$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft File: EmxmCzD1aSsrFuKJskkBxRj9pSA.mft (raw, json) Hash identifier: 9/no8+2F61LgGVqG9sY3vrr68Q+cEGIRDzWiLDSjxcg= Subject key identifier: 28:7B:C4:A0:24:DC:AB:3D:A4:D5:FE:05:9F:60:7D:6C:CA:84:80:AF Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 0197B6326ADF3B982D3E499CEB5FD3ED68BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft Manifest number: 15D2 Signing time: Sat 28 Jun 2025 11:00:46 +0000 Manifest this update: Sat 28 Jun 2025 11:00:46 +0000 Manifest next update: Sun 29 Jun 2025 11:00:46 +0000 Files and hashes: 1: 2ECEgaeyvSYmg3L6KVDmtq3QuD4.roa (hash: Rjau37FJBuKqQPy7bdPwgLw6zQ6xQsvpgd1mKIZXcFU=) 2: 7l56dlrFb9fMabU3WCspPVcuNz8.roa (hash: BNqxxuIlwtXbBXPbd4qhO3KGAaTZUr0l50Y4l+Brijw=) 3: AjGSJmDTUaTBrx_s-vikweMceXs.roa (hash: RfgMVVSxZ47znUU7lhyrOD6u13oZH6rQq2T8fu6bfxk=) 4: EmxmCzD1aSsrFuKJskkBxRj9pSA.crl (hash: 3asgvuun7FpOuczpVHT375Zhtnobkodp0hTcL7MErmI=) 5: FiSCmdKJRr-YPjxcFigpeVUFVps.roa (hash: acaY8ohPIqVg5UZOHMawmFt422sokwSlIOa32vVbDkM=) 6: INBpI5fntDWmHlDNjs-Yi7QsdAs.roa (hash: JDa7sruzPjtU5PzNmQsKwyK3VFod04arc7ncOSuHouE=) 7: RuHKLSfWcgHGzOil4fAEzNXNsWY.roa (hash: Uc+hRokokGwptNiyfS8Yysvc/TqbHO5gZiF8l4C+938=) 8: fhkP1ORLZ5XxUVy4qC8BARs5rVI.roa (hash: 8dY2aE22Ya04xzDmrtlYb6ie5F49Q/sW7XRcYSjjGuo=) 9: gxlbepFDizY30e_VDf9e1RvjWgM.roa (hash: 6bnUAoZDd9UjKUbCDoEZob89bP3Q8i0Y7YskzssCFno=) 10: hCCCB7W_FSf63gC8Bfm1bg5kjwg.roa (hash: Qb0gULwh5NESSFA0xw+2Bgb6srlGKM9Q5/dKnTGFxCo=) 11: h_uvtBb89v86Ot0rZM5k7wf9t3c.roa (hash: wRsRpB1TywlOMa0+6dhzZ3BVy/WX6GDrbpQr+SBFVlM=) 12: mO6JB2aj7dXFeeJ4zlvyyWMYGdc.roa (hash: rJPjlG3izedKQcz5so0Lx+1/nAUwrvkTxraBmn8xIZs=) 13: uR1ciNLiC41HyQnLFmxXdlFLi4c.roa (hash: DjsKRDrWt/FFBB561o4tq8q/9xsxFnlJ8tTN6CI64L0=) 14: v7sddxJjq3qKaBWAdXKnkLLzrc0.roa (hash: lKZS60p/rxd0A+1EgTcJbGD6ikjsCu25yzGvAvr7Trs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:32:6a:df:3b:98:2d:3e:49:9c:eb:5f:d3:ed:68:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Jun 28 11:00:46 2025 GMT Not After : Jun 29 11:00:46 2025 GMT Subject: CN=287bc4a024dcab3da4d5fe059f607d6cca8480af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:74:d9:3f:0f:fd:ea:4d:f5:bc:46:89:15: cf:13:0d:59:56:45:9c:88:e3:44:9f:9c:50:a1:ef: 21:82:da:e8:6b:8f:b8:85:3f:44:5c:57:93:fd:9c: 79:c2:bc:ca:5f:2f:7b:f7:22:96:59:02:f9:6a:83: be:0b:aa:f9:44:ec:b7:26:d6:c9:3b:8c:52:3f:21: 88:7b:96:b1:3c:67:d6:75:31:46:fb:81:7c:3c:38: 19:a7:ab:51:2f:6a:2d:43:84:98:82:ca:0a:0f:47: db:2a:69:e2:90:23:eb:4a:17:50:09:5f:27:cd:a3: 55:41:f6:45:c6:15:0c:f4:c6:d6:48:da:9c:74:12: db:65:e3:37:8c:ed:4b:1c:b2:26:37:cd:73:82:74: 65:88:00:23:5f:38:6e:b5:1b:b5:57:df:0d:5d:68: 83:67:27:f6:a1:a7:cf:10:d7:84:a7:75:fc:bf:8f: 1c:b2:0c:ba:00:ba:7a:98:cd:c2:1f:ab:05:9e:e5: c4:0f:54:52:e4:87:00:40:87:77:26:b4:bb:cc:dc: 6a:e3:1e:5d:e0:99:ca:04:c1:42:c7:00:25:93:97: d7:85:34:b3:4a:58:3b:53:e7:4c:60:9b:32:85:63: ac:6a:0e:9d:c6:31:9d:5d:84:14:ac:4e:0f:df:96: d8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7B:C4:A0:24:DC:AB:3D:A4:D5:FE:05:9F:60:7D:6C:CA:84:80:AF X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b2:ea:86:1e:cb:19:d2:37:d6:95:8e:7c:e3:bb:d9:0a:0f: 87:e7:4e:f9:50:b6:3d:2d:ba:05:f7:d8:bf:c3:d9:d4:e1:18: 23:f0:02:39:14:f6:be:21:08:0c:dc:d3:b7:91:1f:ad:c7:3a: aa:b8:49:98:c7:ea:54:e0:ee:49:e3:03:f1:6b:7d:f5:4a:4c: 57:bf:08:b7:21:95:0d:3c:33:07:ea:c5:ba:fd:f9:b4:c0:22: 34:0b:97:ca:77:7e:58:80:bb:8b:52:d7:ea:66:45:30:67:e9: 02:ba:bc:16:e6:bf:ae:82:a6:6b:ab:da:21:12:7b:94:e1:76: ba:f3:03:46:4e:f1:26:40:01:3c:74:df:71:9c:c5:26:e6:3e: 03:9d:06:07:51:0e:dc:04:c3:e6:7b:ee:38:6e:56:55:91:6e: d5:3a:66:61:0a:3d:05:4d:23:8f:1a:89:b4:29:f3:47:0d:e4: de:9f:70:81:19:a0:7b:36:21:e8:ad:9d:6f:2d:87:0d:ce:b4: a4:52:02:05:88:82:2e:17:c4:00:74:1f:45:95:ca:b9:7c:e9: cc:34:51:84:fb:49:aa:3e:a2:ea:56:01:91:f9:fd:52:2e:13: 8c:e9:19:3b:7c:be:8c:23:d9:e8:bf:22:7f:c0:83:ee:28:5b: 59:8a:f2:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2MmrfO5gtPkmc61/T7Wi+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjUwNjI4MTEwMDQ2WhcNMjUwNjI5MTEwMDQ2WjAzMTEwLwYDVQQD EygyODdiYzRhMDI0ZGNhYjNkYTRkNWZlMDU5ZjYwN2Q2Y2NhODQ4MGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE902T8P/epN9bxGiRXPEw1ZVkWc iONEn5xQoe8hgtroa4+4hT9EXFeT/Zx5wrzKXy979yKWWQL5aoO+C6r5ROy3JtbJ O4xSPyGIe5axPGfWdTFG+4F8PDgZp6tRL2otQ4SYgsoKD0fbKmnikCPrShdQCV8n zaNVQfZFxhUM9MbWSNqcdBLbZeM3jO1LHLImN81zgnRliAAjXzhutRu1V98NXWiD Zyf2oafPENeEp3X8v48csgy6ALp6mM3CH6sFnuXED1RS5IcAQId3JrS7zNxq4x5d 4JnKBMFCxwAlk5fXhTSzSlg7U+dMYJsyhWOsag6dxjGdXYQUrE4P35bYrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCh7xKAk3Ks9pNX+BZ9gfWzKhICvMB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLLqhh7L GdI31pWOfOO72QoPh+dO+VC2PS26BffYv8PZ1OEYI/ACORT2viEIDNzTt5Efrcc6 qrhJmMfqVODuSeMD8Wt99UpMV78ItyGVDTwzB+rFuv35tMAiNAuXynd+WIC7i1LX 6mZFMGfpArq8Fua/roKma6vaIRJ7lOF2uvMDRk7xJkABPHTfcZzFJuY+A50GB1EO 3ATD5nvuOG5WVZFu1TpmYQo9BU0jjxqJtCnzRw3k3p9wgRmgezYh6K2dby2HDc60 pFICBYiCLhfEAHQfRZXKuXzpzDRRhPtJqj6i6lYBkfn9Ui4TjOkZO3y+jCPZ6L8i f8CD7ihbWYryfg== -----END CERTIFICATE-----Generated at Sat Jun 28 19:14:41 2025 by rpki-client