$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json) Hash identifier: MxZAyS8r35XnHMDZCLJr7OYRY5AMTf1DfGPnOicUdvg= Subject key identifier: 4E:3C:A3:4D:B7:6D:3B:0C:B7:71:B6:BE:3E:FA:4C:EC:73:01:5E:02 Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Certificate serial: 01A187BFB064BC937C046493E351FE1A4B02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft Manifest number: 05E7 Signing time: Thu 29 Oct 2026 13:00:48 +0000 Manifest this update: Thu 29 Oct 2026 13:00:48 +0000 Manifest next update: Fri 30 Oct 2026 13:00:48 +0000 Files and hashes: 1: 9V3S7FKC66AOlqD78_S81truyog.roa (hash: zjtnM6n3Uet2Hry92cMihIwePJR9odotoqz4FTgtQpQ=) 2: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: IosFsTfJy4UaAagx2uyrS8r5Q70VDlsBx8vcl3wG0UQ=) 3: LkOY4GowBW7GaD1UvMDeSIJyF3k.roa (hash: okHGdbAHeQdDjJXtMtQ+X/VTMxTP8x60D1aaO/CrMW8=) 4: Q89cC5EdEYVsTAR7wEMR5rmM-FA.roa (hash: IpAEUAQrDRw1Avy4gtoYvc+jdCy+th+rhrs9OezDlo8=) 5: R6vEKMp8XV0nRsp07cf4y7I04qo.roa (hash: nWBD/KxL+ZqMUbvdWaWo1r7/2jynLrCSHLN52H6UCwM=) 6: XGUIHnWF_LunuxvNcMmR57_WKzo.roa (hash: Gg+yICFewOrJllU9keGQjZ8+O9tNzguLLKLqMVLJpjs=) 7: b1NnfX82WWUKnDzO-T_p9BDnjPM.roa (hash: uuhxZnIOVP3yGkI2POwoZpysQSXnT6B0qJNkc7bJXFw=) 8: dkbWWj1fcNuoxRuY36otGw7y-4o.roa (hash: eWnON+KoPCnW1mOHfIOhfYni2hFCmr45cz2OH330WCY=) 9: fYJN56gNpyjk6FeN9g2u8kda_Ck.roa (hash: 0Bz6iRQD5arZ6ysTUfpQvVjP86yHCsoWY8uCR19q2k4=) 10: iTrKyBgs_fihjw2gMNeMi35dTSA.roa (hash: zNTMLDdPTDqmLO0jhMMrsQBD6z1cOUxn49L1ph7eXpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Oct 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:87:bf:b0:64:bc:93:7c:04:64:93:e3:51:fe:1a:4b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Validity Not Before: Oct 29 13:00:48 2026 GMT Not After : Oct 30 13:00:48 2026 GMT Subject: CN=4e3ca34db76d3b0cb771b6be3efa4cec73015e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e7:3c:ff:01:98:fb:1c:07:b6:b9:5f:c3:49: 94:cc:7e:55:40:6e:7e:95:fa:dc:93:bf:42:93:f2: f2:2e:31:e5:e4:3d:67:f2:e7:c6:02:64:0b:28:0e: e8:ab:94:68:0c:d0:a6:1a:b6:f0:4b:b1:e4:72:ea: 63:43:6f:b8:de:bb:2c:a7:2b:bf:c7:3b:a4:f0:56: f0:83:a7:fd:31:9a:ad:e9:11:af:d8:23:2b:9c:73: 28:3a:8f:16:d9:d4:ce:db:d4:50:9a:65:e0:a5:6c: 43:d9:43:c1:cb:44:47:3f:dc:9c:51:1f:05:f6:2c: 8f:73:22:fa:e2:9b:25:1f:4a:e0:b0:f5:e6:f3:83: 5a:a9:73:ab:68:fa:6d:4f:7b:33:83:70:99:b1:c7: 6b:e5:08:87:4e:f2:29:93:8b:9c:96:55:d9:13:d1: 1e:4c:0f:dd:64:a3:53:0f:bb:01:1b:7c:b8:08:dd: 60:ea:b5:87:9b:a7:36:a1:0d:a6:31:f1:9b:4e:79: 21:f7:5b:fb:e7:9f:9e:43:a0:78:c8:37:f8:89:0b: a2:c2:b2:c4:32:b1:8c:9a:53:a4:bd:49:1d:42:78: