$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft File: JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json) Hash identifier: isYMq/lyeqzd+H2r9YJsFhs+h8tL04lfMXC0PTIUtNE= Subject key identifier: 67:EF:0E:97:01:C9:02:CD:BA:25:DB:9B:D9:23:8A:BA:46:A1:69:53 Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 019E1EA3CE0B9DDB96F5909B913580C7CAC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft Manifest number: 1644 Signing time: Wed 13 May 2026 00:01:51 +0000 Manifest this update: Wed 13 May 2026 00:01:51 +0000 Manifest next update: Thu 14 May 2026 00:01:51 +0000 Files and hashes: 1: CkpruVXBRC35FNzBxsHtHzElTcQ.roa (hash: M8G0Fw/AyLb57D4pQj+p7wHrZ6ZAg2uq5cvqL/37hsU=) 2: DASfpt6NusBMafxKXMbsXkknaLs.roa (hash: 7Q1f4G/K2mV4OPswZej+EeWKFQMe4TLAgeu5GM1kraI=) 3: ESMuZH3p8eZcfxjSdFlU49_G9BY.roa (hash: eU/RIl1p7nycsadiq5D1MCtC0gJOFnvD+JDmCJY+OA8=) 4: H4PmoPs09fxsoMyeNbvcLTDl7tg.roa (hash: g6se6YwWnPf1EHgnkVuLefIVI+viGWgQPBM+Zec15uI=) 5: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: OHPtF8NHJfygGEuNEgGof6z7npB8cX0ITE6viJ+blUk=) 6: VHgUN5juRzMz3CUHZPoEHnzr2z0.roa (hash: VXSqzrkX+ABn4jZnd4wHdBjnPgDeVeSEP9mmDyjcGMQ=) 7: WuM6D54bD9ZW12al4cadO05OlhA.roa (hash: KSoGE/L4hSg6At0Y5RkAFE3o/b5P/zSmERN2VFp1fMQ=) 8: Y-rwo6ja1_SXsDsjjZenySjEjo8.roa (hash: ZsKC9kHfKh+n+8/Xir5wlK+HjS6IcJLLArYCrxMRmAk=) 9: fRUNIQ1_jYWQdZrSZ4luryAQJDQ.roa (hash: ty6oOnSu+ZODj+9+2x+cpkE7v0JL9rnydZY11LzAwgQ=) 10: jTbrb1TbwgaHuVljIE6syUVcGbE.roa (hash: 1xz+1g5hD0xQyll98W3vSqycYShnYZQgn+0XxOIFh6g=) 11: lNSsiMsgFC3PSDwg_wipOCI36Sc.roa (hash: T+M2rwciKN++pJU4zsuNLc+4agGsiYLXoX3H/Bds62g=) 12: nMpaMbGEzj2Jpg2_GxE2xYc0pUI.roa (hash: Fv1RC7bFvxKYKp89cN52GIHsD0MHml/fLyyWKSWO5/k=) 13: rjPbS80wLPhwF4ETCKbrHWAdxvw.roa (hash: 0e9ndNtpFQMzhAU9T854jFmEVmFNvWMXh2KdMpHi8jk=) 14: sIpLAsGB9mg0zFG4d5238KgCd4k.roa (hash: eXcSiBlROOdcbS6oOwKQciaqtXn9irVYQuDWrvrFA6s=) 15: shMgILdrcRQ_LG-B1Njv0tFtwKY.roa (hash: VrnYEoqsCXqMeGOK7nN9tJcwMBHTSx98wiR1emp3pqQ=) 16: spxPuR8xyj72SKO00nWmxiu9tv8.roa (hash: j68QBUE3gzuvtf320646B+hARt3MiGgu/5WZ8oVBSpA=) 17: ufjaDLPum5mRkBKXDuMb146baHg.roa (hash: oNF4RqIC9pQOPmU+xyL4C1SBlQau5hDsBq8wufytphI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:a3:ce:0b:9d:db:96:f5:90:9b:91:35:80:c7:ca:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: May 13 00:01:51 2026 GMT Not After : May 14 00:01:51 2026 GMT Subject: CN=67ef0e9701c902cdba25db9bd9238aba46a16953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:69:b1:05:41:85:9a:96:d9:2e:a9:ca:88:81: 05:16:9c:1a:2e:a3:0a:f5:35:6a:4c:b5:63:0f:9d: 4e:34:3f:d1:9f:49:3e:de:b2:f8:11:56:50:91:6e: 41:63:1a:eb:a1:21:da:1f:12:78:40:95:3f:ae:9d: 33:3b:2b:ea:c7:19:fe:9a:51:82:23:e6:36:1c:94: 