$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft File: EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json) Hash identifier: B7OuiiLTQ2TK7gGoc2dw0as14pfxBQwhPt2mrZshRzo= Subject key identifier: A5:B3:45:D5:66:B6:9B:FB:B5:FB:99:CF:E1:8F:AD:48:F0:FD:26:2C Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 01A0C1B12C67BCDB2BBEB1CFAF60ACC98305 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft Manifest number: 1B31 Signing time: Mon 21 Sep 2026 02:00:08 +0000 Manifest this update: Mon 21 Sep 2026 02:00:08 +0000 Manifest next update: Tue 22 Sep 2026 02:00:08 +0000 Files and hashes: 1: 1-wR4cTw3cnRKpfnM4kFkDlqOmpM.roa (hash: uANSR1y8ArwMRJWs9G2MLV5dcv0JI9ZhZL82nYHfPJ4=) 2: 1yQrs5HP9XIaoTvb72_pfqznw5g.roa (hash: yz35x7CqiZJ94ld5AFj0y0ZNW6s7eAQtnm0UEs/oenI=) 3: 3ueobkuqCRrYHcS_Ra615Z2wF5U.roa (hash: K0AzKxQwm7htko0KmC5TywH8R8BPhkqCaEM5jSmKm3g=) 4: 3xzArYOAxgWc4aUVyuLW5cctBic.roa (hash: 1e/deWnq1m7f4YnRkd3T/eFSvZzxSX+ubkiEGm+dFs0=) 5: 964mey1ll-AqSTVqRVFMkmj9R7A.roa (hash: /W32m1FUs/kl31E7I7cB+ItUJPiLNdIiU90WMvkjKtY=) 6: B3lzECI8w3HbbNBrJuEUc9_EF5k.roa (hash: rCmQl/ONc/o8391GBO724j7HH/p+HUU/e7ohTDKTGvw=) 7: C0pO8vmI8i0pyw-YO-sHomGs8Lw.roa (hash: 6noZcpiWmpaT21H7qsONWigBYFMG0N39ym2hGf7vBbs=) 8: CFjoGu1xIkRD4AXMx7qb8Qjapqw.roa (hash: JzMpItX6WpyBwW2pJ22HiX4G0oRhcgR43KfhB90tGRs=) 9: DJFcihK3KyDMA5inHd8qVc8pMd8.roa (hash: 7aHvIhUD1Pwu4HtX5DwhI19v0UPceOldhZKd58QrEWA=) 10: D_g2kJlELMuoefn2HH3Y2o0l5YQ.roa (hash: dyiFDNNm4intjG5QxyjFGbaTlhBNt77Zx7ofZH6deL8=) 11: Dt8fw0fBEcEty4mj1leXNAQgZ9s.roa (hash: y8aICBxGhhhT6yCX7J0nu8TCySSKB7GMI2H8C1V8oWQ=) 12: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: baWhto/X1uGwlJEHj6hsv5DJa7sQSc18NPmt3hCbAfE=) 13: N7wIAVShGLQyli3xNuOZyqJnQO4.roa (hash: AgMVywaJAsy8gUEhbniXUCBpJabLSJ38CmQWxUFEkEI=) 14: NkUv8tT-ajiDpIriTdTmg1rESxQ.roa (hash: seqVba1oO6/3hfFI32i0NdWB9EI7RH+MCROkDPZc0ZY=) 15: OfJWGzh3EJhJDnotwpPBu62vy1g.roa (hash: MhO2XX5OLieGQFxwEuA3XpaP5smjhsn06HFUwLnfiN4=) 16: PS0PsdnY-HZeeZ1Z52R3bkK0Hfw.roa (hash: 8DMzuZuwaB5js5sn1MRMLjpEkzq82jGppMDxBhQkY2I=) 17: QI6P2rjg0KTEHj0abHLeX5NrCNw.roa (hash: cNfX9kMj7jm75WwWsewudy5zy4Y1MC/doZUI28Cxpqs=) 18: TVQnbaL3VCztBv4q7ycrZZTOHOc.roa (hash: bC6KDiPDLB7pjAOZ1rB1QtdHfKPoray7E8FKc5HGj+g=) 19: U2pLLOkiHMn0rCPB16cgMVj-e5k.roa (hash: NZC/aPt8M4oyJlk7EBhhsouZdc1pvAlNzS2p5zGb/cI=) 20: UVz7Jz-vRbmjv60CUdJRwlL5d9k.roa (hash: 