$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft File: JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json) Hash identifier: T4MKNrbAd46EuD0VUy2gE9LtjOaXx70JqfgwMEmSsr8= Subject key identifier: D2:AD:28:13:3D:18:04:3B:42:B9:5D:F6:E0:BB:C7:85:52:56:D8:D6 Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 0196BA118C499B7044196BCE8C05A4FCA1A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft Manifest number: 126D Signing time: Sat 10 May 2025 12:00:34 +0000 Manifest this update: Sat 10 May 2025 12:00:34 +0000 Manifest next update: Sun 11 May 2025 12:00:34 +0000 Files and hashes: 1: 1GXRp3uT7hSMRzWjOxU0QktVRiY.roa (hash: aqIqmb81zi2cD6sMblBWQoAdH8B6EoMHMa2iFTOnb0c=) 2: 7w1YPyzlBEZNMOyEUCFkNc0ECPQ.roa (hash: 0dazsLMYx/MeDO19uGuuYzM5rCd3NgH7NYuHWn+o7Y8=) 3: 9S6VN8W0AB42Tjfsy_52eVj_HF8.roa (hash: U/0clwp2HZIEVyJ8jDxjulKSBf1aha8MkLQgHpOloog=) 4: ASXdDgGnh8Klj0fzlnnnOhv5loU.roa (hash: wWWbyDkcRSYhjOCMVp5ySQLPVFoGVo9Lc8yvPSW0eIM=) 5: FCh0pju_b1XDjIA8N5RktFi16SI.roa (hash: nzz37F+/F7FQRtoCdt1NMVOBQ7kMdP9rhDen0hB2f8U=) 6: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: 29pPo0R6MZA2MS4CZcWDeY5O3CXXSlYd0f/enogrw1s=) 7: KKECh8K7hNffHVDT8ywINErgd1U.roa (hash: jFVe6x1L0XuZf3m6Z9ZwhiY43bHKM8ZXgM5AwxJ+SJ4=) 8: Neg-GaKgdY6gnpXCEHzkL9JlhS0.roa (hash: YgY5UaAq6hQXGaoygI0YizLwZ/ppqq3rjPmBhu92jjc=) 9: QBe6vAE6rYSA8KCQoO7i8f2keWY.roa (hash: /ZgtoN8+dacZMoQUvXB0j9wPVe+O1WRxUSH58QMyIv8=) 10: VuBKMZZHrZ1QSjnK1f8rGYyQD34.roa (hash: Yy9aJSbZa8jisjdlzD3JGDY9sTvRVpXk74KknU+efOI=) 11: XkXy4rFVu6JKAbUcEbjCs_ol8Mc.roa (hash: KEboU/fmZ1raaMqRFHeXS/DA8vof1Lf7hts2MdqUMFk=) 12: ZMDHfiorAQeHiAr2VSo31IrsX9Y.roa (hash: 2rW77gP54+olCRPQkqdpt6U7rC4Eivix0JgQsNBRA0A=) 13: b9LZtPjPcGkqch-QIMPmNiY1GfY.roa (hash: wVwwQPvK556ifQMFCqlsaWU8LCMEwKfjuZYfw4kZ7Ug=) 14: eq_1NPXQGhoWTMBNC9PaXKKEltM.roa (hash: Hq4HlvjEPgU16G6jBR0u/BxOO81trhl4PXHhgLXPBd4=) 15: u1jdAQ2eshDqHXq4UFjEjcuXmsI.roa (hash: 7O01VUQlx2/5mCx+t4SgO9Lggi1VIhx12oZO6kEvwsM=) 16: vhjrtMMdROIFj167BFR3pGrdrb8.roa (hash: mHe16RuP6X+5Fin2ZffJO/Ym51XZo7pnKG1BIGBPcUQ=) 17: vtNeTxZnHuMsF3rl3ZSPlMog7F0.roa (hash: FfGF+21HwGvE0iZhE2YJptjryuHFZ0BNSqu9xGqCr6Q=) 18: xtI4FxymYzhmmmKad9ZOkzTos1E.roa (hash: Xd4WHKpPZgsYedQWZYH07M7z75l0J2MM4sU9jDdQuXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ba:11:8c:49:9b:70:44:19:6b:ce:8c:05:a4:fc:a1:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: May 10 12:00:34 2025 GMT Not After : May 11 12:00:34 2025 GMT Subject: CN=d2ad28133d18043b42b95df6e0bbc7855256d8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8b:e7:b4:2a:0e:c3:4c:28:a6:a7:b1:0e:2e: 36:d7:5a:e2:c1:bc:a3:19:78:ec:d9:45:08:de:43: 72:6b:e8:34:98:67:49:b4:82:e4:7e:a2:96:37:d3: 1e:10:1f:8f:86:96:d2:e9:93:70:b1:00:ce:32:35: b6:a0:33:88:f0:bb:f2:e2:92:fa:bc:6d:cd:7a:07: 1b:50:d7:ca:96:b3:2b:af:b3:5b:7e:cd:ff:d1:0f: 50:32:d4:08:b9:2f:68:85:1e:e9:07:fd:de:21:e8: b5:b6:c2:d4:90:a0:11:4b:29:c0:27:ae:cc:19:d7: 85:8e:2e:77:d4:62:a8:a5:b7:b9:bc:f6:e2:88:ec: c2:1d:dd:f5:29:c2:ce:96:29:66:1c:61:5c:e9:df: 59:4a:21:ee:0d:e9:90:50:2e:05:32:11:8b:9c:6d: f9:e6:9b:32:f3:fe:02:02:15:9e:92:19:53:28:57: 4f:95:73:c2:99:da:ef:cb:12:23:6a:f1:56:6a:57: 3a:e8:96:c2:ca:14:18:c7:b8:ea:6e:6b:4b:46:0d: 2e:ac:b5:56:a2:fa:56:52:ce:15:a8:bd:ba:99:69: af:92:1c:92:4b:e2:ab:4b:74:8b:36:60:c7:1a:a1: 86:4c:ad:27:2b:0d:5c:22:65:5c:1f:10:7f:3f:ef: 5b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AD:28:13:3D:18:04:3B:42:B9:5D:F6:E0:BB:C7:85:52:56:D8:D6 X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:ed:c1:71:d0:95:a2:7f:5b:36:28:a0:4e:2a:31:76:05:be: c1:9d:a0:85:7e:73:1e:b9:de:c6:7b:e3:d9:f7:19:e1:4d:d9: 92:69:52:36:a8:7c:55:db:6d:21:10:ea:43:e2:f8:d1:ee:02: eb:6c:88:54:9f:62:80:bc:a3:73:40:0a:5d:5d:82:32:6a:e3: 59:ef:97:00:e7:ed:d2:f5:ee:b8:7c:ce:83:f8:92:04:35:b4: 51:d5:f7:76:e1:e4:5a:0b:59:be:89:de:ef:cd:07:05:1e:d5: 5d:dc:e7:ea:10:c2:2c:25:98:39:c0:61:4f:33:a7:3d:c6:0f: bd:24:3a:ed:8b:be:81:01:73:6e:f6:87:3a:5e:fa:8b:0d:a7: e2:36:70:c9:d1:2a:f6:d9:b1:eb:bf:72:52:fd:28:77:eb:9b: ee:97:c5:d1:8f:d3:61:0c:76:a0:63:43:0d:29:72:c8:0f:a0: 7c:07:a1:4b:85:3c:39:d0:70:00:25:10:1c:05:cc:16:fc:5a: d5:f1:d7:b7:dd:6e:47:fc:ea:48:8c:e7:7c:93:01:a3:96:5e: dc:4e:e0:f0:ff:47:3a:53:ff:89:d3:d8:70:ec:cf:cd:e1:60: a2:ec:7a:55:6d:95:57:b5:a4:91:64:1a:10:8b:18:86:3b:8a: ba:6b:53:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa6EYxJm3BEGWvOjAWk/KGlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjUwNTEwMTIwMDM0WhcNMjUwNTExMTIwMDM0WjAzMTEwLwYDVQQD EyhkMmFkMjgxMzNkMTgwNDNiNDJiOTVkZjZlMGJiYzc4NTUyNTZkOGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIvntCoOw0wopqexDi4211riwbyj GXjs2UUI3kNya+g0mGdJtILkfqKWN9MeEB+PhpbS6ZNwsQDOMjW2oDOI8Lvy4pL6 vG3NegcbUNfKlrMrr7Nbfs3/0Q9QMtQIuS9ohR7pB/3eIei1tsLUkKARSynAJ67M GdeFji531GKopbe5vPbiiOzCHd31KcLOlilmHGFc6d9ZSiHuDemQUC4FMhGLnG35 5psy8/4CAhWekhlTKFdPlXPCmdrvyxIjavFWalc66JbCyhQYx7jqbmtLRg0urLVW ovpWUs4VqL26mWmvkhySS+KrS3SLNmDHGqGGTK0nKw1cImVcHxB/P+9bUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKtKBM9GAQ7Qrld9uC7x4VSVtjWMB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAte3BcdCV on9bNiigTioxdgW+wZ2ghX5zHrnexnvj2fcZ4U3ZkmlSNqh8VdttIRDqQ+L40e4C 62yIVJ9igLyjc0AKXV2CMmrjWe+XAOft0vXuuHzOg/iSBDW0UdX3duHkWgtZvone 780HBR7VXdzn6hDCLCWYOcBhTzOnPcYPvSQ67Yu+gQFzbvaHOl76iw2n4jZwydEq 9tmx679yUv0od+ub7pfF0Y/TYQx2oGNDDSlyyA+gfAehS4U8OdBwACUQHAXMFvxa 1fHXt91uR/zqSIznfJMBo5Ze3E7g8P9HOlP/idPYcOzPzeFgoux6VW2VV7WkkWQa EIsYhjuKumtT4w== -----END CERTIFICATE-----Generated at Sat May 10 22:08:41 2025 by rpki-client