$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft File: AOT2p3Not87P5nIgtDZXax4Aiuw.mft (raw, json) Hash identifier: bfwbc79FGTQMkN7JaoSGotPjEylZR4zJbD1A/WBLcKI= Subject key identifier: A1:E3:39:F2:75:EF:9B:8D:A4:57:43:D6:DB:A9:93:F9:F3:6B:62:9E Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec Certificate serial: 019EE1E76ED8E1CC32DB7A3460287C3EE3A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft Manifest number: 1A77 Signing time: Fri 19 Jun 2026 22:01:41 +0000 Manifest this update: Fri 19 Jun 2026 22:01:41 +0000 Manifest next update: Sat 20 Jun 2026 22:01:41 +0000 Files and hashes: 1: 1-7-GRl1DpJL9MX_Eh7vVlgQAtds.roa (hash: qBQ+Yv34RT+76LqwEUvZMWK4vq87p/Tm5N2E03sJUtE=) 2: 1-WsLt9tKKbGh5bPdJYro7hdbfv4.roa (hash: bwEotLkWd6AAV2gsEIC8jHaD4DnocRPu1uFbzjdp2BY=) 3: AOT2p3Not87P5nIgtDZXax4Aiuw.crl (hash: 0xIu7UEQThfvDhET7k2nzF9xvEY1yBpHbdCchue+KIQ=) 4: CP1700xQhoIo0eqZb96w49fwMZU.roa (hash: FhGMMmXWb4O7zbwANRuKCF/ES8PwzOmEkZV99iTN5xU=) 5: CSyj_w7-Q-f6pU0fjRihvITggRw.roa (hash: cT+B8H3i/X+Kn4FQ9SBZJZPvEtdYb5GUGwmBs+mDYDE=) 6: Iz8oQHvYY4N1cu4pgE3299ogM34.roa (hash: GTn6Y+DWEw4+IcATVORnDqgcpHWD0i8V9c7BBTnRM3U=) 7: MQ0e7OQgina0hHLbzkJJI7ocRMY.roa (hash: lYlPT7y2KTJ0qjKzQaLtDJlIn+M8xo18ZCJuzXN583Y=) 8: VcGOwSBLa8MeclenBwYCnJTkc6Q.roa (hash: ZpKqr8OOjlncepBvaT8KeQio9IThw68qGgH8coHhuVI=) 9: gF0x-IgTBvCJCERAByN93AH9MjM.roa (hash: f9L9sZ2MryoARd93KF5kcE6ImNuSL3mNiWJ8yZc3d58=) 10: hGF5HckbV_mO1zNnnUvLaxvGgg0.roa (hash: LswWVKDsb8V0ubfBEeUCi7BkiOP6J97pjosqCGNORUk=) 11: oPPgaBYxfthIjxyRNKKvuQhADcA.roa (hash: vJpx4imZl2f0ZsJVLjSi4WZMmzQUNNlQIXHfoEUu3/k=) 12: psdxNS9e9UAm4jnMurOBj_7r3SE.roa (hash: DmgbB+oJGANiMlAsSILkh1J4OQmbWXdSoCr006Xmwis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Jun 2026 19:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:e1:e7:6e:d8:e1:cc:32:db:7a:34:60:28:7c:3e:e3:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec Validity Not Before: Jun 19 22:01:41 2026 GMT Not After : Jun 20 22:01:41 2026 GMT Subject: CN=a1e339f275ef9b8da45743d6dba993f9f36b629e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:90:ae:b5:89:5f:62:c4:e8:f8:b1:96:69:ea: 64:5b:e0:73:a2:b0:53:f4:8b:6e:62:74:15:f5:a1: a0:26:54:b2:c1:5b:bb:32:45:06:a3:9b:e8:de:d2: c9:33:9a:4b:d9:0d:72:1a:9a:e6:d8:15:e5:fa:b4: 00:00:a7:18:d0:84:ec:51:4a:9f:5a:be:f1:59:68: 5e:29:66:bb:46:ca:0a:ce:b3:4b:07:dc:7b:5b:07: 3c:6f:f2:66:6b:ae:ec:64:16:f9:f1:02:51:90:38: f0:02:9e:04:b7:70:8c:bd:a8:74:44:dd:46:06:8d: 20:4c:9e:f0:89:8c:e8:2a:c4:cf:68:1c:dc:15:cb: fa:9b:b0:21:6e:4d:17:b1:fb:41:e7:a5:bd:a0:5a: 9e:e7:74:a4:53:72:ca:55:b6:cc:49:d6:c2:78:f8: 