$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json) Hash identifier: 26OoG/AHLpCl3evz0aA/nQ/WJbHAxAqoyQf3xyoC5JM= Subject key identifier: C5:4E:EF:29:74:8B:2A:88:81:38:E3:4D:BF:7C:02:40:A2:BF:D2:F6 Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Certificate serial: 01A0DDCE9BBFAA2278629B16608FEC0F8E4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft Manifest number: 058F Signing time: Sat 26 Sep 2026 13:01:39 +0000 Manifest this update: Sat 26 Sep 2026 13:01:39 +0000 Manifest next update: Sun 27 Sep 2026 13:01:39 +0000 Files and hashes: 1: 9V3S7FKC66AOlqD78_S81truyog.roa (hash: zjtnM6n3Uet2Hry92cMihIwePJR9odotoqz4FTgtQpQ=) 2: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: vss9/jUqOErAzmu6JWIRMt1AED4IrckZeg48OdwhnVM=) 3: LkOY4GowBW7GaD1UvMDeSIJyF3k.roa (hash: okHGdbAHeQdDjJXtMtQ+X/VTMxTP8x60D1aaO/CrMW8=) 4: Q89cC5EdEYVsTAR7wEMR5rmM-FA.roa (hash: IpAEUAQrDRw1Avy4gtoYvc+jdCy+th+rhrs9OezDlo8=) 5: R6vEKMp8XV0nRsp07cf4y7I04qo.roa (hash: nWBD/KxL+ZqMUbvdWaWo1r7/2jynLrCSHLN52H6UCwM=) 6: XGUIHnWF_LunuxvNcMmR57_WKzo.roa (hash: Gg+yICFewOrJllU9keGQjZ8+O9tNzguLLKLqMVLJpjs=) 7: b1NnfX82WWUKnDzO-T_p9BDnjPM.roa (hash: uuhxZnIOVP3yGkI2POwoZpysQSXnT6B0qJNkc7bJXFw=) 8: dkbWWj1fcNuoxRuY36otGw7y-4o.roa (hash: eWnON+KoPCnW1mOHfIOhfYni2hFCmr45cz2OH330WCY=) 9: fYJN56gNpyjk6FeN9g2u8kda_Ck.roa (hash: 0Bz6iRQD5arZ6ysTUfpQvVjP86yHCsoWY8uCR19q2k4=) 10: iTrKyBgs_fihjw2gMNeMi35dTSA.roa (hash: zNTMLDdPTDqmLO0jhMMrsQBD6z1cOUxn49L1ph7eXpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:dd:ce:9b:bf:aa:22:78:62:9b:16:60:8f:ec:0f:8e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Validity Not Before: Sep 26 13:01:39 2026 GMT Not After : Sep 27 13:01:39 2026 GMT Subject: CN=c54eef29748b2a888138e34dbf7c0240a2bfd2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8e:c5:10:8f:ce:36:19:d7:54:39:a4:56:45: 2c:6c:01:6b:32:83:47:d0:b8:ea:fe:e0:30:49:48: 87:27:01:f9:20:65:ec:02:c0:a9:36:ce:31:11:5f: 01:61:63:e8:61:48:4e:e7:90:52:f2:d7:32:d1:e3: 61:11:c0:6d:fc:04:b5:9f:0f:55:db:8c:cf:42:e4: 72:20:f6:5a:90:be:1f:de:bd:af:41:66:08:d6:e0: df:86:d7:c1:27:67:9f:a6:fd:b0:7c:6f:cd:5e:92: be:46:b6:be:f2:0d:ba:96:58:60:1f:79:95:de:d4: 2e:a3:13:b1:ba:91:76:85:df:15:a1:30:e2:31:22: 06:18:1a:15:a4:5c:8d:f2:51:d1:6c:51:fa:80:db: 9a:39:26:2f:3a:45:3d:34:0d:47:5c:e1:8b:4a:d0: 5d:2e:b6:4c:78:62:b0:65:92:d6:1d:44:10:c4:36: 45:32:f4:c6:94:5c:4f:66:60:e8:27:58:f6:55:00: 0f:3e:51:5a:2d:e3:a9:56:b8:09:84:72:cb:84:dc: e4:60:1e:67:fb:07:41:d7:06:fd:97:c6:dd:97:a3: da:30:86:53:57:36:6d:51:91:b3:45:8a:05:17:8c: 76:41:28:dc:cc:f4:57:a0:57:4f:f2:c6:3b:48:42: 23:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4E:EF:29:74:8B:2A:88:81:38:E3:4D:BF:7C:02:40:A2:BF:D2:F6 X509v3 Authority Key Identifier: keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:23:4b:95:a9:64:13:d1:07:44:74:bc:b2:48:40:65:7c:2d: 69:3b:64:9b:f8:d4:02:75:2d:2e:73:08:eb:71:b3:94:2b:59: 32:50:bf:fc:1a:43:d4:b8:fd:8c:3d:be:b7:cf:5e:b4:a5:a2: e5:88:8f:39:a7:38:b9:ed:3f:01:1f:30:49:16:0d:8c:2c:2f: 76:a0:c6:63:ad:0b:34:56:ae:00:7d:9d:08:28:9f:39:3e:7a: 6e:0d:79:f5:89:01:13:96:99:3a:8f:83:d7:dc:d2:1a:84:cb: 14:3f:2f:ec:fb:90:56:f3:af:b8:c3:59:09:18:c2:c9:aa:31: ef:69:87:a5:f5:68:87:9a:ac:4f:52:0e:5f:f4:a2:ee:9b:71: ea:f6:a1:73:1b:d8:83:73:06:bb:b1:ba:1c:d2:57:1c:35:ff: 1e:39:e3:dc:f1:97:15:e2:dc:f0:ba:e0:08:c8:d7:ae:c1:b7: 74:61:52:24:c8:51:d1:5c:90:9c:21:27:64:c9:f4:df:b0:f6: 92:c4:60:8f:aa:1d:9a:78:bd:fe:ab:53:87:1f:2c:66:ca:7c: 54:2e:5a:4f:d2:da:a6:39:8c:64:0a:00:38:50:0a:02:27:e0: 21:5c:77:54:5a:ef:a3:2e:9b:a5:e2:d4:f3:93:00:fd:63:f9: 6d:ab:9a:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDdzpu/qiJ4YpsWYI/sD45MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTZhYmNjNDRjOWE5NTU0MGNkZjViMWRjNTQyZWM3ZDEx ZmUwN2EwHhcNMjYwOTI2MTMwMTM5WhcNMjYwOTI3MTMwMTM5WjAzMTEwLwYDVQQD EyhjNTRlZWYyOTc0OGIyYTg4ODEzOGUzNGRiZjdjMDI0MGEyYmZkMmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt47FEI/ONhnXVDmkVkUsbAFrMoNH 0Ljq/uAwSUiHJwH5IGXsAsCpNs4xEV8BYWPoYUhO55BS8tcy0eNhEcBt/AS1nw9V 24zPQuRyIPZakL4f3r2vQWYI1uDfhtfBJ2efpv2wfG/NXpK+Rra+8g26llhgH3mV 3tQuoxOxupF2hd8VoTDiMSIGGBoVpFyN8lHRbFH6gNuaOSYvOkU9NA1HXOGLStBd LrZMeGKwZZLWHUQQxDZFMvTGlFxPZmDoJ1j2VQAPPlFaLeOpVrgJhHLLhNzkYB5n +wdB1wb9l8bdl6PaMIZTVzZtUZGzRYoFF4x2QSjczPRXoFdP8sY7SEIj6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVO7yl0iyqIgTjjTb98AkCiv9L2MB8GA1UdIwQY MBaAFBIWq8xEyalVQM31sdxULsfRH+B6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEt YTA5NjJkOTk4ZTYwLzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEtYTA5NjJkOTk4ZTYw LzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSNLlalk E9EHRHS8skhAZXwtaTtkm/jUAnUtLnMI63GzlCtZMlC//BpD1Lj9jD2+t89etKWi 5YiPOac4ue0/AR8wSRYNjCwvdqDGY60LNFauAH2dCCifOT56bg159YkBE5aZOo+D 19zSGoTLFD8v7PuQVvOvuMNZCRjCyaox72mHpfVoh5qsT1IOX/Si7ptx6vahcxvY g3MGu7G6HNJXHDX/Hjnj3PGXFeLc8LrgCMjXrsG3dGFSJMhR0VyQnCEnZMn037D2 ksRgj6odmni9/qtThx8sZsp8VC5aT9LapjmMZAoAOFAKAifgIVx3VFrvoy6bpeLU 85MA/WP5bauaUA== -----END CERTIFICATE-----Generated at Sat Sep 26 16:37:07 2026 by rpki-client