$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft File: AOT2p3Not87P5nIgtDZXax4Aiuw.mft (raw, json) Hash identifier: k6nQYQiSlc3DszymaB/AJpZ07z0ZdBYH9bWfAKXSzes= Subject key identifier: 32:7D:2C:E2:DA:68:21:1D:64:91:7C:61:5B:59:B3:20:1A:8F:B0:EE Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec Certificate serial: 01A1C70D25658E2A673D072AA40154C3447B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft Manifest number: 1BFD Signing time: Tue 10 Nov 2026 20:01:29 +0000 Manifest this update: Tue 10 Nov 2026 20:01:29 +0000 Manifest next update: Wed 11 Nov 2026 20:01:29 +0000 Files and hashes: 1: 1-7-GRl1DpJL9MX_Eh7vVlgQAtds.roa (hash: qBQ+Yv34RT+76LqwEUvZMWK4vq87p/Tm5N2E03sJUtE=) 2: AOT2p3Not87P5nIgtDZXax4Aiuw.crl (hash: XnuIhcnfbawOmNLuLbc5NT2Koy2LiKbhxYlbpPiImpA=) 3: CP1700xQhoIo0eqZb96w49fwMZU.roa (hash: FhGMMmXWb4O7zbwANRuKCF/ES8PwzOmEkZV99iTN5xU=) 4: MQ0e7OQgina0hHLbzkJJI7ocRMY.roa (hash: lYlPT7y2KTJ0qjKzQaLtDJlIn+M8xo18ZCJuzXN583Y=) 5: VcGOwSBLa8MeclenBwYCnJTkc6Q.roa (hash: ZpKqr8OOjlncepBvaT8KeQio9IThw68qGgH8coHhuVI=) 6: Xz8NNPcwcbory7as6Ave10IA4JA.roa (hash: z5bOCkGPcZVWVT8GO8Oi8SD61/vp8fiHd8FKi8PaCyo=) 7: gF0x-IgTBvCJCERAByN93AH9MjM.roa (hash: f9L9sZ2MryoARd93KF5kcE6ImNuSL3mNiWJ8yZc3d58=) 8: hA7LNPaezAwAsnv8p24InC1StUs.roa (hash: sgot3XzV393nfZR0qz24zPh8wm14Ry5Q6R+/B3dzmWI=) 9: hGF5HckbV_mO1zNnnUvLaxvGgg0.roa (hash: LswWVKDsb8V0ubfBEeUCi7BkiOP6J97pjosqCGNORUk=) 10: k6KPIXf1uYY1QuzUIH-eQtuHJNo.roa (hash: 8jqMzAY0+5jv1lPwZtcaPgmkBF2JpNlgfXRABS0//MM=) 11: oPPgaBYxfthIjxyRNKKvuQhADcA.roa (hash: vJpx4imZl2f0ZsJVLjSi4WZMmzQUNNlQIXHfoEUu3/k=) 12: vYhb6AGc-xDZmFDTEAzyKLdtLN8.roa (hash: ugbCx0tJXbSqbm0/IFdHYf2zCeC58MxvvJnLXGdXzrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Nov 2026 16:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:c7:0d:25:65:8e:2a:67:3d:07:2a:a4:01:54:c3:44:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec Validity Not Before: Nov 10 20:01:29 2026 GMT Not After : Nov 11 20:01:29 2026 GMT Subject: CN=327d2ce2da68211d64917c615b59b3201a8fb0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e9:62:c0:fe:10:41:35:b0:9b:c7:cb:f5:3b: 38:62:6a:c5:8a:2e:3c:f0:30:9b:ab:8e:7f:71:2f: e5:94:e8:72:66:70:aa:eb:0a:e3:86:02:6b:be:43: a9:26:e1:52:fc:22:78:f3:66:49:81:8d:aa:f7:79: fe:ab:e7:a1:00:a2:7e:f0:57:20:08:a9:66:c4:5e: 1d:49:0b:c1:d9:46:e7:4f:c5:1c:de:78:6c:27:dd: c9:48:15:f8:93:0d:70:98:80:86:f6:f5:4b:c2:42: 39:c8:45:a3:50:95:7f:75:72:c0:1b:44:cc:ea:f6: 3d:5e:25:e6:98:58:63:4d:70:5a:13:71:3b:f3:0c: 4e:33:90:7c:20:1f:1e:70:3f:27:e7:7a:47:a2:77: 6a:b4:39:c6:91:20:4d:bb:a6:bf:05:df:69:c9:50: cf:4f:f6:93:91:ad:03:6c:ee:d5:9e:55:8f:23:af: 47:39:66:32:a8:8f:4d:27:57:bc:fd:4b:ca:25:18: a1:a1:4c:ef:57:d5:05:e1:95:2e:d4:c4:a2:2b:a2: 67:1c:77:3d:43:57:6f:d1:07:c5:d5:22:cc:3c:f3: 28:d2:03:cb:46:b9:ca:bf:72:7c:04:84:6d:9c:bb: 38:42:d2:67:ec:71:62:a5:98:2c:fc:48:dc:77:b7: c3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7D:2C:E2:DA:68:21:1D:64:91:7C:61:5B:59:B3:20:1A:8F:B0:EE X509v3 Authority Key Identifier: keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:37:26:29:90:65:53:8f:23:dc:a1:cd:bb:16:42:8e:f2:d7: 53:50:43:3e:96:82:22:73:00:43:70:b4:13:56:3e:9d:f9:cc: b6:c3:a2:83:38:7b:76:de:42:6c:65:b4:85:dd:e6:a8:a1:a4: f4:2a:7d:c0:da:69:a4:a1:db:71:4a:6c:28:86:75:d5:ec:58: 9a:80:ec:d5:4d:24:1c:67:7e:10:38:c0:df:c8:a1:c8:d8:56: de:14:89:43:24:be:df:90:5f:91:0f:d5:33:e2:68:f8:00:48: ec:7a:ed:bb:cf:e4:93:8a:14:3f:8d:60:3e:ae:cb:70:08:42: b2:0b:f7:4c:7a:b3:38:12:eb:29:5e:22:b8:81:e9:81:95:15: 7a:95:db:e2:3e:80:3e:36:8a:34:96:82:a1:05:75:ad:ee:42: 2a:8d:f2:74:8c:b9:a9:c7:b5:4f:9d:f3:0f:9f:40:fc:91:aa: ab:90:85:e4:a6:6b:be:53:22:78:57:50:5d:e6:7a:67:3f:0e: 69:4c:5d:3f:87:36:e8:44:c1:ca:4d:5e:b2:57:98:ad:8b:ca: f6:de:d2:f7:0e:5e:c3:d4:87:ab:ab:95:a5:67:f5:6c:71:d6: c1:d9:0e:74:44:2d:04:9d:f1:e6:2f:80:7d:c2:95:a8:ab:45: 33:f8:bc:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHHDSVljipnPQcqpAFUw0R7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw MDhhZWMwHhcNMjYxMTEwMjAwMTI5WhcNMjYxMTExMjAwMTI5WjAzMTEwLwYDVQQD EygzMjdkMmNlMmRhNjgyMTFkNjQ5MTdjNjE1YjU5YjMyMDFhOGZiMGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuliwP4QQTWwm8fL9Ts4YmrFii48 8DCbq45/cS/llOhyZnCq6wrjhgJrvkOpJuFS/CJ482ZJgY2q93n+q+ehAKJ+8Fcg CKlmxF4dSQvB2UbnT8Uc3nhsJ93JSBX4kw1wmICG9vVLwkI5yEWjUJV/dXLAG0TM 6vY9XiXmmFhjTXBaE3E78wxOM5B8IB8ecD8n53pHondqtDnGkSBNu6a/Bd9pyVDP T/aTka0DbO7VnlWPI69HOWYyqI9NJ1e8/UvKJRihoUzvV9UF4ZUu1MSiK6JnHHc9 Q1dv0QfF1SLMPPMo0gPLRrnKv3J8BIRtnLs4QtJn7HFipZgs/Ejcd7fDRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJ9LOLaaCEdZJF8YVtZsyAaj7DuMB8GA1UdIwQY MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt YjA3ZDg0MTZhZTRhLzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjcmKZBl U48j3KHNuxZCjvLXU1BDPpaCInMAQ3C0E1Y+nfnMtsOigzh7dt5CbGW0hd3mqKGk 9Cp9wNpppKHbcUpsKIZ11exYmoDs1U0kHGd+EDjA38ihyNhW3hSJQyS+35BfkQ/V M+Jo+ABI7Hrtu8/kk4oUP41gPq7LcAhCsgv3THqzOBLrKV4iuIHpgZUVepXb4j6A PjaKNJaCoQV1re5CKo3ydIy5qce1T53zD59A/JGqq5CF5KZrvlMieFdQXeZ6Zz8O aUxdP4c26ETByk1esleYrYvK9t7S9w5ew9SHq6uVpWf1bHHWwdkOdEQtBJ3x5i+A fcKVqKtFM/i8mw== -----END CERTIFICATE-----Generated at Wed Nov 11 03:53:29 2026 by rpki-client