31:ae:7b:dc:67:ee:dd:be:a5:24:01:60:3b:30:df: eb:18:f1:17:2b:ac:b5:e7:0b:4d:b0:f7:26:fc:fd: b6:86:c2:a4:03:e3:56:85:00:b2:68:57:01:fe:75: 15:45:3a:ce:96:8d:d8:e9:e7:a6:9d:f4:a1:72:f0: 43:90:06:0b:e3:81:d9:76:b4:30:60:69:e9:2b:22: e2:39:c4:7e:6b:c1:08:c5:6e:45:5b:34:25:9d:c5: 6c:e2:57:a5:aa:ed:93:bc:f1:93:48:84:5f:4b:66: 37:86:47:4a:b3:ea:82:40:01:87:47:92:15:5b:8b: b4:73:9b:d1:ed:5b:e0:06:de:4d:01:cf:01:c8:ad: 84:46:4e:34:59:f7:46:24:92:dc:2f:3b:a2:8d:cf: 30:7b:e5:7f:58:8a:eb:c3:3a:8c:78:bf:2e:e0:29: fa:bb:1d:a9:5a:52:b5:86:55:a5:cc:69:b6:51:45: 47:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EF:0E:97:01:C9:02:CD:BA:25:DB:9B:D9:23:8A:BA:46:A1:69:53 X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:20:a4:4e:54:d3:c8:9e:8b:bd:74:6f:06:ce:65:47:92:6f: 25:5b:32:04:0d:eb:d1:66:07:3b:ff:d9:58:11:9f:9d:ff:a9: 3b:e8:48:e1:41:08:2b:ae:b8:31:f2:f5:b9:33:aa:25:8d:0a: e0:42:27:ab:13:4a:b2:13:1b:62:ab:7d:66:6c:7a:62:79:61: cd:0e:1f:a2:8a:70:68:fa:5b:63:e6:f2:da:fc:1d:9a:fe:50: ba:63:91:cb:3a:63:b6:4d:af:f0:49:1a:c2:19:8b:a7:69:e7: 12:09:73:03:42:4e:35:b8:1b:40:c2:7c:70:94:99:46:2a:0c: 1a:93:64:3b:9e:df:05:d8:b1:4f:62:cf:5d:b7:5e:ff:20:a5: 71:d0:aa:06:9d:55:24:7b:c0:2f:85:9a:1d:e6:45:fe:36:76: b2:b4:8a:cd:fd:ba:b5:ac:02:2f:57:72:47:df:ca:10:54:30: b0:63:de:df:af:51:9f:2a:c0:56:68:c6:d4:40:20:d3:ad:7a: 68:e3:4e:93:fb:7c:39:a6:0f:31:1d:eb:ae:ad:a9:2e:72:30: d4:54:3e:32:fa:d3:4b:df:ac:a6:b0:8f:46:c5:18:7c:e6:0a: c8:40:c3:ed:f8:0b:86:b1:6f:29:44:0e:db:3f:6c:df:68:5b: c3:9a:37:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eo84LnduW9ZCbkTWAx8rDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjYwNTEzMDAwMTUxWhcNMjYwNTE0MDAwMTUxWjAzMTEwLwYDVQQD Eyg2N2VmMGU5NzAxYzkwMmNkYmEyNWRiOWJkOTIzOGFiYTQ2YTE2OTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2mxBUGFmpbZLqnKiIEFFpwaLqMK 9TVqTLVjD51OND/Rn0k+3rL4EVZQkW5BYxrroSHaHxJ4QJU/rp0zOyvqxxn+mlGC I+Y2HJQxrnvcZ+7dvqUkAWA7MN/rGPEXK6y15wtNsPcm/P22hsKkA+NWhQCyaFcB /nUVRTrOlo3Y6eemnfShcvBDkAYL44HZdrQwYGnpKyLiOcR+a8EIxW5FWzQlncVs 4lelqu2TvPGTSIRfS2Y3hkdKs+qCQAGHR5IVW4u0c5vR7VvgBt5NAc8ByK2ERk40 WfdGJJLcLzuijc8we+V/WIrrwzqMeL8u4Cn6ux2pWlK1hlWlzGm2UUVHZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfvDpcByQLNuiXbm9kjirpGoWlTMB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSCkTlTT yJ6LvXRvBs5lR5JvJVsyBA3r0WYHO//ZWBGfnf+pO+hI4UEIK664MfL1uTOqJY0K 4EInqxNKshMbYqt9Zmx6YnlhzQ4foopwaPpbY+by2vwdmv5QumORyzpjtk2v8Eka whmLp2nnEglzA0JONbgbQMJ8cJSZRioMGpNkO57fBdixT2LPXbde/yClcdCqBp1V JHvAL4WaHeZF/jZ2srSKzf26tawCL1dyR9/KEFQwsGPe369RnyrAVmjG1EAg0616 aONOk/t8OaYPMR3rrq2pLnIw1FQ+MvrTS9+sprCPRsUYfOYKyEDD7fgLhrFvKUQO 2z9s32hbw5o38Q== -----END CERTIFICATE-----Generated at Wed May 13 08:40:44 2026 by rpki-client