$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft File: EmxmCzD1aSsrFuKJskkBxRj9pSA.mft (raw, json) Hash identifier: 2+H1ud1To1F6I+4ZwXgjmSs2nz4RI0dR2WHKeVUn5bk= Subject key identifier: 2A:1A:3C:53:9B:66:83:57:D5:3C:41:AB:9E:0F:38:21:F3:36:99:82 Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 019E1DFE3D50EF3D163CC22CAFDC36117C95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft Manifest number: 1929 Signing time: Tue 12 May 2026 21:01:01 +0000 Manifest this update: Tue 12 May 2026 21:01:01 +0000 Manifest next update: Wed 13 May 2026 21:01:01 +0000 Files and hashes: 1: 6gnkz6OkX6AmjbUFly1wXQMc5Hc.roa (hash: m39tlNEbvl+KvzNcowhejD0YaetaJPWZmQdZ2mQ/k74=) 2: 9mLGCobs8b6fmlZ1T_zH5qZCHLA.roa (hash: xIWAnWYQk4WbKTNaRD60lnYQAHj9+bf9KBsYFY72scI=) 3: EQZgk_3J5Fyc0bcuLI3Yx--EMu8.roa (hash: aY4YMscFsgJkzrPMKTCHKvSIl1+/sZmyY9rhoC43z2o=) 4: EmxmCzD1aSsrFuKJskkBxRj9pSA.crl (hash: lQUnE3fC0mVczjkkKm/xi1bEBtBOQZoTtcIPY2tLtSI=) 5: FKnKoarmmi6ha7YNrynCE7-GlPM.roa (hash: oKaYSJE4mcvvEbQGIWsb5jJI9dhGriaheyAzBdZoE4M=) 6: NOfTkKQFl3ruOsCGzSg45VC6KLA.roa (hash: WoHHZtSZ2RRzNCMrx4Mo4OnnRJ/xg4jH+vJaSGSMeKQ=) 7: OYOS-7oCt8qB-IolnQtbLO6mNJs.roa (hash: chuIv7V7D8ZTIYroROKzsMh/sfUH1MBxL7TmjhgmwAY=) 8: U0jBWIMSXFd0rjWu9nHmYpEjlxY.roa (hash: 8pB3kCXDYDvqkBMxSrDg6IY/CrYSzIC1l2BK7MAfP6k=) 9: gbXhR2uRK-RKCAkCyIxBQwTU87w.roa (hash: XhuCXdBrzSTullx7dBLgYNOs79sf2A0V1FhHe7MzJH8=) 10: hvYamUzrt8l5XxKg3jQF1nquOy8.roa (hash: xNuK7FrZEwKLbPgJUKdky1f1LSPyUxxPzAOoMN9Fs90=) 11: i6gcioIk1jIxZGNq2Keg8xOkBWg.roa (hash: EYNfjU+Znmdq/oFfOoZVDk/plRE4M9DNa/cL2woqZVo=) 12: kZ63SuCSKudhTtGH6_pJGkWdSXM.roa (hash: OQrqf7NPIuBzSyIJdM7aU9Y2d/U+DEvBIbGAvAZyp2o=) 13: nQVtLPwM7Gp6ZCLT9srWcE_wr_U.roa (hash: cKQn/pyHXQYWuoLIUTT0+l/rc5/mbfiSHrwT1Q5Iikw=) 14: t-oE4oy_z3AHnCC0k6oEiP8UMXs.roa (hash: 3g70luAd5CMmu8cTIqcXY5Mx4qPSObAMdcIqmAZokIg=) 15: vCblwnfnVDcB7QAInr9wO3fWjIk.roa (hash: d2afxpid86oKujS9MPLVfD/AYLN6Tg4NNXIDg5DemP0=) 16: wYpMc3njcI8aYZhP5Vx0YCvhxuE.roa (hash: VGQsQDGB5RifV/TxzkNx5BkHOcVUKguaU5IZPPqP/2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:fe:3d:50:ef:3d:16:3c:c2:2c:af:dc:36:11:7c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: May 12 21:01:01 2026 GMT Not After : May 13 21:01:01 2026 GMT Subject: CN=2a1a3c539b668357d53c41ab9e0f3821f3369982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:96:2f:11:f8:d3:9d:f7:9f:b6:2f:c5:29:e5: b1:a6:d9:f6:b6:c9:ab:69:c4:19:7d:e4:91:4d:77: 12:15:04:d2:cd:2b:88:90:f7:7f:d4:86:45:67:52: a2:6b:26:6c:1b:e7:4a:75:29:99:43:cf:77:a2:b9: 3c:ee:63:96:60:7a:6a:db:2a:f7:b3:9a:5b:13:90: 6e:28:a5:9c:9b:73:b3:ba:ba:30:30:d4:66:f9:1c: a3:bc:98:2c:91:dc:ef:3f:c4:43:42:27:ac:90:5d: 