$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft File: EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json) Hash identifier: eMXybaoZFpSGavA8DFuMkiwPh3+z54EwRWaXEE2jHXY= Subject key identifier: FD:AB:EF:F3:3D:B4:C6:65:F0:80:7E:00:0F:43:40:81:BD:DC:52:B8 Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 019FA9AC4936C8A3182527206999F477968A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft Manifest number: 19DC Signing time: Tue 28 Jul 2026 17:01:08 +0000 Manifest this update: Tue 28 Jul 2026 17:01:08 +0000 Manifest next update: Wed 29 Jul 2026 17:01:08 +0000 Files and hashes: 1: 5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa (hash: c54pJsIlOXW3V5kUxXIRsQeC6LHU4KLVPi5buVcibgA=) 2: BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa (hash: PQjNFAf7Xm48R/Vs0yAXVjhN/qJRsvV6yxIaJlLeL4g=) 3: DM1I6XvxMm1oW563FlX35pgJc4I.asa (hash: bqI7LUo5gnXdb/YhK/ZUHJ9RBqqCl7/im+dzoqa/sRg=) 4: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: 2OCSUgm0oAnFSRPsureWH1ICjNTk90lANtJq6drUd+0=) 5: H98sQWnP8G2xj5s4d1Vc8LtlcnE.asa (hash: 8GWEpBPTzGw/8qBdCLe/p4fnHXdFfa2DtPiMc2zduBk=) 6: Mmf9iM-_r8-8_72c9w_YpkVxNcc.asa (hash: k9FBf0lfIGm0CeilJQGz+ucSfZPD15fjm1nPffsNVfo=) 7: PDvQj2LXTs9s-VP7HUqBEd5JnG4.asa (hash: k2sGYwWP3giEPvO0KodpuGTokoksG0nwH43zEhuEcpA=) 8: Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa (hash: UzUZm1Wl75Vh5Ryan69XiXnKqwgvWJFWzAMetkj80e4=) 9: YnZmmQc5Cy0g5wDU0qFabNwALig.asa (hash: xXOI/K8NCOaj+/uJsMaVZT7Q7qH5hRdbbfr9TqbZWq4=) 10: lo5CuUn6KYthSSJ0JuTW6pdjhj8.asa (hash: eIPKlqsvVegPXqVxpzyVoeYK0GG8XvbcCgUygdwYgwU=) 11: rXAKYgvNCxNYHLVUiPKumhUgFdA.roa (hash: QwI/CURdPgAcJ5pZC863YtCdDvn1JRCVbK5OYuNsc/o=) 12: tTZ9S0dCWBDHik__qcwSp9QHBUI.roa (hash: cr8Hr9mBGK1u9J7drnWyVHlm9qTXNpv9oeN2OtqiV5Y=) 13: tsOLojc0SchxUUQXbch659fhNo8.asa (hash: VuwN0whQKrE0eMWnthSL2+DFF7CMuW4vDb5l1eTHZTs=) 14: zqNXKkeUMuTQJw20ff-7r2jRyGk.roa (hash: O2OK099UBcGWYmLHL0lDgCBhx041zWv28uU/Za00LT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:ac:49:36:c8:a3:18:25:27:20:69:99:f4:77:96:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Jul 28 17:01:08 2026 GMT Not After : Jul 29 17:01:08 2026 GMT Subject: CN=fdabeff33db4c665f0807e000f434081bddc52b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:03:d5:a3:87:6d:f7:dc:7f:36:07:c9:3b:89: 5c:b0:74:56:ba:9a:ae:dc:c8:b5:a2:86:88:71:83: cb:94:38:90:d4:5c:55:cc:5e:a4:3a:e4:cd:b9:c6: 27:6e:df:4e:fe:75:06:56:c0:1b:24:5d:9f:ab:2b: 1c:18:ff:8c:b2:5e:a4:d6:81:b5:75:37:c2:c0:e6: fb:82:aa:64:de:c1:81:ad:19:ac:df:00:97:4d:ef: e7:49:0d:82:8f:c4:b8:47:a6:f6:f8:7c:4a:0b:f3: 