$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json) Hash identifier: mjH/+txhsOWqwuJ8xgFZG8EXjpQuWIl5i9uFL/PaSW8= Subject key identifier: E0:A5:50:5B:08:BE:DA:5E:CE:33:BC:21:5D:55:FD:AF:50:DA:94:49 Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Certificate serial: 019F8EA2BC9838D680F469812B5A0C956CD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft Manifest number: 19D4 Signing time: Thu 23 Jul 2026 11:00:57 +0000 Manifest this update: Thu 23 Jul 2026 11:00:57 +0000 Manifest next update: Fri 24 Jul 2026 11:00:57 +0000 Files and hashes: 1: 0UXZLxmo0wM791OjAQvNwfm2flg.asa (hash: fckAHmyvVNaeQqmLb5z5kUo++7GABr5luLIf2iVlPj8=) 2: 44CA1k5d4Zw23GcP4lb4i4-vDPc.roa (hash: 6c/pnyjlYlDcfbUXGOzr645pKHpIFoe+rR3oaf4Be6g=) 3: 4OwitvkmkhKV2LtZpk1QLZTpl4E.asa (hash: aGnCO3oIRNu7nbl3yxascrT5ogI+38YhsT0IaT24+Ps=) 4: 5xi8bSy9c83Bg6qClBnmgJJbFA4.asa (hash: RSBuuu1KOgBq7xwPJfJizf07iznlWzC9UjX015Je8yk=) 5: 6IqI9gfABI1V0avL-WdqDQ9gNGk.asa (hash: x/3Qd9UB9tmsdebQBpFmyTkyhk8Goo0sm80nqeO+7ZQ=) 6: CvTWeK7xp9gyjdFy-y9UwtpH8uE.roa (hash: 733OwKswiweiXSLuyQj7UGTmZLfaZ6qRpmED62r0qvA=) 7: EutctDjYApRtXZCCgXc1_FMXFMI.roa (hash: +qc+pkUgzkZJUvQ7/ijItcJlPfU6GdEPJtEIGHeSZ+w=) 8: H5cJU-sxt-hZI6FMau1LEtyh614.asa (hash: NYeq2kG2iVJonZO0Jwu2qtybJFReQWpFb9Vj1/WLpQg=) 9: IIZ_mGH3X6355DF3JRICMRfOqTQ.asa (hash: TxemWnQodUkymHC8e+RcAhRi9Z78sNJiYQ7hSaXm0gs=) 10: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: OK+ybp1WXusJ+yFz+blJK4Ir+t/JyEHxfQWRSI4Wmr8=) 11: N6KyBv5Xx5MGRmWO1SOVIpA2W_I.asa (hash: cD3zCeI88xWZ6CMz6J0M2Axze+U4XS2co5BuDwABalI=) 12: prkwm3Nwi4i7nBXudHI4KuKfmHI.asa (hash: krdyRxkzH8bZP80JYgy+3OWYOrwBKzT/IXHhrb1NwSs=) 13: vVF3pTqa2KJdx2p8PlUWcXPESX4.roa (hash: 8smQRNWHO8FZtO5kA7zQSvtufSO4Sm4HtWZBhh9ooug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:a2:bc:98:38:d6:80:f4:69:81:2b:5a:0c:95:6c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Validity Not Before: Jul 23 11:00:57 2026 GMT Not After : Jul 24 11:00:57 2026 GMT Subject: CN=e0a5505b08beda5ece33bc215d55fdaf50da9449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:6e:9a:67:c2:17:e1:84:67:af:fe:8c:b2: 5c:fb:4a:1d:82:15:c1:99:69:c4:ae:23:73:12:aa: 59:db:87:9f:73:2d:86:69:5a:89:d4:c5:07:48:a6: cc:d6:8b:1a:70:9e:53:4e:35:ee:fa:8b:bd:23:41: 5b:3e:1e:b2:ff:25:07:b1:4f:73:6a:22:01:34:c5: e9:93:ed:b4:ca:2f:06:2c:b6:ad:ca:65:34:6d:16: 90:7e:ba:28:a6:1a:e2:15:91:23:5b:ee:5d:50:5a: cd:e1:a5:08:e5:4f:38:9b:c2:a4:6a:ae:00:76:81: f1:61:ce:ef:2c:63:75:ec:fa:ee:88:14:2a:2a:78: a9:7e:ec:2f:f7:b2:9c:5a:85:2a:d3:5f:7f:b9:3b: 1b:a1:00:84:cc:e9:f0:40:53:eb:c6:c8:ab:d0:62: 98:82:b4:bb:73:7f:21:6c:1c:b1:ee:c6:76:69:c7: 