$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft File: AOT2p3Not87P5nIgtDZXax4Aiuw.mft (raw, json) Hash identifier: tFSSGRihMOyI3VBpLvLQveZ90pYmotOmJ+vqcWzeJ7Q= Subject key identifier: BF:B7:40:30:7D:E3:74:0F:80:2D:85:FF:83:3B:73:07:83:AB:20:B7 Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec Certificate serial: 01A0BF55633A85C888A2CC358276146C7DE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft Manifest number: 1B74 Signing time: Sun 20 Sep 2026 15:00:39 +0000 Manifest this update: Sun 20 Sep 2026 15:00:39 +0000 Manifest next update: Mon 21 Sep 2026 15:00:39 +0000 Files and hashes: 1: 1-7-GRl1DpJL9MX_Eh7vVlgQAtds.roa (hash: qBQ+Yv34RT+76LqwEUvZMWK4vq87p/Tm5N2E03sJUtE=) 2: AOT2p3Not87P5nIgtDZXax4Aiuw.crl (hash: x09wscNLiLt8AlwfxcLatXN37Gj/8con6bUhB3HelWQ=) 3: CP1700xQhoIo0eqZb96w49fwMZU.roa (hash: FhGMMmXWb4O7zbwANRuKCF/ES8PwzOmEkZV99iTN5xU=) 4: Iz8oQHvYY4N1cu4pgE3299ogM34.roa (hash: GTn6Y+DWEw4+IcATVORnDqgcpHWD0i8V9c7BBTnRM3U=) 5: MQ0e7OQgina0hHLbzkJJI7ocRMY.roa (hash: lYlPT7y2KTJ0qjKzQaLtDJlIn+M8xo18ZCJuzXN583Y=) 6: VcGOwSBLa8MeclenBwYCnJTkc6Q.roa (hash: ZpKqr8OOjlncepBvaT8KeQio9IThw68qGgH8coHhuVI=) 7: Xz8NNPcwcbory7as6Ave10IA4JA.roa (hash: z5bOCkGPcZVWVT8GO8Oi8SD61/vp8fiHd8FKi8PaCyo=) 8: gF0x-IgTBvCJCERAByN93AH9MjM.roa (hash: f9L9sZ2MryoARd93KF5kcE6ImNuSL3mNiWJ8yZc3d58=) 9: hA7LNPaezAwAsnv8p24InC1StUs.roa (hash: sgot3XzV393nfZR0qz24zPh8wm14Ry5Q6R+/B3dzmWI=) 10: hGF5HckbV_mO1zNnnUvLaxvGgg0.roa (hash: LswWVKDsb8V0ubfBEeUCi7BkiOP6J97pjosqCGNORUk=) 11: oPPgaBYxfthIjxyRNKKvuQhADcA.roa (hash: vJpx4imZl2f0ZsJVLjSi4WZMmzQUNNlQIXHfoEUu3/k=) 12: psdxNS9e9UAm4jnMurOBj_7r3SE.roa (hash: DmgbB+oJGANiMlAsSILkh1J4OQmbWXdSoCr006Xmwis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 15:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:55:63:3a:85:c8:88:a2:cc:35:82:76:14:6c:7d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec Validity Not Before: Sep 20 15:00:39 2026 GMT Not After : Sep 21 15:00:39 2026 GMT Subject: CN=bfb740307de3740f802d85ff833b730783ab20b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e7:70:cf:da:8b:36:4a:2f:6b:f5:68:01:2a: 51:de:12:d6:bb:8b:61:8c:3f:0d:cf:f3:df:36:84: ed:47:57:97:20:fd:76:1c:97:12:a9:c6:80:c0:e2: 3f:32:dc:2a:f2:7f:90:fb:56:cd:8d:d4:57:aa:e3: 3f:cd:f6:3e:a3:ce:0c:2f:a7:f1:ed:65:5e:ec:17: 6c:de:3a:3e:d0:84:0e:da:4f:09:4d:06:fd:1d:dd: 94:c3:05:f6:b4:4b:39:a4:7f:82:bf:e1:e8:8b:a2: 2a:24:08:b7:4e:a9:f6:dd:cd:69:9b:d9:e2:82:6b: f7:73:b4:28:f8:cc:a4:81:53:b5:82:e7:bb:16:c4: 9c:74:3e:61:d8:5a:61:13:b6:d0:6a:83:b7:77:31: 45:36:61:d6:cb:c8:7e:0c:4a:e9:71:d9:34:bf:bd: c9:29:af:e8:94:e5:0b:4a:83:92:c2:54:68:67:bf: 26:4d:25:c5:bf:ed:d1:5b:31:69:8c:8b:82:21:7d: ac:86:c5:5c:04:6f:32:1a:b7:13:4b:fe:71:11:e7: 55:fd:c8:5c:6e:9f:1e:8d:8f:1b:57:e6:eb:20:f0: f3:54:5e:7f:6e:43:b4:18:ef:44:f0:83:a2:f3:ec: 9d:96:32:54:45:b5:ec:5d:29:fe:25:31:9d:c5:8a: 50:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B7:40:30:7D:E3:74:0F:80:2D:85:FF:83:3B:73:07:83:AB:20:B7 X509v3 Authority Key Identifier: keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:e3:b8:a0:7f:0f:e3:41:2d:61:1b:6c:59:ec:38:5a:a3:3f: 66:49:85:bf:a0:73:ff:a8:c4:1f:e0:ac:88:ed:3f:53:cd:a4: 55:7b:83:6b:4a:8c:c5:63:c3:7b:38:34:0e:4d:08:e3:26:f1: 82:fe:40:a4:e4:e8:0f:83:e4:3f:7e:82:21:a8:6d:51:f2:3e: 19:ed:5b:32:5d:8d:86:5b:7a:27:37:01:55:2f:5c:a1:a5:52: 01:e6:61:14:d1:e8:00:00:3d:bf:40:49:b4:e4:2c:15:7f:97: 64:b4:65:e0:af:50:04:1b:fd:8c:80:0f:fa:04:18:28:8e:57: bb:cc:16:e6:b6:56:b6:13:bd:2f:95:2f:c9:4b:18:0f:77:b8: fe:8a:a6:6b:ae:43:c6:ec:7c:65:ab:56:a8:40:b8:bc:eb:f6: 35:86:c2:c2:f8:4d:fb:08:30:92:41:70:b6:49:98:a2:0a:52: 8e:5b:28:3c:2f:7f:d8:a4:ef:fc:9a:28:38:31:2d:6d:42:0c: 2e:44:9a:c6:09:13:64:29:d2:96:78:f9:37:24:b9:06:d9:77: 12:5e:f5:26:3b:d2:18:82:8a:1d:42:21:cb:86:c8:39:04:59: 82:45:7b:ea:ed:fd:33:f3:12:c4:14:24:92:7d:a2:ff:93:74: 33:90:5b:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/VWM6hciIosw1gnYUbH3mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw MDhhZWMwHhcNMjYwOTIwMTUwMDM5WhcNMjYwOTIxMTUwMDM5WjAzMTEwLwYDVQQD EyhiZmI3NDAzMDdkZTM3NDBmODAyZDg1ZmY4MzNiNzMwNzgzYWIyMGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqedwz9qLNkova/VoASpR3hLWu4th jD8Nz/PfNoTtR1eXIP12HJcSqcaAwOI/Mtwq8n+Q+1bNjdRXquM/zfY+o84ML6fx 7WVe7Bds3jo+0IQO2k8JTQb9Hd2UwwX2tEs5pH+Cv+Hoi6IqJAi3Tqn23c1pm9ni gmv3c7Qo+MykgVO1gue7FsScdD5h2FphE7bQaoO3dzFFNmHWy8h+DErpcdk0v73J Ka/olOULSoOSwlRoZ78mTSXFv+3RWzFpjIuCIX2shsVcBG8yGrcTS/5xEedV/chc bp8ejY8bV+brIPDzVF5/bkO0GO9E8IOi8+ydljJURbXsXSn+JTGdxYpQ+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+3QDB943QPgC2F/4M7cweDqyC3MB8GA1UdIwQY MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt YjA3ZDg0MTZhZTRhLzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3OO4oH8P 40EtYRtsWew4WqM/ZkmFv6Bz/6jEH+CsiO0/U82kVXuDa0qMxWPDezg0Dk0I4ybx gv5ApOToD4PkP36CIahtUfI+Ge1bMl2Nhlt6JzcBVS9coaVSAeZhFNHoAAA9v0BJ tOQsFX+XZLRl4K9QBBv9jIAP+gQYKI5Xu8wW5rZWthO9L5UvyUsYD3e4/oqma65D xux8ZatWqEC4vOv2NYbCwvhN+wgwkkFwtkmYogpSjlsoPC9/2KTv/JooODEtbUIM LkSaxgkTZCnSlnj5NyS5Btl3El71JjvSGIKKHUIhy4bIOQRZgkV76u39M/MSxBQk kn2i/5N0M5BbQg== -----END CERTIFICATE-----Generated at Mon Sep 21 03:00:41 2026 by rpki-client