$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft File: EmxmCzD1aSsrFuKJskkBxRj9pSA.mft (raw, json) Hash identifier: r8MuVDs3PJoIcTmf0cDCDUsmn++dq98IK1z15f2Gku4= Subject key identifier: 76:7C:51:B7:BA:E0:84:38:CE:0E:84:AA:0C:FE:1E:95:43:18:88:D9 Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 01973C884EBC0CCDCF7E8D2B9DDE7CD618F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft Manifest number: 1593 Signing time: Wed 04 Jun 2025 20:00:55 +0000 Manifest this update: Wed 04 Jun 2025 20:00:55 +0000 Manifest next update: Thu 05 Jun 2025 20:00:55 +0000 Files and hashes: 1: 2ECEgaeyvSYmg3L6KVDmtq3QuD4.roa (hash: Rjau37FJBuKqQPy7bdPwgLw6zQ6xQsvpgd1mKIZXcFU=) 2: 7l56dlrFb9fMabU3WCspPVcuNz8.roa (hash: BNqxxuIlwtXbBXPbd4qhO3KGAaTZUr0l50Y4l+Brijw=) 3: AjGSJmDTUaTBrx_s-vikweMceXs.roa (hash: RfgMVVSxZ47znUU7lhyrOD6u13oZH6rQq2T8fu6bfxk=) 4: EmxmCzD1aSsrFuKJskkBxRj9pSA.crl (hash: WcH8ocX1FPOMwBPH/Uzti5YKBTFNpFgQ5Mftqe2aGmY=) 5: FiSCmdKJRr-YPjxcFigpeVUFVps.roa (hash: acaY8ohPIqVg5UZOHMawmFt422sokwSlIOa32vVbDkM=) 6: INBpI5fntDWmHlDNjs-Yi7QsdAs.roa (hash: JDa7sruzPjtU5PzNmQsKwyK3VFod04arc7ncOSuHouE=) 7: RuHKLSfWcgHGzOil4fAEzNXNsWY.roa (hash: Uc+hRokokGwptNiyfS8Yysvc/TqbHO5gZiF8l4C+938=) 8: fhkP1ORLZ5XxUVy4qC8BARs5rVI.roa (hash: 8dY2aE22Ya04xzDmrtlYb6ie5F49Q/sW7XRcYSjjGuo=) 9: gxlbepFDizY30e_VDf9e1RvjWgM.roa (hash: 6bnUAoZDd9UjKUbCDoEZob89bP3Q8i0Y7YskzssCFno=) 10: hCCCB7W_FSf63gC8Bfm1bg5kjwg.roa (hash: Qb0gULwh5NESSFA0xw+2Bgb6srlGKM9Q5/dKnTGFxCo=) 11: h_uvtBb89v86Ot0rZM5k7wf9t3c.roa (hash: wRsRpB1TywlOMa0+6dhzZ3BVy/WX6GDrbpQr+SBFVlM=) 12: mO6JB2aj7dXFeeJ4zlvyyWMYGdc.roa (hash: rJPjlG3izedKQcz5so0Lx+1/nAUwrvkTxraBmn8xIZs=) 13: uR1ciNLiC41HyQnLFmxXdlFLi4c.roa (hash: DjsKRDrWt/FFBB561o4tq8q/9xsxFnlJ8tTN6CI64L0=) 14: v7sddxJjq3qKaBWAdXKnkLLzrc0.roa (hash: lKZS60p/rxd0A+1EgTcJbGD6ikjsCu25yzGvAvr7Trs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3c:88:4e:bc:0c:cd:cf:7e:8d:2b:9d:de:7c:d6:18:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Jun 4 20:00:55 2025 GMT Not After : Jun 5 20:00:55 2025 GMT Subject: CN=767c51b7bae08438ce0e84aa0cfe1e95431888d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:08:48:51:30:a6:49:ed:ba:ad:16:21:ce:85: 1c:f5:d6:b7:7f:0d:c6:d8:06:df:d2:70:c7:6a:37: 8b:82:28:18:8d:64:5a:66:ed:20:e3:bd:cf:b1:c2: dc:f3:70:17:ba:6f:15:85:26:cb:b3:b0:f2:01:19: de:c5:9c:10:0a:1d:63:80:d7:b3:4d:7f:f1:27:46: 46:c1:77:79:39:14:2b:7b:38:0d:4a:6a:c5:89:7e: c8:1c:2b:df:08:e9:e0:24:3c:84:32:1a:f4:f8:9a: 80:ae:cf:91:8b:8b:f1:dc:37:a8:90:38:d9:70:71: 50:0e:8e:85:25:27:f7:dd:b8:51:cf:be:a6:ad:ba: c1:24:39:9f:f1:2b:04:35:28:b8:91:f1:ca:66:d2: 2f:20:66:47:2b:90:d7:9f:90:45:e1:b8:08:1a:86: 02:d4:6f:84:d0:56:8b:01:86:ca:cd:29:2a:d4:65: 5a:14:3a:f2:a0:87:80:bc:88:d9:56:f1:29:1d:a4: 37:36:ee:3f:d4:90:a1:21:4c:fa:92:a6:6f:f7:3b: c2:97:43:81:30:99:fb:1c:45:6e:b7:1e:11:5e:7d: c6:e7:6a:15:8a:7d:0e:96:9d:8a:d8:a1:74:be:9e: 25:7d:f9:5f:ad:7a:97:75:e6:4e:67:b1:8c:5f:d9: da:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7C:51:B7:BA:E0:84:38:CE:0E:84:AA:0C:FE:1E:95:43:18:88:D9 X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:9b:3d:0f:25:af:a3:54:27:43:e4:75:f7:f3:d1:c3:c8:98: ef:64:a6:5c:cd:71:fd:fc:13:fa:55:45:5f:ae:33:76:b0:af: 1e:74:03:80:73:28:aa:63:77:d7:46:cd:b3:e1:65:6d:ab:0c: fc:37:58:8e:00:ec:48:28:78:83:b6:04:0a:10:95:99:a9:d0: 74:9f:80:06:9e:5f:99:ae:46:de:6c:26:4e:ff:cd:a7:73:a6: 86:df:9b:e7:cc:90:d5:09:cb:0d:f8:65:4c:a0:91:39:1f:9c: 3b:66:f5:b3:b0:6b:dc:a3:71:52:a1:bb:38:3c:e7:35:ca:6f: 27:df:50:f9:ca:89:df:5b:52:b8:1d:d4:55:02:19:2c:a4:3f: 2d:14:3c:76:ee:ce:9d:ec:18:69:25:73:63:81:7c:e0:3a:ea: da:0d:ce:ea:ed:7c:a9:b6:e1:dc:37:f4:74:84:75:6b:64:b0: 85:9f:f3:0a:a6:d2:95:e5:7b:9e:79:9a:61:10:7f:0c:7f:1d: c8:5e:4e:07:73:21:a7:61:ef:2b:15:51:57:d2:db:b3:36:ca: 24:42:e1:ea:80:06:aa:46:52:e8:ff:2e:91:c1:be:3d:ff:e6: 3c:e3:fd:19:84:84:fa:b2:4e:3a:18:f4:27:61:de:b1:9b:0a: 3c:fe:27:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc8iE68DM3Pfo0rnd581hj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjUwNjA0MjAwMDU1WhcNMjUwNjA1MjAwMDU1WjAzMTEwLwYDVQQD Eyg3NjdjNTFiN2JhZTA4NDM4Y2UwZTg0YWEwY2ZlMWU5NTQzMTg4OGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ghIUTCmSe26rRYhzoUc9da3fw3G 2Abf0nDHajeLgigYjWRaZu0g473PscLc83AXum8VhSbLs7DyARnexZwQCh1jgNez TX/xJ0ZGwXd5ORQrezgNSmrFiX7IHCvfCOngJDyEMhr0+JqArs+Ri4vx3DeokDjZ cHFQDo6FJSf33bhRz76mrbrBJDmf8SsENSi4kfHKZtIvIGZHK5DXn5BF4bgIGoYC 1G+E0FaLAYbKzSkq1GVaFDryoIeAvIjZVvEpHaQ3Nu4/1JChIUz6kqZv9zvCl0OB MJn7HEVutx4RXn3G52oVin0Olp2K2KF0vp4lfflfrXqXdeZOZ7GMX9naiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZ8Ube64IQ4zg6Eqgz+HpVDGIjZMB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARps9DyWv o1QnQ+R19/PRw8iY72SmXM1x/fwT+lVFX64zdrCvHnQDgHMoqmN310bNs+FlbasM /DdYjgDsSCh4g7YEChCVmanQdJ+ABp5fma5G3mwmTv/Np3Omht+b58yQ1QnLDfhl TKCROR+cO2b1s7Br3KNxUqG7ODznNcpvJ99Q+cqJ31tSuB3UVQIZLKQ/LRQ8du7O newYaSVzY4F84Drq2g3O6u18qbbh3Df0dIR1a2SwhZ/zCqbSleV7nnmaYRB/DH8d yF5OB3Mhp2HvKxVRV9LbszbKJELh6oAGqkZS6P8ukcG+Pf/mPOP9GYSE+rJOOhj0 J2HesZsKPP4n4g== -----END CERTIFICATE-----Generated at Wed Jun 4 22:48:14 2025 by rpki-client