$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft File: JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json) Hash identifier: RjSLyvBv4oJmyTVs0hosjG7mBMucBDntY+Y0M3fQZj4= Subject key identifier: 2E:05:CC:1E:68:AF:80:CF:6A:1F:75:36:01:18:45:24:5A:B7:CC:38 Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 0197B6A09F1085AB75972408D7C067E8F8C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft Manifest number: 12F0 Signing time: Sat 28 Jun 2025 13:01:09 +0000 Manifest this update: Sat 28 Jun 2025 13:01:09 +0000 Manifest next update: Sun 29 Jun 2025 13:01:09 +0000 Files and hashes: 1: 1GXRp3uT7hSMRzWjOxU0QktVRiY.roa (hash: aqIqmb81zi2cD6sMblBWQoAdH8B6EoMHMa2iFTOnb0c=) 2: 7w1YPyzlBEZNMOyEUCFkNc0ECPQ.roa (hash: 0dazsLMYx/MeDO19uGuuYzM5rCd3NgH7NYuHWn+o7Y8=) 3: 8TY-Hfd5q5Rj4MUhE7CmY31LHyc.roa (hash: vPKsfH2lh7SZOShxHi9r8ed3IerCum4ryQQ50mXWvmI=) 4: 9S6VN8W0AB42Tjfsy_52eVj_HF8.roa (hash: U/0clwp2HZIEVyJ8jDxjulKSBf1aha8MkLQgHpOloog=) 5: ASXdDgGnh8Klj0fzlnnnOhv5loU.roa (hash: wWWbyDkcRSYhjOCMVp5ySQLPVFoGVo9Lc8yvPSW0eIM=) 6: FCh0pju_b1XDjIA8N5RktFi16SI.roa (hash: nzz37F+/F7FQRtoCdt1NMVOBQ7kMdP9rhDen0hB2f8U=) 7: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: A2pX0vUqAQa5BooC0wK19ja0xLaPR/BiXCYCnLqtFVE=) 8: KKECh8K7hNffHVDT8ywINErgd1U.roa (hash: jFVe6x1L0XuZf3m6Z9ZwhiY43bHKM8ZXgM5AwxJ+SJ4=) 9: Neg-GaKgdY6gnpXCEHzkL9JlhS0.roa (hash: YgY5UaAq6hQXGaoygI0YizLwZ/ppqq3rjPmBhu92jjc=) 10: QBe6vAE6rYSA8KCQoO7i8f2keWY.roa (hash: /ZgtoN8+dacZMoQUvXB0j9wPVe+O1WRxUSH58QMyIv8=) 11: VuBKMZZHrZ1QSjnK1f8rGYyQD34.roa (hash: Yy9aJSbZa8jisjdlzD3JGDY9sTvRVpXk74KknU+efOI=) 12: XkXy4rFVu6JKAbUcEbjCs_ol8Mc.roa (hash: KEboU/fmZ1raaMqRFHeXS/DA8vof1Lf7hts2MdqUMFk=) 13: ZMDHfiorAQeHiAr2VSo31IrsX9Y.roa (hash: 2rW77gP54+olCRPQkqdpt6U7rC4Eivix0JgQsNBRA0A=) 14: b9LZtPjPcGkqch-QIMPmNiY1GfY.roa (hash: wVwwQPvK556ifQMFCqlsaWU8LCMEwKfjuZYfw4kZ7Ug=) 15: eq_1NPXQGhoWTMBNC9PaXKKEltM.roa (hash: Hq4HlvjEPgU16G6jBR0u/BxOO81trhl4PXHhgLXPBd4=) 16: u1jdAQ2eshDqHXq4UFjEjcuXmsI.roa (hash: 7O01VUQlx2/5mCx+t4SgO9Lggi1VIhx12oZO6kEvwsM=) 17: vhjrtMMdROIFj167BFR3pGrdrb8.roa (hash: mHe16RuP6X+5Fin2ZffJO/Ym51XZo7pnKG1BIGBPcUQ=) 18: vtNeTxZnHuMsF3rl3ZSPlMog7F0.roa (hash: FfGF+21HwGvE0iZhE2YJptjryuHFZ0BNSqu9xGqCr6Q=) 19: xtI4FxymYzhmmmKad9ZOkzTos1E.roa (hash: Xd4WHKpPZgsYedQWZYH07M7z75l0J2MM4sU9jDdQuXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a0:9f:10:85:ab:75:97:24:08:d7:c0:67:e8:f8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Jun 28 13:01:09 2025 GMT Not After : Jun 29 13:01:09 2025 GMT Subject: CN=2e05cc1e68af80cf6a1f7536011845245ab7cc38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:31:36:be:d5:f2:9d:a8:6c:70:50:e7:48:72: 81:ea:f0:e6:63:57:dc:2b:8b:5e:3a:44:da:29:4b: 0e:0c:69:9a:29:c0:d5:18:cb:ee:c0:d2:4c:8c:02: 