18:01:52:ea:36:0c:28:af:27:de:89:62:e7:d6:b6: 38:e6:3f:ab:8a:34:83:b4:fc:93:46:45:5c:f3:1b: 8d:0a:15:f0:d7:f4:a8:bd:80:f4:ac:1e:17:ea:5e: 01:2e:5a:1a:a3:c1:28:da:fc:0b:de:a9:ab:4c:6c: e0:70:84:f6:dc:4e:5f:9d:e2:a5:09:a0:fa:98:e7: c5:d8:a0:c5:65:93:b9:44:0e:b9:00:e4:fe:9c:01: 96:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E3:39:F2:75:EF:9B:8D:A4:57:43:D6:DB:A9:93:F9:F3:6B:62:9E X509v3 Authority Key Identifier: keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:08:45:8b:37:d4:6d:c1:16:4a:96:21:fc:9b:71:50:d0:2f: 34:90:a3:d8:91:94:27:99:ad:2c:66:c4:5c:6e:5c:e9:ed:11: 77:79:29:dd:59:41:9d:e0:a5:68:e2:53:f2:ae:18:87:19:6b: 33:af:d2:09:23:aa:35:33:43:e6:e0:3c:96:cd:21:75:5f:9f: 2c:36:27:ab:ff:70:c2:8f:4b:ff:3f:98:9f:4a:1f:aa:39:9b: f1:47:e1:80:4e:75:8e:80:69:30:fa:1b:27:6b:0d:b2:c3:be: ff:1e:3f:6f:1f:9a:28:af:87:ee:92:74:c5:35:11:7a:a5:0c: 72:6d:f9:80:ca:67:55:19:32:ed:e2:f7:c5:c8:94:9c:31:e6: 41:0f:4c:91:b3:d6:eb:1f:8b:1a:30:68:d8:31:44:2f:65:77: 47:50:b1:a4:b3:98:6d:b2:c3:da:37:79:48:89:ad:07:09:9e: b4:77:32:ac:36:0f:ff:3f:ca:3f:1e:96:e8:a2:82:82:23:23: 37:f4:84:ca:2b:ba:96:dc:ad:c8:e4:da:d6:de:8d:21:a5:1f: dc:c4:b4:ee:70:b3:9d:50:2b:40:a2:de:43:12:43:ec:c5:85: 92:7f:6d:d0:f7:b4:26:5b:dd:b2:44:d2:d5:8d:41:ff:11:29: 8d:6b:38:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7h527Y4cwy23o0YCh8PuOiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw MDhhZWMwHhcNMjYwNjE5MjIwMTQxWhcNMjYwNjIwMjIwMTQxWjAzMTEwLwYDVQQD EyhhMWUzMzlmMjc1ZWY5YjhkYTQ1NzQzZDZkYmE5OTNmOWYzNmI2MjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZCutYlfYsTo+LGWaepkW+BzorBT 9ItuYnQV9aGgJlSywVu7MkUGo5vo3tLJM5pL2Q1yGprm2BXl+rQAAKcY0ITsUUqf Wr7xWWheKWa7RsoKzrNLB9x7Wwc8b/Jma67sZBb58QJRkDjwAp4Et3CMvah0RN1G Bo0gTJ7wiYzoKsTPaBzcFcv6m7Ahbk0XsftB56W9oFqe53SkU3LKVbbMSdbCePgY AVLqNgworyfeiWLn1rY45j+rijSDtPyTRkVc8xuNChXw1/SovYD0rB4X6l4BLloa o8Eo2vwL3qmrTGzgcIT23E5fneKlCaD6mOfF2KDFZZO5RA65AOT+nAGWGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHjOfJ175uNpFdD1tupk/nza2KeMB8GA1UdIwQY MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt YjA3ZDg0MTZhZTRhLzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHghFizfU bcEWSpYh/JtxUNAvNJCj2JGUJ5mtLGbEXG5c6e0Rd3kp3VlBneClaOJT8q4Yhxlr M6/SCSOqNTND5uA8ls0hdV+fLDYnq/9wwo9L/z+Yn0ofqjmb8UfhgE51joBpMPob J2sNssO+/x4/bx+aKK+H7pJ0xTUReqUMcm35gMpnVRky7eL3xciUnDHmQQ9MkbPW 6x+LGjBo2DFEL2V3R1CxpLOYbbLD2jd5SImtBwmetHcyrDYP/z/KPx6W6KKCgiMj N/SEyiu6ltytyOTa1t6NIaUf3MS07nCznVArQKLeQxJD7MWFkn9t0Pe0JlvdskTS 1Y1B/xEpjWs4Kg== -----END CERTIFICATE-----Generated at Sat Jun 20 04:01:52 2026 by rpki-client