$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json) Hash identifier: 5XKI2Je19vbl9fxOJZCDhwJFjqBZrInQ3Qr2Z4zLo74= Subject key identifier: 79:E4:E0:FB:F4:C1:AE:BF:AE:4A:48:78:4D:C7:78:55:6B:73:65:85 Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 01A0D6F0B5A8332A66BC0AA271479D47D26C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft Manifest number: 0748 Signing time: Fri 25 Sep 2026 05:01:34 +0000 Manifest this update: Fri 25 Sep 2026 05:01:34 +0000 Manifest next update: Sat 26 Sep 2026 05:01:34 +0000 Files and hashes: 1: 3ni1lXz0xo-b4HoXI3wRu6vJL-c.roa (hash: 7b3P7fNZC5J3JcfQvJqiC/2neHH6f8kadDw6/l3P8/Y=) 2: AmdO1jA2vkBtxkn2vv7Y1wu4dFM.roa (hash: wY1LZtovvbzyHM2W8YhMwLuam5z9V3nwmwDqM8gEEF4=) 3: BYtnuImtTGdi14Pvw9xlRKAL65k.roa (hash: hUoeJXbJ5fZg7WKvqap5HxU1pLmROBa7LXCxisf4SP4=) 4: CNFp8fRkRFtEQks7R0O2wgi6-xA.roa (hash: bXlKDyyKKGdmKBfoGxYPygp5JG45Ozo2FLYDRNT3VpM=) 5: HrFuB2F4P326FdIKDHmR_z_oGqs.roa (hash: d1+J0bs8Jd4Tmg8E7c67C6CZ18CYNi+0jZ3ouxTsd3M=) 6: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: R1OeZEiYjsZ0cP3l11Epjpc8DA5c9T29WrUs6dHhY1M=) 7: Qw57jboYzWi7eNVtR4XFL50skyQ.asa (hash: gZacbBLwQEXYgJXLBy71iNIoJF93UncqIKQilDhd0Ik=) 8: YlYX0-EwdZ0RjwlcesbIkWVsVTo.roa (hash: 12tzR601qVt1Vj7EME9V9wBl6cqsNdP8VmiHIJgAu5Q=) 9: cNqycsZxVsHcATCP8JWqqaoM9SI.roa (hash: CX+xOUuMFEXPOxevDnRNct6cRUm/jc1q9b58M6PTWZo=) 10: gE3k0i8jHZvr5aE-wjNKPwzJxvE.roa (hash: CuCVWX3Bl6EYyE6nnbYJN+zyPfahHe62RUo//GoIy9o=) 11: lBlo6PUCc6IqER-nFwmpK7D7yqo.roa (hash: Z5uCFtdD3Jko3O/Znx9FA924V5ua0wn5UjLkJKE8KyE=) 12: qbksFEEwSTb2bBOnvyMaaJhR7Ss.roa (hash: qH3mt9TzRYD5CJqPjTYWZEejOSD69A/a1ZIdDauUkQo=) 13: urqr3QuscnM9Gexd4HqCzda04Hs.roa (hash: +eFtvrmvtLAGjqTjuO2JbNNCYDwjSBJV6qDXXX+HoPY=) 14: vK-KaBqhr8V_hwKd5waBGW1KRWw.roa (hash: oQWH0/V6kKajlzjedYwpIuxuJVBUj9/lA3fmpgeVLpQ=) 15: vsRZs78l22h0vnp-DI6scU3LKUA.roa (hash: 4WpHfFl6tIuHybFbUi60kzMtYBl55u5TXUCckR5iGfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 05:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d6:f0:b5:a8:33:2a:66:bc:0a:a2:71:47:9d:47:d2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Sep 25 05:01:34 2026 GMT Not After : Sep 26 05:01:34 2026 GMT Subject: CN=79e4e0fbf4c1aebfae4a48784dc778556b736585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e1:cc:94:36:5f:51:c0:d6:24:f5:99:b1:37: 2d:09:d7:69:5d:b2:a6:cb:45:eb:dc:ee:a6:23:1f: ad:9c:d6:c3:7e:f1:fb:a6:06:35:d8:25:5f:59:61: 33:ab:84:79:e9:64:b4:c8:27:d5:a2:32:f0:c2:b9: 0a:68:e7:02:86:14:d3:c1:c7:d6:1f:dd:f8:df:d4: 40:c4:45:eb:fa:9d:84:8c:b3:31:eb:d6:12:52:36: 35:fc:3c:40:82:50:6f:75:05:98:fa:dc:6d:e0:63: f6:ca:6b:df:65:fa:45:f4:b0:2c:03:cd:95:f7:a8: 4f:77:ad:b4:e1:d7:10:62:00:90:bb:a0:fc:89:39: 6a:ad:2a:a8:14:92:e2:01:ac:bd:24:a1:b2:d3:bc: d4:f1:15:f8:5e:68:1d:d3:70:c8:19:c1:b9:5a:d5: 77:ce:1f:18:c2:16:a2:1c:94:a1:4f:33:f8:3f:3c: 49:a4:f4:9b:35:98:e9:c2:4b:0c:86:d0:dc:70:7b: 50:ba:1c:a6:94:29:cc:f1:00:14:9b:8d:e0:6f:3a: a2:59:52:1f:94:2c:4e:df:d6:61:78:3a:69:19:58: 50:73:9c:44:2d:bb:a2:94:4c:30:88:43:44:16:60: 60:fd:45:7a:c1:61:a0:23:68:fe:34:c6:25:d0:02: d4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E4:E0:FB:F4:C1:AE:BF:AE:4A:48:78:4D:C7:78:55:6B:73:65:85 X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a9:ea:99:53:3e:0b:dd:47:2c:25:55:59:8b:8e:74:fc:e8: 7f:de:71:65:e1:fe:26:80:d2:da:15:25:39:47:be:7e:3b:96: e7:2e:ac:66:86:bb:c9:a2:9c:96:ea:f5:10:77:f8:01:aa:ba: 51:64:85:01:06:5e:50:02:b5:77:9d:40:7e:fc:b8:ed:0a:70: d1:9f:39:71:e7:d9:b5:0f:92:05:96:0d:7e:89:93:a9:65:0b: 5e:80:49:4c:83:97:1a:6e:7b:e7:96:c5:ae:d7:be:ef:c2:39: 24:a8:a3:15:5e:55:67:48:e1:74:c5:46:4e:24:9b:de:7b:e0: 2b:d4:44:f4:6b:5e:6b:f5:24:b6:29:c9:4c:a1:4c:02:06:ba: d7:a8:36:e8:b4:6f:5f:dc:49:72:9e:1b:86:2f:6f:22:f5:31: 8c:1d:f8:fa:d1:27:30:9d:5a:b1:23:ed:ab:92:f8:4e:72:3f: b3:c3:51:c8:be:aa:f9:43:2b:a7:ab:90:2e:7a:82:77:de:47: 06:ce:40:1d:58:3b:4e:ad:13:a1:0e:23:c4:d7:74:cc:5f:41: 59:df:22:f7:ab:68:f0:80:22:35:7b:7b:7d:47:14:8e:e3:bf: a9:dc:0a:ca:a5:91:f8:67:c9:6e:13:27:20:35:50:20:15:f5: 04:e5:06:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDW8LWoMypmvAqicUedR9JsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjYwOTI1MDUwMTM0WhcNMjYwOTI2MDUwMTM0WjAzMTEwLwYDVQQD Eyg3OWU0ZTBmYmY0YzFhZWJmYWU0YTQ4Nzg0ZGM3Nzg1NTZiNzM2NTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreHMlDZfUcDWJPWZsTctCddpXbKm y0Xr3O6mIx+tnNbDfvH7pgY12CVfWWEzq4R56WS0yCfVojLwwrkKaOcChhTTwcfW H93439RAxEXr+p2EjLMx69YSUjY1/DxAglBvdQWY+txt4GP2ymvfZfpF9LAsA82V 96hPd6204dcQYgCQu6D8iTlqrSqoFJLiAay9JKGy07zU8RX4Xmgd03DIGcG5WtV3 zh8YwhaiHJShTzP4PzxJpPSbNZjpwksMhtDccHtQuhymlCnM8QAUm43gbzqiWVIf lCxO39ZheDppGVhQc5xELbuilEwwiENEFmBg/UV6wWGgI2j+NMYl0ALUwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnk4Pv0wa6/rkpIeE3HeFVrc2WFMB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6nqmVM+ C91HLCVVWYuOdPzof95xZeH+JoDS2hUlOUe+fjuW5y6sZoa7yaKclur1EHf4Aaq6 UWSFAQZeUAK1d51Afvy47Qpw0Z85cefZtQ+SBZYNfomTqWULXoBJTIOXGm5755bF rte+78I5JKijFV5VZ0jhdMVGTiSb3nvgK9RE9Gtea/UktinJTKFMAga616g26LRv X9xJcp4bhi9vIvUxjB34+tEnMJ1asSPtq5L4TnI/s8NRyL6q+UMrp6uQLnqCd95H Bs5AHVg7Tq0ToQ4jxNd0zF9BWd8i96to8IAiNXt7fUcUjuO/qdwKyqWR+GfJbhMn IDVQIBX1BOUGYQ== -----END CERTIFICATE-----Generated at Fri Sep 25 12:54:12 2026 by rpki-client