$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft File: AOT2p3Not87P5nIgtDZXax4Aiuw.mft (raw, json) Hash identifier: 1U9Aa7YaJLIfEWecCkb2ldycOnYR4ULBAMbLoujMq68= Subject key identifier: 23:DB:FD:AA:C2:A1:9F:92:07:5A:39:8F:96:43:A1:43:93:2B:8D:E2 Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec Certificate serial: 01A1A638948E3E06393D52A383E11DA5B6D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft Manifest number: 1BEC Signing time: Wed 04 Nov 2026 11:01:28 +0000 Manifest this update: Wed 04 Nov 2026 11:01:28 +0000 Manifest next update: Thu 05 Nov 2026 11:01:28 +0000 Files and hashes: 1: 1-7-GRl1DpJL9MX_Eh7vVlgQAtds.roa (hash: qBQ+Yv34RT+76LqwEUvZMWK4vq87p/Tm5N2E03sJUtE=) 2: AOT2p3Not87P5nIgtDZXax4Aiuw.crl (hash: yljJeUs/iven0SuEisuRM93qPO4paDqgqXzfzQcEzRY=) 3: CP1700xQhoIo0eqZb96w49fwMZU.roa (hash: FhGMMmXWb4O7zbwANRuKCF/ES8PwzOmEkZV99iTN5xU=) 4: MQ0e7OQgina0hHLbzkJJI7ocRMY.roa (hash: lYlPT7y2KTJ0qjKzQaLtDJlIn+M8xo18ZCJuzXN583Y=) 5: VcGOwSBLa8MeclenBwYCnJTkc6Q.roa (hash: ZpKqr8OOjlncepBvaT8KeQio9IThw68qGgH8coHhuVI=) 6: Xz8NNPcwcbory7as6Ave10IA4JA.roa (hash: z5bOCkGPcZVWVT8GO8Oi8SD61/vp8fiHd8FKi8PaCyo=) 7: gF0x-IgTBvCJCERAByN93AH9MjM.roa (hash: f9L9sZ2MryoARd93KF5kcE6ImNuSL3mNiWJ8yZc3d58=) 8: hA7LNPaezAwAsnv8p24InC1StUs.roa (hash: sgot3XzV393nfZR0qz24zPh8wm14Ry5Q6R+/B3dzmWI=) 9: hGF5HckbV_mO1zNnnUvLaxvGgg0.roa (hash: LswWVKDsb8V0ubfBEeUCi7BkiOP6J97pjosqCGNORUk=) 10: k6KPIXf1uYY1QuzUIH-eQtuHJNo.roa (hash: 8jqMzAY0+5jv1lPwZtcaPgmkBF2JpNlgfXRABS0//MM=) 11: oPPgaBYxfthIjxyRNKKvuQhADcA.roa (hash: vJpx4imZl2f0ZsJVLjSi4WZMmzQUNNlQIXHfoEUu3/k=) 12: vYhb6AGc-xDZmFDTEAzyKLdtLN8.roa (hash: ugbCx0tJXbSqbm0/IFdHYf2zCeC58MxvvJnLXGdXzrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:a6:38:94:8e:3e:06:39:3d:52:a3:83:e1:1d:a5:b6:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec Validity Not Before: Nov 4 11:01:28 2026 GMT Not After : Nov 5 11:01:28 2026 GMT Subject: CN=23dbfdaac2a19f92075a398f9643a143932b8de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d3:15:b5:ae:e3:1d:90:27:75:75:cf:6c:fc: 7e:d5:a0:c9:67:ad:74:ff:60:c9:0c:9c:13:a7:7b: b9:c6:b2:0a:1d:bd:4f:07:df:2f:20:ee:e8:04:b5: 9b:ed:59:88:0d:87:f6:7f:de:f3:55:a1:d9:94:9b: 09:61:de:4a:35:ed:37:84:eb:90:80:22:32:48:43: 64:85:16:ca:c5:c3:bf:9a:81:1b:3c:f1:8b:a8:c9: 4d:74:38:09:e8:0a:8e:ff:29:4f:87:ef:7e:4f:fc: 91:85:06:61:3d:0c:bc:1a:47:3d:80:69:ab:6e:12: d4:33:47:9b:6d:c1:c7:48:d0:f8:2a:8c:36:bf:ac: bf:1d:f8:11:b5:17:72:bc:ef:b9:a0:98:0a:96:15: c0:54:a6:56:84:fd:cf:b8:bf:de:0b:83:45:61:92: 