$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft File: AOT2p3Not87P5nIgtDZXax4Aiuw.mft (raw, json) Hash identifier: 1TtHR4hBpT00pvF26+0I0gKpvy3ec0eoJFav6l3+C6U= Subject key identifier: 2B:8B:2F:C9:0B:A6:BE:E7:DA:81:84:02:DD:64:2E:51:B9:61:93:1B Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec Certificate serial: 019F9391D077BC804B1E7DB35E997CB42547 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft Manifest number: 1AD4 Signing time: Fri 24 Jul 2026 10:00:34 +0000 Manifest this update: Fri 24 Jul 2026 10:00:34 +0000 Manifest next update: Sat 25 Jul 2026 10:00:34 +0000 Files and hashes: 1: 1-7-GRl1DpJL9MX_Eh7vVlgQAtds.roa (hash: qBQ+Yv34RT+76LqwEUvZMWK4vq87p/Tm5N2E03sJUtE=) 2: 1-WsLt9tKKbGh5bPdJYro7hdbfv4.roa (hash: bwEotLkWd6AAV2gsEIC8jHaD4DnocRPu1uFbzjdp2BY=) 3: 1v3HWPlunfpwP49jTOGBig4JD8Q.roa (hash: yDJ9787ATzv6jCZC6L2EDuN3dqnkLEyiRF3QmgJEwMw=) 4: AOT2p3Not87P5nIgtDZXax4Aiuw.crl (hash: LO8dvdiu/KQ3aTsJKOJBu+rRwXsxxIY/Pyw0PVBrndI=) 5: CP1700xQhoIo0eqZb96w49fwMZU.roa (hash: FhGMMmXWb4O7zbwANRuKCF/ES8PwzOmEkZV99iTN5xU=) 6: Iz8oQHvYY4N1cu4pgE3299ogM34.roa (hash: GTn6Y+DWEw4+IcATVORnDqgcpHWD0i8V9c7BBTnRM3U=) 7: MQ0e7OQgina0hHLbzkJJI7ocRMY.roa (hash: lYlPT7y2KTJ0qjKzQaLtDJlIn+M8xo18ZCJuzXN583Y=) 8: VcGOwSBLa8MeclenBwYCnJTkc6Q.roa (hash: ZpKqr8OOjlncepBvaT8KeQio9IThw68qGgH8coHhuVI=) 9: gF0x-IgTBvCJCERAByN93AH9MjM.roa (hash: f9L9sZ2MryoARd93KF5kcE6ImNuSL3mNiWJ8yZc3d58=) 10: hGF5HckbV_mO1zNnnUvLaxvGgg0.roa (hash: LswWVKDsb8V0ubfBEeUCi7BkiOP6J97pjosqCGNORUk=) 11: oPPgaBYxfthIjxyRNKKvuQhADcA.roa (hash: vJpx4imZl2f0ZsJVLjSi4WZMmzQUNNlQIXHfoEUu3/k=) 12: psdxNS9e9UAm4jnMurOBj_7r3SE.roa (hash: DmgbB+oJGANiMlAsSILkh1J4OQmbWXdSoCr006Xmwis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:93:91:d0:77:bc:80:4b:1e:7d:b3:5e:99:7c:b4:25:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec Validity Not Before: Jul 24 10:00:34 2026 GMT Not After : Jul 25 10:00:34 2026 GMT Subject: CN=2b8b2fc90ba6bee7da818402dd642e51b961931b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f6:9f:5a:db:f4:d2:72:98:af:a8:9e:d6:cb: 94:b4:d1:c9:d4:66:e2:c2:87:9e:be:3a:c8:ec:3a: 5f:57:c9:3d:ec:dc:b4:59:d4:8d:9a:d8:c1:ac:ba: e7:39:10:3d:3d:c9:1c:c3:8e:55:6f:08:82:a9:ac: fa:0a:8d:d6:0c:14:df:46:79:f4:57:ad:2a:88:7b: 9e:e5:4d:d8:b9:fa:17:81:9f:37:b5:8c:49:62:50: 80:8c:13:b5:5b:84:65:f0:78:f3:23:ef:a8:f8:2e: ad:fe:5f:a4:07:cb:e4:25:88:29:d1:ec:e7:d0:80: 3c:fc:c3:a1:ac:bd:02:f8:01:73:a3:fe:c4:6a:0c: 8f:ce:80:44:ae:6b:dc:18:e9:3f:54:61:c9:05:92: 46:99:aa:98:94:55:c0:58:86:fb:01:1d:f5:24:58: de:22:d3:39:2c:ef:bf:ec:39:2b:64:a4:95:3e:76: 95:33:e9:e0:3f:59:28:64:14:a2:f8:c6:c9:be:11: 79:9d:9c:0a:fa:07:76:00:a9:c1:29:ae:c7:24:9d: 1d:88:5d:70:81:85:e4:ed:2a:de:e4:c7:11:53:31: 9e:42:09:6b:46:2e:77:24:67:9b:5e:7b:55:04:2c: b5:4d:03:6b:99:1d:27:ac:63:db:2f:f4:26:dd:a8: cb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8B:2F:C9:0B:A6:BE:E7:DA:81:84:02:DD:64:2E:51:B9:61:93:1B X509v3 Authority Key Identifier: keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:4a:aa:8f:19:1f:24:12:b1:33:56:40:7d:a7:9a:89:bc:89: 4a:81:83:f9:91:4f:28:41:53:fb:e2:47:e9:9f:5e:4b:59:b7: cc:07:d7:34:af:b3:81:34:d9:72:22:40:5d:87:48:3b:56:76: 2e:be:2d:e5:d4:c7:91:4d:75:be:33:ac:27:5d:2f:36:4b:ab: c4:77:9e:fc:44:59:79:38:6e:a2:aa:fd:d9:cc:28:ac:b4:4a: 5e:a6:aa:94:b3:6b:98:ab:0d:fd:95:d4:4c:1e:58:8d:71:99: 7f:c8:23:3b:02:92:8d:25:4e:31:51:b8:c0:50:7b:94:92:33: 30:84:22:b1:03:2c:6b:e7:2a:1b:ad:e2:a9:66:46:95:ad:29: e6:91:43:d4:c6:b8:5a:d8:4b:22:36:48:ea:76:4f:8b:48:16: 6c:9e:b0:4e:63:d1:5b:d9:2f:67:42:12:00:4d:a7:7f:f1:59: dd:e9:b8:23:f0:18:47:f0:8c:7b:93:c5:5b:f0:99:4a:22:b2: 8b:2f:84:46:11:03:29:73:1d:06:27:07:9f:bf:4e:22:d2:70: d5:02:b8:1d:28:a9:19:8b:9b:72:0e:89:7d:b7:fb:ed:f0:19: 24:17:72:07:70:d3:7e:8a:c0:21:1e:59:ab:58:22:f6:d7:ac: 19:d5:f2:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+TkdB3vIBLHn2zXpl8tCVHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw MDhhZWMwHhcNMjYwNzI0MTAwMDM0WhcNMjYwNzI1MTAwMDM0WjAzMTEwLwYDVQQD EygyYjhiMmZjOTBiYTZiZWU3ZGE4MTg0MDJkZDY0MmU1MWI5NjE5MzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/afWtv00nKYr6ie1suUtNHJ1Gbi woeevjrI7DpfV8k97Ny0WdSNmtjBrLrnORA9Pckcw45VbwiCqaz6Co3WDBTfRnn0 V60qiHue5U3YufoXgZ83tYxJYlCAjBO1W4Rl8HjzI++o+C6t/l+kB8vkJYgp0ezn 0IA8/MOhrL0C+AFzo/7EagyPzoBErmvcGOk/VGHJBZJGmaqYlFXAWIb7AR31JFje ItM5LO+/7DkrZKSVPnaVM+ngP1koZBSi+MbJvhF5nZwK+gd2AKnBKa7HJJ0diF1w gYXk7Sre5McRUzGeQglrRi53JGebXntVBCy1TQNrmR0nrGPbL/Qm3ajLdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuLL8kLpr7n2oGEAt1kLlG5YZMbMB8GA1UdIwQY MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt YjA3ZDg0MTZhZTRhLzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv0qqjxkf JBKxM1ZAfaeaibyJSoGD+ZFPKEFT++JH6Z9eS1m3zAfXNK+zgTTZciJAXYdIO1Z2 Lr4t5dTHkU11vjOsJ10vNkurxHee/ERZeThuoqr92cworLRKXqaqlLNrmKsN/ZXU TB5YjXGZf8gjOwKSjSVOMVG4wFB7lJIzMIQisQMsa+cqG63iqWZGla0p5pFD1Ma4 WthLIjZI6nZPi0gWbJ6wTmPRW9kvZ0ISAE2nf/FZ3em4I/AYR/CMe5PFW/CZSiKy iy+ERhEDKXMdBicHn79OItJw1QK4HSipGYubcg6Jfbf77fAZJBdyB3DTforAIR5Z q1gi9tesGdXyFA== -----END CERTIFICATE-----Generated at Fri Jul 24 14:34:21 2026 by rpki-client