$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft File: EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json) Hash identifier: 4/wvwg+fpgU+LxJ+V1tlzMmwaWoa4XP7wayCLE1dOpE= Subject key identifier: 1E:63:FC:C9:62:AA:6F:56:45:08:B6:35:48:F2:C6:66:11:A6:FB:B8 Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 01A0EC2EA5DE45914EFBD00403C9C54201B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft Manifest number: 1A83 Signing time: Tue 29 Sep 2026 08:01:15 +0000 Manifest this update: Tue 29 Sep 2026 08:01:15 +0000 Manifest next update: Wed 30 Sep 2026 08:01:15 +0000 Files and hashes: 1: 5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa (hash: c54pJsIlOXW3V5kUxXIRsQeC6LHU4KLVPi5buVcibgA=) 2: BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa (hash: PQjNFAf7Xm48R/Vs0yAXVjhN/qJRsvV6yxIaJlLeL4g=) 3: DM1I6XvxMm1oW563FlX35pgJc4I.asa (hash: bqI7LUo5gnXdb/YhK/ZUHJ9RBqqCl7/im+dzoqa/sRg=) 4: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: AGp1HET1MgZC7Pd4TzeLJWcCVKT4kj9ka4zWKTyIMlc=) 5: H98sQWnP8G2xj5s4d1Vc8LtlcnE.asa (hash: 8GWEpBPTzGw/8qBdCLe/p4fnHXdFfa2DtPiMc2zduBk=) 6: Mmf9iM-_r8-8_72c9w_YpkVxNcc.asa (hash: k9FBf0lfIGm0CeilJQGz+ucSfZPD15fjm1nPffsNVfo=) 7: PDvQj2LXTs9s-VP7HUqBEd5JnG4.asa (hash: k2sGYwWP3giEPvO0KodpuGTokoksG0nwH43zEhuEcpA=) 8: Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa (hash: UzUZm1Wl75Vh5Ryan69XiXnKqwgvWJFWzAMetkj80e4=) 9: YnZmmQc5Cy0g5wDU0qFabNwALig.asa (hash: xXOI/K8NCOaj+/uJsMaVZT7Q7qH5hRdbbfr9TqbZWq4=) 10: lo5CuUn6KYthSSJ0JuTW6pdjhj8.asa (hash: eIPKlqsvVegPXqVxpzyVoeYK0GG8XvbcCgUygdwYgwU=) 11: rXAKYgvNCxNYHLVUiPKumhUgFdA.roa (hash: QwI/CURdPgAcJ5pZC863YtCdDvn1JRCVbK5OYuNsc/o=) 12: tTZ9S0dCWBDHik__qcwSp9QHBUI.roa (hash: cr8Hr9mBGK1u9J7drnWyVHlm9qTXNpv9oeN2OtqiV5Y=) 13: tsOLojc0SchxUUQXbch659fhNo8.asa (hash: VuwN0whQKrE0eMWnthSL2+DFF7CMuW4vDb5l1eTHZTs=) 14: zqNXKkeUMuTQJw20ff-7r2jRyGk.roa (hash: O2OK099UBcGWYmLHL0lDgCBhx041zWv28uU/Za00LT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Sep 2026 08:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ec:2e:a5:de:45:91:4e:fb:d0:04:03:c9:c5:42:01:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Sep 29 08:01:15 2026 GMT Not After : Sep 30 08:01:15 2026 GMT Subject: CN=1e63fcc962aa6f564508b63548f2c66611a6fbb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:61:f9:fa:b1:de:db:5e:7c:d0:7f:f5:db:b6: b5:9c:e8:5d:e7:be:89:84:30:33:22:20:3f:3e:45: 5d:16:58:c7:46:3c:9c:76:fd:22:c7:11:46:9f:21: 4b:1b:d0:62:0b:d8:b2:74:a5:db:33:c8:b3:57:3a: 86:04:c1:91:b6:93:e3:f7:35:d9:02:bd:61:e4:f5: b2:80:81:13:ea:bd:db:6f:ae:74:ab:91:a1:90:4c: 92:de:11:48:69:05:7c:47:4e:e1:99:b9:6e:14:d3: 