$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft File: AOT2p3Not87P5nIgtDZXax4Aiuw.mft (raw, json) Hash identifier: 1bODC9t2JBVuHa944REUM4sQ5T15BV1VupPuiGLpHkc= Subject key identifier: 54:CE:47:CE:80:87:75:C5:E9:2F:E4:15:40:DE:FB:9A:CA:6C:22:1E Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec Certificate serial: 01A0D4940A790BD06E28920B1D6BB30DF72D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft Manifest number: 1B7F Signing time: Thu 24 Sep 2026 18:01:06 +0000 Manifest this update: Thu 24 Sep 2026 18:01:06 +0000 Manifest next update: Fri 25 Sep 2026 18:01:06 +0000 Files and hashes: 1: 1-7-GRl1DpJL9MX_Eh7vVlgQAtds.roa (hash: qBQ+Yv34RT+76LqwEUvZMWK4vq87p/Tm5N2E03sJUtE=) 2: AOT2p3Not87P5nIgtDZXax4Aiuw.crl (hash: ojusxcyXqSlw1bYwiyFJEpxy6nlLh1B45rw5ClI3uzQ=) 3: CP1700xQhoIo0eqZb96w49fwMZU.roa (hash: FhGMMmXWb4O7zbwANRuKCF/ES8PwzOmEkZV99iTN5xU=) 4: Iz8oQHvYY4N1cu4pgE3299ogM34.roa (hash: GTn6Y+DWEw4+IcATVORnDqgcpHWD0i8V9c7BBTnRM3U=) 5: MQ0e7OQgina0hHLbzkJJI7ocRMY.roa (hash: lYlPT7y2KTJ0qjKzQaLtDJlIn+M8xo18ZCJuzXN583Y=) 6: VcGOwSBLa8MeclenBwYCnJTkc6Q.roa (hash: ZpKqr8OOjlncepBvaT8KeQio9IThw68qGgH8coHhuVI=) 7: Xz8NNPcwcbory7as6Ave10IA4JA.roa (hash: z5bOCkGPcZVWVT8GO8Oi8SD61/vp8fiHd8FKi8PaCyo=) 8: gF0x-IgTBvCJCERAByN93AH9MjM.roa (hash: f9L9sZ2MryoARd93KF5kcE6ImNuSL3mNiWJ8yZc3d58=) 9: hA7LNPaezAwAsnv8p24InC1StUs.roa (hash: sgot3XzV393nfZR0qz24zPh8wm14Ry5Q6R+/B3dzmWI=) 10: hGF5HckbV_mO1zNnnUvLaxvGgg0.roa (hash: LswWVKDsb8V0ubfBEeUCi7BkiOP6J97pjosqCGNORUk=) 11: oPPgaBYxfthIjxyRNKKvuQhADcA.roa (hash: vJpx4imZl2f0ZsJVLjSi4WZMmzQUNNlQIXHfoEUu3/k=) 12: psdxNS9e9UAm4jnMurOBj_7r3SE.roa (hash: DmgbB+oJGANiMlAsSILkh1J4OQmbWXdSoCr006Xmwis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d4:94:0a:79:0b:d0:6e:28:92:0b:1d:6b:b3:0d:f7:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec Validity Not Before: Sep 24 18:01:06 2026 GMT Not After : Sep 25 18:01:06 2026 GMT Subject: CN=54ce47ce808775c5e92fe41540defb9aca6c221e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b2:32:03:9a:f7:22:56:0a:8a:d1:e9:77:ad: 58:64:48:a7:e4:29:d2:4f:58:3d:8b:66:48:88:4c: d7:c5:44:f7:a2:17:ed:2e:cc:8c:73:6d:f9:0d:9f: f3:70:8b:23:6d:0e:e6:38:c3:eb:5e:8f:eb:7d:be: eb:ca:00:d7:ec:0c:b5:d3:bc:01:1a:9e:98:e6:41: 37:b0:03:e0:db:59:dc:bc:3b:93:3a:c9:b5:ea:e9: cc:11:e1:ea:51:ff:48:a1:2d:2b:12:7d:43:88:9c: 5d:4d:04:01:b1:91:91:dc:2a:41:cf:3c:1b:2e:f8: 45:f1:de:19:c8:62:c0:f6:10:85:c8:fe:de:00:b9: 60:a1:dc:9b:a7:ec:fc:67:b7:c2:90:cb:cf:14:f8: 2d:47:a9:78:ae:b7:1e:ba:44:8d:f5:b9:2f:f9:de: 