$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft File: EmxmCzD1aSsrFuKJskkBxRj9pSA.mft (raw, json) Hash identifier: NWRHC28Y3qJk3PLUytT5grCuZ+d3wo5y2ahcfP9zgK8= Subject key identifier: 16:B9:0E:73:79:74:AC:DB:16:37:67:09:8B:C2:2E:63:9E:25:85:B1 Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 019873740269722A90A5D2B8D4C4234D1E44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft Manifest number: 1634 Signing time: Mon 04 Aug 2025 05:00:39 +0000 Manifest this update: Mon 04 Aug 2025 05:00:39 +0000 Manifest next update: Tue 05 Aug 2025 05:00:39 +0000 Files and hashes: 1: 2ECEgaeyvSYmg3L6KVDmtq3QuD4.roa (hash: Rjau37FJBuKqQPy7bdPwgLw6zQ6xQsvpgd1mKIZXcFU=) 2: 7l56dlrFb9fMabU3WCspPVcuNz8.roa (hash: BNqxxuIlwtXbBXPbd4qhO3KGAaTZUr0l50Y4l+Brijw=) 3: AjGSJmDTUaTBrx_s-vikweMceXs.roa (hash: RfgMVVSxZ47znUU7lhyrOD6u13oZH6rQq2T8fu6bfxk=) 4: EmxmCzD1aSsrFuKJskkBxRj9pSA.crl (hash: XaoPW5PHEvYG1IYjTN5hvWzTUpDwYZ0w1QbT1NgiCUY=) 5: FiSCmdKJRr-YPjxcFigpeVUFVps.roa (hash: acaY8ohPIqVg5UZOHMawmFt422sokwSlIOa32vVbDkM=) 6: INBpI5fntDWmHlDNjs-Yi7QsdAs.roa (hash: JDa7sruzPjtU5PzNmQsKwyK3VFod04arc7ncOSuHouE=) 7: RuHKLSfWcgHGzOil4fAEzNXNsWY.roa (hash: Uc+hRokokGwptNiyfS8Yysvc/TqbHO5gZiF8l4C+938=) 8: fhkP1ORLZ5XxUVy4qC8BARs5rVI.roa (hash: 8dY2aE22Ya04xzDmrtlYb6ie5F49Q/sW7XRcYSjjGuo=) 9: gxlbepFDizY30e_VDf9e1RvjWgM.roa (hash: 6bnUAoZDd9UjKUbCDoEZob89bP3Q8i0Y7YskzssCFno=) 10: hCCCB7W_FSf63gC8Bfm1bg5kjwg.roa (hash: Qb0gULwh5NESSFA0xw+2Bgb6srlGKM9Q5/dKnTGFxCo=) 11: h_uvtBb89v86Ot0rZM5k7wf9t3c.roa (hash: wRsRpB1TywlOMa0+6dhzZ3BVy/WX6GDrbpQr+SBFVlM=) 12: mO6JB2aj7dXFeeJ4zlvyyWMYGdc.roa (hash: rJPjlG3izedKQcz5so0Lx+1/nAUwrvkTxraBmn8xIZs=) 13: uR1ciNLiC41HyQnLFmxXdlFLi4c.roa (hash: DjsKRDrWt/FFBB561o4tq8q/9xsxFnlJ8tTN6CI64L0=) 14: v7sddxJjq3qKaBWAdXKnkLLzrc0.roa (hash: lKZS60p/rxd0A+1EgTcJbGD6ikjsCu25yzGvAvr7Trs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:74:02:69:72:2a:90:a5:d2:b8:d4:c4:23:4d:1e:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Aug 4 05:00:39 2025 GMT Not After : Aug 5 05:00:39 2025 GMT Subject: CN=16b90e737974acdb163767098bc22e639e2585b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:21:0e:04:3d:58:3f:44:1a:a5:cf:f7:3e:d2: 55:30:26:b4:4f:e7:cc:58:e2:bf:40:8d:90:52:f9: d2:cf:3d:8c:ba:53:21:ad:7a:5e:b6:b4:e0:3f:ac: 90:09:bc:55:44:7e:f2:f4:5b:41:40:0c:e6:c9:35: 2b:f2:fe:1a:05:4a:3d:7e:9f:0b:e2:71:d5:e4:58: c6:1c:cf:0e:a8:6b:ac:dc:cf:00:ce:60:be:a7:fb: 0a:71:70:7f:a0:5f:58:ea:49:65:4f:9f:51:e5:4f: 39:09:f2:f4:23:88:96:83:3d:d4:a9:e6:2f:8b:55: ed:b3:3a:bf:26:f6:bd:f1:3e:2d:fa:18:84:e1:93: e3:b4:62:93:41:52:97:f2:45:76:e1:19:c7:88:bb: be:1a:06:35:76:8a:19:b8:8b:54:79:72:68:c0:1b: 30:d8:5d:12:16:16:d6:b7:27:ed:f0:11:7c:30:2d: 32:8b:63:d5:9d:46:52:40:b0:3c:66:e9:d7:7d:98: a8:70:f1:f7:a9:ea:18:16:d0:b2:c5:a3:ac:24:7c: 45:ef:70:1b:ea:37:34:ea:25:50:10:a7:bc:de:ae: 1d:3e:1c:0b:b1:ce:40:95:73:6e:6d:30:46:8c:93: c3:19:51:13:38:3d:2a:da:e3:94:d2:19:3c:76:20: 71:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B9:0E:73:79:74:AC:DB:16:37:67:09:8B:C2:2E:63:9E:25:85:B1 X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:64:3e:02:bf:17:0f:85:f9:95:b4:f0:21:a5:ba:57:e4:ae: 65:1a:e6:ea:df:6d:cf:e1:17:dc:de:15:cb:ea:cb:14:a5:6a: 48:1a:2e:97:97:9e:52:1a:c6:6f:e4:37:b6:06:be:c6:26:7a: fd:92:34:6d:61:e3:c3:6b:f5:bc:f2:ac:dd:29:85:77:29:2d: 4e:87:7c:ee:a0:f4:3f:90:23:59:73:81:5f:88:3d:45:47:e5: 14:57:97:94:ca:52:f2:b5:13:17:95:ff:32:bb:4f:08:de:9d: 48:d6:47:64:ca:bb:d1:2e:2f:10:ce:ed:95:89:80:08:0b:d5: 6a:b8:d7:b6:bd:b6:e7:12:be:66:49:4e:8a:4b:c7:29:89:80: eb:9b:76:39:4a:ea:64:37:1b:99:90:7d:cf:b0:4a:82:a5:1b: 47:1e:bb:e1:c0:e6:6e:9b:94:87:4a:d9:51:58:9e:59:fb:e9: 57:c9:79:0b:3d:73:3f:23:e3:f8:a4:c0:73:9f:06:aa:4a:87: fe:0d:93:7c:fb:0c:e8:65:e7:d6:94:bc:00:fe:b7:61:21:c1: 87:1e:be:b4:c5:7a:49:d5:9a:32:9a:a2:90:df:9a:3c:fd:35: 41:25:a6:d3:7c:7b:e7:61:c1:c3:05:2e:80:2f:d2:b7:eb:88: 64:f5:92:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhzdAJpciqQpdK41MQjTR5EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjUwODA0MDUwMDM5WhcNMjUwODA1MDUwMDM5WjAzMTEwLwYDVQQD EygxNmI5MGU3Mzc5NzRhY2RiMTYzNzY3MDk4YmMyMmU2MzllMjU4NWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniEOBD1YP0Qapc/3PtJVMCa0T+fM WOK/QI2QUvnSzz2MulMhrXpetrTgP6yQCbxVRH7y9FtBQAzmyTUr8v4aBUo9fp8L 4nHV5FjGHM8OqGus3M8AzmC+p/sKcXB/oF9Y6kllT59R5U85CfL0I4iWgz3UqeYv i1Xtszq/Jva98T4t+hiE4ZPjtGKTQVKX8kV24RnHiLu+GgY1dooZuItUeXJowBsw 2F0SFhbWtyft8BF8MC0yi2PVnUZSQLA8ZunXfZiocPH3qeoYFtCyxaOsJHxF73Ab 6jc06iVQEKe83q4dPhwLsc5AlXNubTBGjJPDGVETOD0q2uOU0hk8diBxBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBa5DnN5dKzbFjdnCYvCLmOeJYWxMB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2Q+Ar8X D4X5lbTwIaW6V+SuZRrm6t9tz+EX3N4Vy+rLFKVqSBoul5eeUhrGb+Q3tga+xiZ6 /ZI0bWHjw2v1vPKs3SmFdyktTod87qD0P5AjWXOBX4g9RUflFFeXlMpS8rUTF5X/ MrtPCN6dSNZHZMq70S4vEM7tlYmACAvVarjXtr225xK+ZklOikvHKYmA65t2OUrq ZDcbmZB9z7BKgqUbRx674cDmbpuUh0rZUVieWfvpV8l5Cz1zPyPj+KTAc58GqkqH /g2TfPsM6GXn1pS8AP63YSHBhx6+tMV6SdWaMpqikN+aPP01QSWm03x752HBwwUu gC/St+uIZPWSaw== -----END CERTIFICATE-----Generated at Mon Aug 4 11:06:08 2025 by rpki-client