$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft File: JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json) Hash identifier: LSPpviSHgu3C6xr1vmDR4+GcE0zfb1Ze0Zqndlaw358= Subject key identifier: 22:E1:6D:19:D4:98:B5:F8:07:EC:BA:B0:E7:65:7A:BF:5E:3C:EF:11 Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 0198D51599FF90BEE69DA48CA3E960FE14CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft Manifest number: 1385 Signing time: Sat 23 Aug 2025 04:00:19 +0000 Manifest this update: Sat 23 Aug 2025 04:00:19 +0000 Manifest next update: Sun 24 Aug 2025 04:00:19 +0000 Files and hashes: 1: 1GXRp3uT7hSMRzWjOxU0QktVRiY.roa (hash: aqIqmb81zi2cD6sMblBWQoAdH8B6EoMHMa2iFTOnb0c=) 2: 7w1YPyzlBEZNMOyEUCFkNc0ECPQ.roa (hash: 0dazsLMYx/MeDO19uGuuYzM5rCd3NgH7NYuHWn+o7Y8=) 3: 9S6VN8W0AB42Tjfsy_52eVj_HF8.roa (hash: U/0clwp2HZIEVyJ8jDxjulKSBf1aha8MkLQgHpOloog=) 4: ASXdDgGnh8Klj0fzlnnnOhv5loU.roa (hash: wWWbyDkcRSYhjOCMVp5ySQLPVFoGVo9Lc8yvPSW0eIM=) 5: FCh0pju_b1XDjIA8N5RktFi16SI.roa (hash: nzz37F+/F7FQRtoCdt1NMVOBQ7kMdP9rhDen0hB2f8U=) 6: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: 0/ExYKvyDNb50LXTpE2eD+H6IXgXsfXo+tyLGHzeCRs=) 7: KKECh8K7hNffHVDT8ywINErgd1U.roa (hash: jFVe6x1L0XuZf3m6Z9ZwhiY43bHKM8ZXgM5AwxJ+SJ4=) 8: Neg-GaKgdY6gnpXCEHzkL9JlhS0.roa (hash: YgY5UaAq6hQXGaoygI0YizLwZ/ppqq3rjPmBhu92jjc=) 9: QBe6vAE6rYSA8KCQoO7i8f2keWY.roa (hash: /ZgtoN8+dacZMoQUvXB0j9wPVe+O1WRxUSH58QMyIv8=) 10: VuBKMZZHrZ1QSjnK1f8rGYyQD34.roa (hash: Yy9aJSbZa8jisjdlzD3JGDY9sTvRVpXk74KknU+efOI=) 11: XkXy4rFVu6JKAbUcEbjCs_ol8Mc.roa (hash: KEboU/fmZ1raaMqRFHeXS/DA8vof1Lf7hts2MdqUMFk=) 12: ZMDHfiorAQeHiAr2VSo31IrsX9Y.roa (hash: 2rW77gP54+olCRPQkqdpt6U7rC4Eivix0JgQsNBRA0A=) 13: b9LZtPjPcGkqch-QIMPmNiY1GfY.roa (hash: wVwwQPvK556ifQMFCqlsaWU8LCMEwKfjuZYfw4kZ7Ug=) 14: eq_1NPXQGhoWTMBNC9PaXKKEltM.roa (hash: Hq4HlvjEPgU16G6jBR0u/BxOO81trhl4PXHhgLXPBd4=) 15: u1jdAQ2eshDqHXq4UFjEjcuXmsI.roa (hash: 7O01VUQlx2/5mCx+t4SgO9Lggi1VIhx12oZO6kEvwsM=) 16: vhjrtMMdROIFj167BFR3pGrdrb8.roa (hash: mHe16RuP6X+5Fin2ZffJO/Ym51XZo7pnKG1BIGBPcUQ=) 17: vtNeTxZnHuMsF3rl3ZSPlMog7F0.roa (hash: FfGF+21HwGvE0iZhE2YJptjryuHFZ0BNSqu9xGqCr6Q=) 18: xtI4FxymYzhmmmKad9ZOkzTos1E.roa (hash: Xd4WHKpPZgsYedQWZYH07M7z75l0J2MM4sU9jDdQuXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 04:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:15:99:ff:90:be:e6:9d:a4:8c:a3:e9:60:fe:14:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Aug 23 04:00:19 2025 GMT Not After : Aug 24 04:00:19 2025 GMT Subject: CN=22e16d19d498b5f807ecbab0e7657abf5e3cef11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:54:2a:e7:2b:ff:94:c1:93:02:90:3d:ea:47: 05:e6:63:72:96:54:ad:66:ac:19:ba:09:37:cf:97: 28:4f:2e:51:a6:c9:99:73:96:3e:aa:78:1e:61:19: 76:30:f9:77:e0:64:e8:81:1e:14:49:35:1c:85:5a: