$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft File: EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json) Hash identifier: cb4UxnwgiuG3aeHNFOR37UCe1YOyPH0zWwoysdV0d4s= Subject key identifier: 2A:33:2F:96:8D:05:A1:A8:18:4D:C7:3C:6D:F6:65:68:0C:5B:A7:6B Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 01A0B61B9289003625DBFF2F50FDC58D60C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft Manifest number: 1A67 Signing time: Fri 18 Sep 2026 20:00:55 +0000 Manifest this update: Fri 18 Sep 2026 20:00:55 +0000 Manifest next update: Sat 19 Sep 2026 20:00:55 +0000 Files and hashes: 1: 5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa (hash: c54pJsIlOXW3V5kUxXIRsQeC6LHU4KLVPi5buVcibgA=) 2: BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa (hash: PQjNFAf7Xm48R/Vs0yAXVjhN/qJRsvV6yxIaJlLeL4g=) 3: DM1I6XvxMm1oW563FlX35pgJc4I.asa (hash: bqI7LUo5gnXdb/YhK/ZUHJ9RBqqCl7/im+dzoqa/sRg=) 4: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: 6hdVcPwej/ZokWhzk1pAkns2aXBtQTSRqsrmSoSQOYA=) 5: H98sQWnP8G2xj5s4d1Vc8LtlcnE.asa (hash: 8GWEpBPTzGw/8qBdCLe/p4fnHXdFfa2DtPiMc2zduBk=) 6: Mmf9iM-_r8-8_72c9w_YpkVxNcc.asa (hash: k9FBf0lfIGm0CeilJQGz+ucSfZPD15fjm1nPffsNVfo=) 7: PDvQj2LXTs9s-VP7HUqBEd5JnG4.asa (hash: k2sGYwWP3giEPvO0KodpuGTokoksG0nwH43zEhuEcpA=) 8: Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa (hash: UzUZm1Wl75Vh5Ryan69XiXnKqwgvWJFWzAMetkj80e4=) 9: YnZmmQc5Cy0g5wDU0qFabNwALig.asa (hash: xXOI/K8NCOaj+/uJsMaVZT7Q7qH5hRdbbfr9TqbZWq4=) 10: lo5CuUn6KYthSSJ0JuTW6pdjhj8.asa (hash: eIPKlqsvVegPXqVxpzyVoeYK0GG8XvbcCgUygdwYgwU=) 11: rXAKYgvNCxNYHLVUiPKumhUgFdA.roa (hash: QwI/CURdPgAcJ5pZC863YtCdDvn1JRCVbK5OYuNsc/o=) 12: tTZ9S0dCWBDHik__qcwSp9QHBUI.roa (hash: cr8Hr9mBGK1u9J7drnWyVHlm9qTXNpv9oeN2OtqiV5Y=) 13: tsOLojc0SchxUUQXbch659fhNo8.asa (hash: VuwN0whQKrE0eMWnthSL2+DFF7CMuW4vDb5l1eTHZTs=) 14: zqNXKkeUMuTQJw20ff-7r2jRyGk.roa (hash: O2OK099UBcGWYmLHL0lDgCBhx041zWv28uU/Za00LT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:b6:1b:92:89:00:36:25:db:ff:2f:50:fd:c5:8d:60:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Sep 18 20:00:55 2026 GMT Not After : Sep 19 20:00:55 2026 GMT Subject: CN=2a332f968d05a1a8184dc73c6df665680c5ba76b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ed:96:0d:73:eb:b3:1f:49:d9:52:30:09:56: 87:d9:cf:67:b3:d5:27:c9:71:ef:a3:be:0a:4f:37: 99:b7:db:d2:40:8c:35:bc:b2:37:bd:f3:43:e0:77: a4:b7:71:21:96:fa:9d:40:83:b9:f3:40:2c:cc:32: d8:2d:66:1a:85:1c:8f:d4:8f:4d:83:08:dc:e4:31: 5d:8b:62:6d:5b:8b:0d:35:3f:e4:9e:ba:7d:9e:f6: 5d:69:5d:ce:88:76:27:15:39:4b:36:36:9e:07:d5: