$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: mPw5Isr6+cMxs5fq96GjF9Z/+cbB/ZbcrH3OkUu++Mo= Subject key identifier: EE:5E:70:0D:1C:38:10:DA:DB:29:CB:4D:10:88:6B:C8:D8:C1:E1:E2 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 01A02DDB3A9AEF119B37816A1BB274F2156A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A61 Signing time: Sun 23 Aug 2026 09:02:17 +0000 Manifest this update: Sun 23 Aug 2026 09:02:17 +0000 Manifest next update: Mon 24 Aug 2026 09:02:17 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: JQQNGg1KudUDH0fH8zF77cHH04g.roa (hash: 7IYYPE95u23gGvwnp7lVhhX844kU4uZYL5U7EqRsXDU=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: b6uG+l113wnhwkUYh7LuBLYHhqn+c0P5fjP3+wgV0IQ=) 5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 6: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (hash: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=) 7: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 8: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 9: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 10: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 11: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 12: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) 13: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Aug 2026 04:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:2d:db:3a:9a:ef:11:9b:37:81:6a:1b:b2:74:f2:15:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 23 09:02:17 2026 GMT Not After : Aug 24 09:02:17 2026 GMT Subject: CN=ee5e700d1c3810dadb29cb4d10886bc8d8c1e1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:55:87:bb:18:aa:4c:0d:d5:54:82:48:65:b8: b9:4f:4b:1e:ab:fe:2f:7c:cb:33:f9:dd:f5:1a:ef: f4:89:7b:cc:84:a2:a3:e4:98:6b:09:a4:2c:31:1c: 37:2f:1a:d7:af:ad:a0:05:b5:b8:b6:36:71:d2:78: 42:7a:9a:14:a0:d2:61:34:f1:42:11:7d:c5:b5:89: c8:2a:27:4d:08:03:86:c7:cc:5b:14:0d:aa:eb:79: 10:4a:96:5a:04:9c:6b:d6:66:c3:43:ba:01:5d:19: c4:5e:bc:ef:be:10:e7:80:df:86:18:f3:32:b9:4b: 4b:4c:d9:6d:f5:48:33:fe:43:6f:26:3b:72:64:30: bf:44:de:f5:90:97:24:e2:2d:8b:ec:56:79:b2:fc: dc:08:17:a5:15:2f:d6:b7:a8:ab:c8:67:75:b5:95: 56:94:37:8c:9a:2b:c4:26:b0:56:d6:5d:c1:a3:51: dc:2f:37:27:a3:32:bc:b7:63:fa:d0:2f:26:fd:b2: 6e:82:45:b0:b9:29:70:c5:d5:9f:6e:6b:14:45:a5: 08:99:a9:c0:48:76:4c:a7:9f:25:8a:c6:d3:a2:3f: b6:87:81:b0:ff:78:28:08:1d:da:a4:a6:0b:a6:5c: a7:61:a3:69:c4:a3:29:ae:90:01:13:c4:9c:1f:18: 90:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5E:70:0D:1C:38:10:DA:DB:29:CB:4D:10:88:6B:C8:D8:C1:E1:E2 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:10:7f:70:dd:23:a4:e8:98:dd:fd:3d:f8:de:08:0f:1a:fc: dd:cb:45:e6:29:48:f6:d5:e6:49:c9:c5:5c:01:2e:f3:a1:dd: 5c:6c:c7:51:54:f8:af:0c:46:d5:02:63:16:62:a0:09:5a:16: 4d:32:96:b7:9d:4b:2f:c2:de:2d:aa:9f:9b:8c:8f:05:19:9d: 9a:e3:59:c7:50:4b:63:92:55:6d:23:22:77:1d:bd:0d:03:bd: 32:90:ec:5b:af:0c:a2:2c:ac:61:e1:c8:38:10:91:06:49:82: 5a:5f:81:ae:c9:e0:3d:2b:37:31:9e:64:07:aa:a9:81:fe:a5: 35:0e:ff:e6:60:8e:93:50:cd:21:36:ab:e4:2a:56:2a:49:7b: c3:54:29:ea:1b:5b:84:74:71:b5:0f:3c:b5:d7:3e:4d:aa:5c: b4:b7:33:de:be:4f:e8:1c:0b:45:f0:c8:14:10:0f:69:9c:8e: 35:61:42:dc:8c:dc:45:50:84:3f:80:9e:1e:28:75:bc:d0:51: d6:10:ef:81:4b:9a:9b:1a:0a:b4:08:49:1c:91:d0:e3:4c:66: 0b:c1:61:ba:6b:10:8f:6d:2e:b1:11:7b:6a:aa:de:d8:f3:79: 61:a8:d3:50:cd:6b:c2:20:3c:92:85:04:e9:57:3b:b2:b4:a6: ec:03:76:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAt2zqa7xGbN4FqG7J08hVqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwODIzMDkwMjE3WhcNMjYwODI0MDkwMjE3WjAzMTEwLwYDVQQD EyhlZTVlNzAwZDFjMzgxMGRhZGIyOWNiNGQxMDg4NmJjOGQ4YzFlMWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFWHuxiqTA3VVIJIZbi5T0seq/4v fMsz+d31Gu/0iXvMhKKj5JhrCaQsMRw3LxrXr62gBbW4tjZx0nhCepoUoNJhNPFC EX3FtYnIKidNCAOGx8xbFA2q63kQSpZaBJxr1mbDQ7oBXRnEXrzvvhDngN+GGPMy uUtLTNlt9Ugz/kNvJjtyZDC/RN71kJck4i2L7FZ5svzcCBelFS/Wt6iryGd1tZVW lDeMmivEJrBW1l3Bo1HcLzcnozK8t2P60C8m/bJugkWwuSlwxdWfbmsURaUImanA SHZMp58lisbToj+2h4Gw/3goCB3apKYLplynYaNpxKMprpABE8ScHxiQRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5ecA0cOBDa2ynLTRCIa8jYweHiMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBB/cN0j pOiY3f09+N4IDxr83ctF5ilI9tXmScnFXAEu86HdXGzHUVT4rwxG1QJjFmKgCVoW TTKWt51LL8LeLaqfm4yPBRmdmuNZx1BLY5JVbSMidx29DQO9MpDsW68MoiysYeHI OBCRBkmCWl+BrsngPSs3MZ5kB6qpgf6lNQ7/5mCOk1DNITar5CpWKkl7w1Qp6htb hHRxtQ88tdc+TapctLcz3r5P6BwLRfDIFBAPaZyONWFC3IzcRVCEP4CeHih1vNBR 1hDvgUuamxoKtAhJHJHQ40xmC8FhumsQj20usRF7aqre2PN5YajTUM1rwiA8koUE 6Vc7srSm7AN2VQ== -----END CERTIFICATE-----Generated at Sun Aug 23 12:46:37 2026 by rpki-client