$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft File: EmxmCzD1aSsrFuKJskkBxRj9pSA.mft (raw, json) Hash identifier: quuweYqU9H5wWBg5Rq1tiw1V5QXmOyUfsG2gGznJwzk= Subject key identifier: C0:EF:FA:91:01:90:6D:59:F5:37:44:72:62:DF:D3:F5:C5:56:8E:C0 Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 0196A3F73A2F2F16AE7AF779812ADB508574 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft Manifest number: 1544 Signing time: Tue 06 May 2025 05:00:10 +0000 Manifest this update: Tue 06 May 2025 05:00:10 +0000 Manifest next update: Wed 07 May 2025 05:00:10 +0000 Files and hashes: 1: 2ECEgaeyvSYmg3L6KVDmtq3QuD4.roa (hash: Rjau37FJBuKqQPy7bdPwgLw6zQ6xQsvpgd1mKIZXcFU=) 2: 7l56dlrFb9fMabU3WCspPVcuNz8.roa (hash: BNqxxuIlwtXbBXPbd4qhO3KGAaTZUr0l50Y4l+Brijw=) 3: AjGSJmDTUaTBrx_s-vikweMceXs.roa (hash: RfgMVVSxZ47znUU7lhyrOD6u13oZH6rQq2T8fu6bfxk=) 4: EmxmCzD1aSsrFuKJskkBxRj9pSA.crl (hash: ZrVWFPLzCfBjwJqJ3KQIvIcDr3AiuYzWzfhLk8evo6Q=) 5: FiSCmdKJRr-YPjxcFigpeVUFVps.roa (hash: acaY8ohPIqVg5UZOHMawmFt422sokwSlIOa32vVbDkM=) 6: INBpI5fntDWmHlDNjs-Yi7QsdAs.roa (hash: JDa7sruzPjtU5PzNmQsKwyK3VFod04arc7ncOSuHouE=) 7: RuHKLSfWcgHGzOil4fAEzNXNsWY.roa (hash: Uc+hRokokGwptNiyfS8Yysvc/TqbHO5gZiF8l4C+938=) 8: fhkP1ORLZ5XxUVy4qC8BARs5rVI.roa (hash: 8dY2aE22Ya04xzDmrtlYb6ie5F49Q/sW7XRcYSjjGuo=) 9: gxlbepFDizY30e_VDf9e1RvjWgM.roa (hash: 6bnUAoZDd9UjKUbCDoEZob89bP3Q8i0Y7YskzssCFno=) 10: hCCCB7W_FSf63gC8Bfm1bg5kjwg.roa (hash: Qb0gULwh5NESSFA0xw+2Bgb6srlGKM9Q5/dKnTGFxCo=) 11: h_uvtBb89v86Ot0rZM5k7wf9t3c.roa (hash: wRsRpB1TywlOMa0+6dhzZ3BVy/WX6GDrbpQr+SBFVlM=) 12: mO6JB2aj7dXFeeJ4zlvyyWMYGdc.roa (hash: rJPjlG3izedKQcz5so0Lx+1/nAUwrvkTxraBmn8xIZs=) 13: uR1ciNLiC41HyQnLFmxXdlFLi4c.roa (hash: DjsKRDrWt/FFBB561o4tq8q/9xsxFnlJ8tTN6CI64L0=) 14: v7sddxJjq3qKaBWAdXKnkLLzrc0.roa (hash: lKZS60p/rxd0A+1EgTcJbGD6ikjsCu25yzGvAvr7Trs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a3:f7:3a:2f:2f:16:ae:7a:f7:79:81:2a:db:50:85:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: May 6 05:00:10 2025 GMT Not After : May 7 05:00:10 2025 GMT Subject: CN=c0effa9101906d59f537447262dfd3f5c5568ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fc:75:76:fc:f5:08:d9:9b:7d:be:7f:1a:55: 88:a3:73:06:a1:9d:40:d2:b6:16:58:5f:75:a8:f8: 43:3f:e9:ef:1d:d6:37:97:6d:b7:13:a4:10:06:4e: 31:12:ce:02:60:53:8e:f7:5d:c3:65:21:0d:09:df: e3:ea:7a:43:52:92:de:6d:54:74:3b:7c:1c:40:36: 7b:2c:47:2e:9a:bc:76:16:de:0d:d1:5a:6e:6b:a3: 59:c2:99:00:a6:e2:a0:88:d6:1d:9f:9c:18:a9:30: 21:3f:4a:c0:d8:0a:00:b9:5e:06:4b:b2:22:d9:41: 