$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft File: ER1oFDdScdGjy9EhVdsR0r1BqNM.mft (raw, json) Hash identifier: OZ3RopNfwS0OvwT/+tRDfWo8vYFqEB9W7N75IPM0XqQ= Subject key identifier: E1:D6:0F:5C:92:33:69:76:E8:05:06:47:50:6A:2A:4B:5B:6F:3F:17 Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 01A0D7967F88DC674E978800BC10ED7A9C67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft Manifest number: 1935 Signing time: Fri 25 Sep 2026 08:02:39 +0000 Manifest this update: Fri 25 Sep 2026 08:02:39 +0000 Manifest next update: Sat 26 Sep 2026 08:02:39 +0000 Files and hashes: 1: 8ZTbVFN88ElJOvnxpynWkBywvcU.roa (hash: Zi7aMmYsFeMT6y4m/OMRvzAw9FlwVPNAsEeEWMyssQs=) 2: 9gyIdfYx-vxaH69AuzYIu8sS7ec.roa (hash: vsh4e/kwYxBt1mO0Ld2w2nU9VsbUvL0v+cSn3CZdKv4=) 3: D4HmthbydYoqExoa56VFIbe7J5A.roa (hash: 1gmVpoixHN/Zn+8HJ6YdrukA3JeRxcEeBWZ/2aGh+ps=) 4: DBNPe8eVrw7_1KUjzRRA33hX58Y.roa (hash: hYdptN3L/vz/3ch52LzC/IoTDQvky7D/anqUyA/QPOc=) 5: DKZJyriLpkX0P03xQILHD2FwZEo.roa (hash: x6vx2AQsWgf7sMGXLXxiRwrb7PArAVgKRPBlJd4ah10=) 6: ER1oFDdScdGjy9EhVdsR0r1BqNM.crl (hash: 7qE+WETOJ/H7qY5W/C2AtCvHphl2epXgoHrJbs6VX2M=) 7: HRwCntz8pHEtM7UJXh-KwEbXi3w.roa (hash: CKUDXMyXov9Gbf/ygH+HewYMwNtReJO+UQotN2JyBXQ=) 8: Haim4aY9ShmCS1epcJRa3-rRRmM.roa (hash: AQeMZQUR+w1eyhT+kYpVEnNYoo0tXgoBt1LUUZT+/W4=) 9: Ka2f0_rG4AuXnvi8TQgXMBJzKOE.roa (hash: HTLBGDTB6awokEWRy6DjReQvfOLjCmwPODXPDvHGn+A=) 10: LdJkopqk4m9ubmHzk4T29FnhG7o.roa (hash: Qx8FwqyP4Rxw7vIMwqfqa4V2zeYK7+dz+yeOugc8QVI=) 11: S3K9bo4j9NjF6L9mhwIsz-LYyHg.roa (hash: FX7C0FNczXeRPZms4zyJ1OukTZNK4zd0GhG7vBTsBvg=) 12: UWgtqXah3liJx-awsYUK3XIS54c.roa (hash: nisX/PCjG49hPGc2ySAUn3J0MxV+pv8+T78d4GdNMSs=) 13: _d7ohj2Ako_tiSFSE9-jnGs0uoI.roa (hash: mf32LDbJ2Su5F5H62P0/F/PId5oq7GFGgkD8WKRwmPw=) 14: f5svUnEK1n30wRVLtixbJDS7pZM.roa (hash: sILbepz7GhK0jGMQ48sIN5LBYx9eYZB9voFGWkXvx60=) 15: iK87eJg7y-_rcG1D3z4FzaXgRNE.roa (hash: uVYEVS9koySJoZQhAK0q3w5qAE9/nwHY2ro0Er3WEZY=) 16: nXrADfBP6wNtRforv4w6KFdo1Ns.roa (hash: PAoowx6zHYeOj9TxBp8LwY6JFAj6/p0gXZ/G0XMc/dg=) 17: tDoaGy6SLh3swARR-izxiYVQMmU.roa (hash: lZCnqmwKcNoIj9hNP0txhfT3ExuUcH8dWLkUpGjDKzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 07:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d7:96:7f:88:dc:67:4e:97:88:00:bc:10:ed:7a:9c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Sep 25 08:02:39 2026 GMT Not After : Sep 26 08:02:39 2026 GMT Subject: CN=e1d60f5c92336976e8050647506a2a4b5b6f3f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ac:54:94:be:f9:c1:f3:a7:fb:f7:26:95:b0: e1:0b:7c:5c:ad:02:09:8b:6f:6f:cf:d7:52:c3:db: cb:58:a3:a1:ae:f3:cd:0d:bb:e1:8c:13:d8:47:b9: a3:ad:71:24:37:ee:af:ea:61:5d:10:6f:3e:b8:f4: 4f:2e:8d:f2:63:7f:a8:bb:a1:13:95:11:57:96:c3: