$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft File: EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json) Hash identifier: rMzb1R6PbGp2WPvoUREyQ3O6zf0ptRMGf58XsfzPP0U= Subject key identifier: 9E:9A:A9:48:E4:A1:D5:71:A0:8B:FE:8E:66:83:D7:17:E9:92:4E:39 Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 019D9AAC239596B6CC47E6B79791472E923E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft Manifest number: 18CB Signing time: Fri 17 Apr 2026 09:01:05 +0000 Manifest this update: Fri 17 Apr 2026 09:01:05 +0000 Manifest next update: Sat 18 Apr 2026 09:01:05 +0000 Files and hashes: 1: 5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa (hash: c54pJsIlOXW3V5kUxXIRsQeC6LHU4KLVPi5buVcibgA=) 2: BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa (hash: PQjNFAf7Xm48R/Vs0yAXVjhN/qJRsvV6yxIaJlLeL4g=) 3: DM1I6XvxMm1oW563FlX35pgJc4I.asa (hash: bqI7LUo5gnXdb/YhK/ZUHJ9RBqqCl7/im+dzoqa/sRg=) 4: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: Tmy5jZTb2no5hBGKodjPnVN/r8Uu8Eben4qOC6x9G28=) 5: H98sQWnP8G2xj5s4d1Vc8LtlcnE.asa (hash: 8GWEpBPTzGw/8qBdCLe/p4fnHXdFfa2DtPiMc2zduBk=) 6: Mmf9iM-_r8-8_72c9w_YpkVxNcc.asa (hash: k9FBf0lfIGm0CeilJQGz+ucSfZPD15fjm1nPffsNVfo=) 7: PDvQj2LXTs9s-VP7HUqBEd5JnG4.asa (hash: k2sGYwWP3giEPvO0KodpuGTokoksG0nwH43zEhuEcpA=) 8: Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa (hash: UzUZm1Wl75Vh5Ryan69XiXnKqwgvWJFWzAMetkj80e4=) 9: YnZmmQc5Cy0g5wDU0qFabNwALig.asa (hash: xXOI/K8NCOaj+/uJsMaVZT7Q7qH5hRdbbfr9TqbZWq4=) 10: lo5CuUn6KYthSSJ0JuTW6pdjhj8.asa (hash: eIPKlqsvVegPXqVxpzyVoeYK0GG8XvbcCgUygdwYgwU=) 11: rXAKYgvNCxNYHLVUiPKumhUgFdA.roa (hash: QwI/CURdPgAcJ5pZC863YtCdDvn1JRCVbK5OYuNsc/o=) 12: tTZ9S0dCWBDHik__qcwSp9QHBUI.roa (hash: cr8Hr9mBGK1u9J7drnWyVHlm9qTXNpv9oeN2OtqiV5Y=) 13: tsOLojc0SchxUUQXbch659fhNo8.asa (hash: VuwN0whQKrE0eMWnthSL2+DFF7CMuW4vDb5l1eTHZTs=) 14: zqNXKkeUMuTQJw20ff-7r2jRyGk.roa (hash: O2OK099UBcGWYmLHL0lDgCBhx041zWv28uU/Za00LT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:ac:23:95:96:b6:cc:47:e6:b7:97:91:47:2e:92:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Apr 17 09:01:05 2026 GMT Not After : Apr 18 09:01:05 2026 GMT Subject: CN=9e9aa948e4a1d571a08bfe8e6683d717e9924e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0b:3a:a0:01:1c:3f:6f:14:13:34:cd:a5:61: 81:bb:82:90:28:8e:2e:82:48:e7:08:76:10:d7:30: bb:d0:0f:f8:c4:4c:22:79:e7:05:a4:f0:8a:7a:6f: ad:da:2a:80:2b:b7:4c:f8:cb:22:6b:8f:97:df:68: f5:1d:40:b8:3c:1f:c1:65:b1:f1:1f:3a:8f:14:ac: e4:b5:ee:c6:66:6d:a1:7b:39:cc:44:9b:6b:4f:f0: 0e:1f:dd:22:43:fe:58:31:13:9d:02:46:9a:0c:0c: 