62:70:13:10:9c:29:dd:c8:37:09:17:19:b4:33:9e: 6c:4a:3a:66:01:27:68:4a:7b:2d:d0:af:8c:f1:1b: 20:ad:7f:7a:77:3e:5e:bb:be:89:2e:be:ea:ac:55: c6:b3:2b:9e:e7:3d:cd:8a:1e:5a:b9:b5:91:85:1e: d2:ad:e5:25:48:5c:c1:42:9f:91:b9:02:76:b2:0a: 94:43:11:2f:10:ee:35:56:6e:44:c2:e9:bc:dc:8a: 65:b3:83:c0:0c:64:2b:30:7b:83:5c:ea:a6:6c:94: 2e:85:10:c1:d7:a1:d1:d7:79:ca:78:c9:46:41:ba: 92:62:a8:51:9e:79:f4:78:eb:3b:e2:dc:bb:0e:5f: 6d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EF:FA:91:01:90:6D:59:F5:37:44:72:62:DF:D3:F5:C5:56:8E:C0 X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:85:81:fa:8e:8b:ad:f7:86:86:41:15:0e:19:1e:ce:7b:c3: 8f:c3:58:49:67:23:08:c4:92:79:91:b1:d4:84:1e:ae:ba:c9: 3b:14:b4:35:81:22:c9:be:44:ad:8b:5a:f0:a9:9a:80:91:ca: c9:63:9d:63:a7:e8:4e:92:9b:94:39:d7:aa:9f:ac:19:6f:ad: 32:93:0b:3c:7f:08:ed:e6:91:77:6e:db:fc:df:71:08:97:e1: df:3f:9c:67:86:75:c1:03:23:ec:13:54:72:0c:b7:c9:34:85: e5:34:25:96:90:b0:1b:9f:db:b9:09:5d:2f:df:96:27:83:d2: d7:0c:b6:46:f4:dc:93:81:73:63:e5:ae:28:56:03:5c:ec:37: 10:e6:da:d6:6b:a3:b6:36:aa:04:2b:1c:0a:16:0d:d7:82:fe: bb:1b:1d:bc:78:95:61:c1:1e:4b:8f:16:2e:58:97:2a:55:f1: 69:18:ab:9a:42:a8:59:7b:9b:03:f6:cc:b8:30:3e:46:6c:f3: e4:fd:fb:b9:90:95:d5:41:5b:ce:79:dc:eb:e7:29:1b:bd:a5: 76:8c:de:eb:29:a3:51:5a:a0:43:6a:c2:56:13:2f:88:c5:b4: 0d:3a:44:1e:f6:82:b4:99:94:c1:d7:49:66:63:6f:55:0a:e5: 5f:5a:3a:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaj9zovLxauevd5gSrbUIV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjUwNTA2MDUwMDEwWhcNMjUwNTA3MDUwMDEwWjAzMTEwLwYDVQQD EyhjMGVmZmE5MTAxOTA2ZDU5ZjUzNzQ0NzI2MmRmZDNmNWM1NTY4ZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvx1dvz1CNmbfb5/GlWIo3MGoZ1A 0rYWWF91qPhDP+nvHdY3l223E6QQBk4xEs4CYFOO913DZSENCd/j6npDUpLebVR0 O3wcQDZ7LEcumrx2Ft4N0Vpua6NZwpkApuKgiNYdn5wYqTAhP0rA2AoAuV4GS7Ii 2UFicBMQnCndyDcJFxm0M55sSjpmASdoSnst0K+M8RsgrX96dz5eu76JLr7qrFXG syue5z3Nih5aubWRhR7SreUlSFzBQp+RuQJ2sgqUQxEvEO41Vm5Ewum83Ipls4PA DGQrMHuDXOqmbJQuhRDB16HR13nKeMlGQbqSYqhRnnn0eOs74ty7Dl9tRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDv+pEBkG1Z9TdEcmLf0/XFVo7AMB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYWB+o6L rfeGhkEVDhkeznvDj8NYSWcjCMSSeZGx1IQerrrJOxS0NYEiyb5ErYta8KmagJHK yWOdY6foTpKblDnXqp+sGW+tMpMLPH8I7eaRd27b/N9xCJfh3z+cZ4Z1wQMj7BNU cgy3yTSF5TQllpCwG5/buQldL9+WJ4PS1wy2RvTck4FzY+WuKFYDXOw3EOba1muj tjaqBCscChYN14L+uxsdvHiVYcEeS48WLliXKlXxaRirmkKoWXubA/bMuDA+Rmzz 5P37uZCV1UFbznnc6+cpG72ldoze6ymjUVqgQ2rCVhMviMW0DTpEHvaCtJmUwddJ ZmNvVQrlX1o62g== -----END CERTIFICATE-----Generated at Tue May 6 12:03:15 2025 by rpki-client