f1:8c:40:09:c0:91:1b:a4:12:8e:92:b3:ba:27:a2: 65:41:c5:44:a7:f5:5d:46:2b:b5:ec:89:6a:26:74: 55:3a:44:dd:a8:6f:b9:42:0a:9e:92:68:95:2a:19: 8d:7d:b0:96:a9:87:a1:7e:9d:7b:a1:22:35:06:e3: 1b:63:5a:d3:95:c4:a4:17:82:d0:b9:ba:85:68:f0: da:3a:f3:3b:51:f8:03:19:62:20:0d:5e:7f:3e:61: 55:9e:53:47:eb:6d:df:4c:ff:72:c7:62:4a:94:1b: c9:cd:f3:6a:6a:6b:a6:04:a2:32:32:35:d5:74:81: 30:a0:94:e6:c9:f8:41:9d:1d:d5:cf:9f:79:37:87: db:be:f5:f6:f6:7f:56:b6:80:4d:13:cd:f9:57:e4: a4:ac:0c:30:7d:cd:be:92:e4:fa:51:0d:f0:ae:8a: 9f:1d:71:89:11:97:d0:69:3b:33:b7:9e:27:22:55: 23:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D6:0F:5C:92:33:69:76:E8:05:06:47:50:6A:2A:4B:5B:6F:3F:17 X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:2b:04:2a:67:0c:01:d4:e6:5d:24:df:cc:c3:bb:91:dc:fc: 90:50:55:4c:a0:e8:ee:ba:c7:2a:70:0d:66:1a:ac:a7:00:e3: fd:85:5c:53:cd:c7:11:4c:05:b9:d1:08:49:f2:32:da:32:1c: d9:b3:96:47:d9:15:51:6d:ff:51:19:3d:0c:9b:6a:ec:16:6b: f6:f5:31:46:ab:f0:43:97:ca:7a:7b:c0:90:b2:c0:c4:4f:23: a3:c8:98:21:3b:45:03:ff:9e:2c:e3:e1:f1:58:ec:46:d0:6f: e1:95:1a:70:f8:ff:7a:3c:86:cf:a4:6b:ab:fd:c6:d0:44:90: 83:4f:ef:a1:c5:79:86:c1:37:fb:d5:98:26:8a:0a:8a:59:c8: ce:cc:ad:8e:13:54:32:27:3a:3b:a0:cc:98:7b:dc:90:31:02: 97:be:7d:fe:b2:55:ad:ff:6f:20:43:e8:0e:91:bd:41:ee:4a: c9:75:96:ca:55:bf:83:2b:b5:86:e7:f4:11:a5:c7:3b:6f:2b: a4:51:a5:ee:c4:f1:00:90:45:ee:18:79:dc:d0:51:c3:a8:1d: 38:a7:b7:38:ca:ee:95:c6:3b:29:a2:88:ce:71:3e:9a:43:fe: 02:56:00:72:d5:97:38:f9:ec:78:34:08:95:72:4d:9e:2b:b4: d1:cf:1a:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDXln+I3GdOl4gAvBDtepxnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjYwOTI1MDgwMjM5WhcNMjYwOTI2MDgwMjM5WjAzMTEwLwYDVQQD EyhlMWQ2MGY1YzkyMzM2OTc2ZTgwNTA2NDc1MDZhMmE0YjViNmYzZjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqxUlL75wfOn+/cmlbDhC3xcrQIJ i29vz9dSw9vLWKOhrvPNDbvhjBPYR7mjrXEkN+6v6mFdEG8+uPRPLo3yY3+ou6ET lRFXlsPxjEAJwJEbpBKOkrO6J6JlQcVEp/VdRiu17IlqJnRVOkTdqG+5QgqekmiV KhmNfbCWqYehfp17oSI1BuMbY1rTlcSkF4LQubqFaPDaOvM7UfgDGWIgDV5/PmFV nlNH623fTP9yx2JKlBvJzfNqamumBKIyMjXVdIEwoJTmyfhBnR3Vz595N4fbvvX2 9n9WtoBNE835V+SkrAwwfc2+kuT6UQ3wroqfHXGJEZfQaTszt54nIlUjQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHWD1ySM2l26AUGR1BqKktbbz8XMB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0SsEKmcM AdTmXSTfzMO7kdz8kFBVTKDo7rrHKnANZhqspwDj/YVcU83HEUwFudEISfIy2jIc 2bOWR9kVUW3/URk9DJtq7BZr9vUxRqvwQ5fKenvAkLLAxE8jo8iYITtFA/+eLOPh 8VjsRtBv4ZUacPj/ejyGz6Rrq/3G0ESQg0/vocV5hsE3+9WYJooKilnIzsytjhNU Mic6O6DMmHvckDECl759/rJVrf9vIEPoDpG9Qe5KyXWWylW/gyu1huf0EaXHO28r pFGl7sTxAJBF7hh53NBRw6gdOKe3OMrulcY7KaKIznE+mkP+AlYActWXOPnseDQI lXJNniu00c8ang== -----END CERTIFICATE-----Generated at Fri Sep 25 12:41:51 2026 by rpki-client