$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft File: JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json) Hash identifier: lcM8BUXLQAhGWI4QC4KIainRNGCLbNbEtVIgiCAOiaw= Subject key identifier: E2:43:E9:D9:A0:94:C7:2A:77:C6:E2:F4:9B:C2:94:3A:9D:73:B6:B6 Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 0199FC8FAADC4811B99781C3B2BABDDD3DB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft Manifest number: 141E Signing time: Sun 19 Oct 2025 13:01:37 +0000 Manifest this update: Sun 19 Oct 2025 13:01:37 +0000 Manifest next update: Mon 20 Oct 2025 13:01:37 +0000 Files and hashes: 1: 1GXRp3uT7hSMRzWjOxU0QktVRiY.roa (hash: aqIqmb81zi2cD6sMblBWQoAdH8B6EoMHMa2iFTOnb0c=) 2: 7w1YPyzlBEZNMOyEUCFkNc0ECPQ.roa (hash: 0dazsLMYx/MeDO19uGuuYzM5rCd3NgH7NYuHWn+o7Y8=) 3: 9S6VN8W0AB42Tjfsy_52eVj_HF8.roa (hash: U/0clwp2HZIEVyJ8jDxjulKSBf1aha8MkLQgHpOloog=) 4: ASXdDgGnh8Klj0fzlnnnOhv5loU.roa (hash: wWWbyDkcRSYhjOCMVp5ySQLPVFoGVo9Lc8yvPSW0eIM=) 5: FCh0pju_b1XDjIA8N5RktFi16SI.roa (hash: nzz37F+/F7FQRtoCdt1NMVOBQ7kMdP9rhDen0hB2f8U=) 6: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: tbROcxCq7+BytsU5vSsqnWhXTTjyurpf1UXlqKwr3zc=) 7: KKECh8K7hNffHVDT8ywINErgd1U.roa (hash: jFVe6x1L0XuZf3m6Z9ZwhiY43bHKM8ZXgM5AwxJ+SJ4=) 8: Neg-GaKgdY6gnpXCEHzkL9JlhS0.roa (hash: YgY5UaAq6hQXGaoygI0YizLwZ/ppqq3rjPmBhu92jjc=) 9: QBe6vAE6rYSA8KCQoO7i8f2keWY.roa (hash: /ZgtoN8+dacZMoQUvXB0j9wPVe+O1WRxUSH58QMyIv8=) 10: VuBKMZZHrZ1QSjnK1f8rGYyQD34.roa (hash: Yy9aJSbZa8jisjdlzD3JGDY9sTvRVpXk74KknU+efOI=) 11: XkXy4rFVu6JKAbUcEbjCs_ol8Mc.roa (hash: KEboU/fmZ1raaMqRFHeXS/DA8vof1Lf7hts2MdqUMFk=) 12: ZMDHfiorAQeHiAr2VSo31IrsX9Y.roa (hash: 2rW77gP54+olCRPQkqdpt6U7rC4Eivix0JgQsNBRA0A=) 13: b9LZtPjPcGkqch-QIMPmNiY1GfY.roa (hash: wVwwQPvK556ifQMFCqlsaWU8LCMEwKfjuZYfw4kZ7Ug=) 14: eq_1NPXQGhoWTMBNC9PaXKKEltM.roa (hash: Hq4HlvjEPgU16G6jBR0u/BxOO81trhl4PXHhgLXPBd4=) 15: u1jdAQ2eshDqHXq4UFjEjcuXmsI.roa (hash: 7O01VUQlx2/5mCx+t4SgO9Lggi1VIhx12oZO6kEvwsM=) 16: vhjrtMMdROIFj167BFR3pGrdrb8.roa (hash: mHe16RuP6X+5Fin2ZffJO/Ym51XZo7pnKG1BIGBPcUQ=) 17: vtNeTxZnHuMsF3rl3ZSPlMog7F0.roa (hash: FfGF+21HwGvE0iZhE2YJptjryuHFZ0BNSqu9xGqCr6Q=) 18: xtI4FxymYzhmmmKad9ZOkzTos1E.roa (hash: Xd4WHKpPZgsYedQWZYH07M7z75l0J2MM4sU9jDdQuXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:aa:dc:48:11:b9:97:81:c3:b2:ba:bd:dd:3d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Oct 19 13:01:37 2025 GMT Not After : Oct 20 13:01:37 2025 GMT Subject: CN=e243e9d9a094c72a77c6e2f49bc2943a9d73b6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8a:5d:30:cb:31:5f:e2:95:6a:54:1b:6a:77: 39:57:f1:a7:6a:f0:3c:4c:91:8a:04:ed:b3:e4:56: fb:5e:6b:3a:0f:94:a0:2a:53:e5:b2:81:8c:22:18: 51:a5:f3:9a:ec:de:ea:09:d3:0c:25:cd:f0:56:fa: 