$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft File: sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json) Hash identifier: 5NNrldis01HODwzzXkP7+mFwVm+sCZ9rT4q7QxECYIk= Subject key identifier: C8:5D:4A:93:64:E0:4C:EA:69:F5:B0:B2:D0:91:8A:D0:5B:74:A3:E7 Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 01A027D82DC8EE71839D8365DBE9F5CFC14C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft Manifest number: 1A3B Signing time: Sat 22 Aug 2026 05:01:13 +0000 Manifest this update: Sat 22 Aug 2026 05:01:13 +0000 Manifest next update: Sun 23 Aug 2026 05:01:13 +0000 Files and hashes: 1: FFAXFP5ez3X5u3h1IVAvcRBfHk4.roa (hash: OODOGsmCz6Qm7uE5z8GW3j0W0K6FvMl33OoYR/8rp0M=) 2: Hx4xdNwCvgB9fLiWs9xvE8usxW8.roa (hash: Y7e1WnGcVWNvFMUYbkyeqz5FloZW76Eh6KqSDa6fAQI=) 3: IwxdusqS3Ab_hpHPJ_FWRPbtoeg.roa (hash: H55puMmQB5OWgkG+g+z4d3V7omo2rQK1VzH3hQXYY3o=) 4: O69azZLJgNqAunz5z_lWfvgC56o.roa (hash: y+mBalpZhDFTPhkJAkGyUyBVLw40n3SmTyy9Fbh3dKI=) 5: PSaX76hLXCC3HwZfR6n8D2sk5yo.roa (hash: /hW3Ol8jGkzLopkuNwrc+rk1t6CwIFcpRCLkUh52Nz0=) 6: Ql1YFiUReCktjzOXgcJSrBSI6No.roa (hash: USou/kCPcPW7NF+NsAzNyLXe0GEfMruJyzGdt4jQ4H8=) 7: Qwc0PS7lCg5VkElxT5Cr3FnH21U.roa (hash: wdTK3twxinT3+ARlD4RZZjVh4EkWcZ9Ag3Zag6py3lE=) 8: SICqctuob7LKpjHMHlTL9BKMXF0.roa (hash: YxXg8B/+U9HgCgcJlh6pzSviIU9e9c6Wth+N8tKmuIM=) 9: WoJUK_VlF2x2Y6RewR1W0jcXELM.roa (hash: 49/N0yckcfgw+Jpt1B3ZylVpCRtLmR+tToTlhzbYrNM=) 10: foDUrTXTDZ2dFRHyzLwyjbfL5RA.roa (hash: EJDROl9kvOcSOsvJf3VtUQouW/ymPRQFcveGGjcX/6o=) 11: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: poJ+LoswHJQVjFHXg4dj1kk0tfCynbR5mHUPaFe3yts=) 12: srs-2gJxDmgBkFBU7WzheGqpBy4.roa (hash: M8sahyn+CGhviykxLGO4OXGDUGLt5W/3MG5YlWrxi28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Aug 2026 01:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:27:d8:2d:c8:ee:71:83:9d:83:65:db:e9:f5:cf:c1:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Aug 22 05:01:13 2026 GMT Not After : Aug 23 05:01:13 2026 GMT Subject: CN=c85d4a9364e04cea69f5b0b2d0918ad05b74a3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c4:84:fb:b2:5a:e5:fb:d6:24:93:b4:25:bc: 3f:01:e4:3d:8f:a2:2c:f6:d4:b6:21:64:c6:7b:24: 84:e5:3e:98:9b:26:76:c4:1c:f1:ee:70:bd:1f:02: 71:ae:ea:ff:4e:f3:00:1b:a4:3a:ac:77:46:d2:a4: 53:06:bf:3a:c3:17:9b:7f:2c:35:8c:45:0f:f7:ee: 12:61:ec:d9:07:b5:a9:d2:3b:46:4a:0b:48:1b:20: 6b:9f:06:20:b2:bc:3b:a3:85:ef:01:76:33:94:7f: 80:e0:fb:33:01:5a:58:cc:7b:3b:02:ba:ad:10:3a: 42:d6:cc:2e:17:fc:38:16:b6:5b:ea:40:95:d6:d6: 