$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft File: EmxmCzD1aSsrFuKJskkBxRj9pSA.mft (raw, json) Hash identifier: MEKYYGkxV9Py/JM2l7GmUpkRj7xp5A6h7VF8jYLY+6A= Subject key identifier: C8:C6:24:8D:B9:D3:06:60:16:51:D8:8C:52:3F:8E:FC:46:DB:E3:B2 Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 0196759E94052BA272158FCAFA04F74604BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft Manifest number: 152C Signing time: Sun 27 Apr 2025 05:00:48 +0000 Manifest this update: Sun 27 Apr 2025 05:00:48 +0000 Manifest next update: Mon 28 Apr 2025 05:00:48 +0000 Files and hashes: 1: 2ECEgaeyvSYmg3L6KVDmtq3QuD4.roa (hash: Rjau37FJBuKqQPy7bdPwgLw6zQ6xQsvpgd1mKIZXcFU=) 2: 7l56dlrFb9fMabU3WCspPVcuNz8.roa (hash: BNqxxuIlwtXbBXPbd4qhO3KGAaTZUr0l50Y4l+Brijw=) 3: AjGSJmDTUaTBrx_s-vikweMceXs.roa (hash: RfgMVVSxZ47znUU7lhyrOD6u13oZH6rQq2T8fu6bfxk=) 4: EmxmCzD1aSsrFuKJskkBxRj9pSA.crl (hash: fZuWPwNMP9O5SL8V6hdfFyATWifjv/UB2kPq/GzhF9g=) 5: FiSCmdKJRr-YPjxcFigpeVUFVps.roa (hash: acaY8ohPIqVg5UZOHMawmFt422sokwSlIOa32vVbDkM=) 6: INBpI5fntDWmHlDNjs-Yi7QsdAs.roa (hash: JDa7sruzPjtU5PzNmQsKwyK3VFod04arc7ncOSuHouE=) 7: RuHKLSfWcgHGzOil4fAEzNXNsWY.roa (hash: Uc+hRokokGwptNiyfS8Yysvc/TqbHO5gZiF8l4C+938=) 8: fhkP1ORLZ5XxUVy4qC8BARs5rVI.roa (hash: 8dY2aE22Ya04xzDmrtlYb6ie5F49Q/sW7XRcYSjjGuo=) 9: gxlbepFDizY30e_VDf9e1RvjWgM.roa (hash: 6bnUAoZDd9UjKUbCDoEZob89bP3Q8i0Y7YskzssCFno=) 10: hCCCB7W_FSf63gC8Bfm1bg5kjwg.roa (hash: Qb0gULwh5NESSFA0xw+2Bgb6srlGKM9Q5/dKnTGFxCo=) 11: h_uvtBb89v86Ot0rZM5k7wf9t3c.roa (hash: wRsRpB1TywlOMa0+6dhzZ3BVy/WX6GDrbpQr+SBFVlM=) 12: mO6JB2aj7dXFeeJ4zlvyyWMYGdc.roa (hash: rJPjlG3izedKQcz5so0Lx+1/nAUwrvkTxraBmn8xIZs=) 13: uR1ciNLiC41HyQnLFmxXdlFLi4c.roa (hash: DjsKRDrWt/FFBB561o4tq8q/9xsxFnlJ8tTN6CI64L0=) 14: v7sddxJjq3qKaBWAdXKnkLLzrc0.roa (hash: lKZS60p/rxd0A+1EgTcJbGD6ikjsCu25yzGvAvr7Trs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:75:9e:94:05:2b:a2:72:15:8f:ca:fa:04:f7:46:04:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Apr 27 05:00:48 2025 GMT Not After : Apr 28 05:00:48 2025 GMT Subject: CN=c8c6248db9d306601651d88c523f8efc46dbe3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:68:d0:9b:a5:51:34:8b:1c:bc:7c:82:74:08: 1e:f1:1d:9b:32:f0:2c:e1:99:cb:f1:fd:04:f4:fb: 81:56:a0:f3:8d:4f:25:87:ae:f4:35:d8:2d:70:87: d3:69:95:e8:82:15:c3:5e:1e:d4:10:a3:99:61:8b: 67:aa:7b:98:48:6f:5e:79:85:21:61:62:ba:e0:a4: 5e:0d:7c:cb:d7:64:b4:e1:22:62:66:51:ac:4b:be: 18:e3:8a:b2:63:6b:a0:fe:4b:ea:f6:45:e2:68:17: 28:37:5c:66:90:64:ac:15:4e:de:ec:ce:24:ea:17: a1:60:a6:ce:8c:40:21:0d:0f:12:30:ef:41:b8:c5: 