9b:b8:2b:ab:db:78:65:4c:72:ab:35:21:08:7f:4e: 63:51:d9:f2:55:60:0f:0e:59:02:a0:71:ad:91:f3: 59:16:3c:1f:b0:63:f9:d8:bb:c5:1a:35:7b:9e:ec: a3:a5:2a:e8:99:06:c5:25:76:08:2b:16:d7:cd:91: f1:e4:8f:23:f9:15:b3:f8:e5:07:a5:51:c7:9a:bb: 4c:4b:52:d7:9c:a1:41:fa:07:f3:fe:a9:95:55:48: 5d:50:d2:2b:36:35:c5:71:3a:b1:78:61:96:86:6a: 8b:55:68:ce:79:be:cd:4c:95:ee:5a:8a:01:e1:27: eb:8c:40:c9:89:3f:89:91:f4:2f:78:f9:39:38:47: 77:83:62:00:32:4b:77:b9:bb:99:d5:a1:c2:cc:4f: d3:ef:b6:7f:9e:ee:5b:62:fb:05:91:86:7d:ea:e3: e9:a1:4f:b7:95:43:d7:43:f1:52:88:ee:7a:ad:b3: d0:b7:35:f4:fe:f5:c5:4e:06:b4:72:bb:5d:9e:35: bd:3e:a7:fe:6b:74:16:60:5d:50:d8:76:79:6e:9a: 06:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:05:CC:1E:68:AF:80:CF:6A:1F:75:36:01:18:45:24:5A:B7:CC:38 X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:97:fd:3f:9f:98:50:3c:91:80:56:a6:3e:91:ca:b6:30:c7: d0:f0:de:9d:ec:06:15:9e:09:10:5b:c6:4d:44:b3:fe:9b:9e: 5c:fc:07:6b:44:47:9f:15:c4:b9:c2:f4:17:be:4d:67:f8:4d: dc:c3:d8:59:fb:b6:8f:af:bc:be:9b:7f:60:dd:e9:da:fd:36: 66:e5:c4:35:6c:81:35:c4:c1:af:06:9a:52:b3:59:86:12:34: b6:51:d5:b0:b9:36:b0:73:ed:7a:ac:20:53:6b:09:45:3d:b6: 12:0e:2b:10:64:30:3b:1a:fa:db:0c:4b:36:c3:b7:ed:3b:e9: 79:73:d4:57:a5:ac:57:e6:21:5a:23:d1:fd:d1:29:04:2f:db: b2:34:08:ba:6d:ef:56:e8:f2:f3:83:e7:8b:14:d3:c3:44:3c: c5:55:22:79:4b:dc:21:17:b7:3f:3e:3c:c8:bd:0b:0e:dc:19: 5d:17:3d:f7:b5:12:cf:67:57:f0:58:03:61:ee:df:61:bf:70: fe:7d:17:11:d8:62:db:88:47:3e:18:a4:53:db:d1:00:21:cc: 80:d7:50:ce:22:a4:73:95:68:0d:4d:81:71:fb:f5:cb:56:3a: dd:d2:6c:fe:16:da:6c:23:f7:1a:2d:52:0e:12:9e:61:8f:be: 46:e5:1b:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oJ8Qhat1lyQI18Bn6PjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjUwNjI4MTMwMTA5WhcNMjUwNjI5MTMwMTA5WjAzMTEwLwYDVQQD EygyZTA1Y2MxZTY4YWY4MGNmNmExZjc1MzYwMTE4NDUyNDVhYjdjYzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszE2vtXynahscFDnSHKB6vDmY1fc K4teOkTaKUsODGmaKcDVGMvuwNJMjAKbuCur23hlTHKrNSEIf05jUdnyVWAPDlkC oHGtkfNZFjwfsGP52LvFGjV7nuyjpSromQbFJXYIKxbXzZHx5I8j+RWz+OUHpVHH mrtMS1LXnKFB+gfz/qmVVUhdUNIrNjXFcTqxeGGWhmqLVWjOeb7NTJXuWooB4Sfr jEDJiT+JkfQvePk5OEd3g2IAMkt3ubuZ1aHCzE/T77Z/nu5bYvsFkYZ96uPpoU+3 lUPXQ/FSiO56rbPQtzX0/vXFTga0crtdnjW9Pqf+a3QWYF1Q2HZ5bpoG6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4FzB5or4DPah91NgEYRSRat8w4MB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5f9P5+Y UDyRgFamPpHKtjDH0PDenewGFZ4JEFvGTUSz/pueXPwHa0RHnxXEucL0F75NZ/hN 3MPYWfu2j6+8vpt/YN3p2v02ZuXENWyBNcTBrwaaUrNZhhI0tlHVsLk2sHPteqwg U2sJRT22Eg4rEGQwOxr62wxLNsO37TvpeXPUV6WsV+YhWiPR/dEpBC/bsjQIum3v Vujy84PnixTTw0Q8xVUieUvcIRe3Pz48yL0LDtwZXRc997USz2dX8FgDYe7fYb9w /n0XEdhi24hHPhikU9vRACHMgNdQziKkc5VoDU2Bcfv1y1Y63dJs/hbabCP3Gi1S DhKeYY++RuUbLw== -----END CERTIFICATE-----Generated at Sat Jun 28 20:46:31 2025 by rpki-client