01:44:70:a7:62:d2:17:a2:9e:d2:03:3a:0e:62:9e: b2:6e:9b:10:1f:ce:75:ff:48:0e:7f:08:b2:82:09: f4:e8:f3:df:f5:0b:a4:8d:b5:cb:02:79:ce:90:30: 12:52:d9:fc:d7:c6:0e:dd:69:83:cc:60:db:52:3d: 5c:51:b8:da:41:37:eb:62:5f:4e:9b:47:99:29:1c: ed:4e:15:31:63:e7:1d:0b:35:63:ba:5f:dd:5c:f7: b6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DB:FD:AA:C2:A1:9F:92:07:5A:39:8F:96:43:A1:43:93:2B:8D:E2 X509v3 Authority Key Identifier: keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:e7:1c:25:52:65:5d:88:a8:0c:74:19:78:b0:77:65:c1:31: 05:04:a6:36:78:ea:0d:fa:90:9f:56:a6:cf:c3:df:2a:50:58: be:d8:a0:24:c7:91:49:1b:1f:dd:80:6e:4e:50:0b:d5:cd:49: 60:a2:63:e1:14:80:37:5b:3b:41:40:e3:f8:48:0d:2d:3d:7d: 89:ba:10:ac:ef:84:f0:bb:b2:aa:47:3a:46:3a:05:ab:b2:58: 8b:c3:f8:74:71:e4:bc:52:8c:e2:13:22:95:f4:4b:72:1c:8e: 77:87:1d:ba:76:db:b7:8d:36:2f:de:c9:55:4c:5c:eb:4a:0a: e5:af:99:e7:ba:25:4e:9d:41:66:56:99:34:c7:f5:ab:1e:68: 89:f5:7c:dc:32:40:19:57:d3:3d:77:d6:d6:ef:e1:76:90:db: 25:5c:08:05:af:e4:8c:0e:66:a6:95:51:ee:e2:e9:cb:6c:d4: 12:e2:c5:34:04:c2:eb:3c:42:fd:f3:27:f5:85:f8:50:96:33: 9f:94:72:7c:8d:c2:89:c6:47:62:79:8f:97:b4:73:90:97:40: 13:3c:2e:58:66:db:6b:2b:ff:65:7d:93:71:d3:d5:0b:20:34: c0:91:57:bf:38:94:43:d5:b7:bc:77:5f:82:a6:d2:38:03:22: 26:9f:db:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGmOJSOPgY5PVKjg+EdpbbRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw MDhhZWMwHhcNMjYxMTA0MTEwMTI4WhcNMjYxMTA1MTEwMTI4WjAzMTEwLwYDVQQD EygyM2RiZmRhYWMyYTE5ZjkyMDc1YTM5OGY5NjQzYTE0MzkzMmI4ZGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tMVta7jHZAndXXPbPx+1aDJZ610 /2DJDJwTp3u5xrIKHb1PB98vIO7oBLWb7VmIDYf2f97zVaHZlJsJYd5KNe03hOuQ gCIySENkhRbKxcO/moEbPPGLqMlNdDgJ6AqO/ylPh+9+T/yRhQZhPQy8Gkc9gGmr bhLUM0ebbcHHSND4Kow2v6y/HfgRtRdyvO+5oJgKlhXAVKZWhP3PuL/eC4NFYZIB RHCnYtIXop7SAzoOYp6ybpsQH851/0gOfwiyggn06PPf9QukjbXLAnnOkDASUtn8 18YO3WmDzGDbUj1cUbjaQTfrYl9Om0eZKRztThUxY+cdCzVjul/dXPe2qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPb/arCoZ+SB1o5j5ZDoUOTK43iMB8GA1UdIwQY MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt YjA3ZDg0MTZhZTRhLzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAruccJVJl XYioDHQZeLB3ZcExBQSmNnjqDfqQn1amz8PfKlBYvtigJMeRSRsf3YBuTlAL1c1J YKJj4RSAN1s7QUDj+EgNLT19iboQrO+E8Luyqkc6RjoFq7JYi8P4dHHkvFKM4hMi lfRLchyOd4cdunbbt402L97JVUxc60oK5a+Z57olTp1BZlaZNMf1qx5oifV83DJA GVfTPXfW1u/hdpDbJVwIBa/kjA5mppVR7uLpy2zUEuLFNATC6zxC/fMn9YX4UJYz n5RyfI3CicZHYnmPl7RzkJdAEzwuWGbbayv/ZX2TcdPVCyA0wJFXvziUQ9W3vHdf gqbSOAMiJp/bVw== -----END CERTIFICATE-----Generated at Wed Nov 4 18:52:15 2026 by rpki-client