzHr0b4Aa11HLmoGu1kBXDiI9N5EJA0=) 3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: wT5pTjrMlTGO2IK2v3Xvei+PqJEYS4SoQ1AVIZnoWrQ=) 5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 6: Wu9fqzsO0e3dDW7pg9IW4kd8ca4.roa (hash: DnNwN484bQ2o81uJz2zDwIJLdkB1zuHM5PscTbmg5Ns=) 7: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (hash: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=) 8: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 9: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 10: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 11: i3YTAJozwkOZYg6f7KZcf--oZvY.roa (hash: N6vYaUT4my73KK+I3kEXMZHN6vjd2Vf3D+a9de3TkZE=) 12: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 13: vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa (hash: MKd69gZ2Jcg9+PMYCJYIj+vJw76cSWTcSBs7Eexy3D4=) 14: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) 15: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Sep 2026 08:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:70:b1:e2:02:6f:7d:9c:a7:d9:20:73:ca:a3:a7:df:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Sep 5 08:31:40 2026 GMT Not After : Sep 6 08:31:40 2026 GMT Subject: CN=6697c227ff7b59e03d5b99d008cbb64de70f218c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fb:21:e6:88:6b:ed:9c:7b:ce:d2:61:62:ea: 56:b5:dc:73:79:3c:66:2a:24:9f:72:3c:a1:73:df: 04:31:cb:d2:3e:b5:89:83:29:63:dc:cc:29:5b:ca: 94:cb:9a:74:f6:73:39:c6:a0:63:be:a4:b2:cb:22: 0f:d6:67:eb:99:d3:79:a4:44:80:a3:b2:cc:0b:7f: 03:a0:30:13:8a:ac:e3:24:6f:e9:62:bd:e6:45:66: ee:ae:86:5d:60:81:3a:6c:72:80:94:84:71:0b:75: 01:96:42:38:92:3e:c9:74:48:71:21:2c:dd:68:b4: 9e:83:e5:d0:71:9b:e6:89:8d:b6:7d:03:05:bd:12: a6:8b:86:e5:d3:7b:91:07:7d:d1:0e:5d:97:77:55: 9e:33:ff:5b:d3:d6:76:f1:56:36:4c:99:40:43:64: 44:02:35:39:f7:fb:3f:84:56:a3:7e:73:11:cd:c5: 33:dc:4a:ec:dc:3c:57:49:76:3f:0e:7c:44:e4:db: a8:ef:11:f9:86:c4:46:3d:8a:6a:36:bc:0f:c7:f1: b4:38:1e:15:09:24:5c:c7:fc:9b:52:de:45:f7:69: 83:86:20:67:d2:c3:07:f7:ff:13:8f:93:aa:6d:cd: 46:23:8b:77:b3:4c:48:6c:e3:03:19:a7:1e:b7:d0: 9f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:97:C2:27:FF:7B:59:E0:3D:5B:99:D0:08:CB:B6:4D:E7:0F:21:8C X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:99:3b:62:40:46:13:8a:ab:d4:43:10:fe:9b:25:0c:93:c0: bb:d8:55:3b:54:cd:25:d6:c0:97:c2:55:d5:03:a4:b5:9f:30: 61:ae:84:78:6f:4c:26:9b:8e:f3:c1:1d:45:fa:51:3c:78:68: 81:44:a7:0f:43:9b:17:1d:2b:06:be:4e:8e:26:cd:e0:dd:7d: 3c:06:a6:7b:2c:d5:4a:d6:f3:48:4d:2c:ce:a5:32:08:f7:dd: 6a:8a:28:74:a7:a4:73:f7:0b:2b:cd:b7:47:cd:46:c1:78:5d: 3a:62:8c:8a:93:e0:dc:bd:0e:4b:b1:23:1f:33:d5:9f:b6:ee: c6:3d:65:10:8b:42:be:79:1a:c0:5c:22:bc:15:49:ec:60:f4: 20:82:85:d9:19:19:d5:ac:6f:dc:1a:42:cc:00:ac:1e:bf:60: a4:1d:88:b8:b7:be:86:ac:89:34:90:82:2f:84:f1:e7:9e:fb: 59:b4:cb:be:96:e5:6f:81:cc:e6:22:3a:82:cf:d4:b0:6e:c2: d9:8b:52:04:ea:6c:9c:8a:9d:3d:da:d3:4e:f8:08:3a:46:69: cf:74:f4:1f:99:9d:de:55:0b:28:a8:e0:ea:99:2d:94:05:5d: cc:83:e3:62:8a:bf:36:09:0f:c8:47:c8:46:83:4a:bb:60:33: 5f:42:dc:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBwseICb32cp9kgc8qjp9+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwOTA1MDgzMTQwWhcNMjYwOTA2MDgzMTQwWjAzMTEwLwYDVQQD Eyg2Njk3YzIyN2ZmN2I1OWUwM2Q1Yjk5ZDAwOGNiYjY0ZGU3MGYyMThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufsh5ohr7Zx7ztJhYupWtdxzeTxm KiSfcjyhc98EMcvSPrWJgylj3MwpW8qUy5p09nM5xqBjvqSyyyIP1mfrmdN5pESA o7LMC38DoDATiqzjJG/pYr3mRWburoZdYIE6bHKAlIRxC3UBlkI4kj7JdEhxISzd aLSeg+XQcZvmiY22fQMFvRKmi4bl03uRB33RDl2Xd1WeM/9b09Z28VY2TJlAQ2RE AjU59/s/hFajfnMRzcUz3Ers3DxXSXY/DnxE5Nuo7xH5hsRGPYpqNrwPx/G0OB4V CSRcx/ybUt5F92mDhiBn0sMH9/8Tj5Oqbc1GI4t3s0xIbOMDGacet9Cf6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaXwif/e1ngPVuZ0AjLtk3nDyGMMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApk7YkBG E4qr1EMQ/pslDJPAu9hVO1TNJdbAl8JV1QOktZ8wYa6EeG9MJpuO88EdRfpRPHho gUSnD0ObFx0rBr5OjibN4N19PAameyzVStbzSE0szqUyCPfdaooodKekc/cLK823 R81GwXhdOmKMipPg3L0OS7EjHzPVn7buxj1lEItCvnkawFwivBVJ7GD0IIKF2RkZ 1axv3BpCzACsHr9gpB2IuLe+hqyJNJCCL4Tx5577WbTLvpblb4HM5iI6gs/UsG7C 2YtSBOpsnIqdPdrTTvgIOkZpz3T0H5md3lULKKjg6pktlAVdzIPjYoq/NgkPyEfI RoNKu2AzX0LckA== -----END CERTIFICATE-----Generated at Sat Sep 5 14:45:53 2026 by rpki-client