29:db:c6:d0:ad:b4:9e:01:8c:3c:9d:89:12:c1:0c: 6c:29:4f:e4:10:e7:d1:d2:88:65:cd:18:37:f9:04: 59:d4:87:5c:77:00:03:77:62:d1:60:f3:4d:0d:74: f8:e9:ee:64:f9:91:e6:ca:de:f9:cf:2e:98:da:ab: 67:75:64:55:8a:98:94:92:ea:a0:18:30:41:6b:c0: b7:f7:75:22:0a:b4:d0:eb:68:de:53:27:e4:b4:b4: a8:08:cc:51:af:d9:94:25:7c:d1:ad:24:84:b2:ca: c2:6b:86:d6:3c:c1:42:1d:df:18:41:8e:e3:47:2e: a7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5D:4A:93:64:E0:4C:EA:69:F5:B0:B2:D0:91:8A:D0:5B:74:A3:E7 X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:c6:ed:ff:bf:08:8c:eb:35:c1:d1:c9:17:c4:28:08:a1:bd: da:69:cf:33:48:aa:67:d8:98:72:9a:08:06:6b:ca:fb:fd:c7: a9:65:df:16:ac:57:69:f3:56:3b:d0:86:76:45:69:8f:28:12: 4a:92:e4:9d:c9:77:a1:24:19:0e:6a:16:95:14:3f:4f:84:3e: da:4a:e6:ed:10:ff:89:8e:2c:2e:2b:f8:5b:de:20:b8:69:a5: 27:19:c4:8b:4f:95:2d:c8:7d:1f:15:46:db:be:82:8d:59:5f: b2:8e:cd:ca:c8:2b:8d:63:c5:72:86:a0:d0:21:02:38:33:6b: b4:1d:3b:f1:66:4b:4a:7b:38:5f:65:1e:6e:64:bf:0e:73:36: 2c:c8:ec:85:bc:c4:74:64:c0:ae:20:b5:20:88:b8:85:31:f4: d2:9e:37:7f:85:76:0d:14:7f:dd:1d:71:10:55:04:c4:8a:e0: df:c8:5e:0e:60:cd:94:c7:24:68:87:18:b1:21:42:e5:21:7a: e6:ca:01:80:c4:e1:22:19:f3:9b:72:d9:e2:1d:94:54:26:3d: 5d:92:12:6b:3f:56:5c:76:a9:f7:5f:cf:0d:47:ad:dc:13:59: e3:9d:51:9c:b8:d9:bb:b0:68:73:09:36:cb:6b:95:9a:cd:dd: e1:81:69:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAn2C3I7nGDnYNl2+n1z8FMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjYwODIyMDUwMTEzWhcNMjYwODIzMDUwMTEzWjAzMTEwLwYDVQQD EyhjODVkNGE5MzY0ZTA0Y2VhNjlmNWIwYjJkMDkxOGFkMDViNzRhM2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MSE+7Ja5fvWJJO0Jbw/AeQ9j6Is 9tS2IWTGeySE5T6YmyZ2xBzx7nC9HwJxrur/TvMAG6Q6rHdG0qRTBr86wxebfyw1 jEUP9+4SYezZB7Wp0jtGSgtIGyBrnwYgsrw7o4XvAXYzlH+A4PszAVpYzHs7Arqt EDpC1swuF/w4FrZb6kCV1tYp28bQrbSeAYw8nYkSwQxsKU/kEOfR0ohlzRg3+QRZ 1IdcdwADd2LRYPNNDXT46e5k+ZHmyt75zy6Y2qtndWRVipiUkuqgGDBBa8C393Ui CrTQ62jeUyfktLSoCMxRr9mUJXzRrSSEssrCa4bWPMFCHd8YQY7jRy6nFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhdSpNk4EzqafWwstCRitBbdKPnMB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcbt/78I jOs1wdHJF8QoCKG92mnPM0iqZ9iYcpoIBmvK+/3HqWXfFqxXafNWO9CGdkVpjygS SpLkncl3oSQZDmoWlRQ/T4Q+2krm7RD/iY4sLiv4W94guGmlJxnEi0+VLch9HxVG 276CjVlfso7NysgrjWPFcoag0CECODNrtB078WZLSns4X2UebmS/DnM2LMjshbzE dGTAriC1IIi4hTH00p43f4V2DRR/3R1xEFUExIrg38heDmDNlMckaIcYsSFC5SF6 5soBgMThIhnzm3LZ4h2UVCY9XZISaz9WXHap91/PDUet3BNZ451RnLjZu7Bocwk2 y2uVms3d4YFpzQ== -----END CERTIFICATE-----Generated at Sat Aug 22 07:02:40 2026 by rpki-client