54:a7:80:bb:bc:bc:f4:70:0b:5e:a3:f9:83:51:ae: 2b:46:30:2e:ab:f9:f1:09:0b:e4:f1:3b:9e:56:c1: b3:e5:9c:22:d3:4e:e8:50:95:31:35:b0:43:1d:5c: ea:b9:5a:18:88:c2:15:17:6f:a9:b6:32:38:b3:e7: 4b:df:33:15:e1:14:7c:76:6c:0c:85:58:c0:96:ea: 77:bf:3b:74:82:25:1e:ca:63:27:49:17:de:5e:f5: 0d:36:2d:31:77:46:05:08:15:78:55:da:4e:5d:99: af:24:d1:f0:11:0a:ca:42:99:3c:d5:98:e4:fa:ab: ab:0d:54:9b:d3:6d:27:c5:3a:71:ff:cb:b2:61:f2: 4c:cb:e6:dd:72:48:16:cf:c3:6f:04:22:66:86:eb: e5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1A:3C:53:9B:66:83:57:D5:3C:41:AB:9E:0F:38:21:F3:36:99:82 X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ee:f0:5a:9d:c2:41:6c:de:11:96:53:ae:4d:57:64:5b:a6: af:19:bc:71:e8:3f:ba:8a:b6:40:3a:2f:e8:bc:da:35:bd:22: 20:ac:d0:49:fd:ad:06:c3:7d:60:28:3e:d1:47:26:02:f0:f0: a2:20:25:c0:36:35:16:69:d8:32:35:e7:72:aa:f1:14:27:7b: 03:7e:f2:db:61:73:74:79:47:74:02:95:a8:b5:74:83:39:a8: 6b:c6:df:55:e0:6d:6a:b5:73:d0:44:29:35:08:ce:13:ba:16: 07:a2:7d:23:22:c6:a5:c1:dc:f2:3e:f1:a0:be:42:48:5c:a0: 89:0c:c4:c5:f1:44:28:3b:70:f1:a6:1e:0a:99:d9:2c:d2:88: 4f:ff:96:dc:e4:26:4a:04:b4:92:9f:52:95:df:a8:29:04:09: a7:54:9b:29:bc:2b:a3:64:2b:c3:97:0d:3a:d8:77:e0:ca:5c: b9:2d:e2:f2:13:d6:f9:e7:07:e7:6f:5e:38:9f:c7:12:f0:26: bc:6d:85:44:8d:91:88:84:82:85:66:a9:ef:27:08:be:5e:99: cd:a3:6b:91:99:67:cd:a3:08:81:40:cb:3c:c9:21:6e:aa:19: 12:3c:68:34:af:2a:03:76:36:49:f1:fd:62:40:cf:6a:e6:c3: b1:39:df:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4d/j1Q7z0WPMIsr9w2EXyVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjYwNTEyMjEwMTAxWhcNMjYwNTEzMjEwMTAxWjAzMTEwLwYDVQQD EygyYTFhM2M1MzliNjY4MzU3ZDUzYzQxYWI5ZTBmMzgyMWYzMzY5OTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopYvEfjTnfefti/FKeWxptn2tsmr acQZfeSRTXcSFQTSzSuIkPd/1IZFZ1KiayZsG+dKdSmZQ893ork87mOWYHpq2yr3 s5pbE5BuKKWcm3OzurowMNRm+RyjvJgskdzvP8RDQieskF1Up4C7vLz0cAteo/mD Ua4rRjAuq/nxCQvk8TueVsGz5Zwi007oUJUxNbBDHVzquVoYiMIVF2+ptjI4s+dL 3zMV4RR8dmwMhVjAlup3vzt0giUeymMnSRfeXvUNNi0xd0YFCBV4VdpOXZmvJNHw EQrKQpk81Zjk+qurDVSb020nxTpx/8uyYfJMy+bdckgWz8NvBCJmhuvlSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoaPFObZoNX1TxBq54POCHzNpmCMB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfu7wWp3C QWzeEZZTrk1XZFumrxm8ceg/uoq2QDov6LzaNb0iIKzQSf2tBsN9YCg+0UcmAvDw oiAlwDY1FmnYMjXncqrxFCd7A37y22FzdHlHdAKVqLV0gzmoa8bfVeBtarVz0EQp NQjOE7oWB6J9IyLGpcHc8j7xoL5CSFygiQzExfFEKDtw8aYeCpnZLNKIT/+W3OQm SgS0kp9Sld+oKQQJp1SbKbwro2Qrw5cNOth34MpcuS3i8hPW+ecH529eOJ/HEvAm vG2FRI2RiISChWap7ycIvl6ZzaNrkZlnzaMIgUDLPMkhbqoZEjxoNK8qA3Y2SfH9 YkDPaubDsTnf2g== -----END CERTIFICATE-----Generated at Wed May 13 01:09:06 2026 by rpki-client