$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft File: EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json) Hash identifier: ZdjPrcOhYAGbbWOSGK8Fr86zrxuTw6iFNpTIrs+yhy4= Subject key identifier: A7:8F:BC:55:20:FB:E4:0C:87:74:22:F9:CE:56:47:5B:F2:01:95:FD Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 019EDD2ED2D1E5513A488D9C64B156D0F8CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft Manifest number: 1972 Signing time: Fri 19 Jun 2026 00:01:33 +0000 Manifest this update: Fri 19 Jun 2026 00:01:33 +0000 Manifest next update: Sat 20 Jun 2026 00:01:33 +0000 Files and hashes: 1: 5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa (hash: c54pJsIlOXW3V5kUxXIRsQeC6LHU4KLVPi5buVcibgA=) 2: BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa (hash: PQjNFAf7Xm48R/Vs0yAXVjhN/qJRsvV6yxIaJlLeL4g=) 3: DM1I6XvxMm1oW563FlX35pgJc4I.asa (hash: bqI7LUo5gnXdb/YhK/ZUHJ9RBqqCl7/im+dzoqa/sRg=) 4: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: 3/gPCkA8ff7YKj/5hAxe0J1S0iK2lVoIRbYXNeCvLr8=) 5: H98sQWnP8G2xj5s4d1Vc8LtlcnE.asa (hash: 8GWEpBPTzGw/8qBdCLe/p4fnHXdFfa2DtPiMc2zduBk=) 6: Mmf9iM-_r8-8_72c9w_YpkVxNcc.asa (hash: k9FBf0lfIGm0CeilJQGz+ucSfZPD15fjm1nPffsNVfo=) 7: PDvQj2LXTs9s-VP7HUqBEd5JnG4.asa (hash: k2sGYwWP3giEPvO0KodpuGTokoksG0nwH43zEhuEcpA=) 8: Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa (hash: UzUZm1Wl75Vh5Ryan69XiXnKqwgvWJFWzAMetkj80e4=) 9: YnZmmQc5Cy0g5wDU0qFabNwALig.asa (hash: xXOI/K8NCOaj+/uJsMaVZT7Q7qH5hRdbbfr9TqbZWq4=) 10: lo5CuUn6KYthSSJ0JuTW6pdjhj8.asa (hash: eIPKlqsvVegPXqVxpzyVoeYK0GG8XvbcCgUygdwYgwU=) 11: rXAKYgvNCxNYHLVUiPKumhUgFdA.roa (hash: QwI/CURdPgAcJ5pZC863YtCdDvn1JRCVbK5OYuNsc/o=) 12: tTZ9S0dCWBDHik__qcwSp9QHBUI.roa (hash: cr8Hr9mBGK1u9J7drnWyVHlm9qTXNpv9oeN2OtqiV5Y=) 13: tsOLojc0SchxUUQXbch659fhNo8.asa (hash: VuwN0whQKrE0eMWnthSL2+DFF7CMuW4vDb5l1eTHZTs=) 14: zqNXKkeUMuTQJw20ff-7r2jRyGk.roa (hash: O2OK099UBcGWYmLHL0lDgCBhx041zWv28uU/Za00LT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Jun 2026 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:dd:2e:d2:d1:e5:51:3a:48:8d:9c:64:b1:56:d0:f8:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Jun 19 00:01:33 2026 GMT Not After : Jun 20 00:01:33 2026 GMT Subject: CN=a78fbc5520fbe40c877422f9ce56475bf20195fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:71:21:a5:76:4e:61:4f:2f:07:45:43:19:0d: 12:c3:34:81:af:0d:6f:58:9c:79:0a:15:b8:2a:c7: 72:d3:e8:0f:b2:bd:54:f6:c2:c5:4f:3c:82:72:ee: ee:95:1a:08:ca:84:f9:79:f4:63:fe:ce:ad:f4:0a: 4c:9a:48:c7:52:b6:2e:b9:99:60:7c:8a:70:78:6c: 43:d7:89:f6:d3:0b:a9:d7:93:a3:f0:01:6c:37:7a: 88:72:63:81:af:b4:af:a8:9d:ce:53:c1:13:a7:b8: 