$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft File: EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json) Hash identifier: hNjfJVFt5iAFfJtpkEaH9VAdsIqTmMVwgFIgqZ5PVUQ= Subject key identifier: 77:2F:9C:D8:FF:15:30:0C:BE:4C:8F:F6:41:4A:7D:FD:AA:F6:77:D1 Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 01A1DF839486AA99907193BC991F54947FDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft Manifest number: 1B01 Signing time: Sun 15 Nov 2026 14:01:44 +0000 Manifest this update: Sun 15 Nov 2026 14:01:44 +0000 Manifest next update: Mon 16 Nov 2026 14:01:44 +0000 Files and hashes: 1: 5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa (hash: c54pJsIlOXW3V5kUxXIRsQeC6LHU4KLVPi5buVcibgA=) 2: BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa (hash: PQjNFAf7Xm48R/Vs0yAXVjhN/qJRsvV6yxIaJlLeL4g=) 3: DM1I6XvxMm1oW563FlX35pgJc4I.asa (hash: bqI7LUo5gnXdb/YhK/ZUHJ9RBqqCl7/im+dzoqa/sRg=) 4: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: ZDiZm3/q6ZalDAOyHWVpS5CbMjCYNGvD4vK5nn/EDiA=) 5: H98sQWnP8G2xj5s4d1Vc8LtlcnE.asa (hash: 8GWEpBPTzGw/8qBdCLe/p4fnHXdFfa2DtPiMc2zduBk=) 6: Mmf9iM-_r8-8_72c9w_YpkVxNcc.asa (hash: k9FBf0lfIGm0CeilJQGz+ucSfZPD15fjm1nPffsNVfo=) 7: PDvQj2LXTs9s-VP7HUqBEd5JnG4.asa (hash: k2sGYwWP3giEPvO0KodpuGTokoksG0nwH43zEhuEcpA=) 8: Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa (hash: UzUZm1Wl75Vh5Ryan69XiXnKqwgvWJFWzAMetkj80e4=) 9: YnZmmQc5Cy0g5wDU0qFabNwALig.asa (hash: xXOI/K8NCOaj+/uJsMaVZT7Q7qH5hRdbbfr9TqbZWq4=) 10: lo5CuUn6KYthSSJ0JuTW6pdjhj8.asa (hash: eIPKlqsvVegPXqVxpzyVoeYK0GG8XvbcCgUygdwYgwU=) 11: rXAKYgvNCxNYHLVUiPKumhUgFdA.roa (hash: QwI/CURdPgAcJ5pZC863YtCdDvn1JRCVbK5OYuNsc/o=) 12: tTZ9S0dCWBDHik__qcwSp9QHBUI.roa (hash: cr8Hr9mBGK1u9J7drnWyVHlm9qTXNpv9oeN2OtqiV5Y=) 13: tsOLojc0SchxUUQXbch659fhNo8.asa (hash: VuwN0whQKrE0eMWnthSL2+DFF7CMuW4vDb5l1eTHZTs=) 14: zqNXKkeUMuTQJw20ff-7r2jRyGk.roa (hash: O2OK099UBcGWYmLHL0lDgCBhx041zWv28uU/Za00LT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 12:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:df:83:94:86:aa:99:90:71:93:bc:99:1f:54:94:7f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Nov 15 14:01:44 2026 GMT Not After : Nov 16 14:01:44 2026 GMT Subject: CN=772f9cd8ff15300cbe4c8ff6414a7dfdaaf677d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:50:43:e4:18:7d:9c:9e:f4:c4:68:e4:ce:72: f7:1b:0e:ba:58:96:0c:1c:a2:da:47:37:73:55:42: 00:52:b6:33:0c:4f:1b:16:f4:2c:f0:10:98:64:f8: 02:fb:82:c1:37:88:92:d8:0a:27:06:d9:34:b3:4d: ce:74:c6:bb:30:1d:91:d6:db:27:7e:3d:38:c0:7e: 17:0d:18:4e:14:f8:58:a5:d1:d5:14:47:fa:0a:18: c9:e5:70:2e:7d:67:cc:04:22:87:43:64:03:de:d3: 