$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft File: AOT2p3Not87P5nIgtDZXax4Aiuw.mft (raw, json) Hash identifier: xaw7EbLneowM6/wBTtS7GBoS+yJzkK294yNtizmDBrE= Subject key identifier: EC:91:D4:3A:7F:7E:BD:43:7F:2E:60:1D:B1:B8:CC:E4:AC:BA:09:04 Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec Certificate serial: 019FA8D03A9FECFC041343FC6F99B7ADF30B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft Manifest number: 1ADF Signing time: Tue 28 Jul 2026 13:00:46 +0000 Manifest this update: Tue 28 Jul 2026 13:00:46 +0000 Manifest next update: Wed 29 Jul 2026 13:00:46 +0000 Files and hashes: 1: 1-7-GRl1DpJL9MX_Eh7vVlgQAtds.roa (hash: qBQ+Yv34RT+76LqwEUvZMWK4vq87p/Tm5N2E03sJUtE=) 2: 1-WsLt9tKKbGh5bPdJYro7hdbfv4.roa (hash: bwEotLkWd6AAV2gsEIC8jHaD4DnocRPu1uFbzjdp2BY=) 3: 1v3HWPlunfpwP49jTOGBig4JD8Q.roa (hash: yDJ9787ATzv6jCZC6L2EDuN3dqnkLEyiRF3QmgJEwMw=) 4: AOT2p3Not87P5nIgtDZXax4Aiuw.crl (hash: SK0Q+FAFMLFkRN4CqgBPQV2pcN3PPRSzYF3ZE47IxQo=) 5: CP1700xQhoIo0eqZb96w49fwMZU.roa (hash: FhGMMmXWb4O7zbwANRuKCF/ES8PwzOmEkZV99iTN5xU=) 6: Iz8oQHvYY4N1cu4pgE3299ogM34.roa (hash: GTn6Y+DWEw4+IcATVORnDqgcpHWD0i8V9c7BBTnRM3U=) 7: MQ0e7OQgina0hHLbzkJJI7ocRMY.roa (hash: lYlPT7y2KTJ0qjKzQaLtDJlIn+M8xo18ZCJuzXN583Y=) 8: VcGOwSBLa8MeclenBwYCnJTkc6Q.roa (hash: ZpKqr8OOjlncepBvaT8KeQio9IThw68qGgH8coHhuVI=) 9: gF0x-IgTBvCJCERAByN93AH9MjM.roa (hash: f9L9sZ2MryoARd93KF5kcE6ImNuSL3mNiWJ8yZc3d58=) 10: hGF5HckbV_mO1zNnnUvLaxvGgg0.roa (hash: LswWVKDsb8V0ubfBEeUCi7BkiOP6J97pjosqCGNORUk=) 11: oPPgaBYxfthIjxyRNKKvuQhADcA.roa (hash: vJpx4imZl2f0ZsJVLjSi4WZMmzQUNNlQIXHfoEUu3/k=) 12: psdxNS9e9UAm4jnMurOBj_7r3SE.roa (hash: DmgbB+oJGANiMlAsSILkh1J4OQmbWXdSoCr006Xmwis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:d0:3a:9f:ec:fc:04:13:43:fc:6f:99:b7:ad:f3:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec Validity Not Before: Jul 28 13:00:46 2026 GMT Not After : Jul 29 13:00:46 2026 GMT Subject: CN=ec91d43a7f7ebd437f2e601db1b8cce4acba0904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2f:e9:cc:4d:37:c5:48:a6:e8:b4:ec:1d:a3: ca:8f:22:eb:d1:aa:fb:50:f4:4c:b4:f5:8f:d4:51: 51:0a:81:12:69:1e:4e:7c:92:36:85:11:bb:6a:05: a1:c7:cf:29:10:98:14:57:2d:3b:9b:9a:cb:10:58: 5c:e1:23:9a:75:d9:a5:eb:f1:ce:83:32:40:8b:b4: 2b:50:0e:a6:a4:59:f4:1d:03:4b:d9:de:c6:1f:a7: fd:49:c2:2b:76:c4:5c:89:3d:14:6b:46:b4:23:93: 1c:fb:96:a3:c0:2a:08:67:cb:05:e7:3a:a3:7f:6a: 70:c3:56:a4:0e:d0:52:82:06:c1:a5:07:7f:59:84: 86:85:83:6c:3b:4d:f3:35:b4:0f:74:35:17:ef:ed: 32:d6:26:1c:89:d3:6b:ed:4a:66:ea:ab:4c:ec:3a: 