$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft File: ER1oFDdScdGjy9EhVdsR0r1BqNM.mft (raw, json) Hash identifier: grSODlb6J87CEcDOkG06QeJpmoFuDAS/XLltsweGs2s= Subject key identifier: AF:FD:2B:54:C5:EE:D9:3A:6C:E9:2E:8B:48:02:67:71:36:5F:18:3E Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 01A0BE792DD426C264746F2151A87D2F81DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft Manifest number: 1928 Signing time: Sun 20 Sep 2026 11:00:07 +0000 Manifest this update: Sun 20 Sep 2026 11:00:07 +0000 Manifest next update: Mon 21 Sep 2026 11:00:07 +0000 Files and hashes: 1: 8ZTbVFN88ElJOvnxpynWkBywvcU.roa (hash: Zi7aMmYsFeMT6y4m/OMRvzAw9FlwVPNAsEeEWMyssQs=) 2: 9gyIdfYx-vxaH69AuzYIu8sS7ec.roa (hash: vsh4e/kwYxBt1mO0Ld2w2nU9VsbUvL0v+cSn3CZdKv4=) 3: D4HmthbydYoqExoa56VFIbe7J5A.roa (hash: 1gmVpoixHN/Zn+8HJ6YdrukA3JeRxcEeBWZ/2aGh+ps=) 4: DBNPe8eVrw7_1KUjzRRA33hX58Y.roa (hash: hYdptN3L/vz/3ch52LzC/IoTDQvky7D/anqUyA/QPOc=) 5: DKZJyriLpkX0P03xQILHD2FwZEo.roa (hash: x6vx2AQsWgf7sMGXLXxiRwrb7PArAVgKRPBlJd4ah10=) 6: ER1oFDdScdGjy9EhVdsR0r1BqNM.crl (hash: 3fa+DdCJSmFUNyKGuiXqA6PlkoiDQ/qfbdR9VTSXU3g=) 7: HRwCntz8pHEtM7UJXh-KwEbXi3w.roa (hash: CKUDXMyXov9Gbf/ygH+HewYMwNtReJO+UQotN2JyBXQ=) 8: Haim4aY9ShmCS1epcJRa3-rRRmM.roa (hash: AQeMZQUR+w1eyhT+kYpVEnNYoo0tXgoBt1LUUZT+/W4=) 9: Ka2f0_rG4AuXnvi8TQgXMBJzKOE.roa (hash: HTLBGDTB6awokEWRy6DjReQvfOLjCmwPODXPDvHGn+A=) 10: LdJkopqk4m9ubmHzk4T29FnhG7o.roa (hash: Qx8FwqyP4Rxw7vIMwqfqa4V2zeYK7+dz+yeOugc8QVI=) 11: S3K9bo4j9NjF6L9mhwIsz-LYyHg.roa (hash: FX7C0FNczXeRPZms4zyJ1OukTZNK4zd0GhG7vBTsBvg=) 12: UWgtqXah3liJx-awsYUK3XIS54c.roa (hash: nisX/PCjG49hPGc2ySAUn3J0MxV+pv8+T78d4GdNMSs=) 13: _d7ohj2Ako_tiSFSE9-jnGs0uoI.roa (hash: mf32LDbJ2Su5F5H62P0/F/PId5oq7GFGgkD8WKRwmPw=) 14: f5svUnEK1n30wRVLtixbJDS7pZM.roa (hash: sILbepz7GhK0jGMQ48sIN5LBYx9eYZB9voFGWkXvx60=) 15: iK87eJg7y-_rcG1D3z4FzaXgRNE.roa (hash: uVYEVS9koySJoZQhAK0q3w5qAE9/nwHY2ro0Er3WEZY=) 16: nXrADfBP6wNtRforv4w6KFdo1Ns.roa (hash: PAoowx6zHYeOj9TxBp8LwY6JFAj6/p0gXZ/G0XMc/dg=) 17: tDoaGy6SLh3swARR-izxiYVQMmU.roa (hash: lZCnqmwKcNoIj9hNP0txhfT3ExuUcH8dWLkUpGjDKzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 11:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:79:2d:d4:26:c2:64:74:6f:21:51:a8:7d:2f:81:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Sep 20 11:00:07 2026 GMT Not After : Sep 21 11:00:07 2026 GMT Subject: CN=affd2b54c5eed93a6ce92e8b48026771365f183e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:69:85:c8:9a:9b:32:5f:7b:b6:03:35:f5:27: fd:6d:f5:23:1b:e8:e0:58:cb:fc:b7:7e:fd:89:36: 2a:34:e5:ed:76:9c:f5:2c:1e:29:22:35:b3:3c:36: 56:46:8c:45:da:0b:83:7d:c7:f3:77:a6:59:96:cf: 5d:1c:b1:af:33:a3:11:1b:80:28:18:9f:33:cc:ab: