$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft File: AOT2p3Not87P5nIgtDZXax4Aiuw.mft (raw, json) Hash identifier: H2nXvf6Fw6eF26/qzuxTpE4sllNvig4jFYaYgjZhd1c= Subject key identifier: 57:98:F8:8B:0A:20:2B:C5:61:DE:0C:42:02:73:74:9A:BE:05:94:E2 Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec Certificate serial: 019FCB93CA98A322D2B92562E215C2518A08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft Manifest number: 1AF1 Signing time: Tue 04 Aug 2026 07:01:28 +0000 Manifest this update: Tue 04 Aug 2026 07:01:28 +0000 Manifest next update: Wed 05 Aug 2026 07:01:28 +0000 Files and hashes: 1: 1-7-GRl1DpJL9MX_Eh7vVlgQAtds.roa (hash: qBQ+Yv34RT+76LqwEUvZMWK4vq87p/Tm5N2E03sJUtE=) 2: 1-WsLt9tKKbGh5bPdJYro7hdbfv4.roa (hash: bwEotLkWd6AAV2gsEIC8jHaD4DnocRPu1uFbzjdp2BY=) 3: 1v3HWPlunfpwP49jTOGBig4JD8Q.roa (hash: yDJ9787ATzv6jCZC6L2EDuN3dqnkLEyiRF3QmgJEwMw=) 4: AOT2p3Not87P5nIgtDZXax4Aiuw.crl (hash: kSf49DXv4SqpDLcZYfZ4kjyqGk1PcXNMIiyGZjUjxg8=) 5: CP1700xQhoIo0eqZb96w49fwMZU.roa (hash: FhGMMmXWb4O7zbwANRuKCF/ES8PwzOmEkZV99iTN5xU=) 6: Iz8oQHvYY4N1cu4pgE3299ogM34.roa (hash: GTn6Y+DWEw4+IcATVORnDqgcpHWD0i8V9c7BBTnRM3U=) 7: MQ0e7OQgina0hHLbzkJJI7ocRMY.roa (hash: lYlPT7y2KTJ0qjKzQaLtDJlIn+M8xo18ZCJuzXN583Y=) 8: VcGOwSBLa8MeclenBwYCnJTkc6Q.roa (hash: ZpKqr8OOjlncepBvaT8KeQio9IThw68qGgH8coHhuVI=) 9: gF0x-IgTBvCJCERAByN93AH9MjM.roa (hash: f9L9sZ2MryoARd93KF5kcE6ImNuSL3mNiWJ8yZc3d58=) 10: hGF5HckbV_mO1zNnnUvLaxvGgg0.roa (hash: LswWVKDsb8V0ubfBEeUCi7BkiOP6J97pjosqCGNORUk=) 11: oPPgaBYxfthIjxyRNKKvuQhADcA.roa (hash: vJpx4imZl2f0ZsJVLjSi4WZMmzQUNNlQIXHfoEUu3/k=) 12: psdxNS9e9UAm4jnMurOBj_7r3SE.roa (hash: DmgbB+oJGANiMlAsSILkh1J4OQmbWXdSoCr006Xmwis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Aug 2026 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:cb:93:ca:98:a3:22:d2:b9:25:62:e2:15:c2:51:8a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec Validity Not Before: Aug 4 07:01:28 2026 GMT Not After : Aug 5 07:01:28 2026 GMT Subject: CN=5798f88b0a202bc561de0c420273749abe0594e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:32:20:2b:4f:33:0d:6f:11:d0:e3:d2:c6:54: e8:4e:12:1b:d0:ed:4a:31:4a:9b:68:ed:78:bb:29: f3:4e:95:be:de:9d:ae:2d:e7:0f:eb:30:87:9c:16: d9:79:94:3f:6a:9b:10:75:70:f3:06:2e:2f:7f:62: fa:ab:3b:18:e0:ba:53:21:95:29:df:2e:58:38:0b: 6a:66:02:1e:37:fd:ce:3a:e8:f5:82:46:02:21:99: d1:d9:87:c7:49:c0:28:dc:5a:d3:47:d3:ee:33:92: 3f:eb:fe:e0:63:db:76:9d:34:44:d5:46:ab:5a:f7: 61:e6:0d:30:be:7a:0c:f6:ca:56:d2:e1:b4:a5:2d: 36:f5:27:8e:fa:74:90:04:3d:42:b2:42:96:ba:a7: 9d:9e:4f:04:2b:00:96:ba:1e:fb:f0:b9:a1:4b:00: 