$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft File: EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json) Hash identifier: txBYNro7rkv0VJYMoooCFrvDqpSIe3xEwOYgp6UTin8= Subject key identifier: F8:2D:00:48:1C:A9:43:AF:53:28:F2:C0:F4:F4:D4:A1:ED:4F:AD:36 Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 019FCC6FDA785BB466006FD66605CEFCF73F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft Manifest number: 19EE Signing time: Tue 04 Aug 2026 11:01:50 +0000 Manifest this update: Tue 04 Aug 2026 11:01:50 +0000 Manifest next update: Wed 05 Aug 2026 11:01:50 +0000 Files and hashes: 1: 5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa (hash: c54pJsIlOXW3V5kUxXIRsQeC6LHU4KLVPi5buVcibgA=) 2: BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa (hash: PQjNFAf7Xm48R/Vs0yAXVjhN/qJRsvV6yxIaJlLeL4g=) 3: DM1I6XvxMm1oW563FlX35pgJc4I.asa (hash: bqI7LUo5gnXdb/YhK/ZUHJ9RBqqCl7/im+dzoqa/sRg=) 4: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: A292yAL0XCkPKGFIr1HAYqavXs/ZCYOd25I8ojsxEMo=) 5: H98sQWnP8G2xj5s4d1Vc8LtlcnE.asa (hash: 8GWEpBPTzGw/8qBdCLe/p4fnHXdFfa2DtPiMc2zduBk=) 6: Mmf9iM-_r8-8_72c9w_YpkVxNcc.asa (hash: k9FBf0lfIGm0CeilJQGz+ucSfZPD15fjm1nPffsNVfo=) 7: PDvQj2LXTs9s-VP7HUqBEd5JnG4.asa (hash: k2sGYwWP3giEPvO0KodpuGTokoksG0nwH43zEhuEcpA=) 8: Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa (hash: UzUZm1Wl75Vh5Ryan69XiXnKqwgvWJFWzAMetkj80e4=) 9: YnZmmQc5Cy0g5wDU0qFabNwALig.asa (hash: xXOI/K8NCOaj+/uJsMaVZT7Q7qH5hRdbbfr9TqbZWq4=) 10: lo5CuUn6KYthSSJ0JuTW6pdjhj8.asa (hash: eIPKlqsvVegPXqVxpzyVoeYK0GG8XvbcCgUygdwYgwU=) 11: rXAKYgvNCxNYHLVUiPKumhUgFdA.roa (hash: QwI/CURdPgAcJ5pZC863YtCdDvn1JRCVbK5OYuNsc/o=) 12: tTZ9S0dCWBDHik__qcwSp9QHBUI.roa (hash: cr8Hr9mBGK1u9J7drnWyVHlm9qTXNpv9oeN2OtqiV5Y=) 13: tsOLojc0SchxUUQXbch659fhNo8.asa (hash: VuwN0whQKrE0eMWnthSL2+DFF7CMuW4vDb5l1eTHZTs=) 14: zqNXKkeUMuTQJw20ff-7r2jRyGk.roa (hash: O2OK099UBcGWYmLHL0lDgCBhx041zWv28uU/Za00LT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Aug 2026 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:cc:6f:da:78:5b:b4:66:00:6f:d6:66:05:ce:fc:f7:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Aug 4 11:01:50 2026 GMT Not After : Aug 5 11:01:50 2026 GMT Subject: CN=f82d00481ca943af5328f2c0f4f4d4a1ed4fad36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f1:8c:6f:d3:ff:d4:ef:de:07:aa:1c:25:b9: 81:d5:08:7d:79:d3:f0:77:b0:ee:f7:28:e2:bc:50: b8:6c:e4:0c:8b:1e:62:61:56:5e:33:7b:ce:a4:8f: 8a:ec:ad:39:d1:15:ac:1e:6b:90:7f:4a:97:93:39: c9:f9:bb:91:27:39:3a:ee:1f:d7:0f:35:d6:4d:eb: d8:02:a5:af:45:1c:44:29:e7:a4:e5:e7:d4:4c:6b: 97:67:96:e1:e2:a7:ae:db:94:0c:42:d5:96:68:d0: 