63:a4:37:50:d4:10:64:b3:e8:f4:08:8b:96:9c:1d: 17:0e:3c:bf:e9:1d:5b:80:18:41:19:c8:2d:fa:a4: 46:0e:45:45:50:5d:a0:c3:39:b2:2c:fa:0d:75:0b: dd:00:a6:57:44:77:3d:f6:93:d6:c6:c6:e0:81:a6: 27:03:a8:d1:ff:82:ef:fb:d5:fb:b8:33:06:9d:18: 2a:8c:39:16:cb:af:03:f8:40:a8:91:60:67:16:13: cc:5c:df:73:f0:12:ea:30:4c:04:ea:c7:a1:86:3c: 01:45:06:22:f7:84:60:41:23:11:5e:53:a7:b0:82: 7f:0c:2c:11:6f:4e:09:06:cb:74:13:7f:b9:42:e3: 25:6a:df:15:f4:64:53:59:da:b8:6a:61:94:9c:93: 2f:aa:49:66:b4:25:07:94:07:1c:55:64:5d:38:4f: 09:85:78:72:29:f7:83:29:9f:a9:87:c1:7b:b9:35: ab:4e:b9:4a:5e:47:d9:8b:9a:d3:c3:5a:c9:bf:6a: 99:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:43:E9:D9:A0:94:C7:2A:77:C6:E2:F4:9B:C2:94:3A:9D:73:B6:B6 X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:4e:d9:ca:29:39:7d:46:70:89:28:6b:87:28:1d:d6:6d:a6: ac:74:aa:1a:7c:4b:3c:eb:e0:81:27:6d:fa:9e:46:94:98:87: d2:89:91:a3:f5:4f:f7:d5:dc:f1:e3:38:b1:e1:9c:be:27:8e: ad:9c:05:88:9a:0c:44:1b:53:bf:6e:04:02:9d:cd:f1:00:2b: 79:cb:96:ec:63:ae:7a:8b:b9:ac:1a:88:6c:b6:67:73:87:ec: 9e:e7:23:0b:92:4a:36:65:82:7a:47:ba:0d:a4:7e:a4:c8:46: cb:3d:9d:11:79:2c:36:63:d8:ec:2b:1a:35:c4:ae:96:1f:c1: 7b:75:bd:02:f9:fa:d2:84:12:97:c4:ec:59:0b:fb:bd:15:ee: 32:e0:af:c3:76:f9:00:78:83:11:2b:d0:f4:7e:d4:14:f0:19: a5:ae:06:75:f6:9e:7c:79:8f:c8:73:63:b1:ed:26:a3:4b:45: 8d:80:1a:4e:e3:a3:3a:c0:3b:ab:3c:fc:e7:17:2f:18:40:1a: b1:a1:0f:05:1c:5e:ce:a6:bb:1a:6c:16:3d:9d:dd:e2:02:df: 46:9e:b2:71:0c:72:c9:e8:35:47:64:ba:02:c8:1e:b5:ed:15: 7e:60:65:6f:46:ba:b6:38:c9:5e:b1:01:b0:21:ca:f7:dc:b0: 73:6d:2e:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j6rcSBG5l4HDsrq93T22MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjUxMDE5MTMwMTM3WhcNMjUxMDIwMTMwMTM3WjAzMTEwLwYDVQQD EyhlMjQzZTlkOWEwOTRjNzJhNzdjNmUyZjQ5YmMyOTQzYTlkNzNiNmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIpdMMsxX+KValQbanc5V/GnavA8 TJGKBO2z5Fb7Xms6D5SgKlPlsoGMIhhRpfOa7N7qCdMMJc3wVvpjpDdQ1BBks+j0 CIuWnB0XDjy/6R1bgBhBGcgt+qRGDkVFUF2gwzmyLPoNdQvdAKZXRHc99pPWxsbg gaYnA6jR/4Lv+9X7uDMGnRgqjDkWy68D+ECokWBnFhPMXN9z8BLqMEwE6sehhjwB RQYi94RgQSMRXlOnsIJ/DCwRb04JBst0E3+5QuMlat8V9GRTWdq4amGUnJMvqklm tCUHlAccVWRdOE8JhXhyKfeDKZ+ph8F7uTWrTrlKXkfZi5rTw1rJv2qZCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJD6dmglMcqd8bi9JvClDqdc7a2MB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhk7Zyik5 fUZwiShrhygd1m2mrHSqGnxLPOvggSdt+p5GlJiH0omRo/VP99Xc8eM4seGcvieO rZwFiJoMRBtTv24EAp3N8QArecuW7GOueou5rBqIbLZnc4fsnucjC5JKNmWCeke6 DaR+pMhGyz2dEXksNmPY7CsaNcSulh/Be3W9Avn60oQSl8TsWQv7vRXuMuCvw3b5 AHiDESvQ9H7UFPAZpa4GdfaefHmPyHNjse0mo0tFjYAaTuOjOsA7qzz85xcvGEAa saEPBRxezqa7GmwWPZ3d4gLfRp6ycQxyyeg1R2S6Asgete0VfmBlb0a6tjjJXrEB sCHK99ywc20uZw== -----END CERTIFICATE-----Generated at Sun Oct 19 17:32:04 2025 by rpki-client