a0:ad:2c:86:0b:6e:c3:eb:19:74:b5:ac:01:71:b6: 9e:75:a9:5f:74:ab:fa:37:9b:6a:76:56:0b:a2:71: 69:a4:50:7a:13:9f:aa:de:22:9a:6b:85:fb:22:6d: a3:a6:1f:f2:62:d6:71:cb:2d:a5:b9:15:5e:77:71: 70:ad:e1:fa:b3:e6:50:52:83:17:0a:16:8a:85:f6: e8:54:1d:a0:a3:68:ee:28:a1:36:cf:78:b2:3e:80: c6:54:14:40:85:e0:6b:13:fc:0e:72:28:29:6d:7a: d9:53:bb:65:84:11:b0:de:4c:7f:5d:a4:1f:1e:dc: 7a:72:dd:c8:73:7c:46:cf:ab:16:6a:22:57:c8:ab: 96:68:5e:f2:1b:d0:9b:9b:cd:6c:4c:bf:46:ca:77: 32:8d:e0:a2:1a:27:9d:fe:b5:4a:b9:c4:28:ef:29: 27:49:22:48:e0:43:ad:22:84:87:2f:c5:19:4a:b6: a9:05:73:22:c8:40:e7:4f:a0:0f:32:80:ef:2c:37: b3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E1:6D:19:D4:98:B5:F8:07:EC:BA:B0:E7:65:7A:BF:5E:3C:EF:11 X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:fd:15:d5:9d:4f:d8:4e:57:8b:75:c6:e2:97:08:f1:a3:7a: f2:9c:bf:c5:d1:1d:38:53:21:c8:26:82:f3:5e:52:75:ce:56: 4b:bb:3c:c6:55:a6:18:bb:db:72:50:8b:d3:63:e3:bd:81:63: 7f:ea:52:03:3d:fb:d4:20:8e:83:7b:63:04:d5:f0:db:bd:10: 6d:28:9a:e4:34:a3:ae:ea:4b:9a:37:fc:6b:29:af:8b:02:af: 36:32:00:28:9e:49:70:0c:a2:50:9c:6f:4f:27:f3:80:30:d6: 48:53:a7:57:08:0e:cc:2b:aa:76:d1:99:b6:05:70:a4:b3:b5: 64:c3:e6:28:2c:2d:dc:ae:01:73:af:d3:09:6f:79:69:35:2a: 38:e4:df:79:1e:8b:0e:54:59:d1:2f:68:84:ba:c7:82:bb:1f: 39:c4:8f:13:07:aa:43:bb:55:a7:23:7e:20:ab:96:ac:f0:ac: 01:ba:c6:0f:31:ea:27:18:78:4f:b9:05:9f:ba:34:ec:1c:45: 0b:d4:da:bf:f4:bd:1e:c0:d4:c8:21:f9:00:98:96:18:3d:e3: 4e:53:4c:c4:48:cf:c2:d5:85:46:4f:95:21:4c:3d:e2:b1:13: 59:7f:e2:19:58:f5:63:7c:3e:8e:78:84:7e:11:5b:9c:dd:54: ce:57:4b:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFZn/kL7mnaSMo+lg/hTKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjUwODIzMDQwMDE5WhcNMjUwODI0MDQwMDE5WjAzMTEwLwYDVQQD EygyMmUxNmQxOWQ0OThiNWY4MDdlY2JhYjBlNzY1N2FiZjVlM2NlZjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41Qq5yv/lMGTApA96kcF5mNyllSt ZqwZugk3z5coTy5RpsmZc5Y+qngeYRl2MPl34GTogR4USTUchVqgrSyGC27D6xl0 tawBcbaedalfdKv6N5tqdlYLonFppFB6E5+q3iKaa4X7Im2jph/yYtZxyy2luRVe d3FwreH6s+ZQUoMXChaKhfboVB2go2juKKE2z3iyPoDGVBRAheBrE/wOcigpbXrZ U7tlhBGw3kx/XaQfHtx6ct3Ic3xGz6sWaiJXyKuWaF7yG9Cbm81sTL9GyncyjeCi Gied/rVKucQo7yknSSJI4EOtIoSHL8UZSrapBXMiyEDnT6APMoDvLDez1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLhbRnUmLX4B+y6sOdler9ePO8RMB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQf0V1Z1P 2E5Xi3XG4pcI8aN68py/xdEdOFMhyCaC815Sdc5WS7s8xlWmGLvbclCL02PjvYFj f+pSAz371CCOg3tjBNXw270QbSia5DSjrupLmjf8aymviwKvNjIAKJ5JcAyiUJxv TyfzgDDWSFOnVwgOzCuqdtGZtgVwpLO1ZMPmKCwt3K4Bc6/TCW95aTUqOOTfeR6L DlRZ0S9ohLrHgrsfOcSPEweqQ7tVpyN+IKuWrPCsAbrGDzHqJxh4T7kFn7o07BxF C9Tav/S9HsDUyCH5AJiWGD3jTlNMxEjPwtWFRk+VIUw94rETWX/iGVj1Y3w+jniE fhFbnN1UzldLdw== -----END CERTIFICATE-----Generated at Sat Aug 23 14:09:43 2025 by rpki-client