$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft File: EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json) Hash identifier: PKJOrp3UQkReLmzILoKy+1WN8+WYoQuZVXrwYaA/rwY= Subject key identifier: 58:F3:86:19:45:53:D4:22:94:B5:A9:11:44:A1:BD:36:CD:D2:13:3B Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 019EBE479DD1DD8AE0152D8C7AAF06325372 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft Manifest number: 1962 Signing time: Sat 13 Jun 2026 00:00:24 +0000 Manifest this update: Sat 13 Jun 2026 00:00:24 +0000 Manifest next update: Sun 14 Jun 2026 00:00:24 +0000 Files and hashes: 1: 5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa (hash: c54pJsIlOXW3V5kUxXIRsQeC6LHU4KLVPi5buVcibgA=) 2: BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa (hash: PQjNFAf7Xm48R/Vs0yAXVjhN/qJRsvV6yxIaJlLeL4g=) 3: DM1I6XvxMm1oW563FlX35pgJc4I.asa (hash: bqI7LUo5gnXdb/YhK/ZUHJ9RBqqCl7/im+dzoqa/sRg=) 4: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: J1ZSCE2PE4YbrtoC++ik5U+e3OOX9FijylRZ2qfcjtI=) 5: H98sQWnP8G2xj5s4d1Vc8LtlcnE.asa (hash: 8GWEpBPTzGw/8qBdCLe/p4fnHXdFfa2DtPiMc2zduBk=) 6: Mmf9iM-_r8-8_72c9w_YpkVxNcc.asa (hash: k9FBf0lfIGm0CeilJQGz+ucSfZPD15fjm1nPffsNVfo=) 7: PDvQj2LXTs9s-VP7HUqBEd5JnG4.asa (hash: k2sGYwWP3giEPvO0KodpuGTokoksG0nwH43zEhuEcpA=) 8: Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa (hash: UzUZm1Wl75Vh5Ryan69XiXnKqwgvWJFWzAMetkj80e4=) 9: YnZmmQc5Cy0g5wDU0qFabNwALig.asa (hash: xXOI/K8NCOaj+/uJsMaVZT7Q7qH5hRdbbfr9TqbZWq4=) 10: lo5CuUn6KYthSSJ0JuTW6pdjhj8.asa (hash: eIPKlqsvVegPXqVxpzyVoeYK0GG8XvbcCgUygdwYgwU=) 11: rXAKYgvNCxNYHLVUiPKumhUgFdA.roa (hash: QwI/CURdPgAcJ5pZC863YtCdDvn1JRCVbK5OYuNsc/o=) 12: tTZ9S0dCWBDHik__qcwSp9QHBUI.roa (hash: cr8Hr9mBGK1u9J7drnWyVHlm9qTXNpv9oeN2OtqiV5Y=) 13: tsOLojc0SchxUUQXbch659fhNo8.asa (hash: VuwN0whQKrE0eMWnthSL2+DFF7CMuW4vDb5l1eTHZTs=) 14: zqNXKkeUMuTQJw20ff-7r2jRyGk.roa (hash: O2OK099UBcGWYmLHL0lDgCBhx041zWv28uU/Za00LT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 00:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:47:9d:d1:dd:8a:e0:15:2d:8c:7a:af:06:32:53:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Jun 13 00:00:24 2026 GMT Not After : Jun 14 00:00:24 2026 GMT Subject: CN=58f386194553d42294b5a91144a1bd36cdd2133b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:03:18:c0:20:72:43:f7:28:9f:ce:ad:61:95: c1:6d:07:ae:51:6f:6a:e5:ca:1c:64:bc:31:d6:7d: 91:60:89:65:da:06:9e:9c:64:90:28:b8:76:a8:7a: 05:f0:0a:65:2e:62:15:da:da:eb:d1:80:f3:ac:99: ab:c6:72:29:c7:75:1d:50:0c:44:7d:2c:e4:07:a3: 37:42:05:1f:23:1a:d0:c2:a8:57:80:a8:b3:7d:f3: c2:07:c7:fd:62:c0:bd:43:09:af:9c:66:a3:6e:22: 