$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json) Hash identifier: J4x35A1Jg9avTauMwGicTGA9BZw5Ams+FKCcajcc6pk= Subject key identifier: AF:5C:C4:91:6F:84:CB:98:84:51:35:8E:30:9A:0B:8C:80:FE:DF:DC Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 0199FCFDA05B29CAF6ED2F60C7523153615A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft Manifest number: 03B8 Signing time: Sun 19 Oct 2025 15:01:44 +0000 Manifest this update: Sun 19 Oct 2025 15:01:44 +0000 Manifest next update: Mon 20 Oct 2025 15:01:44 +0000 Files and hashes: 1: 8g-49_qQ3fcAAr8ogKNyJYRIsqM.roa (hash: YUM8nQydrUaGiZYWfH9e5CkG/0ZnMAVKiwEv7wrrmyU=) 2: HL_391YyhybjwJ74kNKee4Xme30.roa (hash: SKqvmhnXy6lVHKlIjthvO2Ffcm5YC3y5BAN0frkvak8=) 3: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: I5M/uoZK/PVpp8QliQmn1IUIyweQ12LGzhxGtk/aVj8=) 4: UFzq6HTzLsKXQDiIwbMVwsSvCKE.roa (hash: SkcdE34ZRnlvciguMZx89azOscHKjWKi4kmUM6ce2ek=) 5: Vf3C3nEL83KU-t7pLCkbgpiASsA.roa (hash: 6SosAmZB67F6Q5qUy5fWvfEJcjGr5qv93jKtlhRr2es=) 6: b37yA0vBw9z9NXOjP3ngOC-nsdQ.roa (hash: xnMkc8ma8YV2ulWTsjtILbYV33NvcPwQMYE2M0mdniE=) 7: evsBxqfpyH3zHvt0KdEDbPjJt40.roa (hash: vsA8eWY0hm6KpE4+4Kq5HkaUgEZIYMzjLRq48DP4yG4=) 8: hp0pLX_QGiWhiOhgc-g-g3McIzI.roa (hash: iRmxgVLqjy7bOiMWp10+U3a2wekQwe0YpGsmUpp/wOw=) 9: lwlNrqm3r8NOZc8muUo80fFlOeY.roa (hash: FfJzjpvXZQfdbT9Lc8mjBM1Q8TX5WkjUXsorwJal9Zo=) 10: pu4GRTEZI-DDS8alCpZhtqjD728.roa (hash: 4gymL9RPKKRX/UazcJNoKfCcQGjN640R8KkZ8YDasZ0=) 11: r6VOlpU6VgL1WVlEQKIIOdFJ6jc.roa (hash: qZ5211k3RJOzvqXcolh5rN4QAkWpCPQgoaSC1kNOR9w=) 12: zB7jZpVQ6_QohXb9Ts1uTCDa9vc.roa (hash: G92uGtD4p7P9jynyu17jJLaD0YzUsjPpS9i4T5WM4LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:fd:a0:5b:29:ca:f6:ed:2f:60:c7:52:31:53:61:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Oct 19 15:01:44 2025 GMT Not After : Oct 20 15:01:44 2025 GMT Subject: CN=af5cc4916f84cb988451358e309a0b8c80fedfdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:30:85:ea:17:bb:e8:65:71:52:a3:b8:9a:dc: 7d:7d:84:46:cb:f7:04:17:55:5d:29:45:65:b0:50: 24:87:ee:7a:3f:ed:af:0a:f7:9f:ec:c2:c0:56:3d: eb:77:2e:59:1c:69:e3:cb:06:35:c7:73:6b:83:88: 22:7c:ab:c6:24:5d:44:31:a0:f7:9b:2e:4e:0b:45: 28:f0:6a:62:9e:22:72:b1:6d:b6:43:31:78:cc:41: 15:16:e9:a7:04:2c:25:92:1c:eb:26:da:dd:4d:e4: 0d:d9:48:35:ca:c4:2f:4e:98:3f:ea:ea:10:af:2a: 24:bb:29:3e:2e:b8:8b:a1:44:34:ae:3f:68:2e:1d: 8f:9e:eb:c9:52:40:ef:92:a4:71:78:ef:f0:ea:0f: 84:38:cf:18:85:db:84:38:c5:7f:a4:6b:27:f9:fd: 