0f:c7:53:6d:c5:33:42:c7:88:03:bc:94:3c:17:7d: d5:cd:aa:89:3b:b1:88:ec:79:17:c8:56:c3:1d:48: 1d:0e:82:2a:5c:80:4c:d4:2c:20:36:f1:2c:b4:60: 33:bc:82:de:05:b4:8a:06:c2:74:9a:f2:d6:c2:2f: be:e4:36:ff:1e:8d:5d:06:e8:38:bf:18:8c:97:80: 03:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A5:50:5B:08:BE:DA:5E:CE:33:BC:21:5D:55:FD:AF:50:DA:94:49 X509v3 Authority Key Identifier: keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:d8:11:17:9d:22:53:87:2e:66:9d:99:13:ec:07:81:ea:e7: be:2f:ef:9e:6a:51:28:bb:8f:4f:58:c6:6f:bd:93:5b:2b:b2: 69:87:c6:d5:e1:d4:72:74:f0:1e:47:ed:92:61:3f:4f:8c:8a: c5:ad:7f:4a:df:34:53:01:5f:12:12:d2:5f:aa:2d:19:43:25: 8a:47:ec:fa:49:83:fb:53:e4:b6:23:f5:ae:ef:c9:dc:28:1f: bd:b4:fb:99:3b:e0:9e:e0:8f:db:47:b7:e0:4d:0c:94:5a:08: 2a:3e:92:5c:31:7b:11:d5:20:8a:cb:fb:96:4c:63:6c:f1:fe: 3a:87:4f:f8:cb:06:c5:57:eb:6c:60:7c:c3:ae:38:fd:d4:12: 8d:17:56:1f:91:62:e1:15:23:cf:3c:5f:b8:a3:1f:24:0b:c0: 29:a1:cc:d4:2a:ee:e2:80:44:aa:d5:8f:cb:ea:b6:d3:3b:70: 0b:82:98:8e:f2:69:09:e2:fb:5a:c4:de:bf:8b:34:ea:5f:9d: c9:67:38:fc:ba:a9:23:f1:b4:4b:c1:ae:48:c5:48:ed:85:25: 00:a2:81:57:90:eb:85:20:2e:91:48:1e:03:d7:92:95:9f:84: cd:86:94:12:e3:15:dc:aa:91:0a:4e:64:98:a0:99:0f:32:48: c5:ea:bc:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+OoryYONaA9GmBK1oMlWzVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl MjFiYjkwHhcNMjYwNzIzMTEwMDU3WhcNMjYwNzI0MTEwMDU3WjAzMTEwLwYDVQQD EyhlMGE1NTA1YjA4YmVkYTVlY2UzM2JjMjE1ZDU1ZmRhZjUwZGE5NDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNRummfCF+GEZ6/+jLJc+0odghXB mWnEriNzEqpZ24efcy2GaVqJ1MUHSKbM1osacJ5TTjXu+ou9I0FbPh6y/yUHsU9z aiIBNMXpk+20yi8GLLatymU0bRaQfroophriFZEjW+5dUFrN4aUI5U84m8Kkaq4A doHxYc7vLGN17PruiBQqKnipfuwv97KcWoUq019/uTsboQCEzOnwQFPrxsir0GKY grS7c38hbByx7sZ2accPx1NtxTNCx4gDvJQ8F33VzaqJO7GI7HkXyFbDHUgdDoIq XIBM1CwgNvEstGAzvILeBbSKBsJ0mvLWwi++5Db/Ho1dBug4vxiMl4ADuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOClUFsIvtpezjO8IV1V/a9Q2pRJMB8GA1UdIwQY MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt ODUwZjM0OTA2MjI5LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5 LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtgRF50i U4cuZp2ZE+wHgernvi/vnmpRKLuPT1jGb72TWyuyaYfG1eHUcnTwHkftkmE/T4yK xa1/St80UwFfEhLSX6otGUMlikfs+kmD+1PktiP1ru/J3CgfvbT7mTvgnuCP20e3 4E0MlFoIKj6SXDF7EdUgisv7lkxjbPH+OodP+MsGxVfrbGB8w644/dQSjRdWH5Fi 4RUjzzxfuKMfJAvAKaHM1Cru4oBEqtWPy+q20ztwC4KYjvJpCeL7WsTev4s06l+d yWc4/LqpI/G0S8GuSMVI7YUlAKKBV5DrhSAukUgeA9eSlZ+EzYaUEuMV3KqRCk5k mKCZDzJIxeq8dA== -----END CERTIFICATE-----Generated at Thu Jul 23 19:04:35 2026 by rpki-client