$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft File: EmxmCzD1aSsrFuKJskkBxRj9pSA.mft (raw, json) Hash identifier: +u5OaqnpijpG8i6c10iNM2CADkGshnsJQGEK44HkdtQ= Subject key identifier: 36:13:6A:7A:59:92:DD:45:BF:1B:70:F9:3C:1D:83:31:10:63:82:96 Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 0199FB461389956844CC823C836CA56B45C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft Manifest number: 1703 Signing time: Sun 19 Oct 2025 07:01:37 +0000 Manifest this update: Sun 19 Oct 2025 07:01:37 +0000 Manifest next update: Mon 20 Oct 2025 07:01:37 +0000 Files and hashes: 1: 7l56dlrFb9fMabU3WCspPVcuNz8.roa (hash: BNqxxuIlwtXbBXPbd4qhO3KGAaTZUr0l50Y4l+Brijw=) 2: AjGSJmDTUaTBrx_s-vikweMceXs.roa (hash: RfgMVVSxZ47znUU7lhyrOD6u13oZH6rQq2T8fu6bfxk=) 3: EmxmCzD1aSsrFuKJskkBxRj9pSA.crl (hash: GEQyJ2gmJ4tvaFv9Dd2N3SrOYcikWVspyAY55Bg5Xlk=) 4: Ex2R8TC5ca7BapiGbOlEw7RTF7Y.roa (hash: Zmas/V+oKAZuTjJ6fOsrkdvL5jU6mJ35z5uKhHphtzs=) 5: INBpI5fntDWmHlDNjs-Yi7QsdAs.roa (hash: JDa7sruzPjtU5PzNmQsKwyK3VFod04arc7ncOSuHouE=) 6: KN3USh-JJW9-jhGDxiVWDhsPPA0.roa (hash: Xi9JL3Kg6iH7DV1CRgQBlVdsSYD/fpvtM7GyTmDdH4Q=) 7: PA9a7mmxzeJuoTmmqOPzfa0EJeU.roa (hash: cxrAyolBCBdgGmcgbRXCGM/uyRcD+ekmyS1D3d9CyCE=) 8: RuHKLSfWcgHGzOil4fAEzNXNsWY.roa (hash: Uc+hRokokGwptNiyfS8Yysvc/TqbHO5gZiF8l4C+938=) 9: SVDba3c5JwKNT_9O80xlrgywUPo.roa (hash: y8/CxIFfpyDYuv3uKMMuzQkteVC7KubD/FZFFVGPFkE=) 10: XAelOV_MbHen1Ypn-fcsfbxuz5Q.roa (hash: in8EeTTtSOWFvv18iCMa8aOKJrJKg1oqYKWnx05lArQ=) 11: b2ii9Ml7qpC36RUpZ8hKOXAe8yM.roa (hash: /Y0ueq9Pn525s9PDcY0SvkDIxOuDN0k+WvttGHuIvJE=) 12: fhkP1ORLZ5XxUVy4qC8BARs5rVI.roa (hash: 8dY2aE22Ya04xzDmrtlYb6ie5F49Q/sW7XRcYSjjGuo=) 13: gxlbepFDizY30e_VDf9e1RvjWgM.roa (hash: 6bnUAoZDd9UjKUbCDoEZob89bP3Q8i0Y7YskzssCFno=) 14: hCCCB7W_FSf63gC8Bfm1bg5kjwg.roa (hash: Qb0gULwh5NESSFA0xw+2Bgb6srlGKM9Q5/dKnTGFxCo=) 15: mO6JB2aj7dXFeeJ4zlvyyWMYGdc.roa (hash: rJPjlG3izedKQcz5so0Lx+1/nAUwrvkTxraBmn8xIZs=) 16: v7sddxJjq3qKaBWAdXKnkLLzrc0.roa (hash: lKZS60p/rxd0A+1EgTcJbGD6ikjsCu25yzGvAvr7Trs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:46:13:89:95:68:44:cc:82:3c:83:6c:a5:6b:45:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Oct 19 07:01:37 2025 GMT Not After : Oct 20 07:01:37 2025 GMT Subject: CN=36136a7a5992dd45bf1b70f93c1d833110638296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ee:b9:9e:36:c5:cf:6d:1e:e6:9d:ed:e8:1c: d0:2d:35:2b:9f:7f:1a:83:d1:de:14:4a:a5:48:03: 04:26:3c:bd:ff:28:e8:7b:86:ee:5f:78:87:af:97: 91:d2:57:4b:7f:7e:96:b6:0a:93:87:32:62:37:81: 5c:10:7c:f4:73:0e:99:7b:7b:ce:2e:7b:aa:41:79: d7:7e:14:56:0c:87:50:9b:38:4d:f7:cf:81:f2:aa: 30:b0:37:52:87:25:4c:c4:c4:8e:a5:39:0a:d8:ff: e8:87:c6:e9:1e:1d:39:f8:1e:8b:2f:8d:ea:b0:1b: d8:ae:5b:d9:63:fd:e2:09:d4:f9:7c:ec:af:b1:f4: 00:5b:85:c4:83:40:a6:0c:00:28:13:79:1d:35:09: 37:e2:ec:bc:ac:2c:f7:dd:28:58:7b:dc:de:3e:bd: 03:26:4e:25:15:bf:26:85:01:77:c4:35:3c:32:27: 1d:33:95:74:4e:3b:72:36:41:08:4d:79:43:76:53: a8:da:b7:a1:45:ac:2f:09:ec:e5:15:94:a1:2e:ef: ad:24:ca:14:dc:ce:b4:d2:f4:cd:3b:a9:ba:53:8f: a7:7d:8b:f8:98:cc:b0:8e:43:cc:e9:ad:12:ed:af: c4:6d:5f:da:2e:f2:f3:53:4a:3d:81:dc:22:e2:04: 0d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:13:6A:7A:59:92:DD:45:BF:1B:70:F9:3C:1D:83:31:10:63:82:96 X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:53:13:8e:6d:61:32:ae:e0:af:70:ba:37:6d:ec:f4:c7:e8: 53:df:88:df:4f:89:4c:2c:90:14:f0:3b:bd:8e:ab:91:a3:68: 8d:a3:23:91:b8:f8:84:9a:40:d7:61:b4:d7:96:82:4e:07:ce: 14:2e:a3:c2:75:3c:b0:aa:80:3d:d0:3b:1e:71:cd:16:ac:1c: ac:d9:c3:5f:2d:fe:dc:d2:fb:2f:74:f9:55:4a:a3:b7:ad:e1: b0:38:79:74:31:99:d6:fe:3c:44:65:bb:b1:2a:12:01:bf:42: 78:0d:b0:b7:a1:f5:b3:83:fd:99:85:65:78:cb:83:3b:cd:dc: a0:85:cd:6e:48:90:eb:4c:40:10:72:41:5d:7a:57:47:4e:48: 5b:fc:01:a5:66:36:09:f4:e4:fb:95:fc:48:4c:e1:0a:d4:65: f7:af:75:ab:95:ac:89:0c:b9:f7:f3:b1:a3:be:80:b2:fb:bf: 4d:87:cd:7e:36:17:54:cd:62:e8:14:bc:2c:bc:04:d8:12:89: e1:25:ee:df:63:18:c0:c3:ba:8b:2b:70:c5:eb:b7:39:e8:8f: 33:02:2d:0c:f1:ca:71:b0:d2:7a:b0:25:e9:6c:e0:b2:c8:af: 9c:09:dc:0a:2c:a0:bd:77:14:b0:9d:d8:37:96:11:18:fc:9d: e3:00:7b:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7RhOJlWhEzII8g2yla0XIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjUxMDE5MDcwMTM3WhcNMjUxMDIwMDcwMTM3WjAzMTEwLwYDVQQD EygzNjEzNmE3YTU5OTJkZDQ1YmYxYjcwZjkzYzFkODMzMTEwNjM4Mjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO65njbFz20e5p3t6BzQLTUrn38a g9HeFEqlSAMEJjy9/yjoe4buX3iHr5eR0ldLf36WtgqThzJiN4FcEHz0cw6Ze3vO LnuqQXnXfhRWDIdQmzhN98+B8qowsDdShyVMxMSOpTkK2P/oh8bpHh05+B6LL43q sBvYrlvZY/3iCdT5fOyvsfQAW4XEg0CmDAAoE3kdNQk34uy8rCz33ShYe9zePr0D Jk4lFb8mhQF3xDU8MicdM5V0TjtyNkEITXlDdlOo2rehRawvCezlFZShLu+tJMoU 3M600vTNO6m6U4+nfYv4mMywjkPM6a0S7a/EbV/aLvLzU0o9gdwi4gQNJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYTanpZkt1Fvxtw+TwdgzEQY4KWMB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvVMTjm1h Mq7gr3C6N23s9MfoU9+I30+JTCyQFPA7vY6rkaNojaMjkbj4hJpA12G015aCTgfO FC6jwnU8sKqAPdA7HnHNFqwcrNnDXy3+3NL7L3T5VUqjt63hsDh5dDGZ1v48RGW7 sSoSAb9CeA2wt6H1s4P9mYVleMuDO83coIXNbkiQ60xAEHJBXXpXR05IW/wBpWY2 CfTk+5X8SEzhCtRl9691q5WsiQy59/Oxo76Asvu/TYfNfjYXVM1i6BS8LLwE2BKJ 4SXu32MYwMO6iytwxeu3OeiPMwItDPHKcbDSerAl6WzgssivnAncCiygvXcUsJ3Y N5YRGPyd4wB7iw== -----END CERTIFICATE-----Generated at Sun Oct 19 15:12:54 2025 by rpki-client