$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft File: AOT2p3Not87P5nIgtDZXax4Aiuw.mft (raw, json) Hash identifier: Kgpn8wWxJlMa5kJ4ofjVcbHRHzV4GiMY2+jgc0kJIWs= Subject key identifier: 43:9D:55:3D:05:79:67:74:DB:F5:C0:12:AB:61:EB:6C:02:45:F9:73 Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec Certificate serial: 01A0D2A5D78239AA6DA9F3CBFA8A807F4DD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft Manifest number: 1B7E Signing time: Thu 24 Sep 2026 09:01:19 +0000 Manifest this update: Thu 24 Sep 2026 09:01:19 +0000 Manifest next update: Fri 25 Sep 2026 09:01:19 +0000 Files and hashes: 1: 1-7-GRl1DpJL9MX_Eh7vVlgQAtds.roa (hash: qBQ+Yv34RT+76LqwEUvZMWK4vq87p/Tm5N2E03sJUtE=) 2: AOT2p3Not87P5nIgtDZXax4Aiuw.crl (hash: AvzratnZBF7n83bvGq53gUEo1nba/SpcNW9pn3TRLOA=) 3: CP1700xQhoIo0eqZb96w49fwMZU.roa (hash: FhGMMmXWb4O7zbwANRuKCF/ES8PwzOmEkZV99iTN5xU=) 4: Iz8oQHvYY4N1cu4pgE3299ogM34.roa (hash: GTn6Y+DWEw4+IcATVORnDqgcpHWD0i8V9c7BBTnRM3U=) 5: MQ0e7OQgina0hHLbzkJJI7ocRMY.roa (hash: lYlPT7y2KTJ0qjKzQaLtDJlIn+M8xo18ZCJuzXN583Y=) 6: VcGOwSBLa8MeclenBwYCnJTkc6Q.roa (hash: ZpKqr8OOjlncepBvaT8KeQio9IThw68qGgH8coHhuVI=) 7: Xz8NNPcwcbory7as6Ave10IA4JA.roa (hash: z5bOCkGPcZVWVT8GO8Oi8SD61/vp8fiHd8FKi8PaCyo=) 8: gF0x-IgTBvCJCERAByN93AH9MjM.roa (hash: f9L9sZ2MryoARd93KF5kcE6ImNuSL3mNiWJ8yZc3d58=) 9: hA7LNPaezAwAsnv8p24InC1StUs.roa (hash: sgot3XzV393nfZR0qz24zPh8wm14Ry5Q6R+/B3dzmWI=) 10: hGF5HckbV_mO1zNnnUvLaxvGgg0.roa (hash: LswWVKDsb8V0ubfBEeUCi7BkiOP6J97pjosqCGNORUk=) 11: oPPgaBYxfthIjxyRNKKvuQhADcA.roa (hash: vJpx4imZl2f0ZsJVLjSi4WZMmzQUNNlQIXHfoEUu3/k=) 12: psdxNS9e9UAm4jnMurOBj_7r3SE.roa (hash: DmgbB+oJGANiMlAsSILkh1J4OQmbWXdSoCr006Xmwis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 09:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d2:a5:d7:82:39:aa:6d:a9:f3:cb:fa:8a:80:7f:4d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec Validity Not Before: Sep 24 09:01:19 2026 GMT Not After : Sep 25 09:01:19 2026 GMT Subject: CN=439d553d05796774dbf5c012ab61eb6c0245f973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:35:b1:25:a9:c3:02:02:00:5c:84:1e:b0:84: bb:35:4c:59:92:54:6e:09:34:69:14:d2:ad:53:f6: 05:1c:07:ab:1c:bb:4d:6a:20:1e:8f:a7:a0:95:8d: 01:46:94:bf:5d:40:d6:8f:d6:06:f8:6b:65:ce:a3: 4a:75:48:da:0d:fa:f0:d1:c8:3c:30:5c:95:3c:b3: 02:53:a6:78:e3:93:96:0b:d6:d6:db:d1:e6:53:e2: f6:46:bc:c4:3d:7d:51:5e:8c:43:1d:69:68:a1:8a: 97:af:50:1f:16:5f:45:08:a3:72:4f:30:4f:b5:06: 81:a5:93:39:12:d9:f0:0e:0b:2a:52:35:cc:12:2f: 94:82:88:7c:e4:6b:d8:ae:8b:35:0d:73:68:04:ae: 2d:fe:d5:44:91:46:5e:fa:1b:e2:a9:47:52:63:e1: 