$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft File: EmxmCzD1aSsrFuKJskkBxRj9pSA.mft (raw, json) Hash identifier: BeqPUGa9rVziv1TWLsmoMUExrANJKb7BKtSlDSr3M+c= Subject key identifier: F6:82:67:8B:D3:29:00:77:B6:7A:D4:8C:B5:AE:21:10:34:9D:B8:1D Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 0194BB603ECE532610A536A2FC46BE6568C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft Manifest number: 1446 Signing time: Fri 31 Jan 2025 08:00:34 +0000 Manifest this update: Fri 31 Jan 2025 08:00:34 +0000 Manifest next update: Sat 01 Feb 2025 08:00:34 +0000 Files and hashes: 1: 2ECEgaeyvSYmg3L6KVDmtq3QuD4.roa (hash: Rjau37FJBuKqQPy7bdPwgLw6zQ6xQsvpgd1mKIZXcFU=) 2: 7l56dlrFb9fMabU3WCspPVcuNz8.roa (hash: BNqxxuIlwtXbBXPbd4qhO3KGAaTZUr0l50Y4l+Brijw=) 3: AjGSJmDTUaTBrx_s-vikweMceXs.roa (hash: RfgMVVSxZ47znUU7lhyrOD6u13oZH6rQq2T8fu6bfxk=) 4: EmxmCzD1aSsrFuKJskkBxRj9pSA.crl (hash: MIQOIjxpwr0QtJlTBoRJE6EYqC7QXdLgP6B0jGhiOKE=) 5: FiSCmdKJRr-YPjxcFigpeVUFVps.roa (hash: acaY8ohPIqVg5UZOHMawmFt422sokwSlIOa32vVbDkM=) 6: INBpI5fntDWmHlDNjs-Yi7QsdAs.roa (hash: JDa7sruzPjtU5PzNmQsKwyK3VFod04arc7ncOSuHouE=) 7: RuHKLSfWcgHGzOil4fAEzNXNsWY.roa (hash: Uc+hRokokGwptNiyfS8Yysvc/TqbHO5gZiF8l4C+938=) 8: fhkP1ORLZ5XxUVy4qC8BARs5rVI.roa (hash: 8dY2aE22Ya04xzDmrtlYb6ie5F49Q/sW7XRcYSjjGuo=) 9: hCCCB7W_FSf63gC8Bfm1bg5kjwg.roa (hash: Qb0gULwh5NESSFA0xw+2Bgb6srlGKM9Q5/dKnTGFxCo=) 10: h_uvtBb89v86Ot0rZM5k7wf9t3c.roa (hash: wRsRpB1TywlOMa0+6dhzZ3BVy/WX6GDrbpQr+SBFVlM=) 11: mO6JB2aj7dXFeeJ4zlvyyWMYGdc.roa (hash: rJPjlG3izedKQcz5so0Lx+1/nAUwrvkTxraBmn8xIZs=) 12: uR1ciNLiC41HyQnLFmxXdlFLi4c.roa (hash: DjsKRDrWt/FFBB561o4tq8q/9xsxFnlJ8tTN6CI64L0=) 13: v7sddxJjq3qKaBWAdXKnkLLzrc0.roa (hash: lKZS60p/rxd0A+1EgTcJbGD6ikjsCu25yzGvAvr7Trs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 08:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:bb:60:3e:ce:53:26:10:a5:36:a2:fc:46:be:65:68:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Jan 31 08:00:34 2025 GMT Not After : Feb 1 08:00:34 2025 GMT Subject: CN=f682678bd3290077b67ad48cb5ae2110349db81d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ae:40:a2:29:35:32:6e:4e:ce:ba:f1:64:ad: 7e:f9:bc:49:d9:6d:05:44:0d:66:48:a0:2f:d6:11: 08:af:78:4f:47:9b:98:6b:bf:99:33:a6:c1:31:4a: 55:eb:4f:7e:83:c9:50:fa:d4:48:20:2d:1f:1f:f5: b5:9a:a3:3b:66:8c:9c:93:e5:dc:87:8b:d2:c8:20: c2:93:f0:6e:d4:db:2f:72:f4:34:81:d4:e4:0c:85: 41:03:08:79:e2:3e:dc:99:cd:c6:45:4d:ef:65:fe: 44:ab:32:91:93:f3:50:1a:89:51:f2:22:7b:f1:fb: 81:98:be:be:33:dd:5e:3f:e8:06:d0:ef:62:76:e3: eb:70:f5:82:bd:01:8c:24:2b:f7:d9:3f:01:21:fc: 5c:68:1f:bd:f0:bc:fc:45:1a:64:59:f3:11:b9:6c: 5d:91:78:a7:5d:a2:f3:b7:96:68:dc:44:2c:d5:1f: 82:bf:b0:30:df:e4:dc:9f:7b:e6:2e:17:f4:aa:4e: 70:e8:f3:3d:3a:25:2c:61:6c:42:dd:d8:04:c3:cf: b4:3c:df:15:ab:80:17:32:e4:01:32:33:73:08:d6: a8:22:e3:7a:68:4a:3d:0e:e0:80:99:cc:ff:e7:be: 8d:2d:b7:10:ee:c0:0e:b1:2c:e1:54:83:79:89:43: 0c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:82:67:8B:D3:29:00:77:B6:7A:D4:8C:B5:AE:21:10:34:9D:B8:1D X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:44:8b:cd:9b:88:76:3c:73:3b:ab:21:48:fe:85:0a:d4:c2: e8:17:08:80:69:07:a3:2d:8e:e2:7b:6f:49:17:b8:4e:6b:61: 63:67:3a:1d:c6:dd:59:f6:5e:97:07:a3:f7:a3:04:57:59:35: 06:4e:84:a7:bd:d9:23:8a:70:3d:72:76:f4:84:b7:6e:93:5d: b4:b5:cb:8e:57:18:72:27:1e:bd:bf:00:da:18:c4:2a:9e:eb: 0b:6c:14:f5:66:54:21:44:4a:bf:a0:a2:d5:3d:3c:a0:b1:25: cd:45:ea:24:32:fa:7b:45:e8:4d:73:6a:eb:7d:62:f3:da:63: 84:be:98:2e:25:54:90:19:d2:ee:ef:01:11:81:f8:be:2a:cf: 54:35:84:72:92:3a:1a:c8:ed:41:3f:de:0a:e5:23:db:0d:99: 94:a6:d4:5d:c9:41:f4:82:cd:7c:f6:18:3c:bf:72:e4:72:73: ce:ac:43:98:f5:4f:fe:d1:5e:14:2d:4b:52:57:aa:fe:9d:c3: da:c1:94:57:2f:0e:b7:2e:0e:49:35:d0:6a:d4:b5:38:10:8c: 9c:fb:ea:6a:e1:79:bb:5b:ea:b3:a0:83:f4:d5:59:96:14:c6: 02:22:74:e6:e6:5a:67:19:0d:f9:f0:5a:fd:1b:13:25:bc:9a: e9:88:1b:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS7YD7OUyYQpTai/Ea+ZWjGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjUwMTMxMDgwMDM0WhcNMjUwMjAxMDgwMDM0WjAzMTEwLwYDVQQD EyhmNjgyNjc4YmQzMjkwMDc3YjY3YWQ0OGNiNWFlMjExMDM0OWRiODFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr65Aoik1Mm5OzrrxZK1++bxJ2W0F RA1mSKAv1hEIr3hPR5uYa7+ZM6bBMUpV609+g8lQ+tRIIC0fH/W1mqM7Zoyck+Xc h4vSyCDCk/Bu1NsvcvQ0gdTkDIVBAwh54j7cmc3GRU3vZf5EqzKRk/NQGolR8iJ7 8fuBmL6+M91eP+gG0O9iduPrcPWCvQGMJCv32T8BIfxcaB+98Lz8RRpkWfMRuWxd kXinXaLzt5Zo3EQs1R+Cv7Aw3+Tcn3vmLhf0qk5w6PM9OiUsYWxC3dgEw8+0PN8V q4AXMuQBMjNzCNaoIuN6aEo9DuCAmcz/576NLbcQ7sAOsSzhVIN5iUMM8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaCZ4vTKQB3tnrUjLWuIRA0nbgdMB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqUSLzZuI djxzO6shSP6FCtTC6BcIgGkHoy2O4ntvSRe4TmthY2c6HcbdWfZelwej96MEV1k1 Bk6Ep73ZI4pwPXJ29IS3bpNdtLXLjlcYcicevb8A2hjEKp7rC2wU9WZUIURKv6Ci 1T08oLElzUXqJDL6e0XoTXNq631i89pjhL6YLiVUkBnS7u8BEYH4virPVDWEcpI6 GsjtQT/eCuUj2w2ZlKbUXclB9ILNfPYYPL9y5HJzzqxDmPVP/tFeFC1LUleq/p3D 2sGUVy8Oty4OSTXQatS1OBCMnPvqauF5u1vqs6CD9NVZlhTGAiJ05uZaZxkN+fBa /RsTJbya6YgbFg== -----END CERTIFICATE-----Generated at Fri Jan 31 15:38:56 2025 by rpki-client on console-fra.rpki-client.org