36:23:60:ea:0e:60:78:ff:bc:6a:13:8a:f2:6c:85: 81:88:44:87:ab:cc:cc:3f:e9:81:eb:67:3c:a9:b8: d6:2f:48:c3:62:c7:a9:f2:c4:fc:2e:c6:22:35:2f: bb:35:37:43:c0:ec:c4:73:70:06:80:0d:e4:e9:9b: 3a:48:d2:4e:db:bb:d1:67:96:54:a4:55:30:ac:fc: 5d:cd:8e:6b:39:eb:ee:9f:d9:1f:e2:93:ed:12:9f: 31:69:6a:60:c8:0e:e2:18:ec:89:20:3d:80:5a:03: fb:37:aa:ae:1c:9d:31:a3:b5:23:6b:b3:7d:78:1c: 07:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C6:24:8D:B9:D3:06:60:16:51:D8:8C:52:3F:8E:FC:46:DB:E3:B2 X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b2:d1:85:3f:61:b6:53:72:97:de:08:1d:fd:77:0a:21:a9: 6d:0f:bd:10:06:46:87:d6:39:b9:d1:fe:29:3f:0a:1d:95:51: a4:68:44:42:3d:73:59:8e:f7:6b:f2:ca:0d:e7:82:98:19:67: d3:de:14:4a:8f:32:91:e7:7a:ad:f0:cd:38:25:a9:0c:6c:82: a3:f6:e8:5a:36:34:17:b5:06:2c:3c:b3:a2:3e:24:35:d4:bb: 5c:0e:fa:5f:3f:11:62:7a:35:90:d4:99:8d:75:2f:1c:98:32: 14:46:49:09:9a:c9:ba:a7:c2:b3:b4:f8:6e:15:e2:89:49:7b: 68:5b:90:e3:8d:80:3d:69:5c:b3:27:9e:e7:c6:ae:b9:7d:bb: e0:37:99:b9:37:42:f9:c0:ad:e3:46:9c:05:3b:28:f6:2b:9b: a1:52:86:13:3e:12:e3:7f:ca:a9:ad:c6:39:34:29:bd:12:0d: 18:50:84:a9:e5:04:87:f6:e2:a5:cd:6f:82:26:ee:6a:a3:ab: 81:59:8f:6c:88:ff:28:6a:00:f9:7b:07:5a:0c:44:b3:bb:d1: 41:e2:89:a7:22:7a:dc:d1:68:12:87:7a:70:f7:3b:e1:3a:04: 7c:4e:cb:6d:75:74:57:8a:43:38:6f:6c:0d:0b:ed:e1:db:91: 8c:8a:e8:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ1npQFK6JyFY/K+gT3RgS6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjUwNDI3MDUwMDQ4WhcNMjUwNDI4MDUwMDQ4WjAzMTEwLwYDVQQD EyhjOGM2MjQ4ZGI5ZDMwNjYwMTY1MWQ4OGM1MjNmOGVmYzQ2ZGJlM2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52jQm6VRNIscvHyCdAge8R2bMvAs 4ZnL8f0E9PuBVqDzjU8lh670NdgtcIfTaZXoghXDXh7UEKOZYYtnqnuYSG9eeYUh YWK64KReDXzL12S04SJiZlGsS74Y44qyY2ug/kvq9kXiaBcoN1xmkGSsFU7e7M4k 6hehYKbOjEAhDQ8SMO9BuMU2I2DqDmB4/7xqE4rybIWBiESHq8zMP+mB62c8qbjW L0jDYsep8sT8LsYiNS+7NTdDwOzEc3AGgA3k6Zs6SNJO27vRZ5ZUpFUwrPxdzY5r Oevun9kf4pPtEp8xaWpgyA7iGOyJID2AWgP7N6quHJ0xo7Uja7N9eBwHYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjGJI250wZgFlHYjFI/jvxG2+OyMB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbLRhT9h tlNyl94IHf13CiGpbQ+9EAZGh9Y5udH+KT8KHZVRpGhEQj1zWY73a/LKDeeCmBln 094USo8yked6rfDNOCWpDGyCo/boWjY0F7UGLDyzoj4kNdS7XA76Xz8RYno1kNSZ jXUvHJgyFEZJCZrJuqfCs7T4bhXiiUl7aFuQ442APWlcsyee58auuX274DeZuTdC +cCt40acBTso9iuboVKGEz4S43/Kqa3GOTQpvRINGFCEqeUEh/bipc1vgibuaqOr gVmPbIj/KGoA+XsHWgxEs7vRQeKJpyJ63NFoEod6cPc74ToEfE7LbXV0V4pDOG9s DQvt4duRjIrooQ== -----END CERTIFICATE-----Generated at Sun Apr 27 13:44:33 2025 by rpki-client