$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft File: ER1oFDdScdGjy9EhVdsR0r1BqNM.mft (raw, json) Hash identifier: kosHS/VhnnfB/JtVzTFeZAujPE9TrOI9/y4h0R4ni28= Subject key identifier: DB:11:DC:DE:60:20:46:D1:06:74:10:BA:6A:83:A4:71:39:7D:1C:6B Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 019FA1847C4826EBEBC61DC612ADF8EEC824 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft Manifest number: 1894 Signing time: Mon 27 Jul 2026 03:00:41 +0000 Manifest this update: Mon 27 Jul 2026 03:00:41 +0000 Manifest next update: Tue 28 Jul 2026 03:00:41 +0000 Files and hashes: 1: 8ZTbVFN88ElJOvnxpynWkBywvcU.roa (hash: Zi7aMmYsFeMT6y4m/OMRvzAw9FlwVPNAsEeEWMyssQs=) 2: 9gyIdfYx-vxaH69AuzYIu8sS7ec.roa (hash: vsh4e/kwYxBt1mO0Ld2w2nU9VsbUvL0v+cSn3CZdKv4=) 3: D4HmthbydYoqExoa56VFIbe7J5A.roa (hash: 1gmVpoixHN/Zn+8HJ6YdrukA3JeRxcEeBWZ/2aGh+ps=) 4: DKZJyriLpkX0P03xQILHD2FwZEo.roa (hash: x6vx2AQsWgf7sMGXLXxiRwrb7PArAVgKRPBlJd4ah10=) 5: ER1oFDdScdGjy9EhVdsR0r1BqNM.crl (hash: O34HvkMkyP+yiCJOZq470EuYJE6vk3hb27FxuRoiRZg=) 6: HRwCntz8pHEtM7UJXh-KwEbXi3w.roa (hash: CKUDXMyXov9Gbf/ygH+HewYMwNtReJO+UQotN2JyBXQ=) 7: Haim4aY9ShmCS1epcJRa3-rRRmM.roa (hash: AQeMZQUR+w1eyhT+kYpVEnNYoo0tXgoBt1LUUZT+/W4=) 8: Ka2f0_rG4AuXnvi8TQgXMBJzKOE.roa (hash: HTLBGDTB6awokEWRy6DjReQvfOLjCmwPODXPDvHGn+A=) 9: LdJkopqk4m9ubmHzk4T29FnhG7o.roa (hash: Qx8FwqyP4Rxw7vIMwqfqa4V2zeYK7+dz+yeOugc8QVI=) 10: S3K9bo4j9NjF6L9mhwIsz-LYyHg.roa (hash: FX7C0FNczXeRPZms4zyJ1OukTZNK4zd0GhG7vBTsBvg=) 11: UWgtqXah3liJx-awsYUK3XIS54c.roa (hash: nisX/PCjG49hPGc2ySAUn3J0MxV+pv8+T78d4GdNMSs=) 12: _d7ohj2Ako_tiSFSE9-jnGs0uoI.roa (hash: mf32LDbJ2Su5F5H62P0/F/PId5oq7GFGgkD8WKRwmPw=) 13: f5svUnEK1n30wRVLtixbJDS7pZM.roa (hash: sILbepz7GhK0jGMQ48sIN5LBYx9eYZB9voFGWkXvx60=) 14: iK87eJg7y-_rcG1D3z4FzaXgRNE.roa (hash: uVYEVS9koySJoZQhAK0q3w5qAE9/nwHY2ro0Er3WEZY=) 15: mcS4SdpuWVbabfdpCB_tOwct_TA.roa (hash: hcfOoUJHvls1DL90VCIcUIUdeQTL2YjVgbYPY6TdJAA=) 16: nXrADfBP6wNtRforv4w6KFdo1Ns.roa (hash: PAoowx6zHYeOj9TxBp8LwY6JFAj6/p0gXZ/G0XMc/dg=) 17: tDoaGy6SLh3swARR-izxiYVQMmU.roa (hash: lZCnqmwKcNoIj9hNP0txhfT3ExuUcH8dWLkUpGjDKzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Jul 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a1:84:7c:48:26:eb:eb:c6:1d:c6:12:ad:f8:ee:c8:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Jul 27 03:00:41 2026 GMT Not After : Jul 28 03:00:41 2026 GMT Subject: CN=db11dcde602046d1067410ba6a83a471397d1c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e8:f9:44:6f:15:a3:0e:87:8f:cc:88:89:30: 44:17:52:f2:51:ae:06:f6:38:52:c2:07:70:49:a4: 3b:6e:18:1a:be:26:de:5d:75:bd:c5:4e:46:dc:fa: 69:5d:7b:cb:34:52:0b:97:ce:81:8c:1b:99:16:be: 43:f1:40:41:b7:f4:03:b4:0a:d1:80:e9:e9:a5:b4: f4:e7:30:cc:2c:48:e7:d3:e1:1b:c3:5c:50:bf:c3: e1:1d:19:95:ac:c2:72:b4:03:b3:50:b6:f0:21:09: fa:4a:24:26:06:3b:84:a1:31:46:dd:e3:03:9b:62: 9d:be:4b:28:2d:e7:ca:d5:66:a3:72:22:dd:73:58: 53:36:6e:4a:ca:21:13:e0:00:ba:11:12:bf:07:cc: 18:5e:84:1e:fc:25:e6:67:d9:4f:2c:83:c2:0a:19: 2a:2a:69:00:7c:d1:53:ba:18:e4:f3:7e:2a:fd:20: bf:9c:3e:e9:d1:d8:3c:68:19:b7:2e:a7:6a:fd:41: 99:61:2e:e0:eb:d2:d5:f7:09:09:07:0a:8e:87:68: 35:c0:0d:62:29:bb:84:b1:cc:47:a8:7b:a4:2b:e3: 7e:1e:18:80:3c:20:6b:2e:28:d2:4a:32:fa:ee:82: 14:3e:5c:3a:09:13:a3:ff:d6:87:a6:f2:a4:d0:e4: 61:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:11:DC:DE:60:20:46:D1:06:74:10:BA:6A:83:A4:71:39:7D:1C:6B X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:09:8d:08:aa:3c:f1:c6:a0:a1:84:00:23:0d:42:ef:9a:cc: 5a:52:59:ac:5e:63:4b:aa:fd:ba:e3:3a:07:88:b1:3d:d6:76: ad:62:24:fe:c3:16:c0:ec:69:53:bb:aa:f1:a0:3c:38:3e:f0: d7:1a:7f:83:7c:3b:bf:d1:bf:9b:a9:b1:a0:16:39:48:bc:61: 1c:ab:bd:7e:ec:ab:fe:80:19:b0:f8:f1:d9:37:03:a7:ff:4d: 54:b0:ae:e5:91:8a:de:c2:db:81:c4:dd:13:a3:74:e8:e7:19: dc:90:8b:73:26:01:1f:f2:7e:dc:07:84:9d:3f:8b:20:21:7b: 69:de:4e:de:6a:ac:96:46:0e:d3:02:35:21:7f:20:c4:55:d6: e5:4f:59:60:e7:2e:43:e9:05:af:47:18:c6:35:a2:3b:d0:03: d4:83:c2:f7:70:d4:d2:24:f4:c9:f9:c9:f8:ef:96:d6:ee:09: a4:be:1b:28:41:2a:e4:ca:c2:8c:26:fb:c2:8e:e3:5b:7a:17: 80:a5:4b:f2:77:11:b0:71:c1:7b:70:68:e8:ef:4f:62:cd:8e: ca:91:6d:81:1f:5a:2f:30:bd:ec:43:e3:ce:53:55:d2:8f:15: cc:e0:f8:40:47:ab:ba:f4:4c:1e:98:83:37:49:4e:00:20:fc: 5c:5e:09:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+hhHxIJuvrxh3GEq347sgkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjYwNzI3MDMwMDQxWhcNMjYwNzI4MDMwMDQxWjAzMTEwLwYDVQQD EyhkYjExZGNkZTYwMjA0NmQxMDY3NDEwYmE2YTgzYTQ3MTM5N2QxYzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOj5RG8Vow6Hj8yIiTBEF1LyUa4G 9jhSwgdwSaQ7bhgavibeXXW9xU5G3PppXXvLNFILl86BjBuZFr5D8UBBt/QDtArR gOnppbT05zDMLEjn0+Ebw1xQv8PhHRmVrMJytAOzULbwIQn6SiQmBjuEoTFG3eMD m2KdvksoLefK1WajciLdc1hTNm5KyiET4AC6ERK/B8wYXoQe/CXmZ9lPLIPCChkq KmkAfNFTuhjk834q/SC/nD7p0dg8aBm3Lqdq/UGZYS7g69LV9wkJBwqOh2g1wA1i KbuEscxHqHukK+N+HhiAPCBrLijSSjL67oIUPlw6CROj/9aHpvKk0ORhlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsR3N5gIEbRBnQQumqDpHE5fRxrMB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwmNCKo8 8cagoYQAIw1C75rMWlJZrF5jS6r9uuM6B4ixPdZ2rWIk/sMWwOxpU7uq8aA8OD7w 1xp/g3w7v9G/m6mxoBY5SLxhHKu9fuyr/oAZsPjx2TcDp/9NVLCu5ZGK3sLbgcTd E6N06OcZ3JCLcyYBH/J+3AeEnT+LICF7ad5O3mqslkYO0wI1IX8gxFXW5U9ZYOcu Q+kFr0cYxjWiO9AD1IPC93DU0iT0yfnJ+O+W1u4JpL4bKEEq5MrCjCb7wo7jW3oX gKVL8ncRsHHBe3Bo6O9PYs2OypFtgR9aLzC97EPjzlNV0o8VzOD4QEeruvRMHpiD N0lOACD8XF4JPw== -----END CERTIFICATE-----Generated at Mon Jul 27 13:14:24 2026 by rpki-client