$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft File: AOT2p3Not87P5nIgtDZXax4Aiuw.mft (raw, json) Hash identifier: I9orEu72swL2JVOmnnMRjWsb/HtMpFhce3RWWGNbziM= Subject key identifier: 8F:37:A9:E5:B4:4F:2B:07:60:F3:92:55:2B:52:24:02:81:2E:F0:16 Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec Certificate serial: 01A0B5AD83BA8099E987328DFB876FAF5900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft Manifest number: 1B6F Signing time: Fri 18 Sep 2026 18:00:42 +0000 Manifest this update: Fri 18 Sep 2026 18:00:42 +0000 Manifest next update: Sat 19 Sep 2026 18:00:42 +0000 Files and hashes: 1: 1-7-GRl1DpJL9MX_Eh7vVlgQAtds.roa (hash: qBQ+Yv34RT+76LqwEUvZMWK4vq87p/Tm5N2E03sJUtE=) 2: AOT2p3Not87P5nIgtDZXax4Aiuw.crl (hash: pnMCi/zoHU4b1dRTUJdjK4XhyIR2HUDEWVhHtcKWcaY=) 3: CP1700xQhoIo0eqZb96w49fwMZU.roa (hash: FhGMMmXWb4O7zbwANRuKCF/ES8PwzOmEkZV99iTN5xU=) 4: Iz8oQHvYY4N1cu4pgE3299ogM34.roa (hash: GTn6Y+DWEw4+IcATVORnDqgcpHWD0i8V9c7BBTnRM3U=) 5: MQ0e7OQgina0hHLbzkJJI7ocRMY.roa (hash: lYlPT7y2KTJ0qjKzQaLtDJlIn+M8xo18ZCJuzXN583Y=) 6: VcGOwSBLa8MeclenBwYCnJTkc6Q.roa (hash: ZpKqr8OOjlncepBvaT8KeQio9IThw68qGgH8coHhuVI=) 7: Xz8NNPcwcbory7as6Ave10IA4JA.roa (hash: z5bOCkGPcZVWVT8GO8Oi8SD61/vp8fiHd8FKi8PaCyo=) 8: gF0x-IgTBvCJCERAByN93AH9MjM.roa (hash: f9L9sZ2MryoARd93KF5kcE6ImNuSL3mNiWJ8yZc3d58=) 9: hA7LNPaezAwAsnv8p24InC1StUs.roa (hash: sgot3XzV393nfZR0qz24zPh8wm14Ry5Q6R+/B3dzmWI=) 10: hGF5HckbV_mO1zNnnUvLaxvGgg0.roa (hash: LswWVKDsb8V0ubfBEeUCi7BkiOP6J97pjosqCGNORUk=) 11: oPPgaBYxfthIjxyRNKKvuQhADcA.roa (hash: vJpx4imZl2f0ZsJVLjSi4WZMmzQUNNlQIXHfoEUu3/k=) 12: psdxNS9e9UAm4jnMurOBj_7r3SE.roa (hash: DmgbB+oJGANiMlAsSILkh1J4OQmbWXdSoCr006Xmwis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:b5:ad:83:ba:80:99:e9:87:32:8d:fb:87:6f:af:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec Validity Not Before: Sep 18 18:00:42 2026 GMT Not After : Sep 19 18:00:42 2026 GMT Subject: CN=8f37a9e5b44f2b0760f392552b522402812ef016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:0b:e9:b0:60:40:9a:ff:c4:df:40:46:7d: 3e:8c:6d:77:b1:eb:51:79:9b:47:9b:1d:0b:9d:06: 55:01:be:e9:cd:fb:67:41:02:7c:f1:24:93:51:89: 48:26:29:2d:95:2e:b5:78:b8:86:41:3b:8a:4c:cf: ab:53:e0:9e:a9:c6:f8:97:50:b5:27:77:2d:25:41: b5:e5:0a:4d:d5:d5:b3:f7:b0:79:0f:ec:a6:24:58: 8f:25:2b:22:0b:3f:4d:81:30:de:49:ff:e0:56:1a: 30:d6:9d:b3:6b:a6:9c:01:f4:bb:c5:1c:98:91:88: 2e:9c:92:53:74:ff:5c:b5:4d:85:5d:92:8b:53:1c: fa:a9:86:2d:9a:09:b6:b6:be:0c:c7:39:bb:51:70: 84:03:92:30:27:4f:ea:23:08:45:4e:44:96:24:c8: bc:4a:92:31:ad:9a:0f:ae:59:2e:86:13:d8:42:55: a8:aa:51:c6:2b:60:f6:8e:e9:9d:81:59:79:be:53: 48:85:2c:65:b0:fe:12:98:de:39:f5:33:e7:de:66: 47:b0:80:01:5e:f3:b5:7b:59:86:8e:0e:ad:9e:b4: 6e:79:3e:f6:ec:7f:ab:db:0d:0a:dc:1f:3d:98:12: 4a:f9:4d:14:27:f7:5a:58:b5:61:d9:be:80:61:d4: d9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:37:A9:E5:B4:4F:2B:07:60:F3:92:55:2B:52:24:02:81:2E:F0:16 X509v3 Authority Key Identifier: keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:77:3d:18:4f:52:c4:b1:64:33:e4:1d:86:57:a0:c5:fb:42: ae:b6:78:17:41:2d:86:79:7a:97:7d:f0:ea:32:70:f6:22:b9: 04:69:58:6e:ad:5b:ef:8b:82:6a:59:87:ea:9e:73:94:b1:f8: 42:9d:9d:90:2c:16:54:df:77:52:cf:90:84:f3:7e:ff:33:23: 71:29:57:84:d1:87:79:0a:5c:b1:60:d9:d7:51:21:41:0b:cc: 96:b4:ba:07:a2:92:52:02:54:a0:7a:0b:04:b5:b6:6e:20:3e: b9:3e:e0:4f:d6:94:c2:e9:d1:8a:5f:16:91:97:ef:43:66:05: 39:e1:2f:78:be:c2:39:c1:45:75:75:24:f2:9f:06:aa:34:f1: 39:1d:66:82:1b:07:21:34:33:d7:47:d8:f3:a9:e7:4e:9d:cc: 40:8b:5e:12:69:e9:27:2a:c3:06:9e:dd:85:2b:85:af:5c:1c: 53:c4:f7:bd:01:02:b6:e9:53:17:8d:a4:8d:47:69:c8:06:9a: 74:e6:ad:c3:3c:7e:89:51:61:fc:dc:cc:2d:42:9f:42:44:29: d9:4f:ca:08:b2:24:50:60:89:6c:d6:18:bd:62:27:f6:8f:37: ec:da:2e:5c:bd:72:a7:ad:2b:49:38:f1:3d:68:6a:d3:a4:52: 8b:d3:f7:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC1rYO6gJnphzKN+4dvr1kAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw MDhhZWMwHhcNMjYwOTE4MTgwMDQyWhcNMjYwOTE5MTgwMDQyWjAzMTEwLwYDVQQD Eyg4ZjM3YTllNWI0NGYyYjA3NjBmMzkyNTUyYjUyMjQwMjgxMmVmMDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4sL6bBgQJr/xN9ARn0+jG13setR eZtHmx0LnQZVAb7pzftnQQJ88SSTUYlIJiktlS61eLiGQTuKTM+rU+Ceqcb4l1C1 J3ctJUG15QpN1dWz97B5D+ymJFiPJSsiCz9NgTDeSf/gVhow1p2za6acAfS7xRyY kYgunJJTdP9ctU2FXZKLUxz6qYYtmgm2tr4Mxzm7UXCEA5IwJ0/qIwhFTkSWJMi8 SpIxrZoPrlkuhhPYQlWoqlHGK2D2jumdgVl5vlNIhSxlsP4SmN459TPn3mZHsIAB XvO1e1mGjg6tnrRueT727H+r2w0K3B89mBJK+U0UJ/daWLVh2b6AYdTZ3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI83qeW0TysHYPOSVStSJAKBLvAWMB8GA1UdIwQY MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt YjA3ZDg0MTZhZTRhLzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3c9GE9S xLFkM+QdhlegxftCrrZ4F0Ethnl6l33w6jJw9iK5BGlYbq1b74uCalmH6p5zlLH4 Qp2dkCwWVN93Us+QhPN+/zMjcSlXhNGHeQpcsWDZ11EhQQvMlrS6B6KSUgJUoHoL BLW2biA+uT7gT9aUwunRil8WkZfvQ2YFOeEveL7COcFFdXUk8p8GqjTxOR1mghsH ITQz10fY86nnTp3MQIteEmnpJyrDBp7dhSuFr1wcU8T3vQECtulTF42kjUdpyAaa dOatwzx+iVFh/NzMLUKfQkQp2U/KCLIkUGCJbNYYvWIn9o837NouXL1yp60rSTjx PWhq06RSi9P38A== -----END CERTIFICATE-----Generated at Fri Sep 18 21:52:55 2026 by rpki-client