25:91:3e:55:b6:73:88:8c:f9:01:8e:50:a3:9a:76: c0:d6:d1:2e:ad:81:cd:c7:80:6c:46:92:4e:01:13: 5d:c5:1b:2b:66:2f:fd:48:a6:69:f5:34:e4:b8:0d: 0c:35:e4:40:2b:12:6a:66:71:11:e3:0d:47:4e:dc: cc:0e:4c:38:ee:5e:01:44:d8:58:95:c8:cf:73:17: 5c:20:62:d7:5e:17:88:e8:00:d1:8c:39:87:0f:52: be:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:91:D4:3A:7F:7E:BD:43:7F:2E:60:1D:B1:B8:CC:E4:AC:BA:09:04 X509v3 Authority Key Identifier: keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:80:16:dc:a9:93:0e:53:ce:5b:2c:fe:93:f2:36:43:5a:03: 5e:52:db:23:e6:f3:3f:08:97:aa:b9:1d:10:c4:a5:86:8c:47: 62:4c:ef:1b:53:17:06:64:c6:8e:38:b7:31:2e:16:ea:f8:87: ec:f2:80:23:52:3b:bb:6a:11:dd:8d:49:42:f2:b9:8e:05:90: 0b:79:a9:80:62:0e:e2:d3:77:d6:a4:b6:57:e9:44:7b:ad:3d: 76:3e:1a:ad:5c:a9:27:1b:3d:31:5b:dd:95:49:a6:a9:17:47: ac:80:e0:5a:cf:83:1f:f9:41:58:90:ec:1b:df:f5:92:a4:b0: 93:99:e8:f8:71:18:67:be:bc:77:17:c6:5f:c5:9a:97:b0:df: 5d:0b:a4:ba:c3:1c:df:4b:b3:d8:f0:c8:74:49:fc:f0:6a:22: 13:79:66:5b:c5:89:8c:85:7e:e6:90:f4:21:23:0a:e8:ee:70: 7d:d0:b4:3d:4b:40:8d:57:81:90:9c:62:7a:89:56:be:57:f7: 33:d6:c4:08:08:4b:93:bc:19:ce:5d:7e:25:61:4b:a1:86:33: 59:80:db:8b:27:38:b4:c7:40:30:34:3d:e9:37:cc:83:87:f9: 75:21:f0:d8:9e:71:ca:36:5a:c1:e9:6d:53:7c:53:86:43:91: 04:9e:cb:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+o0Dqf7PwEE0P8b5m3rfMLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw MDhhZWMwHhcNMjYwNzI4MTMwMDQ2WhcNMjYwNzI5MTMwMDQ2WjAzMTEwLwYDVQQD EyhlYzkxZDQzYTdmN2ViZDQzN2YyZTYwMWRiMWI4Y2NlNGFjYmEwOTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi/pzE03xUim6LTsHaPKjyLr0ar7 UPRMtPWP1FFRCoESaR5OfJI2hRG7agWhx88pEJgUVy07m5rLEFhc4SOaddml6/HO gzJAi7QrUA6mpFn0HQNL2d7GH6f9ScIrdsRciT0Ua0a0I5Mc+5ajwCoIZ8sF5zqj f2pww1akDtBSggbBpQd/WYSGhYNsO03zNbQPdDUX7+0y1iYcidNr7Upm6qtM7Dol kT5VtnOIjPkBjlCjmnbA1tEurYHNx4BsRpJOARNdxRsrZi/9SKZp9TTkuA0MNeRA KxJqZnER4w1HTtzMDkw47l4BRNhYlcjPcxdcIGLXXheI6ADRjDmHD1K+5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyR1Dp/fr1Dfy5gHbG4zOSsugkEMB8GA1UdIwQY MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt YjA3ZDg0MTZhZTRhLzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIAW3KmT DlPOWyz+k/I2Q1oDXlLbI+bzPwiXqrkdEMSlhoxHYkzvG1MXBmTGjji3MS4W6viH 7PKAI1I7u2oR3Y1JQvK5jgWQC3mpgGIO4tN31qS2V+lEe609dj4arVypJxs9MVvd lUmmqRdHrIDgWs+DH/lBWJDsG9/1kqSwk5no+HEYZ768dxfGX8Wal7DfXQukusMc 30uz2PDIdEn88GoiE3lmW8WJjIV+5pD0ISMK6O5wfdC0PUtAjVeBkJxieolWvlf3 M9bECAhLk7wZzl1+JWFLoYYzWYDbiyc4tMdAMDQ96TfMg4f5dSHw2J5xyjZawelt U3xThkORBJ7L9w== -----END CERTIFICATE-----Generated at Tue Jul 28 21:42:45 2026 by rpki-client