19:82:25:51:19:82:76:f6:b0:9d:fd:07:00:ab:2f: 53:28:d4:58:c2:63:30:b4:77:5d:70:e1:d5:c2:2b: 1c:01:98:7d:b4:1e:54:08:86:1b:be:3f:25:eb:6b: 4d:dc:1c:05:27:48:e5:ca:ac:de:05:c1:86:63:3c: 88:d1:f9:76:cb:6f:dc:8a:c5:c9:44:b2:41:78:81: a9:8e:3b:17:17:8a:90:45:3b:9e:5a:c0:d9:41:d8: df:00:30:55:80:0f:42:bb:54:6d:79:2c:8f:b4:dc: 97:15:59:40:13:bd:35:43:b7:95:d9:54:ab:e9:1e: 5a:72:cc:77:91:a8:f6:05:b7:93:f7:7c:c7:2a:c9: 6b:b0:cb:47:0f:4b:6b:d0:43:ca:c3:66:d1:3d:ce: a7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9A:A9:48:E4:A1:D5:71:A0:8B:FE:8E:66:83:D7:17:E9:92:4E:39 X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ba:0f:53:c1:10:ef:31:b4:24:fa:3a:b3:77:4f:e8:43:1d: 0f:6b:0e:d0:c6:94:20:42:45:a0:2f:fc:3c:3a:2e:9a:88:21: 24:50:e3:17:5f:dc:5e:d1:93:dc:1e:09:3d:98:56:70:7e:61: 28:51:c2:41:80:0c:dd:ee:87:8b:4c:77:e9:79:f3:8f:b9:b4: 7e:de:e7:26:e5:da:39:ba:f9:69:98:6d:0c:b4:9b:4f:12:85: fb:f1:2a:10:4c:3b:30:48:b1:b0:97:81:9a:e7:05:90:8d:fa: 40:47:df:c8:72:27:e9:f0:14:75:5d:4b:ae:8e:5c:d6:fb:e7: f2:21:10:20:b9:c1:44:ce:c1:77:5b:bb:68:5c:3b:a2:a9:eb: 08:32:57:66:a3:d3:6b:28:64:f0:e8:f1:41:11:f3:b9:61:2f: f9:ab:7d:3d:d0:67:1b:3e:8c:a8:30:6d:54:d4:46:81:6d:29: c4:87:4a:9e:8f:1c:86:d2:60:e2:6a:63:50:9e:81:0c:9c:c2: 74:59:d3:52:a2:25:85:5c:3e:17:16:db:7f:2d:53:f1:00:56: 0e:ea:3f:f0:fd:03:50:25:3d:67:3f:16:a4:d2:0f:b4:9f:a7: 70:c2:b6:c9:62:f0:a6:b3:ac:40:8e:6a:99:12:37:2e:ca:9b: 4a:36:18:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2arCOVlrbMR+a3l5FHLpI+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjYwNDE3MDkwMTA1WhcNMjYwNDE4MDkwMTA1WjAzMTEwLwYDVQQD Eyg5ZTlhYTk0OGU0YTFkNTcxYTA4YmZlOGU2NjgzZDcxN2U5OTI0ZTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAs6oAEcP28UEzTNpWGBu4KQKI4u gkjnCHYQ1zC70A/4xEwieecFpPCKem+t2iqAK7dM+Msia4+X32j1HUC4PB/BZbHx HzqPFKzkte7GZm2heznMRJtrT/AOH90iQ/5YMROdAkaaDAwZgiVRGYJ29rCd/QcA qy9TKNRYwmMwtHddcOHVwiscAZh9tB5UCIYbvj8l62tN3BwFJ0jlyqzeBcGGYzyI 0fl2y2/cisXJRLJBeIGpjjsXF4qQRTueWsDZQdjfADBVgA9Cu1RteSyPtNyXFVlA E701Q7eV2VSr6R5acsx3kaj2BbeT93zHKslrsMtHD0tr0EPKw2bRPc6nJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6aqUjkodVxoIv+jmaD1xfpkk45MB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7oPU8EQ 7zG0JPo6s3dP6EMdD2sO0MaUIEJFoC/8PDoumoghJFDjF1/cXtGT3B4JPZhWcH5h KFHCQYAM3e6Hi0x36Xnzj7m0ft7nJuXaObr5aZhtDLSbTxKF+/EqEEw7MEixsJeB mucFkI36QEffyHIn6fAUdV1Lro5c1vvn8iEQILnBRM7Bd1u7aFw7oqnrCDJXZqPT ayhk8OjxQRHzuWEv+at9PdBnGz6MqDBtVNRGgW0pxIdKno8chtJg4mpjUJ6BDJzC dFnTUqIlhVw+Fxbbfy1T8QBWDuo/8P0DUCU9Zz8WpNIPtJ+ncMK2yWLwprOsQI5q mRI3LsqbSjYYmg== -----END CERTIFICATE-----Generated at Fri Apr 17 13:04:26 2026 by rpki-client