b2:4d:0c:de:db:c8:bf:f2:a3:be:06:14:c5:b8:ed: e3:fc:ed:a3:b8:97:24:80:cd:01:c8:9e:06:30:39: d1:86:1c:54:87:98:e8:3e:05:65:63:72:e6:e8:ef: 48:ba:80:e3:5b:c6:46:5a:5a:c5:b5:af:cd:c7:59: db:9c:e6:0f:67:f5:70:a9:80:10:15:08:16:23:35: 49:0a:88:8e:8c:1f:f5:09:16:fc:29:c3:43:a3:c2: 2e:f9:55:df:f9:57:89:be:47:38:f2:42:ee:15:e1: 23:f2:c5:b4:41:dc:f1:41:b2:e4:8e:e4:9f:d3:92: dd:1a:5a:52:02:57:97:e3:a3:78:3f:1c:4e:0b:3c: 9e:18:f4:b1:24:61:4b:89:bc:c3:bf:e3:4f:1a:50: fd:10:05:a2:d8:88:8f:d4:50:09:1f:b1:92:0e:27: 93:3e:24:06:7b:8c:6d:89:19:f5:76:53:8e:72:50: 92:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FD:2B:54:C5:EE:D9:3A:6C:E9:2E:8B:48:02:67:71:36:5F:18:3E X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:89:77:fe:de:12:0d:58:7e:ec:53:87:4c:1e:e5:c3:a5:b1: d9:dd:54:de:e3:05:be:95:ff:c8:c5:65:b1:2e:d8:1e:b0:53: a3:0c:4a:2e:b9:8b:19:c0:79:f3:f2:4b:0b:c6:f5:16:71:5c: 20:e9:83:8a:38:5b:30:fc:2c:e4:b7:90:d4:76:f6:d2:4e:ed: f4:f7:15:bb:b7:ea:33:dc:4c:29:13:7b:49:3a:d2:96:3d:bd: d5:0d:81:99:4a:a8:d5:f4:bf:fe:67:ef:af:18:7c:75:79:02: 9e:74:88:7b:f8:fc:28:eb:d5:3e:33:4e:0e:b0:7d:47:c4:d5: 61:e0:ce:ba:12:f4:c0:0f:01:33:d9:7c:4e:9b:7c:9a:63:3a: 56:59:8c:38:a8:8b:75:80:4d:6f:41:8b:09:ee:11:2d:e6:cd: 09:65:d8:ab:51:b4:a6:b1:7d:fa:90:e4:9a:fd:d1:04:b6:2d: fb:37:f8:c2:84:be:77:a1:15:a5:90:ac:d3:48:53:ba:67:d4: 2f:fa:5b:cf:04:4a:0b:c1:90:d4:f9:ff:bb:a6:dc:de:cc:f9: a4:e0:7e:35:0d:86:e2:a6:b7:0d:45:d9:0f:64:a9:f2:63:86: 92:b6:71:51:3a:46:8d:2c:e3:b5:9f:11:22:1d:88:4a:39:67: 10:0d:4c:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+eS3UJsJkdG8hUah9L4HbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjYwOTIwMTEwMDA3WhcNMjYwOTIxMTEwMDA3WjAzMTEwLwYDVQQD EyhhZmZkMmI1NGM1ZWVkOTNhNmNlOTJlOGI0ODAyNjc3MTM2NWYxODNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GmFyJqbMl97tgM19Sf9bfUjG+jg WMv8t379iTYqNOXtdpz1LB4pIjWzPDZWRoxF2guDfcfzd6ZZls9dHLGvM6MRG4Ao GJ8zzKuyTQze28i/8qO+BhTFuO3j/O2juJckgM0ByJ4GMDnRhhxUh5joPgVlY3Lm 6O9IuoDjW8ZGWlrFta/Nx1nbnOYPZ/VwqYAQFQgWIzVJCoiOjB/1CRb8KcNDo8Iu +VXf+VeJvkc48kLuFeEj8sW0QdzxQbLkjuSf05LdGlpSAleX46N4PxxOCzyeGPSx JGFLibzDv+NPGlD9EAWi2IiP1FAJH7GSDieTPiQGe4xtiRn1dlOOclCSjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/9K1TF7tk6bOkui0gCZ3E2Xxg+MB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYl3/t4S DVh+7FOHTB7lw6Wx2d1U3uMFvpX/yMVlsS7YHrBTowxKLrmLGcB58/JLC8b1FnFc IOmDijhbMPws5LeQ1Hb20k7t9PcVu7fqM9xMKRN7STrSlj291Q2BmUqo1fS//mfv rxh8dXkCnnSIe/j8KOvVPjNODrB9R8TVYeDOuhL0wA8BM9l8Tpt8mmM6VlmMOKiL dYBNb0GLCe4RLebNCWXYq1G0prF9+pDkmv3RBLYt+zf4woS+d6EVpZCs00hTumfU L/pbzwRKC8GQ1Pn/u6bc3sz5pOB+NQ2G4qa3DUXZD2Sp8mOGkrZxUTpGjSzjtZ8R Ih2ISjlnEA1Mjw== -----END CERTIFICATE-----Generated at Sun Sep 20 19:29:24 2026 by rpki-client