$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft File: EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json) Hash identifier: 2bfeRgkiXMrF0kD4ZgNwNy0dd7YJXic/2dtrsdg1Y8g= Subject key identifier: B8:BD:18:CD:44:4E:07:9E:6D:A7:B9:25:B4:DF:3E:15:F6:AD:C3:69 Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 019DDC55DDB5A8972E040E6D7CCDD2E8F48B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft Manifest number: 18ED Signing time: Thu 30 Apr 2026 03:01:47 +0000 Manifest this update: Thu 30 Apr 2026 03:01:47 +0000 Manifest next update: Fri 01 May 2026 03:01:47 +0000 Files and hashes: 1: 5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa (hash: c54pJsIlOXW3V5kUxXIRsQeC6LHU4KLVPi5buVcibgA=) 2: BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa (hash: PQjNFAf7Xm48R/Vs0yAXVjhN/qJRsvV6yxIaJlLeL4g=) 3: DM1I6XvxMm1oW563FlX35pgJc4I.asa (hash: bqI7LUo5gnXdb/YhK/ZUHJ9RBqqCl7/im+dzoqa/sRg=) 4: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: fI2Xfl4+dKYTPAG2Y+bc12xolzkdY/hw09ZgDuyQmDw=) 5: H98sQWnP8G2xj5s4d1Vc8LtlcnE.asa (hash: 8GWEpBPTzGw/8qBdCLe/p4fnHXdFfa2DtPiMc2zduBk=) 6: Mmf9iM-_r8-8_72c9w_YpkVxNcc.asa (hash: k9FBf0lfIGm0CeilJQGz+ucSfZPD15fjm1nPffsNVfo=) 7: PDvQj2LXTs9s-VP7HUqBEd5JnG4.asa (hash: k2sGYwWP3giEPvO0KodpuGTokoksG0nwH43zEhuEcpA=) 8: Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa (hash: UzUZm1Wl75Vh5Ryan69XiXnKqwgvWJFWzAMetkj80e4=) 9: YnZmmQc5Cy0g5wDU0qFabNwALig.asa (hash: xXOI/K8NCOaj+/uJsMaVZT7Q7qH5hRdbbfr9TqbZWq4=) 10: lo5CuUn6KYthSSJ0JuTW6pdjhj8.asa (hash: eIPKlqsvVegPXqVxpzyVoeYK0GG8XvbcCgUygdwYgwU=) 11: rXAKYgvNCxNYHLVUiPKumhUgFdA.roa (hash: QwI/CURdPgAcJ5pZC863YtCdDvn1JRCVbK5OYuNsc/o=) 12: tTZ9S0dCWBDHik__qcwSp9QHBUI.roa (hash: cr8Hr9mBGK1u9J7drnWyVHlm9qTXNpv9oeN2OtqiV5Y=) 13: tsOLojc0SchxUUQXbch659fhNo8.asa (hash: VuwN0whQKrE0eMWnthSL2+DFF7CMuW4vDb5l1eTHZTs=) 14: zqNXKkeUMuTQJw20ff-7r2jRyGk.roa (hash: O2OK099UBcGWYmLHL0lDgCBhx041zWv28uU/Za00LT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 03:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:dc:55:dd:b5:a8:97:2e:04:0e:6d:7c:cd:d2:e8:f4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Apr 30 03:01:47 2026 GMT Not After : May 1 03:01:47 2026 GMT Subject: CN=b8bd18cd444e079e6da7b925b4df3e15f6adc369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1d:6c:5b:d5:5e:44:70:45:c9:75:85:15:59: 6b:f9:53:a1:eb:46:e1:e7:d4:b3:d8:fc:5f:c7:ce: be:30:6d:16:53:9a:24:82:87:72:d4:e5:84:be:cc: 2d:5e:c6:c6:c6:4e:f6:36:ed:99:6e:b5:ff:7b:65: 70:f3:d9:ca:81:f8:ff:40:f0:e6:4c:cb:b1:bb:46: 7e:1d:1f:10:49:a8:4b:4f:a4:59:83:cf:2a:d0:30: 19:bc:7e:9a:3a:78:0e:09:44:77:f7:b3:b3:81:ac: 