7b:99:e5:8d:39:b6:f0:fc:ca:13:0b:7a:93:47:c9: 1d:9c:21:91:63:70:d3:25:ad:6c:cf:e6:d3:7a:14: 99:38:24:14:59:1c:6e:40:b8:94:b1:b5:c7:8b:9b: bc:92:57:22:6a:99:b5:d3:c6:7d:0d:79:5c:5f:ef: fd:7d:d5:e4:83:48:a9:9a:be:d8:53:44:4f:31:0e: cd:09:73:b3:b5:27:5b:d9:42:37:0a:7d:52:22:bf: 8a:b5:2d:17:54:51:be:d2:3c:9c:5f:aa:8b:be:cd: 39:1e:4e:44:b9:ed:c9:6d:fa:28:80:c5:4b:38:31: 2f:77:04:cd:bd:d7:9f:ec:a2:ee:86:60:a3:1e:20: 46:33:e5:5b:fb:98:bd:8a:ce:e9:57:a6:a3:8b:ac: 38:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8F:BC:55:20:FB:E4:0C:87:74:22:F9:CE:56:47:5B:F2:01:95:FD X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:07:fa:40:37:82:5b:ff:58:4c:4e:23:5a:80:98:36:2a:98: 55:48:ef:07:1c:85:ab:9d:4f:b7:e7:4c:2d:7d:e1:46:67:ef: bf:a0:00:c8:9d:42:ef:d6:7e:05:54:93:bd:3b:1b:54:b8:6b: e2:93:04:43:b4:18:f4:b6:64:cb:85:a6:9b:f8:60:4e:e6:18: 5b:a1:32:bc:27:31:d8:b7:a2:df:dc:fd:1b:27:4d:57:14:f0: 77:a7:a3:89:e5:15:65:5e:9c:b2:5a:a1:1c:47:c6:14:c1:8d: ca:13:f6:06:d0:72:6d:bd:3f:46:65:2d:4a:a5:13:44:eb:e2: a7:f6:1b:0a:d3:ba:e9:8d:5f:3c:5b:a5:f9:83:c3:fb:87:ba: 7a:0f:65:39:82:30:33:ea:86:75:fd:41:cd:4a:b6:6d:a7:93: 70:97:05:0a:ec:53:cb:cf:6d:03:8e:01:20:2e:3a:02:1a:cf: 71:dc:79:29:cc:70:a0:30:18:ac:83:68:10:bd:a2:fc:b5:c8: fe:23:e2:96:52:ea:b2:d4:1b:90:87:6f:b5:d4:f0:7b:4c:c2: 2c:e2:fc:ac:bb:98:eb:84:26:2b:ed:fe:a6:19:2e:d7:b9:ef: e1:2e:c5:90:cc:ba:fd:6b:b4:6b:86:ee:ed:c6:0e:c8:90:0a: 1f:60:9b:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7dLtLR5VE6SI2cZLFW0PjOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjYwNjE5MDAwMTMzWhcNMjYwNjIwMDAwMTMzWjAzMTEwLwYDVQQD EyhhNzhmYmM1NTIwZmJlNDBjODc3NDIyZjljZTU2NDc1YmYyMDE5NWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynEhpXZOYU8vB0VDGQ0SwzSBrw1v WJx5ChW4Ksdy0+gPsr1U9sLFTzyCcu7ulRoIyoT5efRj/s6t9ApMmkjHUrYuuZlg fIpweGxD14n20wup15Oj8AFsN3qIcmOBr7SvqJ3OU8ETp7h7meWNObbw/MoTC3qT R8kdnCGRY3DTJa1sz+bTehSZOCQUWRxuQLiUsbXHi5u8klciapm108Z9DXlcX+/9 fdXkg0ipmr7YU0RPMQ7NCXOztSdb2UI3Cn1SIr+KtS0XVFG+0jycX6qLvs05Hk5E ue3JbfoogMVLODEvdwTNvdef7KLuhmCjHiBGM+Vb+5i9is7pV6aji6w45QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKePvFUg++QMh3Qi+c5WR1vyAZX9MB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgf6QDeC W/9YTE4jWoCYNiqYVUjvBxyFq51Pt+dMLX3hRmfvv6AAyJ1C79Z+BVSTvTsbVLhr 4pMEQ7QY9LZky4Wmm/hgTuYYW6EyvCcx2Lei39z9GydNVxTwd6ejieUVZV6cslqh HEfGFMGNyhP2BtBybb0/RmUtSqUTROvip/YbCtO66Y1fPFul+YPD+4e6eg9lOYIw M+qGdf1BzUq2baeTcJcFCuxTy89tA44BIC46AhrPcdx5KcxwoDAYrINoEL2i/LXI /iPillLqstQbkIdvtdTwe0zCLOL8rLuY64QmK+3+phku17nv4S7FkMy6/Wu0a4bu 7cYOyJAKH2CbzQ== -----END CERTIFICATE-----Generated at Fri Jun 19 03:37:14 2026 by rpki-client