17:36:cb:37:91:c3:e8:ce:c8:76:61:4e:fa:e9:42: 9c:41:e3:a6:25:1e:bb:51:83:5b:3a:46:ed:da:b6: 80:88:42:05:48:0a:47:22:23:d6:d5:85:eb:94:ec: 3e:56:9a:0f:da:bc:40:bb:18:f6:34:69:ee:51:04: 40:e9:88:06:cb:15:a2:57:2e:88:32:dd:30:16:f4: e7:02:3d:77:84:95:b8:00:b2:04:05:af:5a:3c:7b: bd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CE:47:CE:80:87:75:C5:E9:2F:E4:15:40:DE:FB:9A:CA:6C:22:1E X509v3 Authority Key Identifier: keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:c5:c2:bf:1d:9f:63:13:e9:2b:15:05:36:24:bd:5c:ba:3e: 5c:46:6e:90:d7:7e:25:1c:9b:62:a4:0d:39:de:40:29:54:2a: 1d:23:0d:32:3b:af:30:20:bf:ea:ea:e4:bd:41:fd:ec:61:05: a5:fc:a3:ec:f3:a4:f7:39:66:73:16:6c:b4:be:b7:90:75:ff: 3a:57:fe:ad:59:06:22:9e:f7:e6:f3:33:b3:df:14:7d:a7:4f: 72:b4:c0:2f:7b:ad:e0:30:7f:cb:19:d2:0e:65:a6:22:13:be: 2e:83:29:cf:dc:69:30:e3:d3:c8:4d:4f:90:1c:d4:40:9e:e8: 83:ea:cb:6f:df:5d:18:b0:fe:e8:2f:f9:55:4b:74:ef:ed:5c: cd:ee:65:0c:64:25:55:d1:68:85:26:78:3b:99:50:2f:43:9c: 9d:b5:45:db:62:d5:1d:cd:ab:00:88:83:c4:f9:91:f5:98:14: 4a:28:79:e8:f9:1d:c1:b1:fa:bc:67:f4:9f:15:1e:a5:30:e1: 04:45:6d:8c:7a:ae:eb:c8:d8:6a:91:10:e6:f2:ae:1c:78:c9: 55:d1:1e:77:ac:ac:6b:0b:51:74:fe:49:e6:a7:34:cb:cd:fb: 2e:ff:aa:5f:76:19:bf:7d:fa:b2:d2:10:d4:a1:12:c5:16:b2: 02:05:19:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDUlAp5C9BuKJILHWuzDfctMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw MDhhZWMwHhcNMjYwOTI0MTgwMTA2WhcNMjYwOTI1MTgwMTA2WjAzMTEwLwYDVQQD Eyg1NGNlNDdjZTgwODc3NWM1ZTkyZmU0MTU0MGRlZmI5YWNhNmMyMjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubIyA5r3IlYKitHpd61YZEin5CnS T1g9i2ZIiEzXxUT3ohftLsyMc235DZ/zcIsjbQ7mOMPrXo/rfb7rygDX7Ay107wB Gp6Y5kE3sAPg21ncvDuTOsm16unMEeHqUf9IoS0rEn1DiJxdTQQBsZGR3CpBzzwb LvhF8d4ZyGLA9hCFyP7eALlgodybp+z8Z7fCkMvPFPgtR6l4rrceukSN9bkv+d4X Nss3kcPozsh2YU766UKcQeOmJR67UYNbOkbt2raAiEIFSApHIiPW1YXrlOw+VpoP 2rxAuxj2NGnuUQRA6YgGyxWiVy6IMt0wFvTnAj13hJW4ALIEBa9aPHu9SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTOR86Ah3XF6S/kFUDe+5rKbCIeMB8GA1UdIwQY MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt YjA3ZDg0MTZhZTRhLzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8XCvx2f YxPpKxUFNiS9XLo+XEZukNd+JRybYqQNOd5AKVQqHSMNMjuvMCC/6urkvUH97GEF pfyj7POk9zlmcxZstL63kHX/Olf+rVkGIp735vMzs98UfadPcrTAL3ut4DB/yxnS DmWmIhO+LoMpz9xpMOPTyE1PkBzUQJ7og+rLb99dGLD+6C/5VUt07+1cze5lDGQl VdFohSZ4O5lQL0OcnbVF22LVHc2rAIiDxPmR9ZgUSih56PkdwbH6vGf0nxUepTDh BEVtjHqu68jYapEQ5vKuHHjJVdEed6ysawtRdP5J5qc0y837Lv+qX3YZv336stIQ 1KESxRayAgUZlg== -----END CERTIFICATE-----Generated at Thu Sep 24 21:39:48 2026 by rpki-client