$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft File: EmxmCzD1aSsrFuKJskkBxRj9pSA.mft (raw, json) Hash identifier: jxKvNXhJfuBw/BAxDbPDO49BvunhdKOBJB54dTVhSR4= Subject key identifier: F4:11:26:C4:33:A0:6D:FB:AE:37:9E:D1:C4:E1:FD:D0:58:27:91:03 Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 0199179AFE8A201B27F302007F9647186758 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft Manifest number: 1689 Signing time: Fri 05 Sep 2025 02:00:57 +0000 Manifest this update: Fri 05 Sep 2025 02:00:57 +0000 Manifest next update: Sat 06 Sep 2025 02:00:57 +0000 Files and hashes: 1: 2ECEgaeyvSYmg3L6KVDmtq3QuD4.roa (hash: Rjau37FJBuKqQPy7bdPwgLw6zQ6xQsvpgd1mKIZXcFU=) 2: 7l56dlrFb9fMabU3WCspPVcuNz8.roa (hash: BNqxxuIlwtXbBXPbd4qhO3KGAaTZUr0l50Y4l+Brijw=) 3: AjGSJmDTUaTBrx_s-vikweMceXs.roa (hash: RfgMVVSxZ47znUU7lhyrOD6u13oZH6rQq2T8fu6bfxk=) 4: EmxmCzD1aSsrFuKJskkBxRj9pSA.crl (hash: rTYYVDZNgLqXD989V294bkN0Y40kPnX3IolAL9OwEbA=) 5: FiSCmdKJRr-YPjxcFigpeVUFVps.roa (hash: acaY8ohPIqVg5UZOHMawmFt422sokwSlIOa32vVbDkM=) 6: INBpI5fntDWmHlDNjs-Yi7QsdAs.roa (hash: JDa7sruzPjtU5PzNmQsKwyK3VFod04arc7ncOSuHouE=) 7: RuHKLSfWcgHGzOil4fAEzNXNsWY.roa (hash: Uc+hRokokGwptNiyfS8Yysvc/TqbHO5gZiF8l4C+938=) 8: fhkP1ORLZ5XxUVy4qC8BARs5rVI.roa (hash: 8dY2aE22Ya04xzDmrtlYb6ie5F49Q/sW7XRcYSjjGuo=) 9: gxlbepFDizY30e_VDf9e1RvjWgM.roa (hash: 6bnUAoZDd9UjKUbCDoEZob89bP3Q8i0Y7YskzssCFno=) 10: hCCCB7W_FSf63gC8Bfm1bg5kjwg.roa (hash: Qb0gULwh5NESSFA0xw+2Bgb6srlGKM9Q5/dKnTGFxCo=) 11: h_uvtBb89v86Ot0rZM5k7wf9t3c.roa (hash: wRsRpB1TywlOMa0+6dhzZ3BVy/WX6GDrbpQr+SBFVlM=) 12: mO6JB2aj7dXFeeJ4zlvyyWMYGdc.roa (hash: rJPjlG3izedKQcz5so0Lx+1/nAUwrvkTxraBmn8xIZs=) 13: uR1ciNLiC41HyQnLFmxXdlFLi4c.roa (hash: DjsKRDrWt/FFBB561o4tq8q/9xsxFnlJ8tTN6CI64L0=) 14: v7sddxJjq3qKaBWAdXKnkLLzrc0.roa (hash: lKZS60p/rxd0A+1EgTcJbGD6ikjsCu25yzGvAvr7Trs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 01:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:17:9a:fe:8a:20:1b:27:f3:02:00:7f:96:47:18:67:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Sep 5 02:00:57 2025 GMT Not After : Sep 6 02:00:57 2025 GMT Subject: CN=f41126c433a06dfbae379ed1c4e1fdd058279103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c4:d9:84:e6:19:57:89:dd:9f:43:69:3d:2e: 1e:f8:3a:ca:a8:ba:99:ea:72:e0:32:a5:1c:26:4c: 43:2b:cf:ee:db:20:83:c0:1b:cc:27:11:c9:f8:41: 58:12:67:7a:dd:82:f9:3b:ac:67:00:bf:9e:35:6b: 7a:10:8f:5a:45:b0:81:31:8e:de:bf:f2:23:d5:cd: 81:6d:4b:e1:d6:4e:97:44:3b:60:bd:e7:ad:68:b2: c6:e3:87:2e:65:a4:50:ac:68:0e:9f:7b:99:17:f6: 4e:76:47:5a:6c:a0:a5:57:a8:c8:ec:1e:9d:bb:fd: 