5c:41:b9:f8:d9:94:d7:bc:fe:2b:ad:de:53:b6:31: 8b:ec:d2:49:65:ef:67:c1:cf:e8:2a:89:61:f0:ba: ea:9d:6c:38:7b:85:49:69:21:4f:1b:c9:ec:5d:c4: eb:2e:c0:4d:40:69:9f:6a:45:b8:68:4b:ed:23:45: c6:64:95:fe:1f:ab:b6:95:b8:64:c9:83:7a:c8:34: 6c:f3:cb:86:d7:7c:32:10:ed:1f:d9:d8:71:1e:7d: 4a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5C:C4:91:6F:84:CB:98:84:51:35:8E:30:9A:0B:8C:80:FE:DF:DC X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:e2:76:9e:b0:5e:e3:15:c4:37:f7:e0:d0:04:67:2b:9f:c8: 0b:03:c2:15:b4:f7:67:38:39:91:0e:a5:ad:82:c7:3d:86:9c: ad:3a:a0:6b:bb:d7:04:dd:c5:37:b0:aa:ae:5d:50:b3:3b:f1: 68:cf:ae:09:c3:da:08:a6:c4:e8:84:45:8b:07:11:8a:a2:e1: 26:48:e1:3d:85:69:a7:05:9c:43:81:2e:7d:1b:9c:7d:51:7c: ae:1d:35:18:58:49:a7:13:f9:cd:aa:fe:14:bb:68:02:f5:3f: 64:66:5a:e2:e3:39:9b:b8:b6:4b:35:c7:e3:60:62:6e:11:40: 8f:fd:c4:c3:77:39:92:e7:74:fb:51:77:dd:a6:ee:73:7e:95: c6:4c:82:d8:18:74:33:d4:43:76:53:1e:84:70:d0:c9:1a:8b: ec:51:42:c4:a5:e9:ba:cd:de:a4:7b:25:d0:1c:23:23:24:58: 94:27:2d:63:61:b6:0c:5e:94:05:55:94:36:8c:9b:66:21:cb: 7c:14:1a:27:16:fb:08:d5:df:bd:ab:f1:16:76:39:f2:9e:74: c5:82:92:fc:68:4d:ba:f4:20:20:27:15:26:76:b5:2c:c1:70: b3:d5:d0:98:74:8f:4a:e6:cb:fa:1f:2e:d4:e6:f8:51:1a:d8: 5c:dc:68:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8/aBbKcr27S9gx1IxU2FaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjUxMDE5MTUwMTQ0WhcNMjUxMDIwMTUwMTQ0WjAzMTEwLwYDVQQD EyhhZjVjYzQ5MTZmODRjYjk4ODQ1MTM1OGUzMDlhMGI4YzgwZmVkZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjCF6he76GVxUqO4mtx9fYRGy/cE F1VdKUVlsFAkh+56P+2vCvef7MLAVj3rdy5ZHGnjywY1x3Nrg4gifKvGJF1EMaD3 my5OC0Uo8GpiniJysW22QzF4zEEVFumnBCwlkhzrJtrdTeQN2Ug1ysQvTpg/6uoQ ryokuyk+LriLoUQ0rj9oLh2PnuvJUkDvkqRxeO/w6g+EOM8YhduEOMV/pGsn+f1c Qbn42ZTXvP4rrd5TtjGL7NJJZe9nwc/oKolh8LrqnWw4e4VJaSFPG8nsXcTrLsBN QGmfakW4aEvtI0XGZJX+H6u2lbhkyYN6yDRs88uG13wyEO0f2dhxHn1KIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9cxJFvhMuYhFE1jjCaC4yA/t/cMB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeJ2nrBe 4xXEN/fg0ARnK5/ICwPCFbT3Zzg5kQ6lrYLHPYacrTqga7vXBN3FN7Cqrl1Qszvx aM+uCcPaCKbE6IRFiwcRiqLhJkjhPYVppwWcQ4EufRucfVF8rh01GFhJpxP5zar+ FLtoAvU/ZGZa4uM5m7i2SzXH42BibhFAj/3Ew3c5kud0+1F33abuc36VxkyC2Bh0 M9RDdlMehHDQyRqL7FFCxKXpus3epHsl0BwjIyRYlCctY2G2DF6UBVWUNoybZiHL fBQaJxb7CNXfvavxFnY58p50xYKS/GhNuvQgICcVJna1LMFws9XQmHSPSubL+h8u 1Ob4URrYXNxosg== -----END CERTIFICATE-----Generated at Sun Oct 19 20:40:29 2025 by rpki-client