$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft File: ER1oFDdScdGjy9EhVdsR0r1BqNM.mft (raw, json) Hash identifier: 0w6OSZ3GhfO97zrfp5UFLl09f6x4J5d/DwT8rneD9ps= Subject key identifier: B4:41:27:39:EF:83:97:06:1C:C2:E5:21:FC:0E:FD:26:F5:3B:9A:C8 Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 0198D7A8C23E162B2F888BE8221E32E7F184 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft Manifest number: 1510 Signing time: Sat 23 Aug 2025 16:00:17 +0000 Manifest this update: Sat 23 Aug 2025 16:00:17 +0000 Manifest next update: Sun 24 Aug 2025 16:00:17 +0000 Files and hashes: 1: 1-Eladd6sj8Y7vq1mtW5h6ASM_tM.roa (hash: auxhruGljCxtN9ijkL9KZ/K4C+RcNKrzhKvUSRg/9HQ=) 2: 1-dpIOgQrHNlMUsxt6C2Ztf5nfuM.roa (hash: pCUJMhojWf39aVt/QyofbsbuGjc8Gizw3ZJ2MSqOsTA=) 3: 1-gUTUj2JpuChCvozdxCQFTR22DM.roa (hash: f/2CCyCRw0ujuPO8AP04nbSH6GVLpL5l8bdrrfS8KoQ=) 4: 4JmdsvBatEpFanHBLwN8tE53B0o.roa (hash: rZ4Y8EU6soeJCyiHjLhVB0iARab8gRMfLlwRpZ6KFuk=) 5: 7ap_QJi20SaGnPgK1pV6_7cP-Uo.roa (hash: BOo8F2wEw4BgZClwTOfUjkt0HIqhHPtSsQJru4E0kFk=) 6: 7pYVLfxDyksCdUmiOhbgviOo3x8.roa (hash: QcPN759vJqixjDGU3gmMeZsCeSMWabiqP3hVma37vPU=) 7: ER1oFDdScdGjy9EhVdsR0r1BqNM.crl (hash: YBzH//4HDzvRLLT+GT/oBMuAE38hzsSxye61vgmF8fI=) 8: Hfkubm6yrWEn7gBE9wSMaD_ExXE.roa (hash: FXP2ir2FJkx6oy+MltDsbhNB8kOwwEjeXoSk5fOxlUM=) 9: Kk7xKrzHzx6qmDJI5CVBM_Sl474.roa (hash: m5FUWhJ54zbQwUlYkehhIiOw3x1SXokhdxGSIsx1B6c=) 10: Si8V8khtv0yVUA78DGGzfalNcCk.roa (hash: TuKNETdYYEdxWIcOAjkF1OdADD7zXp4g+mS6E5V7pvo=) 11: XjirH4cwDvxlRkAGxm7FSwAK2sM.roa (hash: YF/U/qPEr6M3Q+MIXQrnfUUKIV5n5WTRe7Dd9hsZTtM=) 12: aaSIhAJHCTwygtdFuXnOQPW6bY4.roa (hash: wv3RWyn/0THt7bCTdq/aMs2HWBM2MxgNANY6nblHNaA=) 13: azpo2jbXZip4fzf6JfxzYCloMXU.roa (hash: lChd9oLNFRupauF5HA1DBK7UGcNDTVpyA1eioCbGUns=) 14: cozXNddBZMRS0D_fVDWk42XqVNI.roa (hash: nP2wP4zibtasbSbsg7EMlMPSKjFkuBzXXdP2DBCONIM=) 15: iwe0kg-crqIWyp2IScMa9LxREgQ.roa (hash: CaVzf6weXzwiNznLUpeTB+QaHcaNjVgYiVjygsUgHxg=) 16: lQoeI3fot2NEOazpcJqwENKoEUU.roa (hash: Elimcemes6spMNky/T+TAYcPtxVw5jFrGcayiuk5D80=) 17: vsEC-C0-IZ2XJzdCqJMyLFlVXyo.roa (hash: 6dyvsyNO+SBB5YmEGzfWoUfWH/YqXAoOIBD3aTROXnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:a8:c2:3e:16:2b:2f:88:8b:e8:22:1e:32:e7:f1:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Aug 23 16:00:17 2025 GMT Not After : Aug 24 16:00:17 2025 GMT Subject: CN=b4412739ef8397061cc2e521fc0efd26f53b9ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4e:78:6e:a1:f2:2b:8d:a1:98:51:7b:78:17: ef:ca:0f:28:6b:48:ba:39:60:83:2c:77:e3:80:f3: 0f:1f:67:c8:5f:a9:ae:4e:35:67:79:4f:d5:e8:a6: f3:9c:a4:59:9a:57:34:de:3a:62:f4:56:bf:da:ef: fa:11:bd:56:90:cc:24:28:17:7e:90:bd:89:d2:c8: 6d:5a:26:1a:9b:ae:c1:ab:f6:7f:40:d7:05:e2:f2: ad:6c:f8:25:55:46:58:97:16:b5:dc:7d:ec:14:41: a1:69:f3:db:69:97:4b:ba:d9:0d:3f:5f:a7:c8:c1: 33:b0:0a:7e:2c:28:a4:a0:03:01:ee:02:e3:28:4c: 7e:b0:b0:9c:80:f7:b1:bd:b2:0e:01:68:ed:8f:82: 21:b6:0b:d4:ac:65:f7:4e:d0:0b:73:1d:ce:30:98: 3f:48:e3:33:08:a7:a1:b4:99:e2:ee:cd:37:40:db: 18:8c:04:87:4a:2e:fb:42:6e:4c:e4:97:76:2d:a1: 18:a9:8a:20:0c:04:21:e5:ee:28:5c:4d:8b:c6:d3: 35:5b:97:89:d5:43:e4:0a:fb:cf:7c:dc:94:15:c5: d9:2c:dc:c1:b5:c9:4a:b5:a4:9a:3a:3d:9f:8c:33: 00:31:86:02:86:79:29:8a:3e:b5:71:2c:6b:a0:9a: 27:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:41:27:39:EF:83:97:06:1C:C2:E5:21:FC:0E:FD:26:F5:3B:9A:C8 X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:0c:08:0e:de:d9:3f:24:0d:ed:e1:ad:84:8e:e0:a3:ea:4e: 31:8f:95:be:4b:a1:5c:b2:47:73:68:5f:ba:c4:03:49:7f:03: 87:07:f9:90:20:27:66:b8:0b:9f:34:a3:45:f0:eb:72:12:e3: 50:c8:d3:8a:95:08:e7:f4:41:b7:1c:ef:c1:ee:4c:be:de:45: 76:44:82:16:ab:af:b7:5b:21:bc:09:e8:7b:15:8c:f6:09:50: 7e:8c:52:41:ce:95:ef:6d:69:dc:49:1b:62:55:86:59:d3:c5: ce:79:87:d8:97:3c:36:cd:06:28:ce:e3:b0:ff:bf:86:96:5f: 65:e9:77:ac:ab:a2:71:9a:3c:84:9a:b6:f6:39:b4:b0:83:b4: 95:60:d8:d4:0f:8a:2f:e9:54:3f:0e:96:77:ed:18:11:e0:fc: 15:e0:33:1c:e1:80:71:69:d8:a6:6c:27:27:eb:43:1b:fb:02: 74:55:c1:99:39:c6:87:e3:8a:06:d7:05:05:79:ad:a4:2c:35: 1d:af:a0:4d:74:57:ea:50:10:bf:43:cc:75:25:28:15:f8:4c: f4:5e:2b:72:0a:cc:14:ef:b2:98:b7:b9:f9:a6:9b:ee:f7:79: 3e:f3:16:1f:93:ff:ca:1a:10:ec:ae:26:c7:9e:73:d0:0f:12: 7e:ce:ac:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXqMI+FisviIvoIh4y5/GEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjUwODIzMTYwMDE3WhcNMjUwODI0MTYwMDE3WjAzMTEwLwYDVQQD EyhiNDQxMjczOWVmODM5NzA2MWNjMmU1MjFmYzBlZmQyNmY1M2I5YWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy054bqHyK42hmFF7eBfvyg8oa0i6 OWCDLHfjgPMPH2fIX6muTjVneU/V6KbznKRZmlc03jpi9Fa/2u/6Eb1WkMwkKBd+ kL2J0shtWiYam67Bq/Z/QNcF4vKtbPglVUZYlxa13H3sFEGhafPbaZdLutkNP1+n yMEzsAp+LCikoAMB7gLjKEx+sLCcgPexvbIOAWjtj4IhtgvUrGX3TtALcx3OMJg/ SOMzCKehtJni7s03QNsYjASHSi77Qm5M5Jd2LaEYqYogDAQh5e4oXE2LxtM1W5eJ 1UPkCvvPfNyUFcXZLNzBtclKtaSaOj2fjDMAMYYChnkpij61cSxroJon2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRBJznvg5cGHMLlIfwO/Sb1O5rIMB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgwIDt7Z PyQN7eGthI7go+pOMY+VvkuhXLJHc2hfusQDSX8Dhwf5kCAnZrgLnzSjRfDrchLj UMjTipUI5/RBtxzvwe5Mvt5FdkSCFquvt1shvAnoexWM9glQfoxSQc6V721p3Ekb YlWGWdPFznmH2Jc8Ns0GKM7jsP+/hpZfZel3rKuicZo8hJq29jm0sIO0lWDY1A+K L+lUPw6Wd+0YEeD8FeAzHOGAcWnYpmwnJ+tDG/sCdFXBmTnGh+OKBtcFBXmtpCw1 Ha+gTXRX6lAQv0PMdSUoFfhM9F4rcgrMFO+ymLe5+aab7vd5PvMWH5P/yhoQ7K4m x55z0A8Sfs6saw== -----END CERTIFICATE-----Generated at Sat Aug 23 17:42:03 2025 by rpki-client