5f:2c:6b:3d:03:36:cc:1c:ba:9d:19:41:7c:1b:71: c8:c5:2c:a1:3b:c8:a2:3b:93:e8:41:54:f5:60:4e: 39:aa:67:66:44:24:40:e6:5d:db:9e:39:a5:02:3d: 69:4f:59:12:80:bb:5a:4a:73:91:4c:27:02:6a:1a: 17:a9:ce:2c:38:5d:70:98:74:5d:dc:7c:cd:26:b0: 1b:11:3b:38:ea:a8:bf:81:59:52:20:f3:39:07:96: f1:7a:19:9f:30:59:03:08:0a:bd:86:7c:f3:b8:6e: 45:fa:96:57:47:ee:72:02:95:19:17:fb:1e:20:99: fd:8e:5c:c6:b3:a5:a7:cd:b0:9b:04:9a:f7:9d:0c: d8:35:d5:80:03:be:dd:e7:58:ed:cd:4e:6a:db:69: 90:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2D:00:48:1C:A9:43:AF:53:28:F2:C0:F4:F4:D4:A1:ED:4F:AD:36 X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:04:1d:77:9d:96:81:45:c1:87:45:3e:0b:c9:60:a0:39:33: 92:b0:87:41:9f:6e:54:ac:b7:82:5d:78:ba:05:49:27:fa:18: f2:1a:91:79:49:fa:63:a8:10:fb:99:3a:2d:6d:00:b2:a4:65: c6:42:ef:79:01:5d:a9:9a:2f:b4:bf:16:ea:f2:7b:7f:ca:45: 79:86:7d:3f:b8:96:e9:86:e5:b8:e0:9d:3f:2e:53:7f:94:6b: 77:6b:97:a1:1d:9e:aa:9b:24:14:e9:5d:63:7e:2a:a7:9a:d2: 59:24:14:8f:b3:2a:15:a5:e1:5b:98:d2:bc:88:48:e9:7b:c9: e8:08:e5:02:95:44:d0:14:0e:13:1b:b9:27:57:37:fc:d2:47: 35:bd:c7:2c:1c:45:15:29:2e:5e:e0:8a:cc:4c:38:0d:1b:24: 03:33:f6:b4:f8:12:fe:2c:0e:d2:a9:68:25:6c:04:ba:34:a4: 34:01:bd:a4:d0:b2:1b:90:71:92:ee:51:63:95:c2:3d:f3:ab: 5e:49:4f:48:96:57:97:e8:ad:62:df:12:26:a1:94:92:28:7a: 25:1a:f1:b2:30:4e:8e:78:e9:2c:83:5f:a7:cd:1a:d7:b1:09: 89:53:aa:15:5b:cd:32:51:f8:22:a2:b2:a4:b7:44:f8:eb:4e: c9:a8:e9:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/Mb9p4W7RmAG/WZgXO/Pc/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjYwODA0MTEwMTUwWhcNMjYwODA1MTEwMTUwWjAzMTEwLwYDVQQD EyhmODJkMDA0ODFjYTk0M2FmNTMyOGYyYzBmNGY0ZDRhMWVkNGZhZDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvGMb9P/1O/eB6ocJbmB1Qh9edPw d7Du9yjivFC4bOQMix5iYVZeM3vOpI+K7K050RWsHmuQf0qXkznJ+buRJzk67h/X DzXWTevYAqWvRRxEKeek5efUTGuXZ5bh4qeu25QMQtWWaNBfLGs9AzbMHLqdGUF8 G3HIxSyhO8iiO5PoQVT1YE45qmdmRCRA5l3bnjmlAj1pT1kSgLtaSnORTCcCahoX qc4sOF1wmHRd3HzNJrAbETs46qi/gVlSIPM5B5bxehmfMFkDCAq9hnzzuG5F+pZX R+5yApUZF/seIJn9jlzGs6WnzbCbBJr3nQzYNdWAA77d51jtzU5q22mQ3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgtAEgcqUOvUyjywPT01KHtT602MB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuwQdd52W gUXBh0U+C8lgoDkzkrCHQZ9uVKy3gl14ugVJJ/oY8hqReUn6Y6gQ+5k6LW0AsqRl xkLveQFdqZovtL8W6vJ7f8pFeYZ9P7iW6YbluOCdPy5Tf5Rrd2uXoR2eqpskFOld Y34qp5rSWSQUj7MqFaXhW5jSvIhI6XvJ6AjlApVE0BQOExu5J1c3/NJHNb3HLBxF FSkuXuCKzEw4DRskAzP2tPgS/iwO0qloJWwEujSkNAG9pNCyG5Bxku5RY5XCPfOr XklPSJZXl+itYt8SJqGUkih6JRrxsjBOjnjpLINfp80a17EJiVOqFVvNMlH4IqKy pLdE+OtOyajp+A== -----END CERTIFICATE-----Generated at Tue Aug 4 13:59:35 2026 by rpki-client