$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft File: EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json) Hash identifier: qn/ebIXOQxqWTAdVds9yHEee2k8yl1YVR2HWlYKIj2s= Subject key identifier: 97:4D:1B:0E:CA:7B:17:4E:E6:D9:65:10:88:BA:1B:B9:E2:2A:A8:3A Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 01A0D6F0716BBBBE578F8B49DFE6104ACD8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft Manifest number: 1A78 Signing time: Fri 25 Sep 2026 05:01:16 +0000 Manifest this update: Fri 25 Sep 2026 05:01:16 +0000 Manifest next update: Sat 26 Sep 2026 05:01:16 +0000 Files and hashes: 1: 5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa (hash: c54pJsIlOXW3V5kUxXIRsQeC6LHU4KLVPi5buVcibgA=) 2: BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa (hash: PQjNFAf7Xm48R/Vs0yAXVjhN/qJRsvV6yxIaJlLeL4g=) 3: DM1I6XvxMm1oW563FlX35pgJc4I.asa (hash: bqI7LUo5gnXdb/YhK/ZUHJ9RBqqCl7/im+dzoqa/sRg=) 4: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: nAgCXQMFR+NoIARJxcxTDK9LX8mnXSBjaCaK+5xh47k=) 5: H98sQWnP8G2xj5s4d1Vc8LtlcnE.asa (hash: 8GWEpBPTzGw/8qBdCLe/p4fnHXdFfa2DtPiMc2zduBk=) 6: Mmf9iM-_r8-8_72c9w_YpkVxNcc.asa (hash: k9FBf0lfIGm0CeilJQGz+ucSfZPD15fjm1nPffsNVfo=) 7: PDvQj2LXTs9s-VP7HUqBEd5JnG4.asa (hash: k2sGYwWP3giEPvO0KodpuGTokoksG0nwH43zEhuEcpA=) 8: Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa (hash: UzUZm1Wl75Vh5Ryan69XiXnKqwgvWJFWzAMetkj80e4=) 9: YnZmmQc5Cy0g5wDU0qFabNwALig.asa (hash: xXOI/K8NCOaj+/uJsMaVZT7Q7qH5hRdbbfr9TqbZWq4=) 10: lo5CuUn6KYthSSJ0JuTW6pdjhj8.asa (hash: eIPKlqsvVegPXqVxpzyVoeYK0GG8XvbcCgUygdwYgwU=) 11: rXAKYgvNCxNYHLVUiPKumhUgFdA.roa (hash: QwI/CURdPgAcJ5pZC863YtCdDvn1JRCVbK5OYuNsc/o=) 12: tTZ9S0dCWBDHik__qcwSp9QHBUI.roa (hash: cr8Hr9mBGK1u9J7drnWyVHlm9qTXNpv9oeN2OtqiV5Y=) 13: tsOLojc0SchxUUQXbch659fhNo8.asa (hash: VuwN0whQKrE0eMWnthSL2+DFF7CMuW4vDb5l1eTHZTs=) 14: zqNXKkeUMuTQJw20ff-7r2jRyGk.roa (hash: O2OK099UBcGWYmLHL0lDgCBhx041zWv28uU/Za00LT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 05:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d6:f0:71:6b:bb:be:57:8f:8b:49:df:e6:10:4a:cd:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Sep 25 05:01:16 2026 GMT Not After : Sep 26 05:01:16 2026 GMT Subject: CN=974d1b0eca7b174ee6d9651088ba1bb9e22aa83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e5:14:8b:3e:ea:a8:5a:25:c2:2a:67:15:2a: b7:20:a3:59:3e:61:32:a9:2b:1b:66:98:ed:8f:8e: 83:df:c1:65:57:5d:de:8e:e1:fb:13:c5:61:bd:f3: c0:aa:1e:e2:55:d6:dc:5e:75:98:47:f3:0c:69:d4: 0a:bf:5f:14:26:4a:03:45:f9:0c:08:a1:7a:4d:92: aa:5a:a8:7f:05:06:bb:19:23:53:a4:53:cc:fa:be: d8:92:8b:f1:cb:a6:2e:43:6e:57:bf:d0:e1:f0:ef: b8:f1:70:70:14:78:50:e7:71:14:85:ec:a7:1c:d5: 49:18:8f:30:cc:c6:40:00:5e:c0:02:8a:cd:33:47: 3b:67:3a:cf:61:fd:b3:a5:85:a8:2c:28:42:cc:7b: 5f:32:10:8a:cf:28:a4:74:2b:32:60:88:e6:3a:85: ff:98:2d:55:53:c7:f2:b6:b4:bd:c4:1d:41:b1:9e: 83:60:32:69:e3:bd:2f:d7:8b:00:29:c1:79:9d:28: 93:34:72:ac:a9:37:be:09:09:08:bf:65:b9:c0:37: e9:ba:7b:4d:96:0b:72:7d:a1:d3:41:d9:d6:28:96: 83:05:a2:86:93:db:f4:2a:74:74:8f:42:34:8a:55: b4:f1:f3:17:94:df:46:e9:32:ae:f4:76:85:0e:31: 07:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4D:1B:0E:CA:7B:17:4E:E6:D9:65:10:88:BA:1B:B9:E2:2A:A8:3A X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:17:d1:a4:5b:4d:1f:eb:77:6f:04:7d:c0:27:4a:bc:76:9f: 75:50:0f:bd:cb:c6:67:b1:6b:f2:95:f1:54:9d:5c:09:12:a5: c3:e9:26:5f:67:5f:50:65:bb:8f:77:ba:f1:ad:5e:9d:cf:a6: f2:8a:63:ae:0d:07:00:dd:02:e4:76:59:47:7d:40:be:0d:11: bd:6a:92:64:ac:2e:27:dc:0c:de:da:aa:94:02:b7:c9:51:be: 76:ae:cf:49:6e:8a:73:31:6f:9b:e2:18:a2:f5:67:cd:53:cc: 51:07:2f:6d:e8:7e:98:39:11:70:c1:bc:67:d5:0b:36:30:0a: f5:97:f6:06:66:f7:51:7d:c4:90:b8:4c:2f:67:45:f2:a2:5d: 22:b7:9a:47:16:9e:27:f9:76:e2:02:eb:86:3f:98:34:eb:28: b3:98:03:0e:b2:e7:7c:41:e3:92:4b:2e:34:13:e3:0f:61:b1: 32:59:46:6a:95:43:71:88:d3:c6:c6:36:14:81:a5:78:67:fe: 0e:a8:58:28:ae:eb:3e:4f:2e:c7:63:26:af:64:1d:79:bc:ee: 37:17:6e:ac:f0:5f:e3:ca:c3:74:43:20:63:24:93:a1:47:8f: 40:80:d0:de:66:61:80:50:97:dc:96:78:76:b2:2a:a9:d6:b7: 03:2a:51:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDW8HFru75Xj4tJ3+YQSs2PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjYwOTI1MDUwMTE2WhcNMjYwOTI2MDUwMTE2WjAzMTEwLwYDVQQD Eyg5NzRkMWIwZWNhN2IxNzRlZTZkOTY1MTA4OGJhMWJiOWUyMmFhODNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquUUiz7qqFolwipnFSq3IKNZPmEy qSsbZpjtj46D38FlV13ejuH7E8VhvfPAqh7iVdbcXnWYR/MMadQKv18UJkoDRfkM CKF6TZKqWqh/BQa7GSNTpFPM+r7Ykovxy6YuQ25Xv9Dh8O+48XBwFHhQ53EUheyn HNVJGI8wzMZAAF7AAorNM0c7ZzrPYf2zpYWoLChCzHtfMhCKzyikdCsyYIjmOoX/ mC1VU8fytrS9xB1BsZ6DYDJp470v14sAKcF5nSiTNHKsqTe+CQkIv2W5wDfpuntN lgtyfaHTQdnWKJaDBaKGk9v0KnR0j0I0ilW08fMXlN9G6TKu9HaFDjEHFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdNGw7KexdO5tllEIi6G7niKqg6MB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhfRpFtN H+t3bwR9wCdKvHafdVAPvcvGZ7Fr8pXxVJ1cCRKlw+kmX2dfUGW7j3e68a1enc+m 8opjrg0HAN0C5HZZR31Avg0RvWqSZKwuJ9wM3tqqlAK3yVG+dq7PSW6KczFvm+IY ovVnzVPMUQcvbeh+mDkRcMG8Z9ULNjAK9Zf2Bmb3UX3EkLhML2dF8qJdIreaRxae J/l24gLrhj+YNOsos5gDDrLnfEHjkksuNBPjD2GxMllGapVDcYjTxsY2FIGleGf+ DqhYKK7rPk8ux2Mmr2QdebzuNxdurPBf48rDdEMgYySToUePQIDQ3mZhgFCX3JZ4 drIqqda3AypR6A== -----END CERTIFICATE-----Generated at Fri Sep 25 16:19:21 2026 by rpki-client