91:e4:84:51:74:60:40:8a:54:6a:24:91:c5:9b:12: 41:35:6d:44:5e:92:2c:78:b3:84:23:6d:09:e6:f4: 9b:99:a8:ac:97:25:3d:27:95:3c:3b:97:ed:eb:e3: dd:72:14:db:5e:58:4f:d1:a0:36:12:96:c8:e6:e9: 54:cd:94:83:4b:16:d6:e1:5a:c3:69:40:ee:86:81: a9:97:ef:3f:c1:34:09:ef:ea:eb:0e:bc:b7:fc:a2: a6:97:c3:b9:b8:ed:6a:52:86:cc:83:26:13:11:40: ef:b8:87:aa:66:2e:6d:f6:71:93:32:1e:99:2d:7c: 66:f0:a5:fc:3a:83:88:ee:ab:2f:c1:3a:ea:3e:c1: 49:36:c3:66:3c:b3:e7:ff:66:97:c6:68:0c:ce:d0: 21:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AB:EF:F3:3D:B4:C6:65:F0:80:7E:00:0F:43:40:81:BD:DC:52:B8 X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:49:4d:31:75:85:f0:17:5d:fa:9c:72:8a:cd:70:5f:e7:e5: d8:4f:2f:c8:a5:60:f0:97:19:90:87:78:b5:e1:41:b8:21:d5: d8:84:7c:fd:3c:18:41:79:27:b6:f1:30:51:e4:74:da:1d:fc: 81:9c:38:d5:78:c7:7f:89:49:18:95:ca:cd:ee:69:83:03:6b: 42:b4:4e:ff:66:87:78:8d:89:d9:76:e6:d8:88:2d:8c:2a:bc: 97:67:e7:73:0b:58:4e:19:f7:cc:cd:62:39:a5:04:2b:8d:da: 92:16:9e:8e:52:b8:a0:25:e6:58:be:fa:03:ca:c1:7c:35:61: 1b:2c:23:7d:f3:7f:a7:cc:43:e4:be:b8:9e:4e:9e:c8:bf:82: ba:62:c9:84:87:46:12:34:c9:a4:a9:fc:b1:a1:1d:7d:1d:72: f1:00:65:65:06:45:14:d5:08:09:be:7e:ff:13:e7:15:6e:62: 85:67:af:61:89:8e:c1:9f:12:37:78:fe:99:cb:3b:22:0b:b2: ce:d2:26:41:ac:7c:d0:49:cf:bc:d3:a2:c8:91:19:87:b1:d8: f0:de:ea:2e:b8:8e:ec:46:99:3d:de:4e:cc:e0:56:c6:a9:7d: 6d:d2:a0:6c:2c:4d:8f:ad:e3:a3:7d:ff:f9:67:6b:80:35:51: c9:c3:ab:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+prEk2yKMYJScgaZn0d5aKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjYwNzI4MTcwMTA4WhcNMjYwNzI5MTcwMTA4WjAzMTEwLwYDVQQD EyhmZGFiZWZmMzNkYjRjNjY1ZjA4MDdlMDAwZjQzNDA4MWJkZGM1MmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwPVo4dt99x/NgfJO4lcsHRWupqu 3Mi1ooaIcYPLlDiQ1FxVzF6kOuTNucYnbt9O/nUGVsAbJF2fqyscGP+Msl6k1oG1 dTfCwOb7gqpk3sGBrRms3wCXTe/nSQ2Cj8S4R6b2+HxKC/OR5IRRdGBAilRqJJHF mxJBNW1EXpIseLOEI20J5vSbmaislyU9J5U8O5ft6+PdchTbXlhP0aA2EpbI5ulU zZSDSxbW4VrDaUDuhoGpl+8/wTQJ7+rrDry3/KKml8O5uO1qUobMgyYTEUDvuIeq Zi5t9nGTMh6ZLXxm8KX8OoOI7qsvwTrqPsFJNsNmPLPn/2aXxmgMztAhuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2r7/M9tMZl8IB+AA9DQIG93FK4MB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUlNMXWF 8Bdd+pxyis1wX+fl2E8vyKVg8JcZkId4teFBuCHV2IR8/TwYQXkntvEwUeR02h38 gZw41XjHf4lJGJXKze5pgwNrQrRO/2aHeI2J2Xbm2IgtjCq8l2fncwtYThn3zM1i OaUEK43akhaejlK4oCXmWL76A8rBfDVhGywjffN/p8xD5L64nk6eyL+CumLJhIdG EjTJpKn8saEdfR1y8QBlZQZFFNUICb5+/xPnFW5ihWevYYmOwZ8SN3j+mcs7Iguy ztImQax80EnPvNOiyJEZh7HY8N7qLriO7EaZPd5OzOBWxql9bdKgbCxNj63jo33/ +WdrgDVRycOrqA== -----END CERTIFICATE-----Generated at Tue Jul 28 18:38:21 2026 by rpki-client