74:21:2a:d4:9a:0b:b4:94:d8:bb:eb:6b:be:37:0c: 6c:71:76:30:7e:70:ac:9f:88:68:45:15:e3:1f:58: 67:47:6a:f7:14:f2:0d:6c:e2:0e:d9:8b:48:b3:3c: 1c:5f:25:c7:95:8a:27:be:b5:46:31:6e:05:e4:ec: e7:1d:f1:d3:69:0f:f5:41:83:91:d8:f7:e7:85:2b: e3:5d:1b:df:67:e9:41:2c:71:f6:7a:10:57:ee:0c: 7f:5b:8a:df:f5:d0:55:4f:a0:b4:b3:a1:c1:0c:e5: 03:0e:c5:52:3a:62:c3:3f:21:be:9e:57:71:4b:f3: a9:df:09:8d:06:4c:c8:4d:ad:d4:c9:db:a1:3e:d1: 4d:1e:f5:21:b2:8a:c3:4c:1f:08:4f:e2:b5:94:e1: 8e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F3:86:19:45:53:D4:22:94:B5:A9:11:44:A1:BD:36:CD:D2:13:3B X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:56:1c:cb:a7:94:20:5a:a7:5b:cd:38:8e:10:5b:17:b5:f9: eb:0f:b5:1e:c9:d9:51:06:d8:4b:b6:67:1a:f5:1d:f2:8c:23: 55:7c:b5:80:fd:96:b1:2e:0e:3c:b0:3e:4f:bd:39:38:d3:f3: db:ee:38:c6:db:08:f9:aa:6e:01:77:cb:10:bf:8e:d5:62:82: 93:3a:af:ce:31:33:17:d3:46:8c:d0:d5:10:f2:d5:33:5a:5d: b6:28:5d:d9:4e:03:a2:71:13:52:a7:53:22:34:2a:5d:13:89: 53:f0:f5:18:1a:68:4c:41:7a:1d:9d:7a:da:2e:cb:3a:a4:b1: 3c:97:12:88:50:06:4e:83:5a:dd:79:9c:88:b9:a0:07:a6:92: 51:3f:84:7f:c2:f1:98:cc:3b:be:38:5b:31:cc:6d:ec:6c:a8: 8d:0d:9e:e0:80:4a:57:88:0a:65:89:5b:bd:20:a1:35:0c:82: a8:02:34:0a:94:d9:5e:ab:a3:2b:d2:97:b9:b9:4f:2e:97:2f: a2:12:f5:0c:db:55:b4:81:5e:08:a1:ba:eb:93:8a:94:5f:a1: c5:25:19:67:83:a7:b2:da:7c:f5:11:53:c4:b6:a0:f0:e8:da: ec:4e:75:79:41:d6:2c:93:c7:77:4c:ff:0b:57:38:e5:31:c9: c4:55:b1:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+R53R3YrgFS2Meq8GMlNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjYwNjEzMDAwMDI0WhcNMjYwNjE0MDAwMDI0WjAzMTEwLwYDVQQD Eyg1OGYzODYxOTQ1NTNkNDIyOTRiNWE5MTE0NGExYmQzNmNkZDIxMzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwMYwCByQ/con86tYZXBbQeuUW9q 5cocZLwx1n2RYIll2gaenGSQKLh2qHoF8AplLmIV2trr0YDzrJmrxnIpx3UdUAxE fSzkB6M3QgUfIxrQwqhXgKizffPCB8f9YsC9QwmvnGajbiJ0ISrUmgu0lNi762u+ NwxscXYwfnCsn4hoRRXjH1hnR2r3FPINbOIO2YtIszwcXyXHlYonvrVGMW4F5Ozn HfHTaQ/1QYOR2PfnhSvjXRvfZ+lBLHH2ehBX7gx/W4rf9dBVT6C0s6HBDOUDDsVS OmLDPyG+nldxS/Op3wmNBkzITa3UyduhPtFNHvUhsorDTB8IT+K1lOGOcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjzhhlFU9QilLWpEUShvTbN0hM7MB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs1Ycy6eU IFqnW804jhBbF7X56w+1HsnZUQbYS7ZnGvUd8owjVXy1gP2WsS4OPLA+T705ONPz 2+44xtsI+apuAXfLEL+O1WKCkzqvzjEzF9NGjNDVEPLVM1pdtihd2U4DonETUqdT IjQqXROJU/D1GBpoTEF6HZ162i7LOqSxPJcSiFAGToNa3XmciLmgB6aSUT+Ef8Lx mMw7vjhbMcxt7GyojQ2e4IBKV4gKZYlbvSChNQyCqAI0CpTZXqujK9KXublPLpcv ohL1DNtVtIFeCKG665OKlF+hxSUZZ4Onstp89RFTxLag8Oja7E51eUHWLJPHd0z/ C1c45THJxFWxug== -----END CERTIFICATE-----Generated at Sat Jun 13 09:02:04 2026 by rpki-client