$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft File: EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json) Hash identifier: jNWkPu4DstnhLn5nvPGLddWNIeuDs4UPxkeeHcHl5Kc= Subject key identifier: D8:02:CA:E0:54:B5:37:8C:C7:29:0F:29:24:19:FD:B1:AF:84:9F:25 Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 019D25BA2E1EB0E77EF5806C6BF01AB83463 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft Manifest number: 188E Signing time: Wed 25 Mar 2026 16:00:51 +0000 Manifest this update: Wed 25 Mar 2026 16:00:51 +0000 Manifest next update: Thu 26 Mar 2026 16:00:51 +0000 Files and hashes: 1: 5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa (hash: c54pJsIlOXW3V5kUxXIRsQeC6LHU4KLVPi5buVcibgA=) 2: BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa (hash: PQjNFAf7Xm48R/Vs0yAXVjhN/qJRsvV6yxIaJlLeL4g=) 3: DM1I6XvxMm1oW563FlX35pgJc4I.asa (hash: bqI7LUo5gnXdb/YhK/ZUHJ9RBqqCl7/im+dzoqa/sRg=) 4: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: JzdzlZWOjAD0bQ8a8s659d4rKCJCXAP9kXAWVjv1GO8=) 5: Mmf9iM-_r8-8_72c9w_YpkVxNcc.asa (hash: k9FBf0lfIGm0CeilJQGz+ucSfZPD15fjm1nPffsNVfo=) 6: Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa (hash: UzUZm1Wl75Vh5Ryan69XiXnKqwgvWJFWzAMetkj80e4=) 7: rXAKYgvNCxNYHLVUiPKumhUgFdA.roa (hash: QwI/CURdPgAcJ5pZC863YtCdDvn1JRCVbK5OYuNsc/o=) 8: tTZ9S0dCWBDHik__qcwSp9QHBUI.roa (hash: cr8Hr9mBGK1u9J7drnWyVHlm9qTXNpv9oeN2OtqiV5Y=) 9: tsOLojc0SchxUUQXbch659fhNo8.asa (hash: VuwN0whQKrE0eMWnthSL2+DFF7CMuW4vDb5l1eTHZTs=) 10: zqNXKkeUMuTQJw20ff-7r2jRyGk.roa (hash: O2OK099UBcGWYmLHL0lDgCBhx041zWv28uU/Za00LT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:ba:2e:1e:b0:e7:7e:f5:80:6c:6b:f0:1a:b8:34:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Mar 25 16:00:51 2026 GMT Not After : Mar 26 16:00:51 2026 GMT Subject: CN=d802cae054b5378cc7290f292419fdb1af849f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:29:74:8b:bd:8e:4e:5e:12:4a:14:16:df:82: 9b:14:26:9f:42:7e:67:e1:0a:6f:3e:60:63:a8:43: fe:8f:41:72:7f:8f:40:8a:cf:03:dd:36:85:be:08: 62:02:59:4a:8b:3d:07:9f:3e:03:f2:dd:7f:d7:63: 84:51:aa:16:9b:6d:ca:31:00:e3:61:a9:c1:81:92: 26:4d:55:a6:00:b5:5a:4b:51:8f:3b:22:22:ea:90: dd:67:7e:a2:13:71:64:4a:08:81:49:2f:f3:98:81: a5:02:f6:05:59:f5:a7:73:61:1b:22:d4:53:36:4a: f2:ec:26:f5:eb:c8:27:f9:d6:03:96:3c:c1:87:d6: b4:2f:86:54:52:05:5c:d9:68:21:62:b0:33:38:ef: 18:30:25:7d:d0:d6:00:8e:5b:ad:ba:29:7d:30:52: 