6d:19:bf:9c:5e:b2:f2:b5:2d:d7:08:30:54:3a:20: dd:62:8a:db:85:c4:96:ba:34:5a:51:b0:a6:3e:c7: 0b:8b:94:67:dc:52:f9:a2:8b:43:79:27:6d:57:a1: 99:6d:fb:1f:05:0e:12:d1:6c:bc:50:9e:07:1e:9a: 57:c3:99:7a:9b:3b:20:e6:f1:17:e1:dd:dd:57:22: 74:fa:c5:ad:2a:d1:80:5a:d1:fd:25:1d:fb:3f:05: ed:a9:fb:d8:5b:94:6c:bc:6f:24:fa:4c:0e:34:39: 84:a2:f5:b9:ef:60:75:e2:89:16:e3:48:7e:e2:00: 99:06:55:96:6b:76:10:ea:97:63:f4:28:df:99:73: 79:9f:14:ef:ac:b4:92:22:90:42:bf:3c:fb:b3:bb: 98:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BD:18:CD:44:4E:07:9E:6D:A7:B9:25:B4:DF:3E:15:F6:AD:C3:69 X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e5:38:08:ae:9b:5b:d3:e2:0e:07:1b:47:48:90:85:58:17: db:1a:8b:0e:ef:32:d2:80:da:55:d9:57:9b:64:06:10:a0:be: 4b:dd:94:45:98:79:f2:9a:29:cd:bb:41:23:ef:5b:4f:92:e0: c8:85:c6:83:43:38:3d:e0:e8:e0:26:31:95:1c:fb:53:5f:02: 8f:4c:22:e4:6a:9e:4e:d7:2b:f2:ec:08:26:c1:45:4d:cc:1e: 15:6e:fe:9e:26:f5:f2:bb:73:5b:1c:65:55:6c:e2:a7:7b:9d: de:b0:e0:17:58:16:db:78:0c:83:8b:8e:05:8d:f5:b0:8e:62: e7:33:d4:aa:c9:ee:0f:7a:45:03:f7:2a:90:3b:a2:77:aa:39: 2a:35:d9:88:e8:c2:d0:8f:2a:17:68:6a:2a:0e:4a:a9:61:2d: d0:dd:89:5d:c6:f7:6a:02:4c:7d:8c:ef:72:ff:aa:75:04:7d: 08:9b:16:6d:dd:3f:1a:7e:18:d8:cc:03:cb:92:b1:29:32:b5: 0e:12:d1:82:d9:12:43:81:5d:5e:d7:ca:cd:73:32:6f:bd:21: 89:a0:be:5d:2b:58:14:b6:f5:dc:66:f0:96:2b:1a:c9:f5:f0: 31:7a:a3:e0:36:24:73:7d:d1:fd:87:99:e6:14:bd:f0:21:3c: 9f:c4:c6:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3cVd21qJcuBA5tfM3S6PSLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjYwNDMwMDMwMTQ3WhcNMjYwNTAxMDMwMTQ3WjAzMTEwLwYDVQQD EyhiOGJkMThjZDQ0NGUwNzllNmRhN2I5MjViNGRmM2UxNWY2YWRjMzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh1sW9VeRHBFyXWFFVlr+VOh60bh 59Sz2Pxfx86+MG0WU5okgody1OWEvswtXsbGxk72Nu2ZbrX/e2Vw89nKgfj/QPDm TMuxu0Z+HR8QSahLT6RZg88q0DAZvH6aOngOCUR397OzgaxtGb+cXrLytS3XCDBU OiDdYorbhcSWujRaUbCmPscLi5Rn3FL5ootDeSdtV6GZbfsfBQ4S0Wy8UJ4HHppX w5l6mzsg5vEX4d3dVyJ0+sWtKtGAWtH9JR37PwXtqfvYW5RsvG8k+kwONDmEovW5 72B14okW40h+4gCZBlWWa3YQ6pdj9CjfmXN5nxTvrLSSIpBCvzz7s7uYxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLi9GM1ETgeebae5JbTfPhX2rcNpMB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeU4CK6b W9PiDgcbR0iQhVgX2xqLDu8y0oDaVdlXm2QGEKC+S92URZh58popzbtBI+9bT5Lg yIXGg0M4PeDo4CYxlRz7U18Cj0wi5GqeTtcr8uwIJsFFTcweFW7+nib18rtzWxxl VWzip3ud3rDgF1gW23gMg4uOBY31sI5i5zPUqsnuD3pFA/cqkDuid6o5KjXZiOjC 0I8qF2hqKg5KqWEt0N2JXcb3agJMfYzvcv+qdQR9CJsWbd0/Gn4Y2MwDy5KxKTK1 DhLRgtkSQ4FdXtfKzXMyb70hiaC+XStYFLb13GbwlisayfXwMXqj4DYkc33R/YeZ 5hS98CE8n8TG2w== -----END CERTIFICATE-----Generated at Thu Apr 30 12:45:17 2026 by rpki-client