b0:3d:8c:8f:e0:c9:b8:09:70:79:85:b6:1d:14:5b: 4e:85:06:98:f6:22:ac:07:24:fd:f5:71:b0:c9:f2: 0d:22:1d:c2:04:63:d0:13:01:c9:9b:a3:a8:6b:54: d9:10:7b:ee:46:c5:43:07:8c:ea:a0:0c:d6:69:6f: b8:82:01:a6:c4:47:ba:f6:49:33:bc:4e:71:f7:7e: 6d:4c:54:82:ce:8e:b2:42:db:8f:ab:1a:6d:57:95: e5:59:fc:86:5b:95:01:51:39:b0:3f:57:3e:ca:e3: 73:ce:cb:15:7f:f7:e8:39:3d:18:3e:95:ff:57:65: c4:ad:3e:cd:61:74:84:c1:28:cf:a3:b9:9a:06:04: 05:41:e4:c4:c4:e1:54:0d:ce:44:3d:ab:b9:54:af: cb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:33:2F:96:8D:05:A1:A8:18:4D:C7:3C:6D:F6:65:68:0C:5B:A7:6B X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:9e:cc:2a:24:cc:42:ee:54:ab:ed:6e:04:c8:2f:3e:fe:d6: 3a:11:99:17:09:cf:12:1f:ce:69:52:53:c6:93:0f:a1:c9:44: 24:38:0e:1e:06:5d:92:63:ea:81:8b:24:40:05:5a:42:10:a1: 14:77:29:b5:41:64:9e:a2:9e:41:11:f0:06:f0:51:95:65:1e: 0c:89:2b:3e:6a:d4:6d:46:e9:83:e2:2a:ac:7e:69:e7:9f:b7: 78:81:3a:4d:aa:9a:c5:87:8c:e0:3b:23:f4:84:55:c4:16:61: c1:66:42:de:4b:5c:61:50:c2:cd:cd:09:18:49:97:dd:f1:51: db:26:e3:44:10:04:b7:e3:ba:f4:1b:26:5d:6b:38:d3:9e:c6: 3c:ab:ae:0b:54:a7:0b:b3:82:d0:3e:23:5b:f6:eb:c0:62:1c: 2b:d3:d6:5f:73:62:06:b2:a6:b1:d3:88:a7:75:0e:b8:34:cd: da:52:64:79:86:8b:aa:64:1e:ef:f8:cc:20:10:fd:4a:d1:3e: 42:2b:f5:7c:09:2e:65:e6:31:70:f3:f8:99:26:42:12:4c:f1: f1:b0:aa:b6:65:42:0c:b1:37:78:55:50:a3:1c:8b:5c:9d:93: 46:44:c1:6b:cb:cc:c2:a5:27:52:3d:be:2a:88:31:c4:dc:63: 58:35:9b:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC2G5KJADYl2/8vUP3FjWDDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjYwOTE4MjAwMDU1WhcNMjYwOTE5MjAwMDU1WjAzMTEwLwYDVQQD EygyYTMzMmY5NjhkMDVhMWE4MTg0ZGM3M2M2ZGY2NjU2ODBjNWJhNzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre2WDXPrsx9J2VIwCVaH2c9ns9Un yXHvo74KTzeZt9vSQIw1vLI3vfND4Hekt3EhlvqdQIO580AszDLYLWYahRyP1I9N gwjc5DFdi2JtW4sNNT/knrp9nvZdaV3OiHYnFTlLNjaeB9WwPYyP4Mm4CXB5hbYd FFtOhQaY9iKsByT99XGwyfINIh3CBGPQEwHJm6Ooa1TZEHvuRsVDB4zqoAzWaW+4 ggGmxEe69kkzvE5x935tTFSCzo6yQtuPqxptV5XlWfyGW5UBUTmwP1c+yuNzzssV f/foOT0YPpX/V2XErT7NYXSEwSjPo7maBgQFQeTExOFUDc5EPau5VK/LhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCozL5aNBaGoGE3HPG32ZWgMW6drMB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp57MKiTM Qu5Uq+1uBMgvPv7WOhGZFwnPEh/OaVJTxpMPoclEJDgOHgZdkmPqgYskQAVaQhCh FHcptUFknqKeQRHwBvBRlWUeDIkrPmrUbUbpg+IqrH5p55+3eIE6TaqaxYeM4Dsj 9IRVxBZhwWZC3ktcYVDCzc0JGEmX3fFR2ybjRBAEt+O69BsmXWs4057GPKuuC1Sn C7OC0D4jW/brwGIcK9PWX3NiBrKmsdOIp3UOuDTN2lJkeYaLqmQe7/jMIBD9StE+ Qiv1fAkuZeYxcPP4mSZCEkzx8bCqtmVCDLE3eFVQoxyLXJ2TRkTBa8vMwqUnUj2+ KogxxNxjWDWbxA== -----END CERTIFICATE-----Generated at Fri Sep 18 23:01:11 2026 by rpki-client