31:ec:2a:ae:3d:6b:5f:47:90:14:38:d7:9c:db:01: 47:f7:7e:2b:f0:61:6b:ae:e6:4b:a3:9d:85:b2:eb: e7:df:d4:06:31:fc:f4:1a:df:c4:d1:11:c6:8b:45: b8:23:4c:ac:59:97:cf:df:de:75:6b:89:5f:c4:cb: 03:28:3b:8f:ef:d1:f4:ce:0d:78:74:e3:3c:24:8c: 36:89:a0:6c:f0:e4:c3:dd:d8:12:13:30:52:2f:d0: de:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:02:CA:E0:54:B5:37:8C:C7:29:0F:29:24:19:FD:B1:AF:84:9F:25 X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:49:0a:4f:d9:16:63:2b:82:d8:cb:f7:6a:a8:1c:3e:2c:aa: f7:31:3b:b1:78:54:80:21:ef:88:2c:cb:e6:19:ed:6d:72:6c: 19:6d:42:14:72:26:ab:0e:73:bc:79:19:ed:dc:e6:55:10:69: 4e:59:ac:63:5f:b2:96:1f:03:2e:e5:42:20:e4:59:4e:90:35: 1e:c1:38:13:9e:25:ec:d3:b6:11:bf:66:0a:25:d2:62:c8:49: 03:8f:d9:1f:82:89:67:9f:23:9c:06:2b:7f:08:b5:5e:45:28: 63:cb:63:6e:45:7b:4a:af:8d:33:4e:ad:7b:7a:e5:c2:d2:c1: c2:4c:17:b9:8b:56:c6:69:3f:42:ce:46:3a:f2:94:1e:a9:a8: 53:21:83:b3:ed:a9:82:42:26:ab:b4:a5:9b:92:8f:fd:c9:65: 09:d3:d5:b5:77:fa:4d:2f:84:a1:11:d7:30:03:87:9f:49:df: 24:20:95:ff:82:04:66:c0:75:ee:11:fe:32:07:49:50:0d:ab: 0f:d2:50:4a:82:a8:93:b5:37:d6:3c:e4:eb:e5:04:3f:2e:ae: ca:0f:f7:fa:44:78:cb:8f:33:0c:0e:35:60:9f:f7:0b:6c:28: 42:f8:9d:7d:61:37:e1:ff:bf:db:3e:ae:85:6d:96:24:93:bc: 2a:32:09:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lui4esOd+9YBsa/AauDRjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjYwMzI1MTYwMDUxWhcNMjYwMzI2MTYwMDUxWjAzMTEwLwYDVQQD EyhkODAyY2FlMDU0YjUzNzhjYzcyOTBmMjkyNDE5ZmRiMWFmODQ5ZjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1il0i72OTl4SShQW34KbFCafQn5n 4QpvPmBjqEP+j0Fyf49Ais8D3TaFvghiAllKiz0Hnz4D8t1/12OEUaoWm23KMQDj YanBgZImTVWmALVaS1GPOyIi6pDdZ36iE3FkSgiBSS/zmIGlAvYFWfWnc2EbItRT Nkry7Cb168gn+dYDljzBh9a0L4ZUUgVc2WghYrAzOO8YMCV90NYAjlutuil9MFIx 7CquPWtfR5AUONec2wFH934r8GFrruZLo52Fsuvn39QGMfz0Gt/E0RHGi0W4I0ys WZfP3951a4lfxMsDKDuP79H0zg14dOM8JIw2iaBs8OTD3dgSEzBSL9De/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgCyuBUtTeMxykPKSQZ/bGvhJ8lMB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkkKT9kW YyuC2Mv3aqgcPiyq9zE7sXhUgCHviCzL5hntbXJsGW1CFHImqw5zvHkZ7dzmVRBp TlmsY1+ylh8DLuVCIORZTpA1HsE4E54l7NO2Eb9mCiXSYshJA4/ZH4KJZ58jnAYr fwi1XkUoY8tjbkV7Sq+NM06te3rlwtLBwkwXuYtWxmk/Qs5GOvKUHqmoUyGDs+2p gkImq7Slm5KP/cllCdPVtXf6TS+EoRHXMAOHn0nfJCCV/4IEZsB17hH+MgdJUA2r D9JQSoKok7U31jzk6+UEPy6uyg/3+kR4y48zDA41YJ/3C2woQvidfWE34f+/2z6u hW2WJJO8KjIJRA== -----END CERTIFICATE-----Generated at Wed Mar 25 21:24:38 2026 by rpki-client