$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft File: EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json) Hash identifier: Nz04PSx2/3letyUaBwqGHT3/lBr6TIhnWOcJFh57ITI= Subject key identifier: 5C:C6:93:1A:CC:DC:91:C5:31:01:3F:03:A1:4A:E9:FC:80:93:5E:AE Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 019F8EA2656F707CA2109C96F8FFFA6E7B53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft Manifest number: 19CE Signing time: Thu 23 Jul 2026 11:00:35 +0000 Manifest this update: Thu 23 Jul 2026 11:00:35 +0000 Manifest next update: Fri 24 Jul 2026 11:00:35 +0000 Files and hashes: 1: 5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa (hash: c54pJsIlOXW3V5kUxXIRsQeC6LHU4KLVPi5buVcibgA=) 2: BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa (hash: PQjNFAf7Xm48R/Vs0yAXVjhN/qJRsvV6yxIaJlLeL4g=) 3: DM1I6XvxMm1oW563FlX35pgJc4I.asa (hash: bqI7LUo5gnXdb/YhK/ZUHJ9RBqqCl7/im+dzoqa/sRg=) 4: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: M2xerNfUafEuASkAAKY2J6VLuYWXUSiq7Qc7E/EXf1o=) 5: H98sQWnP8G2xj5s4d1Vc8LtlcnE.asa (hash: 8GWEpBPTzGw/8qBdCLe/p4fnHXdFfa2DtPiMc2zduBk=) 6: Mmf9iM-_r8-8_72c9w_YpkVxNcc.asa (hash: k9FBf0lfIGm0CeilJQGz+ucSfZPD15fjm1nPffsNVfo=) 7: PDvQj2LXTs9s-VP7HUqBEd5JnG4.asa (hash: k2sGYwWP3giEPvO0KodpuGTokoksG0nwH43zEhuEcpA=) 8: Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa (hash: UzUZm1Wl75Vh5Ryan69XiXnKqwgvWJFWzAMetkj80e4=) 9: YnZmmQc5Cy0g5wDU0qFabNwALig.asa (hash: xXOI/K8NCOaj+/uJsMaVZT7Q7qH5hRdbbfr9TqbZWq4=) 10: lo5CuUn6KYthSSJ0JuTW6pdjhj8.asa (hash: eIPKlqsvVegPXqVxpzyVoeYK0GG8XvbcCgUygdwYgwU=) 11: rXAKYgvNCxNYHLVUiPKumhUgFdA.roa (hash: QwI/CURdPgAcJ5pZC863YtCdDvn1JRCVbK5OYuNsc/o=) 12: tTZ9S0dCWBDHik__qcwSp9QHBUI.roa (hash: cr8Hr9mBGK1u9J7drnWyVHlm9qTXNpv9oeN2OtqiV5Y=) 13: tsOLojc0SchxUUQXbch659fhNo8.asa (hash: VuwN0whQKrE0eMWnthSL2+DFF7CMuW4vDb5l1eTHZTs=) 14: zqNXKkeUMuTQJw20ff-7r2jRyGk.roa (hash: O2OK099UBcGWYmLHL0lDgCBhx041zWv28uU/Za00LT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 11:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:a2:65:6f:70:7c:a2:10:9c:96:f8:ff:fa:6e:7b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Jul 23 11:00:35 2026 GMT Not After : Jul 24 11:00:35 2026 GMT Subject: CN=5cc6931accdc91c531013f03a14ae9fc80935eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:68:e6:9a:fc:31:7d:c0:1f:67:38:fb:e6:da: 33:88:cf:25:04:4b:1f:cd:33:dd:96:29:a6:cf:dd: eb:33:c2:30:2c:c7:83:50:1b:6e:44:57:02:14:6d: 5c:91:3d:58:c9:49:97:1e:6d:00:c4:30:ca:fe:05: ef:cd:d3:14:1a:1c:1a:dd:00:c0:d1:69:44:c7:6f: b9:7a:0c:da:dc:41:85:01:3d:3b:29:be:16:38:9d: 6b:03:81:22:3d:08:95:bb:ac:87:97:d4:49:67:83: 