41:d3:9a:a2:c5:ba:ff:1e:9a:c0:2b:2f:1f:38:35: 3c:1b:d5:91:b4:fe:e0:3d:0d:93:7b:1b:1b:8e:3b: e2:c8:8f:92:4c:eb:bb:c0:29:c5:12:7d:78:19:b6: fd:cf:41:c2:ca:44:2e:2b:b2:09:aa:02:9b:1c:fe: f8:fd:25:21:96:12:1d:ae:1c:3b:4d:55:ae:09:d8: 26:9c:62:fd:3d:9b:bd:5d:74:93:5a:5d:4e:a1:00: 14:a6:9e:23:32:72:96:bb:54:e6:01:22:11:9e:a0: d6:a7:5e:0f:d2:c7:fe:9a:81:09:e4:d3:1c:78:5d: 11:27:2a:53:8a:bd:cd:1f:14:a5:bc:d1:9e:ed:b0: 38:2b:f2:1f:b6:fd:d7:5f:32:7c:7b:5d:81:cb:84: 93:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2F:9C:D8:FF:15:30:0C:BE:4C:8F:F6:41:4A:7D:FD:AA:F6:77:D1 X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:50:0b:1b:c9:e0:64:a7:50:71:18:08:54:c1:77:f6:d9:e6: 51:05:c6:1f:2f:6d:00:07:82:d4:36:ab:7d:a8:ae:66:db:29: c1:22:25:f0:c2:aa:02:08:79:b1:54:68:41:a4:0d:af:92:a5: fe:d0:1f:75:d2:ef:89:95:8e:fe:da:8c:bf:e0:c5:37:5f:a1: 10:d7:51:e1:c5:df:8c:1e:06:5c:36:0d:5f:10:d8:04:a6:55: 7e:60:63:97:a6:13:74:b0:24:7a:cc:6a:72:09:ed:a1:4d:ec: ba:36:42:35:bd:ce:45:57:95:69:ac:0f:b8:79:af:9f:94:6e: a9:5b:d6:b1:37:e6:86:f0:c5:6d:88:ab:f6:47:86:24:4c:bd: 6b:89:41:f9:cb:19:35:d6:94:80:93:46:81:3d:fe:ff:56:49: ca:23:92:b8:b1:2f:41:bb:11:b0:50:24:5a:3f:fd:8e:86:a7: ec:c3:cd:2a:12:de:9d:a9:64:00:38:1b:21:97:0b:22:3a:74: 9d:4b:b1:64:2f:fd:71:f5:b6:70:e7:d5:79:7a:9f:8a:d1:07: 6b:7c:4d:32:54:fc:6f:16:e8:0a:a1:89:66:4b:d7:de:8c:8c: d6:82:1e:31:ec:5a:78:d4:bd:31:4d:ff:cf:45:09:52:a3:31: f4:d9:0e:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHfg5SGqpmQcZO8mR9UlH/eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjYxMTE1MTQwMTQ0WhcNMjYxMTE2MTQwMTQ0WjAzMTEwLwYDVQQD Eyg3NzJmOWNkOGZmMTUzMDBjYmU0YzhmZjY0MTRhN2RmZGFhZjY3N2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FBD5Bh9nJ70xGjkznL3Gw66WJYM HKLaRzdzVUIAUrYzDE8bFvQs8BCYZPgC+4LBN4iS2AonBtk0s03OdMa7MB2R1tsn fj04wH4XDRhOFPhYpdHVFEf6ChjJ5XAufWfMBCKHQ2QD3tNB05qixbr/HprAKy8f ODU8G9WRtP7gPQ2TexsbjjviyI+STOu7wCnFEn14Gbb9z0HCykQuK7IJqgKbHP74 /SUhlhIdrhw7TVWuCdgmnGL9PZu9XXSTWl1OoQAUpp4jMnKWu1TmASIRnqDWp14P 0sf+moEJ5NMceF0RJypTir3NHxSlvNGe7bA4K/Iftv3XXzJ8e12By4STQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcvnNj/FTAMvkyP9kFKff2q9nfRMB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFALG8ng ZKdQcRgIVMF39tnmUQXGHy9tAAeC1DarfaiuZtspwSIl8MKqAgh5sVRoQaQNr5Kl /tAfddLviZWO/tqMv+DFN1+hENdR4cXfjB4GXDYNXxDYBKZVfmBjl6YTdLAkesxq cgntoU3sujZCNb3ORVeVaawPuHmvn5RuqVvWsTfmhvDFbYir9keGJEy9a4lB+csZ NdaUgJNGgT3+/1ZJyiOSuLEvQbsRsFAkWj/9joan7MPNKhLenalkADgbIZcLIjp0 nUuxZC/9cfW2cOfVeXqfitEHa3xNMlT8bxboCqGJZkvX3oyM1oIeMexaeNS9MU3/ z0UJUqMx9NkOKg== -----END CERTIFICATE-----Generated at Sun Nov 15 20:52:44 2026 by rpki-client