7a:09:5d:df:06:bd:e9:5e:85:67:57:a7:08:8b:d8: 18:fc:f7:23:9e:a2:ec:36:55:5b:17:82:f7:48:bb: 12:2e:6e:f4:df:e9:0f:c1:08:83:d9:bf:fa:23:9f: eb:2e:be:e9:3b:2e:92:3d:31:a6:8d:d2:b0:b9:3c: b0:c9:6f:22:60:7d:46:67:51:2c:f3:c3:2b:a9:25: 19:aa:3e:a2:ab:a0:92:42:12:c3:90:ca:b9:e8:d7: c6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9D:55:3D:05:79:67:74:DB:F5:C0:12:AB:61:EB:6C:02:45:F9:73 X509v3 Authority Key Identifier: keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ef:e4:30:a3:17:00:b8:9c:4d:2b:90:89:0b:5f:e7:98:a1: 35:83:7d:a0:da:48:66:f0:03:0a:c4:25:17:3c:24:bc:9b:f2: 71:b4:20:7f:0d:40:f0:c9:51:8b:0e:32:51:de:cf:26:09:e5: 43:03:b8:73:62:61:26:e3:e1:b0:69:d7:fd:d1:3a:d7:39:69: b7:2a:70:c7:3b:6a:10:fc:2c:e0:ea:66:f3:c6:d5:44:77:7d: e8:31:af:94:02:bc:31:37:d2:7c:9c:88:89:37:e5:64:b0:da: 9e:a4:dc:37:ad:f9:0c:ba:ea:76:a4:5f:aa:be:9a:5a:4d:fa: fb:7a:1c:c4:27:ee:82:4b:b8:94:60:2e:af:bc:f1:4b:d5:99: 36:c1:89:d8:fd:a0:c0:32:8d:1e:24:d9:6b:e9:a7:98:e6:19: b4:77:c3:6c:04:eb:11:14:3e:81:f2:05:65:bb:43:7e:de:74: 8c:74:57:4e:41:2e:15:89:57:93:e8:64:51:99:cb:e2:26:28: 98:e7:32:91:45:3e:e9:71:52:c7:30:2c:1d:57:4a:83:06:34: d3:c9:38:05:62:f9:c1:74:9f:16:98:eb:c1:43:e9:62:d9:3f: a4:3a:b3:ac:38:5d:e3:84:21:c0:f8:06:78:4c:a0:c1:32:0b: 51:05:7d:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDSpdeCOaptqfPL+oqAf03SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw MDhhZWMwHhcNMjYwOTI0MDkwMTE5WhcNMjYwOTI1MDkwMTE5WjAzMTEwLwYDVQQD Eyg0MzlkNTUzZDA1Nzk2Nzc0ZGJmNWMwMTJhYjYxZWI2YzAyNDVmOTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjWxJanDAgIAXIQesIS7NUxZklRu CTRpFNKtU/YFHAerHLtNaiAej6eglY0BRpS/XUDWj9YG+GtlzqNKdUjaDfrw0cg8 MFyVPLMCU6Z445OWC9bW29HmU+L2RrzEPX1RXoxDHWlooYqXr1AfFl9FCKNyTzBP tQaBpZM5EtnwDgsqUjXMEi+Ugoh85GvYros1DXNoBK4t/tVEkUZe+hviqUdSY+F6 CV3fBr3pXoVnV6cIi9gY/PcjnqLsNlVbF4L3SLsSLm703+kPwQiD2b/6I5/rLr7p Oy6SPTGmjdKwuTywyW8iYH1GZ1Es88MrqSUZqj6iq6CSQhLDkMq56NfGWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOdVT0FeWd02/XAEqth62wCRflzMB8GA1UdIwQY MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt YjA3ZDg0MTZhZTRhLzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKO/kMKMX ALicTSuQiQtf55ihNYN9oNpIZvADCsQlFzwkvJvycbQgfw1A8MlRiw4yUd7PJgnl QwO4c2JhJuPhsGnX/dE61zlptypwxztqEPws4Opm88bVRHd96DGvlAK8MTfSfJyI iTflZLDanqTcN635DLrqdqRfqr6aWk36+3ocxCfugku4lGAur7zxS9WZNsGJ2P2g wDKNHiTZa+mnmOYZtHfDbATrERQ+gfIFZbtDft50jHRXTkEuFYlXk+hkUZnL4iYo mOcykUU+6XFSxzAsHVdKgwY008k4BWL5wXSfFpjrwUPpYtk/pDqzrDhd44QhwPgG eEygwTILUQV9ow== -----END CERTIFICATE-----Generated at Thu Sep 24 18:51:47 2026 by rpki-client