$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft File: ER1oFDdScdGjy9EhVdsR0r1BqNM.mft (raw, json) Hash identifier: 1j2IsZdFzZVO4/SS7lVAEOoXMfgeCbMNaddws5y+9mY= Subject key identifier: 3A:C0:4D:0D:90:9C:51:D3:E8:75:6E:EB:7C:BD:83:B8:64:BC:51:4E Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 019A21E4F59CE3688977969BB3ED40B924D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft Manifest number: 15BB Signing time: Sun 26 Oct 2025 19:00:44 +0000 Manifest this update: Sun 26 Oct 2025 19:00:44 +0000 Manifest next update: Mon 27 Oct 2025 19:00:44 +0000 Files and hashes: 1: 1-Eladd6sj8Y7vq1mtW5h6ASM_tM.roa (hash: auxhruGljCxtN9ijkL9KZ/K4C+RcNKrzhKvUSRg/9HQ=) 2: 1-dpIOgQrHNlMUsxt6C2Ztf5nfuM.roa (hash: pCUJMhojWf39aVt/QyofbsbuGjc8Gizw3ZJ2MSqOsTA=) 3: 1-gUTUj2JpuChCvozdxCQFTR22DM.roa (hash: f/2CCyCRw0ujuPO8AP04nbSH6GVLpL5l8bdrrfS8KoQ=) 4: 4JmdsvBatEpFanHBLwN8tE53B0o.roa (hash: rZ4Y8EU6soeJCyiHjLhVB0iARab8gRMfLlwRpZ6KFuk=) 5: 7ap_QJi20SaGnPgK1pV6_7cP-Uo.roa (hash: BOo8F2wEw4BgZClwTOfUjkt0HIqhHPtSsQJru4E0kFk=) 6: 7pYVLfxDyksCdUmiOhbgviOo3x8.roa (hash: QcPN759vJqixjDGU3gmMeZsCeSMWabiqP3hVma37vPU=) 7: ER1oFDdScdGjy9EhVdsR0r1BqNM.crl (hash: 0qMbrkRm3Y0UUjjkL7xeCP0ilCxm+tYn+57cRstcMlI=) 8: Hfkubm6yrWEn7gBE9wSMaD_ExXE.roa (hash: FXP2ir2FJkx6oy+MltDsbhNB8kOwwEjeXoSk5fOxlUM=) 9: Kk7xKrzHzx6qmDJI5CVBM_Sl474.roa (hash: m5FUWhJ54zbQwUlYkehhIiOw3x1SXokhdxGSIsx1B6c=) 10: Si8V8khtv0yVUA78DGGzfalNcCk.roa (hash: TuKNETdYYEdxWIcOAjkF1OdADD7zXp4g+mS6E5V7pvo=) 11: XjirH4cwDvxlRkAGxm7FSwAK2sM.roa (hash: YF/U/qPEr6M3Q+MIXQrnfUUKIV5n5WTRe7Dd9hsZTtM=) 12: aaSIhAJHCTwygtdFuXnOQPW6bY4.roa (hash: wv3RWyn/0THt7bCTdq/aMs2HWBM2MxgNANY6nblHNaA=) 13: azpo2jbXZip4fzf6JfxzYCloMXU.roa (hash: lChd9oLNFRupauF5HA1DBK7UGcNDTVpyA1eioCbGUns=) 14: cozXNddBZMRS0D_fVDWk42XqVNI.roa (hash: nP2wP4zibtasbSbsg7EMlMPSKjFkuBzXXdP2DBCONIM=) 15: iwe0kg-crqIWyp2IScMa9LxREgQ.roa (hash: CaVzf6weXzwiNznLUpeTB+QaHcaNjVgYiVjygsUgHxg=) 16: lQoeI3fot2NEOazpcJqwENKoEUU.roa (hash: Elimcemes6spMNky/T+TAYcPtxVw5jFrGcayiuk5D80=) 17: vsEC-C0-IZ2XJzdCqJMyLFlVXyo.roa (hash: 6dyvsyNO+SBB5YmEGzfWoUfWH/YqXAoOIBD3aTROXnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 19:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:21:e4:f5:9c:e3:68:89:77:96:9b:b3:ed:40:b9:24:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Oct 26 19:00:44 2025 GMT Not After : Oct 27 19:00:44 2025 GMT Subject: CN=3ac04d0d909c51d3e8756eeb7cbd83b864bc514e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7e:03:40:99:bc:56:8b:ff:d4:3d:cb:a5:e8: b0:6e:fd:b6:e8:32:2d:de:1c:3b:f5:74:d2:4a:e0: 4d:c3:73:c8:28:83:e1:9a:65:f3:0f:25:9d:84:8f: c9:12:a9:d9:74:69:c7:e9:05:61:89:f5:97:31:ac: b5:33:e0:3f:a0:c8:34:08:ff:44:8b:24:f8:16:60: b8:1c:1d:2f:fd:5c:9c:34:b2:1e:7a:b4:d0:09:98: c7:31:94:dd:b5:35:fa:a3:f8:86:5a:a5:93:11:75: bc:11:ac:65:68:2b:37:e0:61:04:ab:c2:43:e6:0b: 3f:4e:a0:9c:d7:74:f8:a4:cb:01:f3:0b:4d:9f:64: c1:08:76:f0:39:67:5e:19:78:14:ec:78:6c:0b:9f: ee:2a:ac:35:a3:db:2c:03:25:1f:06:98:ae:1c:b3: b3:a2:5c:54:a9:b3:4a:8f:8c:24:a8:c2:33:68:dc: 86:9c:f8:10:a5:f7:56:1c:23:bc:51:e0:a3:28:ed: 6d:cb:aa:43:b8:46:b4:4c:b3:52:c0:ed:73:fd:d6: a6:cf:28:ac:5a:e0:85:f2:1b:c9:df:23:07:a6:db: 94:87:cb:58:0f:2b:81:c3:17:cf:bb:6e:c5:30:d5: 2c:01:3b:2a:e5:52:fe:c4:73:c9:b6:ec:2c:c1:bb: d5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C0:4D:0D:90:9C:51:D3:E8:75:6E:EB:7C:BD:83:B8:64:BC:51:4E X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:7f:ac:ee:1d:ad:0a:e0:18:c7:34:d3:56:35:ff:fd:97:2d: b4:57:74:8e:67:4c:2a:0b:f1:86:ee:b0:77:7e:8e:5e:5a:fe: 55:df:c7:8a:cb:82:68:52:57:7b:94:9f:5d:d0:70:a4:ee:a1: ea:3b:28:51:a0:d0:56:7f:07:06:08:b5:d1:61:28:44:eb:ef: d0:9a:c8:7a:d3:d3:60:89:a1:1b:e5:ee:4d:21:25:92:a2:e0: 67:d1:bb:3f:e0:a8:45:bb:e1:0f:dd:42:9d:31:3f:c6:ae:55: 9c:11:eb:47:70:3a:83:86:33:b1:d7:b0:fa:7b:e1:5a:0d:f1: 6c:51:0a:74:a0:18:c5:6e:67:e0:dc:a1:2f:1f:8b:7d:4b:8c: 4a:e3:9c:ab:61:b7:5a:e1:6c:49:2a:57:96:87:1f:f9:35:de: 73:f4:04:6a:63:14:43:6d:7f:cc:2e:bb:44:14:09:0b:c6:1c: c4:6f:8c:9d:bb:0c:5c:3b:19:4d:7c:20:4b:6c:df:0c:7d:5d: 1c:14:13:22:26:4e:bb:10:77:0c:f5:9a:b7:8c:ed:4e:39:fa: 16:33:71:65:0c:3d:be:2a:32:6a:c6:54:ee:a9:93:80:ba:17: dc:f9:16:c8:6b:88:fa:61:e9:f5:69:61:2c:ca:5a:3b:0c:7d: ce:d3:ad:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoh5PWc42iJd5abs+1AuSTXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjUxMDI2MTkwMDQ0WhcNMjUxMDI3MTkwMDQ0WjAzMTEwLwYDVQQD EygzYWMwNGQwZDkwOWM1MWQzZTg3NTZlZWI3Y2JkODNiODY0YmM1MTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH4DQJm8Vov/1D3Lpeiwbv226DIt 3hw79XTSSuBNw3PIKIPhmmXzDyWdhI/JEqnZdGnH6QVhifWXMay1M+A/oMg0CP9E iyT4FmC4HB0v/VycNLIeerTQCZjHMZTdtTX6o/iGWqWTEXW8EaxlaCs34GEEq8JD 5gs/TqCc13T4pMsB8wtNn2TBCHbwOWdeGXgU7HhsC5/uKqw1o9ssAyUfBpiuHLOz olxUqbNKj4wkqMIzaNyGnPgQpfdWHCO8UeCjKO1ty6pDuEa0TLNSwO1z/damzyis WuCF8hvJ3yMHptuUh8tYDyuBwxfPu27FMNUsATsq5VL+xHPJtuwswbvViQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrATQ2QnFHT6HVu63y9g7hkvFFOMB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATH+s7h2t CuAYxzTTVjX//ZcttFd0jmdMKgvxhu6wd36OXlr+Vd/HisuCaFJXe5SfXdBwpO6h 6jsoUaDQVn8HBgi10WEoROvv0JrIetPTYImhG+XuTSElkqLgZ9G7P+CoRbvhD91C nTE/xq5VnBHrR3A6g4Yzsdew+nvhWg3xbFEKdKAYxW5n4NyhLx+LfUuMSuOcq2G3 WuFsSSpXlocf+TXec/QEamMUQ21/zC67RBQJC8YcxG+MnbsMXDsZTXwgS2zfDH1d HBQTIiZOuxB3DPWat4ztTjn6FjNxZQw9vioyasZU7qmTgLoX3PkWyGuI+mHp9Wlh LMpaOwx9ztOthw== -----END CERTIFICATE-----Generated at Mon Oct 27 04:37:00 2025 by rpki-client