fe:24:d7:38:ea:2b:08:91:23:c3:1e:4c:a8:78:de: 58:71:57:9d:bb:d2:c5:bc:3d:dc:eb:e7:21:57:66: 5e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3C:A3:4D:B7:6D:3B:0C:B7:71:B6:BE:3E:FA:4C:EC:73:01:5E:02 X509v3 Authority Key Identifier: keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:9d:2c:a1:a8:8d:5a:2e:65:da:62:85:73:56:8b:81:d3:8a: 79:0d:a8:8e:ba:b9:9b:bc:95:23:c6:6c:15:57:c9:52:3b:87: 99:28:f8:ab:d0:37:4c:e4:46:52:38:1b:df:29:40:e8:20:7b: 2c:d2:a0:a3:b6:67:ef:07:50:be:16:d8:8b:e4:cd:a6:4b:97: 1e:84:fa:83:6b:ec:4f:d1:f0:ad:0b:61:4f:5f:12:fa:1a:19: ad:dd:94:11:8d:f0:4b:8c:fd:34:f4:fa:40:41:4a:48:14:d3: b5:60:fd:a5:e6:a6:12:8d:aa:da:2a:6b:01:46:b8:66:63:d9: 52:f5:c4:39:fb:d0:de:ca:8e:ef:1c:66:7c:bc:97:5a:2d:b0: ee:32:0f:a4:ff:a4:69:c4:89:e3:f7:5d:d0:5c:ca:4a:dd:37: 4d:a1:8d:69:fc:10:0a:64:16:a2:81:cb:9b:e6:49:cd:98:8f: 90:f0:09:03:d8:75:56:71:12:f4:7b:bd:7b:44:23:4f:97:a6: e2:f5:f0:70:3f:fa:49:f9:78:8b:af:0a:5f:80:76:d5:a5:da: 7b:85:27:ac:b4:e0:62:9a:b8:16:18:c7:fc:8e:aa:34:0b:2c: c9:02:ce:d6:ce:2c:d5:9b:f1:ea:d3:ca:16:7c:88:4d:4d:c7: c3:7f:91:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGHv7BkvJN8BGST41H+GksCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTZhYmNjNDRjOWE5NTU0MGNkZjViMWRjNTQyZWM3ZDEx ZmUwN2EwHhcNMjYxMDI5MTMwMDQ4WhcNMjYxMDMwMTMwMDQ4WjAzMTEwLwYDVQQD Eyg0ZTNjYTM0ZGI3NmQzYjBjYjc3MWI2YmUzZWZhNGNlYzczMDE1ZTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+c8/wGY+xwHtrlfw0mUzH5VQG5+ lfrck79Ck/LyLjHl5D1n8ufGAmQLKA7oq5RoDNCmGrbwS7HkcupjQ2+43rsspyu/ xzuk8Fbwg6f9MZqt6RGv2CMrnHMoOo8W2dTO29RQmmXgpWxD2UPBy0RHP9ycUR8F 9iyPcyL64pslH0rgsPXm84NaqXOraPptT3szg3CZscdr5QiHTvIpk4ucllXZE9Ee TA/dZKNTD7sBG3y4CN1g6rWHm6c2oQ2mMfGbTnkh91v755+eQ6B4yDf4iQuiwrLE MrGMmlOkvUkdQnj+JNc46isIkSPDHkyoeN5YcVedu9LFvD3c6+chV2ZeWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE48o023bTsMt3G2vj76TOxzAV4CMB8GA1UdIwQY MBaAFBIWq8xEyalVQM31sdxULsfRH+B6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEt YTA5NjJkOTk4ZTYwLzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEtYTA5NjJkOTk4ZTYw LzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtp0soaiN Wi5l2mKFc1aLgdOKeQ2ojrq5m7yVI8ZsFVfJUjuHmSj4q9A3TORGUjgb3ylA6CB7 LNKgo7Zn7wdQvhbYi+TNpkuXHoT6g2vsT9HwrQthT18S+hoZrd2UEY3wS4z9NPT6 QEFKSBTTtWD9peamEo2q2iprAUa4ZmPZUvXEOfvQ3sqO7xxmfLyXWi2w7jIPpP+k acSJ4/dd0FzKSt03TaGNafwQCmQWooHLm+ZJzZiPkPAJA9h1VnES9Hu9e0QjT5em 4vXwcD/6Sfl4i68KX4B21aXae4UnrLTgYpq4FhjH/I6qNAssyQLO1s4s1Zvx6tPK FnyITU3Hw3+RFg== -----END CERTIFICATE-----Generated at Thu Oct 29 16:03:51 2026 by rpki-client