2loeiAsnCgkFA+e/zul6V4oJZslxwq6RTKrln0d3znk=) 21: X9pqJ_bWAmfpFd9hCW3HufAy5B4.roa (hash: SE7pkhcUNXRDeV5ZRqQnZ58B47F0LyM4s+/68mhkYxQ=) 22: _-TiV1qoAPPw8SPSrMcBVzTznwE.roa (hash: Pvgk+aRssPeQ+g6cPNxNpBek3/VhtaCOTsYLRLNNB4o=) 23: cZX0XiKgTVRStj-qdJuTen7BOJ0.roa (hash: EC0B5N4ujSfAORvQJwcrZWB4mhWoJIUXusoMRH6vkfU=) 24: k-6qmVeKEUGc-0cz5Hnsx9hmUPE.roa (hash: 5Ng2eom8lxcHR5nDEgtd/5I+6rVuKWoiMkhVtoQFVJM=) 25: moww7p-LOqTrUFdCMgiOcUbWkq8.roa (hash: 0LuJenOzhHfNNzAchlSo36Em1kGuq8Y2UA268LygX3g=) 26: pA1ysw7euEwsawBt3WsvgzNCTVc.roa (hash: IHFmvwJcfsynVr/cn/JAzWiobBCXWx/OYDSpOIF4AC0=) 27: shFmXFepoVkoPuQaH7iwNirZ3XU.roa (hash: jDkMxVrrv2BYtLq4CSplaeMuVqAXK6DpU5S2779dHHY=) 28: tuOyzSJGsdbEh4RXvNAltEvaihU.roa (hash: G2o6sCc5sztEjyYV0w4l3dxyOyYv/hTu3DhW9esUzC8=) 29: tuh9bTDNsuijEEF_1hjMDBzb60Y.roa (hash: NaMz9HaNco8VZFC2aGISUfFdhyLdNpp7L/OREqXeFJg=) 30: uX4xjA4a9NlDQbfRFcZwVkyWUus.roa (hash: f6MBYwHAEYsVkFoRtsJQxmJ3Dq5gG+hbXJYYbrTiM9Y=) 31: vcKGcg7yfm5OJBRmK9UMG7YPxlE.roa (hash: lC2nvLTapMxLzuBLLcR7m2BlyD8SVIXqzMfLdXwZD5U=) 32: vuRjeq6Hw4CRVKhaZ9mJU5QQ-8w.roa (hash: IY4BrewFqRlekR75+D0bMoN40ONA0lrT3ykyZO92GIg=) 33: wJhBirIGDG5CpWVFPtacVacZOVI.roa (hash: 3n/bwQkmOj6Btxw1bOnJ8wdv1zKEZOjjavJjnLqf2ys=) 34: wOT7IZMsm5x7gOeHRQ2TeKPsneo.roa (hash: XWPZK9lqHn6jVyfOlaTnmEq4ouLn7+wTN51iKWqUouQ=) 35: xUFWVXWG8jvZRSVOePtSKH6GSXc.roa (hash: SPlD00845Cci2SPbrzXpwUia+Xpnie29kSvO/GdHQ7U=) 36: yV7jKZqczgrPDGRpe_5ykccZCz0.roa (hash: CXmYu488BCna3Chnev81BlIc+TedhSwGv5Tq+LkVCsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c1:b1:2c:67:bc:db:2b:be:b1:cf:af:60:ac:c9:83:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Sep 21 02:00:08 2026 GMT Not After : Sep 22 02:00:08 2026 GMT Subject: CN=a5b345d566b69bfbb5fb99cfe18fad48f0fd262c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a1:72:16:79:5e:c7:87:94:8a:f5:b4:b7:ed: d2:c0:40:98:27:e8:ae:ef:f4:bf:91:94:1a:77:b6: ed:83:d6:3d:dd:5f:cd:4c:ec:cf:14:4e:f8:6e:5d: 81:b5:10:48:00:1b:6c:c3:a8:61:b4:ab:fd:97:51: 8e:a4:4f:c8:80:b7:8d:bf:c9:fd:76:2d:c5:5e:33: b3:19:94:6e:f9:3a:85:6e:31:18:ef:2b:48:bc:6f: 4d:71:b9:e8:ba:fe:d5:33:d5:26:1e:77:22:4e:c7: 97:75:9f:9d:4d:3a:7a:13:7c:70:96:8b:e3:38:c0: 2a:57:e1:99:e2:81:6f:2a:3a:6f:1b:50:fe:0d:10: 89:b2:e4:19:cc:ac:0b:5c:3a:3b:67:27:9d:e0:1f: 04:d3:45:15:cf:1f:03:a6:d9:1b:b7:cc:fc:ca:06: 18:ee:27:61:94:ba:5f:50:50:e0:c0:37:9d:07:5a: 86:9a:e2:e5:85:ad:86:02:45:2c:e8:fe:1b:7e:72: