$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft File: AOT2p3Not87P5nIgtDZXax4Aiuw.mft (raw, json) Hash identifier: XSynE2dM9Z3reO8fdrgee0DH1s/vS58KcsoxB5NV3bw= Subject key identifier: D5:9E:3D:36:BA:C1:D5:B7:C1:12:60:47:6D:AA:B9:44:1F:6D:60:9D Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec Certificate serial: 019F91A362A04DF63524094341EF52D6D645 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft Manifest number: 1AD3 Signing time: Fri 24 Jul 2026 01:00:31 +0000 Manifest this update: Fri 24 Jul 2026 01:00:31 +0000 Manifest next update: Sat 25 Jul 2026 01:00:31 +0000 Files and hashes: 1: 1-7-GRl1DpJL9MX_Eh7vVlgQAtds.roa (hash: qBQ+Yv34RT+76LqwEUvZMWK4vq87p/Tm5N2E03sJUtE=) 2: 1-WsLt9tKKbGh5bPdJYro7hdbfv4.roa (hash: bwEotLkWd6AAV2gsEIC8jHaD4DnocRPu1uFbzjdp2BY=) 3: 1v3HWPlunfpwP49jTOGBig4JD8Q.roa (hash: yDJ9787ATzv6jCZC6L2EDuN3dqnkLEyiRF3QmgJEwMw=) 4: AOT2p3Not87P5nIgtDZXax4Aiuw.crl (hash: 9ZWaOIFrEWRB4dZpZRYBbYNselCNitqtcVUgzw890lg=) 5: CP1700xQhoIo0eqZb96w49fwMZU.roa (hash: FhGMMmXWb4O7zbwANRuKCF/ES8PwzOmEkZV99iTN5xU=) 6: Iz8oQHvYY4N1cu4pgE3299ogM34.roa (hash: GTn6Y+DWEw4+IcATVORnDqgcpHWD0i8V9c7BBTnRM3U=) 7: MQ0e7OQgina0hHLbzkJJI7ocRMY.roa (hash: lYlPT7y2KTJ0qjKzQaLtDJlIn+M8xo18ZCJuzXN583Y=) 8: VcGOwSBLa8MeclenBwYCnJTkc6Q.roa (hash: ZpKqr8OOjlncepBvaT8KeQio9IThw68qGgH8coHhuVI=) 9: gF0x-IgTBvCJCERAByN93AH9MjM.roa (hash: f9L9sZ2MryoARd93KF5kcE6ImNuSL3mNiWJ8yZc3d58=) 10: hGF5HckbV_mO1zNnnUvLaxvGgg0.roa (hash: LswWVKDsb8V0ubfBEeUCi7BkiOP6J97pjosqCGNORUk=) 11: oPPgaBYxfthIjxyRNKKvuQhADcA.roa (hash: vJpx4imZl2f0ZsJVLjSi4WZMmzQUNNlQIXHfoEUu3/k=) 12: psdxNS9e9UAm4jnMurOBj_7r3SE.roa (hash: DmgbB+oJGANiMlAsSILkh1J4OQmbWXdSoCr006Xmwis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:a3:62:a0:4d:f6:35:24:09:43:41:ef:52:d6:d6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec Validity Not Before: Jul 24 01:00:31 2026 GMT Not After : Jul 25 01:00:31 2026 GMT Subject: CN=d59e3d36bac1d5b7c11260476daab9441f6d609d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f1:7d:7f:e5:d5:8c:ef:89:af:2c:fb:82:17: c8:b9:2d:33:d0:3a:87:5a:4e:78:22:36:ff:7e:8f: 5a:5a:ba:7f:e8:3d:de:41:3c:aa:7d:56:1c:d8:80: d1:41:49:72:70:1c:cd:c7:3b:54:64:de:73:c2:53: 2b:51:d5:76:78:94:76:0e:57:c3:b7:2c:f9:fe:95: 44:0f:0c:a5:57:ac:fc:a9:2f:06:18:85:dd:57:1a: 51:d7:37:30:dd:79:73:72:50:5b:62:a0:ce:61:67: 9b:2a:9b:81:35:b8:1d:16:53:84:a5:98:ad:4d:68: d1:dc:72:5b:c1:4f:af:1d:4f:d3:cc:0e:9a:5d:dd: 27:08:0d:65:55:55:48:f6:4e:93:85:d2:8a:23:2a: c7:56:8c:e9:75:16:d1:37:ff:6c:c1:11:56:6e:97: db:d7:c1:56:d7:28:c3:c2:50:f3:0b:c9:2a:64:ec: f4:35:df:0c:5a:41:8b:5c:11:e0:f5:a5:09:91:c4: a2:98:97:bc:90:3d:0c:8e:45:10:b4:dd:08:03:94: 0e:c5:f2:93:f4:81:8a:85:d8:31:e8:a5:4a:de:e1: c6:2b:d4:5a:e3:90:1d:19:3e:ed:65:d4:16:35:27: 69:1f:23:29:ac:d9:f0:f0:19:8a:c6:5f:a6:13:cc: 0b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9E:3D:36:BA:C1:D5:B7:C1:12:60:47:6D:AA:B9:44:1F:6D:60:9D X509v3 Authority Key Identifier: keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:86:64:7b:29:95:e5:e2:72:73:c5:c6:0f:28:94:bd:c0:21: 1e:9e:dc:31:55:7b:d0:0f:69:3d:89:39:07:86:98:66:ec:ad: c7:8e:96:6f:20:37:15:0b:dc:b4:2a:bd:e0:c6:99:79:ad:d0: 71:70:38:4e:73:d7:bf:88:a3:f7:72:a1:10:23:fa:8b:83:4e: 5f:0a:d2:21:b7:5f:6b:f7:1e:17:66:d1:1b:65:f4:49:31:dc: e5:a7:73:e9:22:9f:eb:d3:ee:1d:f2:d3:47:85:86:d2:c7:3c: fa:4c:f7:57:4d:15:a4:15:55:fb:88:e1:f8:39:01:ba:46:5a: ee:94:bb:20:4d:4d:15:80:31:5a:e5:8e:f4:ee:13:7b:df:43: f7:47:2e:92:18:21:8d:e5:3b:ba:f1:3e:3c:4f:36:a1:bf:08: cb:39:9e:e9:51:75:34:d7:a0:00:58:e9:8c:2a:2b:b7:0d:73: 04:7c:ad:bd:8f:7b:cb:7c:d4:69:88:2a:65:51:46:a8:5f:41: 79:4d:f5:15:37:ee:76:73:35:7c:14:24:57:cd:be:68:56:bd: 16:64:be:3d:bf:0f:49:de:c4:d9:22:45:aa:2d:2f:85:fd:c1: c8:2a:6a:e7:a1:74:43:5f:61:dd:0b:71:72:f2:d7:aa:e6:0d: 7b:6d:e5:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Ro2KgTfY1JAlDQe9S1tZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw MDhhZWMwHhcNMjYwNzI0MDEwMDMxWhcNMjYwNzI1MDEwMDMxWjAzMTEwLwYDVQQD EyhkNTllM2QzNmJhYzFkNWI3YzExMjYwNDc2ZGFhYjk0NDFmNmQ2MDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/F9f+XVjO+Jryz7ghfIuS0z0DqH Wk54Ijb/fo9aWrp/6D3eQTyqfVYc2IDRQUlycBzNxztUZN5zwlMrUdV2eJR2DlfD tyz5/pVEDwylV6z8qS8GGIXdVxpR1zcw3XlzclBbYqDOYWebKpuBNbgdFlOEpZit TWjR3HJbwU+vHU/TzA6aXd0nCA1lVVVI9k6ThdKKIyrHVozpdRbRN/9swRFWbpfb 18FW1yjDwlDzC8kqZOz0Nd8MWkGLXBHg9aUJkcSimJe8kD0MjkUQtN0IA5QOxfKT 9IGKhdgx6KVK3uHGK9Ra45AdGT7tZdQWNSdpHyMprNnw8BmKxl+mE8wL2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWePTa6wdW3wRJgR22quUQfbWCdMB8GA1UdIwQY MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt YjA3ZDg0MTZhZTRhLzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIZkeymV 5eJyc8XGDyiUvcAhHp7cMVV70A9pPYk5B4aYZuytx46WbyA3FQvctCq94MaZea3Q cXA4TnPXv4ij93KhECP6i4NOXwrSIbdfa/ceF2bRG2X0STHc5adz6SKf69PuHfLT R4WG0sc8+kz3V00VpBVV+4jh+DkBukZa7pS7IE1NFYAxWuWO9O4Te99D90cukhgh jeU7uvE+PE82ob8Iyzme6VF1NNegAFjpjCortw1zBHytvY97y3zUaYgqZVFGqF9B eU31FTfudnM1fBQkV82+aFa9FmS+Pb8PSd7E2SJFqi0vhf3ByCpq56F0Q19h3Qtx cvLXquYNe23lbw== -----END CERTIFICATE-----Generated at Fri Jul 24 06:19:45 2026 by rpki-client