23:32:16:a1:da:11:e3:d7:5e:20:b2:90:a5:c6:22: 34:75:76:72:ae:48:24:a0:f2:4d:13:bd:fa:af:01: 64:dc:45:b1:a0:da:f3:22:6c:15:4f:9e:36:b1:45: 7f:d4:0b:da:f7:62:0c:b4:fc:57:c4:2e:9a:e0:a6: 7b:1e:d1:6b:44:2b:b5:f8:9d:59:03:09:dc:f6:00: e5:92:09:59:9e:fd:16:bf:49:a0:f7:49:a3:64:1e: 6f:18:a1:37:82:41:94:f3:5c:e7:63:85:cf:1a:64: eb:9a:77:51:2a:e1:e7:49:67:fd:c0:e6:6d:42:cc: 71:14:e7:21:8e:dd:4c:64:11:e8:0e:ef:b4:5a:fb: 8e:f8:1a:e4:0f:6e:c6:9e:04:1a:ee:1d:8e:16:88: 16:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:63:FC:C9:62:AA:6F:56:45:08:B6:35:48:F2:C6:66:11:A6:FB:B8 X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:61:93:af:d9:20:a2:a6:5a:43:3e:0c:38:88:59:61:66:36: 06:e1:82:af:12:63:79:50:28:c3:7d:a5:24:6c:3f:e4:e6:e3: cb:55:85:0e:f8:53:a2:66:09:50:b4:d8:73:3b:c8:a9:d8:8b: 7a:ce:bf:88:1e:72:8d:3d:48:f4:8e:e4:02:cf:50:e5:80:05: 47:45:52:c7:12:f7:c2:a1:d8:17:aa:b6:70:92:46:ca:5e:ee: 53:61:f0:98:a9:f6:ef:02:1a:40:f1:ff:43:2a:c8:10:6b:e4: 7b:aa:d2:b7:be:12:29:1f:c1:4d:89:54:ac:4b:86:96:a2:11: cd:71:d3:85:c0:8e:d9:b8:a6:b9:05:c3:e6:fe:52:de:7a:df: 14:18:05:df:be:8c:22:6a:19:9b:51:9c:a2:92:f6:3a:76:ce: 0a:88:ce:ff:78:7b:49:fc:e5:98:5f:10:50:b0:c8:ac:f7:64: aa:99:bb:5e:24:11:e9:5d:55:37:d9:f2:13:d1:d0:44:c0:2e: 60:03:ff:18:15:6b:29:1f:32:f9:bd:a4:1c:fd:8d:47:95:1f: 86:14:8a:da:dc:57:46:2e:2b:b1:f7:b6:42:79:b5:56:b8:6b: 42:7b:05:f4:98:e7:0a:e2:92:01:f0:ac:e8:8f:8d:a5:b2:69: da:47:7c:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDsLqXeRZFO+9AEA8nFQgG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjYwOTI5MDgwMTE1WhcNMjYwOTMwMDgwMTE1WjAzMTEwLwYDVQQD EygxZTYzZmNjOTYyYWE2ZjU2NDUwOGI2MzU0OGYyYzY2NjExYTZmYmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWH5+rHe21580H/127a1nOhd576J hDAzIiA/PkVdFljHRjycdv0ixxFGnyFLG9BiC9iydKXbM8izVzqGBMGRtpPj9zXZ Ar1h5PWygIET6r3bb650q5GhkEyS3hFIaQV8R07hmbluFNMjMhah2hHj114gspCl xiI0dXZyrkgkoPJNE736rwFk3EWxoNrzImwVT542sUV/1Ava92IMtPxXxC6a4KZ7 HtFrRCu1+J1ZAwnc9gDlkglZnv0Wv0mg90mjZB5vGKE3gkGU81znY4XPGmTrmndR KuHnSWf9wOZtQsxxFOchjt1MZBHoDu+0WvuO+BrkD27GngQa7h2OFogW5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5j/Mliqm9WRQi2NUjyxmYRpvu4MB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWGTr9kg oqZaQz4MOIhZYWY2BuGCrxJjeVAow32lJGw/5Objy1WFDvhTomYJULTYczvIqdiL es6/iB5yjT1I9I7kAs9Q5YAFR0VSxxL3wqHYF6q2cJJGyl7uU2HwmKn27wIaQPH/ QyrIEGvke6rSt74SKR/BTYlUrEuGlqIRzXHThcCO2bimuQXD5v5S3nrfFBgF376M ImoZm1GcopL2OnbOCojO/3h7SfzlmF8QULDIrPdkqpm7XiQR6V1VN9nyE9HQRMAu YAP/GBVrKR8y+b2kHP2NR5UfhhSK2txXRi4rsfe2Qnm1VrhrQnsF9JjnCuKSAfCs 6I+NpbJp2kd8pg== -----END CERTIFICATE-----Generated at Tue Sep 29 16:01:14 2026 by rpki-client