f7:1f:83:67:49:8c:c3:96:81:5c:bc:a6:fc:df:ca: 3d:20:a6:a0:43:44:aa:e5:dc:29:c9:c3:3e:db:91: fc:7f:31:47:57:e0:63:79:3b:78:c2:0d:56:70:dd: 91:8c:dd:e8:e4:93:29:24:d5:bf:5e:a1:63:3b:6a: da:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B3:45:D5:66:B6:9B:FB:B5:FB:99:CF:E1:8F:AD:48:F0:FD:26:2C X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:fc:fc:e6:70:79:a5:4d:26:32:4c:41:f8:1d:94:25:ac:ed: 18:85:ee:5b:16:3f:1b:cd:61:ae:42:7c:b8:c0:0f:89:bb:f7: 28:cf:94:d1:23:d8:57:ea:b6:2f:a2:18:bc:ac:f5:70:2f:69: 12:57:f1:a8:36:4d:cc:77:7c:ab:e8:6d:18:40:65:13:3d:4a: 25:f5:f6:5a:19:2e:23:44:e4:52:b1:09:c6:b6:65:02:07:36: 00:d4:93:14:f6:1b:9c:c4:96:47:bb:55:b2:f2:5c:87:6b:74: a5:34:9f:21:62:b3:fa:14:90:b5:25:27:29:cb:22:0d:1b:2c: b7:47:e0:0f:83:b7:44:8e:b7:5a:8a:58:de:c4:bd:52:1a:f8: 4e:d3:aa:d2:cd:88:25:60:cf:98:38:8e:9b:07:00:a5:fe:99: e2:4c:2c:f4:05:60:6e:07:1f:1c:1c:f7:7c:dc:23:1e:15:d7: cf:d7:6f:c3:96:ed:9e:15:1b:d4:04:9a:dc:62:16:45:f1:60: ca:42:3f:83:21:2c:94:78:a1:31:fe:5f:2c:37:ff:56:63:b3: 96:18:22:81:d0:62:f8:bb:dd:08:90:48:07:c1:9f:49:9a:57: b0:64:b4:4a:4e:42:e4:86:66:a3:05:b1:59:60:30:02:4c:d8: a3:b3:43:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDBsSxnvNsrvrHPr2CsyYMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjYwOTIxMDIwMDA4WhcNMjYwOTIyMDIwMDA4WjAzMTEwLwYDVQQD EyhhNWIzNDVkNTY2YjY5YmZiYjVmYjk5Y2ZlMThmYWQ0OGYwZmQyNjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaFyFnlex4eUivW0t+3SwECYJ+iu 7/S/kZQad7btg9Y93V/NTOzPFE74bl2BtRBIABtsw6hhtKv9l1GOpE/IgLeNv8n9 di3FXjOzGZRu+TqFbjEY7ytIvG9Ncbnouv7VM9UmHnciTseXdZ+dTTp6E3xwlovj OMAqV+GZ4oFvKjpvG1D+DRCJsuQZzKwLXDo7Zyed4B8E00UVzx8Dptkbt8z8ygYY 7idhlLpfUFDgwDedB1qGmuLlha2GAkUs6P4bfnL3H4NnSYzDloFcvKb838o9IKag Q0Sq5dwpycM+25H8fzFHV+BjeTt4wg1WcN2RjN3o5JMpJNW/XqFjO2raYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWzRdVmtpv7tfuZz+GPrUjw/SYsMB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2 LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPz85nB5 pU0mMkxB+B2UJaztGIXuWxY/G81hrkJ8uMAPibv3KM+U0SPYV+q2L6IYvKz1cC9p ElfxqDZNzHd8q+htGEBlEz1KJfX2WhkuI0TkUrEJxrZlAgc2ANSTFPYbnMSWR7tV svJch2t0pTSfIWKz+hSQtSUnKcsiDRsst0fgD4O3RI63WopY3sS9Uhr4TtOq0s2I JWDPmDiOmwcApf6Z4kws9AVgbgcfHBz3fNwjHhXXz9dvw5btnhUb1ASa3GIWRfFg ykI/gyEslHihMf5fLDf/VmOzlhgigdBi+LvdCJBIB8GfSZpXsGS0Sk5C5IZmowWx WWAwAkzYo7ND5A== -----END CERTIFICATE-----Generated at Mon Sep 21 07:57:20 2026 by rpki-client