$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft File: EmxmCzD1aSsrFuKJskkBxRj9pSA.mft (raw, json) Hash identifier: bRXS7C8b5Cs5ca+eTUeLsMN4cotcrhEXrW5gNleQTjA= Subject key identifier: C3:66:10:18:3E:88:D2:E6:A6:0D:F1:A0:90:B5:7E:98:E8:09:EA:DA Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 0198D5F1AD673341950E02CEE308082F1A7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft Manifest number: 1667 Signing time: Sat 23 Aug 2025 08:00:42 +0000 Manifest this update: Sat 23 Aug 2025 08:00:42 +0000 Manifest next update: Sun 24 Aug 2025 08:00:42 +0000 Files and hashes: 1: 2ECEgaeyvSYmg3L6KVDmtq3QuD4.roa (hash: Rjau37FJBuKqQPy7bdPwgLw6zQ6xQsvpgd1mKIZXcFU=) 2: 7l56dlrFb9fMabU3WCspPVcuNz8.roa (hash: BNqxxuIlwtXbBXPbd4qhO3KGAaTZUr0l50Y4l+Brijw=) 3: AjGSJmDTUaTBrx_s-vikweMceXs.roa (hash: RfgMVVSxZ47znUU7lhyrOD6u13oZH6rQq2T8fu6bfxk=) 4: EmxmCzD1aSsrFuKJskkBxRj9pSA.crl (hash: LepFzfgNfq2I/6Pneu6Fba3BDsr+7APZEA8gXRXIlG8=) 5: FiSCmdKJRr-YPjxcFigpeVUFVps.roa (hash: acaY8ohPIqVg5UZOHMawmFt422sokwSlIOa32vVbDkM=) 6: INBpI5fntDWmHlDNjs-Yi7QsdAs.roa (hash: JDa7sruzPjtU5PzNmQsKwyK3VFod04arc7ncOSuHouE=) 7: RuHKLSfWcgHGzOil4fAEzNXNsWY.roa (hash: Uc+hRokokGwptNiyfS8Yysvc/TqbHO5gZiF8l4C+938=) 8: fhkP1ORLZ5XxUVy4qC8BARs5rVI.roa (hash: 8dY2aE22Ya04xzDmrtlYb6ie5F49Q/sW7XRcYSjjGuo=) 9: gxlbepFDizY30e_VDf9e1RvjWgM.roa (hash: 6bnUAoZDd9UjKUbCDoEZob89bP3Q8i0Y7YskzssCFno=) 10: hCCCB7W_FSf63gC8Bfm1bg5kjwg.roa (hash: Qb0gULwh5NESSFA0xw+2Bgb6srlGKM9Q5/dKnTGFxCo=) 11: h_uvtBb89v86Ot0rZM5k7wf9t3c.roa (hash: wRsRpB1TywlOMa0+6dhzZ3BVy/WX6GDrbpQr+SBFVlM=) 12: mO6JB2aj7dXFeeJ4zlvyyWMYGdc.roa (hash: rJPjlG3izedKQcz5so0Lx+1/nAUwrvkTxraBmn8xIZs=) 13: uR1ciNLiC41HyQnLFmxXdlFLi4c.roa (hash: DjsKRDrWt/FFBB561o4tq8q/9xsxFnlJ8tTN6CI64L0=) 14: v7sddxJjq3qKaBWAdXKnkLLzrc0.roa (hash: lKZS60p/rxd0A+1EgTcJbGD6ikjsCu25yzGvAvr7Trs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:f1:ad:67:33:41:95:0e:02:ce:e3:08:08:2f:1a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Aug 23 08:00:42 2025 GMT Not After : Aug 24 08:00:42 2025 GMT Subject: CN=c36610183e88d2e6a60df1a090b57e98e809eada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f6:f5:3f:73:ce:1b:0b:c0:39:12:4d:9b:f3: 89:4d:e4:f7:49:71:4b:fa:42:37:1e:8c:fb:77:ba: 61:b0:0e:d3:ab:6c:ae:62:d3:d4:84:a8:5b:a9:04: 08:dc:8b:28:55:5e:5f:19:fd:37:b4:35:1b:dc:da: 2c:66:0b:61:ba:50:af:6a:29:93:09:08:6b:6f:81: c8:98:e8:03:43:5a:89:83:58:6c:1b:f9:1f:ef:d5: 36:cb:08:fb:58:06:67:58:ad:d3:98:15:34:c8:76: 53:5f:a9:58:3f:25:bc:2b:fc:48:04:f9:46:97:08: 63:0b:db:35:51:eb:e9:92:64:58:fe:5b:bd:79:19: d8:42:74:a7:d8:98:1b:40:d1:9d:77:e6:24:73:0b: 27:8d:87:81:81:5f:bc:46:aa:4e:ab:ae:60:ca:6d: 8b:17:94:35:a7:de:05:c6:53:17:93:06:31:bb:45: ab:80:87:69:cd:fd:0e:62:14:1b:7d:2d:1c:1b:f1: eb:2d:e7:3e:39:c7:31:a4:95:84:04:8f:f6:72:e2: b0:d4:b2:15:86:37:04:e9:eb:dd:8d:ae:6b:7c:fa: eb:62:c6:28:1b:ad:5f:06:23:bd:2b:bf:a2:40:89: 4f:27:b9:33:9e:86:69:aa:18:28:f4:df:c2:0f:9b: 46:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:66:10:18:3E:88:D2:E6:A6:0D:F1:A0:90:B5:7E:98:E8:09:EA:DA X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f8:d5:ba:89:e5:20:8b:f2:fa:79:e0:d7:8b:62:b6:43:cf: 14:74:2a:34:b7:4d:2f:32:13:e9:27:6a:b9:c0:50:e6:17:49: d7:68:b0:da:fa:5f:bf:1b:7b:77:74:8e:16:e3:f2:11:f9:b5: 17:44:2f:19:e4:2e:63:b6:64:d8:bb:93:7d:99:fc:35:7e:cf: bf:fe:00:f6:a0:58:bd:83:74:d6:48:a4:9c:98:0f:ab:ec:b5: da:c3:73:9c:ad:d0:97:23:84:8e:b8:7f:8b:32:36:5f:9e:ea: 6d:6a:ed:b4:e5:f6:55:a8:7e:70:08:7f:1e:76:fd:2e:39:91: cc:e6:67:c2:22:4f:f2:c2:f5:10:7d:b4:3e:32:61:8d:9e:63: d9:44:a6:83:cc:9d:f7:83:31:82:e2:b8:f5:4d:ca:22:22:57: 64:ae:2a:98:af:49:ab:23:40:b1:bb:20:24:4e:35:e7:46:b8: 50:8c:c4:91:5a:c9:ca:c5:fd:a0:a6:c2:88:62:99:bc:1a:78: 65:ef:94:14:26:54:ac:ba:83:82:07:1b:d6:3f:f5:55:ab:6d: 37:d0:13:35:a2:3d:ed:5b:42:91:3e:92:ab:f1:00:4e:b8:66: 5b:d2:ef:de:6d:f8:e1:a5:87:a3:96:9a:51:55:7a:6d:d7:af: 3c:d1:b5:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjV8a1nM0GVDgLO4wgILxp7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjUwODIzMDgwMDQyWhcNMjUwODI0MDgwMDQyWjAzMTEwLwYDVQQD EyhjMzY2MTAxODNlODhkMmU2YTYwZGYxYTA5MGI1N2U5OGU4MDllYWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/b1P3POGwvAORJNm/OJTeT3SXFL +kI3Hoz7d7phsA7Tq2yuYtPUhKhbqQQI3IsoVV5fGf03tDUb3NosZgthulCvaimT CQhrb4HImOgDQ1qJg1hsG/kf79U2ywj7WAZnWK3TmBU0yHZTX6lYPyW8K/xIBPlG lwhjC9s1UevpkmRY/lu9eRnYQnSn2JgbQNGdd+YkcwsnjYeBgV+8RqpOq65gym2L F5Q1p94FxlMXkwYxu0WrgIdpzf0OYhQbfS0cG/HrLec+OccxpJWEBI/2cuKw1LIV hjcE6evdja5rfPrrYsYoG61fBiO9K7+iQIlPJ7kznoZpqhgo9N/CD5tGtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNmEBg+iNLmpg3xoJC1fpjoCeraMB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfjVuonl IIvy+nng14titkPPFHQqNLdNLzIT6SdqucBQ5hdJ12iw2vpfvxt7d3SOFuPyEfm1 F0QvGeQuY7Zk2LuTfZn8NX7Pv/4A9qBYvYN01kiknJgPq+y12sNznK3QlyOEjrh/ izI2X57qbWrttOX2Vah+cAh/Hnb9LjmRzOZnwiJP8sL1EH20PjJhjZ5j2USmg8yd 94MxguK49U3KIiJXZK4qmK9JqyNAsbsgJE4150a4UIzEkVrJysX9oKbCiGKZvBp4 Ze+UFCZUrLqDggcb1j/1VattN9ATNaI97VtCkT6Sq/EATrhmW9Lv3m344aWHo5aa UVV6bdevPNG1DA== -----END CERTIFICATE-----Generated at Sat Aug 23 15:27:23 2025 by rpki-client