07:89:43:a9:1f:2a:22:33:14:e7:8a:e8:50:03:f6: 9b:a7:4d:40:47:b2:77:c6:32:c6:2b:8a:0d:8a:b6: 54:82:a2:28:09:a7:94:4e:9a:e0:a1:ea:d7:5e:31: 90:b9:bc:00:2d:8d:66:79:26:69:d3:a6:e9:33:7e: c3:78:7a:67:27:55:e5:b4:01:25:25:f6:36:29:ae: 3d:43:af:cd:10:02:c6:69:03:86:46:6f:24:1b:19: a2:8c:43:f6:88:a6:25:d8:e5:9f:70:49:58:ea:79: e7:8a:c1:c0:27:a0:80:bd:b7:d0:57:43:8c:2a:e8: 69:fe:24:62:5d:6d:e2:b1:cd:7e:80:6a:d8:cd:4e: f2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:11:26:C4:33:A0:6D:FB:AE:37:9E:D1:C4:E1:FD:D0:58:27:91:03 X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:9b:7f:ed:8e:d6:1b:9b:0a:71:4b:bd:47:dc:7f:b2:f3:f2: 66:b3:71:57:9e:06:49:01:c7:35:ce:38:d3:aa:6d:13:ec:d0: e4:c7:58:85:c0:80:54:83:b8:d5:77:95:aa:d8:91:05:9d:e4: ae:49:e2:a6:bc:fc:f9:a2:ef:14:0a:75:e3:7e:26:c7:80:97: e8:8c:f0:1f:94:cb:0b:1f:a9:e6:cb:b8:ef:c6:e9:97:d7:79: 36:14:39:69:c0:bf:8b:df:80:ba:5a:d5:55:9b:da:48:f2:f5: 29:3f:0a:36:fe:ac:dc:f1:39:72:68:6a:5b:e7:c2:6b:14:ab: 77:3a:08:7f:f9:7d:7c:dc:8c:21:61:8c:7f:e0:15:ff:7d:e9: e9:ca:fe:6c:39:92:53:90:35:58:c6:63:dd:a3:ce:ec:f4:66: 05:72:47:67:6a:8a:46:a7:44:78:58:80:54:69:71:4f:ed:6e: e7:73:4e:2e:85:1a:a9:2f:8c:2c:87:bb:9a:1f:de:2e:14:cb: cb:00:2c:94:d6:d9:12:67:69:4c:0b:ab:ca:9e:a4:c7:12:71: 36:58:6d:62:20:56:8e:4f:91:fa:50:52:c3:df:29:ea:0e:08: dd:39:0c:64:f3:ee:55:78:9a:e1:0f:a8:4b:40:a8:07:fd:a7: 61:06:76:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkXmv6KIBsn8wIAf5ZHGGdYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjUwOTA1MDIwMDU3WhcNMjUwOTA2MDIwMDU3WjAzMTEwLwYDVQQD EyhmNDExMjZjNDMzYTA2ZGZiYWUzNzllZDFjNGUxZmRkMDU4Mjc5MTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMTZhOYZV4ndn0NpPS4e+DrKqLqZ 6nLgMqUcJkxDK8/u2yCDwBvMJxHJ+EFYEmd63YL5O6xnAL+eNWt6EI9aRbCBMY7e v/Ij1c2BbUvh1k6XRDtgveetaLLG44cuZaRQrGgOn3uZF/ZOdkdabKClV6jI7B6d u/0HiUOpHyoiMxTniuhQA/abp01AR7J3xjLGK4oNirZUgqIoCaeUTprgoerXXjGQ ubwALY1meSZp06bpM37DeHpnJ1XltAElJfY2Ka49Q6/NEALGaQOGRm8kGxmijEP2 iKYl2OWfcElY6nnnisHAJ6CAvbfQV0OMKuhp/iRiXW3isc1+gGrYzU7yKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQRJsQzoG37rjee0cTh/dBYJ5EDMB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvZt/7Y7W G5sKcUu9R9x/svPyZrNxV54GSQHHNc4406ptE+zQ5MdYhcCAVIO41XeVqtiRBZ3k rkniprz8+aLvFAp1434mx4CX6IzwH5TLCx+p5su478bpl9d5NhQ5acC/i9+AulrV VZvaSPL1KT8KNv6s3PE5cmhqW+fCaxSrdzoIf/l9fNyMIWGMf+AV/33p6cr+bDmS U5A1WMZj3aPO7PRmBXJHZ2qKRqdEeFiAVGlxT+1u53NOLoUaqS+MLIe7mh/eLhTL ywAslNbZEmdpTAuryp6kxxJxNlhtYiBWjk+R+lBSw98p6g4I3TkMZPPuVXia4Q+o S0CoB/2nYQZ27A== -----END CERTIFICATE-----Generated at Fri Sep 5 06:03:21 2025 by rpki-client