$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft File: ER1oFDdScdGjy9EhVdsR0r1BqNM.mft (raw, json) Hash identifier: mtKiTjrBH0TqTe5IN+R6Ze0kOEMpIsDvl4bxEfydqbU= Subject key identifier: 7A:A2:F8:1B:72:D6:92:BC:B3:F7:DE:1F:B5:12:91:4B:A3:E1:68:2E Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 019FA93E2427463EAFFDB07FB8E51FE51269 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft Manifest number: 1898 Signing time: Tue 28 Jul 2026 15:00:49 +0000 Manifest this update: Tue 28 Jul 2026 15:00:49 +0000 Manifest next update: Wed 29 Jul 2026 15:00:49 +0000 Files and hashes: 1: 8ZTbVFN88ElJOvnxpynWkBywvcU.roa (hash: Zi7aMmYsFeMT6y4m/OMRvzAw9FlwVPNAsEeEWMyssQs=) 2: 9gyIdfYx-vxaH69AuzYIu8sS7ec.roa (hash: vsh4e/kwYxBt1mO0Ld2w2nU9VsbUvL0v+cSn3CZdKv4=) 3: D4HmthbydYoqExoa56VFIbe7J5A.roa (hash: 1gmVpoixHN/Zn+8HJ6YdrukA3JeRxcEeBWZ/2aGh+ps=) 4: DKZJyriLpkX0P03xQILHD2FwZEo.roa (hash: x6vx2AQsWgf7sMGXLXxiRwrb7PArAVgKRPBlJd4ah10=) 5: ER1oFDdScdGjy9EhVdsR0r1BqNM.crl (hash: NUcRLkdPSWUnpmQ4bcJ9pBx0GjNQpIfZT29rzhMDTno=) 6: HRwCntz8pHEtM7UJXh-KwEbXi3w.roa (hash: CKUDXMyXov9Gbf/ygH+HewYMwNtReJO+UQotN2JyBXQ=) 7: Haim4aY9ShmCS1epcJRa3-rRRmM.roa (hash: AQeMZQUR+w1eyhT+kYpVEnNYoo0tXgoBt1LUUZT+/W4=) 8: Ka2f0_rG4AuXnvi8TQgXMBJzKOE.roa (hash: HTLBGDTB6awokEWRy6DjReQvfOLjCmwPODXPDvHGn+A=) 9: LdJkopqk4m9ubmHzk4T29FnhG7o.roa (hash: Qx8FwqyP4Rxw7vIMwqfqa4V2zeYK7+dz+yeOugc8QVI=) 10: S3K9bo4j9NjF6L9mhwIsz-LYyHg.roa (hash: FX7C0FNczXeRPZms4zyJ1OukTZNK4zd0GhG7vBTsBvg=) 11: UWgtqXah3liJx-awsYUK3XIS54c.roa (hash: nisX/PCjG49hPGc2ySAUn3J0MxV+pv8+T78d4GdNMSs=) 12: _d7ohj2Ako_tiSFSE9-jnGs0uoI.roa (hash: mf32LDbJ2Su5F5H62P0/F/PId5oq7GFGgkD8WKRwmPw=) 13: f5svUnEK1n30wRVLtixbJDS7pZM.roa (hash: sILbepz7GhK0jGMQ48sIN5LBYx9eYZB9voFGWkXvx60=) 14: iK87eJg7y-_rcG1D3z4FzaXgRNE.roa (hash: uVYEVS9koySJoZQhAK0q3w5qAE9/nwHY2ro0Er3WEZY=) 15: mcS4SdpuWVbabfdpCB_tOwct_TA.roa (hash: hcfOoUJHvls1DL90VCIcUIUdeQTL2YjVgbYPY6TdJAA=) 16: nXrADfBP6wNtRforv4w6KFdo1Ns.roa (hash: PAoowx6zHYeOj9TxBp8LwY6JFAj6/p0gXZ/G0XMc/dg=) 17: tDoaGy6SLh3swARR-izxiYVQMmU.roa (hash: lZCnqmwKcNoIj9hNP0txhfT3ExuUcH8dWLkUpGjDKzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:3e:24:27:46:3e:af:fd:b0:7f:b8:e5:1f:e5:12:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Jul 28 15:00:49 2026 GMT Not After : Jul 29 15:00:49 2026 GMT Subject: CN=7aa2f81b72d692bcb3f7de1fb512914ba3e1682e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b2:b6:26:67:23:a8:e7:49:33:76:46:c1:9f: 8f:c1:04:1c:90:53:dc:43:a8:d1:b5:68:91:1e:89: d6:a5:92:c9:e6:88:f1:02:5f:34:e7:04:f7:f8:30: 3d:eb:0f:5c:06:ca:86:ff:b5:d3:92:d8:8f:43:1f: 1f:3e:58:39:21:5f:e9:23:79:c2:f3:4d:03:e7:04: 6e:23:8f:13:f1:89:e3:4a:66:29:80:48:86:51:2d: e9:0c:0d:52:0d:be:64:80:d8:4a:af:a3:b6:26:bd: c8:78:5b:36:7e:06:5d:63:96:e9:04:84:0c:68:9f: 39:be:2e:75:84:eb:e9:ee:bf:a9:af:ec:5a:6c:bd: a3:b6:b0:7f:69:7c:64:3f:48:46:16:d0:eb:ba:c5: 8d:36:7e:b2:3c:f3:25:9a:6d:8b:1d:6f:b9:aa:91: c2:2b:39:a2:9d:35:d8:21:81:3e:09:8b:9c:a4:1e: 76:22:8e:15:58:ea:8c:cc:6d:74:25:1a:09:48:71: e4:7d:19:a5:f5:8c:50:80:2c:d5:7f:cf:03:c1:fe: 3d:78:c5:6f:1d:47:8c:37:14:d4:c1:4a:c9:81:a3: 30:1e:37:1d:a4:94:16:6b:fd:3e:90:ea:69:32:21: 73:4e:03:71:e3:70:03:07:32:38:a5:a7:49:67:63: c6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A2:F8:1B:72:D6:92:BC:B3:F7:DE:1F:B5:12:91:4B:A3:E1:68:2E X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:74:01:91:38:c0:03:19:bd:65:0a:88:8f:ba:a3:6e:4b:db: c7:a1:d5:da:6f:e4:3c:92:d5:dc:bc:6e:c1:33:13:9c:91:5f: 73:15:14:1e:ea:fb:15:65:9c:ab:32:5e:fd:52:0f:79:c6:33: e4:f5:16:52:04:21:a4:1a:91:ca:10:03:b7:56:51:7b:0b:07: 71:1a:27:bf:1c:a1:1c:c9:e3:d4:ca:8e:2f:f9:be:84:4a:b9: c7:27:65:7f:5c:3c:29:e8:39:4a:d6:4e:9e:64:53:81:42:46: a1:e2:ce:09:67:20:21:b5:0e:78:4c:2c:a6:17:ed:56:f5:e2: 63:59:63:fa:54:c6:06:93:7a:b3:74:f8:32:bb:86:d8:84:8b: e9:72:af:75:db:53:c6:57:16:f9:78:52:31:ad:4b:be:42:b6: 6f:72:16:e0:fc:ab:b1:9d:a9:be:75:c2:21:9b:70:41:f8:c8: 4a:4d:da:ca:44:ca:43:09:82:cc:79:9e:6f:1a:5e:79:96:f6: 87:3e:10:f2:ef:d4:9e:fe:3a:b0:4d:f3:fc:7b:cd:ca:16:3f: b8:59:c8:e4:9f:6e:76:52:46:a2:07:8a:ff:7b:1d:89:e7:03: 13:5b:85:ac:74:ac:a6:97:ca:fc:9f:c8:26:57:97:e3:73:9e: cf:84:2a:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pPiQnRj6v/bB/uOUf5RJpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjYwNzI4MTUwMDQ5WhcNMjYwNzI5MTUwMDQ5WjAzMTEwLwYDVQQD Eyg3YWEyZjgxYjcyZDY5MmJjYjNmN2RlMWZiNTEyOTE0YmEzZTE2ODJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbK2JmcjqOdJM3ZGwZ+PwQQckFPc Q6jRtWiRHonWpZLJ5ojxAl805wT3+DA96w9cBsqG/7XTktiPQx8fPlg5IV/pI3nC 800D5wRuI48T8YnjSmYpgEiGUS3pDA1SDb5kgNhKr6O2Jr3IeFs2fgZdY5bpBIQM aJ85vi51hOvp7r+pr+xabL2jtrB/aXxkP0hGFtDrusWNNn6yPPMlmm2LHW+5qpHC KzminTXYIYE+CYucpB52Io4VWOqMzG10JRoJSHHkfRml9YxQgCzVf88Dwf49eMVv HUeMNxTUwUrJgaMwHjcdpJQWa/0+kOppMiFzTgNx43ADBzI4padJZ2PGzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqi+Bty1pK8s/feH7USkUuj4WguMB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3QBkTjA Axm9ZQqIj7qjbkvbx6HV2m/kPJLV3LxuwTMTnJFfcxUUHur7FWWcqzJe/VIPecYz 5PUWUgQhpBqRyhADt1ZRewsHcRonvxyhHMnj1MqOL/m+hEq5xydlf1w8Keg5StZO nmRTgUJGoeLOCWcgIbUOeEwsphftVvXiY1lj+lTGBpN6s3T4MruG2ISL6XKvddtT xlcW+XhSMa1LvkK2b3IW4PyrsZ2pvnXCIZtwQfjISk3aykTKQwmCzHmebxpeeZb2 hz4Q8u/Unv46sE3z/HvNyhY/uFnI5J9udlJGogeK/3sdiecDE1uFrHSsppfK/J/I JleX43Oez4Qqcw== -----END CERTIFICATE-----Generated at Tue Jul 28 18:13:47 2026 by rpki-client