9b:85:31:ac:8b:29:d1:45:9e:72:3a:f1:98:2a:81: bc:5e:6e:83:4e:c4:fd:52:4a:a6:8e:cb:37:7d:b2: fe:21:e3:b9:a9:de:9f:3e:95:99:16:55:01:52:14: 83:73:8a:72:36:17:87:37:f8:c2:1c:ed:43:0c:e9: 22:b6:a9:2f:11:54:24:f2:88:ff:4b:50:65:9d:39: 4b:5f:11:5b:95:28:cf:bb:d8:f1:a3:e5:92:18:9a: ec:41:e0:4e:96:63:13:58:c1:7c:04:14:e8:55:68: 17:8c:4a:5c:07:a3:13:cb:80:17:44:f1:22:c0:ac: 78:f8:f6:59:1e:85:cd:e5:0b:60:20:30:d3:2d:91: de:3e:79:70:82:31:99:fe:cc:4e:eb:f2:03:ad:a2: 9e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C6:93:1A:CC:DC:91:C5:31:01:3F:03:A1:4A:E9:FC:80:93:5E:AE X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:43:82:ba:f7:92:43:6a:e3:ff:3a:95:83:2d:8b:a2:86:a1: be:26:b6:09:e5:4e:af:ee:ff:91:93:fd:60:a7:2f:ac:4f:2e: 1b:1f:1d:4a:6b:e8:0c:58:a5:25:2c:e5:03:68:ab:ad:55:fb: 91:09:c4:36:79:03:bf:78:c0:7b:91:96:b8:c3:5b:6f:7b:ca: 52:d5:88:18:36:51:d6:97:3c:ca:39:ee:24:07:c8:35:f0:eb: 48:75:e8:90:91:7e:0c:6f:19:2e:91:11:39:2b:c6:fa:9d:83: 12:9f:99:0d:80:57:9b:8a:f5:d9:66:05:e8:8a:1d:9e:1f:3e: f1:20:a5:03:32:2f:85:28:40:4c:ae:f2:58:a3:b9:69:ad:9f: 99:51:fc:a2:7b:05:46:fb:4f:f5:6f:3e:02:fa:46:00:d1:92: bb:01:96:9b:16:a5:b1:e4:c8:8a:e6:83:1e:3d:ae:d5:ea:b0: 67:f6:84:5b:e5:b4:16:4f:a0:5a:6e:6a:70:a1:87:9d:05:d7: d4:ef:ee:0e:48:76:8e:af:dc:01:ac:03:80:96:1d:73:6e:3d: bc:2e:d3:67:35:52:0e:1f:d5:87:36:3e:48:c8:f6:c0:49:e4: 0d:16:a5:82:70:63:74:a7:62:40:9d:50:1c:9e:0c:eb:8f:b1: 1e:e2:72:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+OomVvcHyiEJyW+P/6bntTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjYwNzIzMTEwMDM1WhcNMjYwNzI0MTEwMDM1WjAzMTEwLwYDVQQD Eyg1Y2M2OTMxYWNjZGM5MWM1MzEwMTNmMDNhMTRhZTlmYzgwOTM1ZWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GjmmvwxfcAfZzj75toziM8lBEsf zTPdlimmz93rM8IwLMeDUBtuRFcCFG1ckT1YyUmXHm0AxDDK/gXvzdMUGhwa3QDA 0WlEx2+5egza3EGFAT07Kb4WOJ1rA4EiPQiVu6yHl9RJZ4ObhTGsiynRRZ5yOvGY KoG8Xm6DTsT9Ukqmjss3fbL+IeO5qd6fPpWZFlUBUhSDc4pyNheHN/jCHO1DDOki tqkvEVQk8oj/S1BlnTlLXxFblSjPu9jxo+WSGJrsQeBOlmMTWMF8BBToVWgXjEpc B6MTy4AXRPEiwKx4+PZZHoXN5QtgIDDTLZHePnlwgjGZ/sxO6/IDraKehwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzGkxrM3JHFMQE/A6FK6fyAk16uMB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkOCuveS Q2rj/zqVgy2Looahvia2CeVOr+7/kZP9YKcvrE8uGx8dSmvoDFilJSzlA2irrVX7 kQnENnkDv3jAe5GWuMNbb3vKUtWIGDZR1pc8yjnuJAfINfDrSHXokJF+DG8ZLpER OSvG+p2DEp+ZDYBXm4r12WYF6Iodnh8+8SClAzIvhShATK7yWKO5aa2fmVH8onsF RvtP9W8+AvpGANGSuwGWmxalseTIiuaDHj2u1eqwZ/aEW+W0Fk+gWm5qcKGHnQXX 1O/uDkh2jq/cAawDgJYdc249vC7TZzVSDh/VhzY+SMj2wEnkDRalgnBjdKdiQJ1Q HJ4M64+xHuJyMw== -----END CERTIFICATE-----Generated at Thu Jul 23 19:10:54 2026 by rpki-client