9f:9a:51:de:17:8a:6b:a9:06:b7:79:ce:3c:14:a4: c9:21:db:12:ca:df:f1:ba:d3:69:f1:9f:ab:f6:39: 33:b7:82:92:f2:f2:86:8b:cf:06:2f:0b:5b:08:60: 23:ad:2f:99:ca:4c:0d:af:f5:fd:86:84:9d:ea:94: 03:23:92:d2:b5:a2:5f:b1:a1:2e:3c:02:18:6d:6e: 0c:d4:1c:d2:7c:95:2d:6f:28:01:9c:54:e0:a5:e7: 9b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:98:F8:8B:0A:20:2B:C5:61:DE:0C:42:02:73:74:9A:BE:05:94:E2 X509v3 Authority Key Identifier: keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:2b:dd:77:40:19:65:5a:c8:e6:5a:a2:ef:ad:19:d5:31:fb: 08:11:ff:c7:87:20:5a:f6:d7:d5:bd:a7:a8:fe:4a:cc:8c:3f: e9:f1:a9:0a:94:2f:f2:c4:38:56:5c:2a:80:c9:01:15:f5:ef: fd:bb:8d:7b:4c:79:8d:e3:83:fb:e3:f4:eb:e6:20:bf:f6:39: 7d:50:4e:80:53:4e:72:29:77:85:bd:4d:a6:ff:85:46:da:a0: aa:32:6c:cf:3e:7c:b6:15:47:08:f8:c9:c4:97:f5:e5:58:3c: f6:fe:c4:60:50:07:d8:33:a0:9f:25:6f:88:5b:c2:d3:24:ec: fe:c0:15:91:92:61:48:f3:7c:af:9c:09:54:b3:ff:e2:f3:db: 61:3a:ca:47:1e:e6:ac:4a:42:ee:01:25:12:28:5c:84:84:5a: 53:17:41:33:ea:f1:ea:e9:23:d0:7c:de:ac:53:24:94:9e:d4: 8e:98:31:92:21:db:7f:48:e3:b0:03:12:28:98:08:8e:39:bc: 7a:a9:68:a4:d6:52:9f:cb:d8:55:85:03:38:58:70:cb:bd:1e: 1f:66:41:3b:3d:2d:c3:29:7a:65:43:19:b5:6e:c3:ed:39:80: 0c:d1:48:45:40:55:4f:50:3c:c7:76:8b:05:6d:a3:59:36:03: e1:90:89:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/Lk8qYoyLSuSVi4hXCUYoIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw MDhhZWMwHhcNMjYwODA0MDcwMTI4WhcNMjYwODA1MDcwMTI4WjAzMTEwLwYDVQQD Eyg1Nzk4Zjg4YjBhMjAyYmM1NjFkZTBjNDIwMjczNzQ5YWJlMDU5NGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzIgK08zDW8R0OPSxlToThIb0O1K MUqbaO14uynzTpW+3p2uLecP6zCHnBbZeZQ/apsQdXDzBi4vf2L6qzsY4LpTIZUp 3y5YOAtqZgIeN/3OOuj1gkYCIZnR2YfHScAo3FrTR9PuM5I/6/7gY9t2nTRE1Uar Wvdh5g0wvnoM9spW0uG0pS029SeO+nSQBD1CskKWuqednk8EKwCWuh778LmhSwCf mlHeF4prqQa3ec48FKTJIdsSyt/xutNp8Z+r9jkzt4KS8vKGi88GLwtbCGAjrS+Z ykwNr/X9hoSd6pQDI5LStaJfsaEuPAIYbW4M1BzSfJUtbygBnFTgpeebIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeY+IsKICvFYd4MQgJzdJq+BZTiMB8GA1UdIwQY MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt YjA3ZDg0MTZhZTRhLzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOivdd0AZ ZVrI5lqi760Z1TH7CBH/x4cgWvbX1b2nqP5KzIw/6fGpCpQv8sQ4VlwqgMkBFfXv /buNe0x5jeOD++P06+Ygv/Y5fVBOgFNOcil3hb1Npv+FRtqgqjJszz58thVHCPjJ xJf15Vg89v7EYFAH2DOgnyVviFvC0yTs/sAVkZJhSPN8r5wJVLP/4vPbYTrKRx7m rEpC7gElEihchIRaUxdBM+rx6ukj0HzerFMklJ7UjpgxkiHbf0jjsAMSKJgIjjm8 eqlopNZSn8vYVYUDOFhwy70eH2ZBOz0twyl6ZUMZtW7D7TmADNFIRUBVT1A8x3aL BW2jWTYD4ZCJdQ== -----END CERTIFICATE-----Generated at Tue Aug 4 15:00:42 2026 by rpki-client