$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: qifK0yJvYH4vlp6KZUG7okhLs22+FWKeRC3fSReSX4g= Subject key identifier: 4C:0B:EA:39:25:C3:50:61:70:E4:84:2E:E0:61:6D:44:6F:7F:ED:BC Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 0199FD346227CF2D91257D23E0A3518FE52D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 1682 Signing time: Sun 19 Oct 2025 16:01:32 +0000 Manifest this update: Sun 19 Oct 2025 16:01:32 +0000 Manifest next update: Mon 20 Oct 2025 16:01:32 +0000 Files and hashes: 1: A3slZgyg9eemzONzeM4ZjQZOkQA.roa (hash: X0hOJW7H3OQv8gNe/Scffw0tX7rp3lfITg3c2bDp62I=) 2: Dyi32KlOskocQHPe6FUF7ELQs5U.roa (hash: D3EF+UreJY6p0ckzuksgWXVvYetF6sITxKDGv/w2L0k=) 3: FJEFcX2c3QiytgwJXtBXdfXF7AQ.roa (hash: wDOQFjMrdpmJOwUI55qSC810FFGrsaY4QPcOoJKWykM=) 4: G_noKzntiWHLaHSdta1FputJESM.roa (hash: 76HBYH18Q5+wfRzE5ydGp21BC62rcsuS2tSvCzBrWp8=) 5: K9IKE8UzWzIlRqgdm5DBscj4DXI.roa (hash: TmNOvsKyJxclTHoJrrP+Wz2lJl3QKp06vZRtwf2Wkwo=) 6: Orf0-crrS-m0d2xw75OekVLRhcU.roa (hash: NyC6YqKt0FNmC1unp3jevt47/gr2Ss5dzqvXJGD2AjU=) 7: THZGRo10wjMlm6DbRUy7KjrwfkM.roa (hash: 9FjGohVB5WEFkwBSNZEgEcooaudVJnnxxDK2Jy9/LgI=) 8: VmEKVuU_uT-v34QUxuvTEoMoaug.roa (hash: lCfgs7Wts05rdP9N+OaYxsLVxOabAGR5SUtGArrm95M=) 9: Vxz_brs8mMP8pyfBjMG6SqLCoLA.roa (hash: InPdcQtGkZTGLva52kv6ADnfkbCulTXgK4jOcLs8G7M=) 10: Xmin5XG-kRl49Vt7ZEcTgSLDhDM.roa (hash: DHMC7YXYfDSAA2x6JnOvMwJT1zdpAymlypp6F1bKmgY=) 11: Yfzph1m23vmbClyvIoORpS1CW-E.roa (hash: SuwU2G9eYZ/n+GS6xB/GEsh3UziEYPdyi1WD5kRpjAo=) 12: _vcj5hH5PQmqE-mf4-B7kcWGpfg.roa (hash: ReLlnYnzQbiQ5Pk/0fIjBSPY1fpdoMBMJpSnkiSreWk=) 13: d-sWN4azI8sU7mlb0U-920Rsmtc.roa (hash: eiusVr40X1jFuIAj+CFi96eXy2bKXAQXnB20dKkv/70=) 14: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: u0jBm+R04bWh0SwmUqFQJzmmgxZVIVvDn9+YOH+/inQ=) 15: mwm5rC4rfoUfkUGj1keywZQhhGw.roa (hash: dDwtNYt9WubuetSqef0LQakniH0rgBVhQK32OI1f1fU=) 16: nyxtNnWsxM3-5IIVvMZ44cQVEYU.roa (hash: ub8VtVKtgWVEPS0rlKsjT0ZjeuiFnfLTw/tC6ZpW/Vo=) 17: v5kzcztD_Zc4DwbwnN4YfKR9YoA.roa (hash: 33e8kQ++AVlCN79vtcp+1+C+oGUNBxplYHYOGaRMl58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:34:62:27:cf:2d:91:25:7d:23:e0:a3:51:8f:e5:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Oct 19 16:01:32 2025 GMT Not After : Oct 20 16:01:32 2025 GMT Subject: CN=4c0bea3925c3506170e4842ee0616d446f7fedbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:01:40:28:20:28:8d:f3:46:af:ef:44:8c:7f: 40:6e:24:ba:e8:fc:db:03:bd:57:ad:a1:46:b0:6e: 40:db:37:94:08:4d:93:11:d8:41:d6:6c:14:b9:66: 4b:9f:21:86:16:ed:17:ba:87:64:dc:a6:ad:f4:0f: 5d:fd:e5:72:6f:e3:c7:b7:7e:42:dd:86:cc:8f:87: 83:37:fe:ef:25:55:34:4e:6a:21:ff:00:75:d0:85: eb:8b:92:5e:3a:4f:94:dd:86:a4:54:16:be:7c:4e: a7:3a:0b:75:66:88:18:38:5a:af:f4:0d:9d:a1:c7: 0d:90:78:0b:1a:a7:17:38:4a:f6:f2:f3:8c:7d:37: e0:dc:37:e1:ce:3d:16:6a:41:26:4a:a0:a4:03:89: da:97:e2:ec:72:eb:48:ee:09:61:bf:22:af:6e:cd: 5c:4d:9f:76:13:ee:24:b1:b2:1c:04:e2:61:c0:fa: dd:a0:d8:6d:a5:36:df:37:2f:d9:db:a1:3c:0d:43: b7:21:3c:01:12:a8:be:47:fb:cc:bc:8e:58:07:92: 1e:b2:05:02:54:5d:85:bb:e0:6a:ae:ef:60:c0:98: c6:c1:60:4b:ca:16:63:c4:6c:2d:6f:53:96:52:5e: 6f:9a:1f:09:bc:a4:c7:50:13:14:8b:24:f7:16:d8: 02:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0B:EA:39:25:C3:50:61:70:E4:84:2E:E0:61:6D:44:6F:7F:ED:BC X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:c5:8b:fc:b5:51:0c:68:e9:de:e1:ef:15:08:ad:d1:cf:20: d1:18:0e:d1:6f:c0:64:64:fc:17:ba:8f:65:59:4f:d5:8d:c5: a7:73:b3:92:98:07:2b:0c:6a:de:e7:fc:b0:b9:d1:44:73:c9: 39:02:a9:cc:4f:8d:05:3a:6c:95:10:95:51:8c:dd:bc:e4:5a: 0c:2d:a6:8d:58:11:02:94:a1:74:8d:3d:9e:69:41:0d:a5:be: e2:7f:e4:1f:80:64:c4:be:ac:67:b1:ff:c7:0f:72:c4:60:18: 39:99:30:20:ba:1b:d1:b7:2e:a5:86:85:00:71:b7:f1:3d:25: d7:ad:1c:5c:a5:ce:c1:3a:e6:38:91:14:c6:f2:5f:6f:fd:b5: 59:63:86:8b:44:0d:7f:79:3d:c2:5e:49:87:77:10:2b:e1:53: ce:2e:a3:6f:14:c7:a1:53:7e:db:9a:83:ef:84:52:5d:bd:59: 6f:5c:b3:ac:1a:77:2b:d8:d9:9a:e4:78:71:c1:a0:4c:22:ea: 9f:e3:9e:41:41:6e:4e:6c:bd:71:4b:05:99:09:2c:9e:c0:bf: e8:c5:b6:18:3b:b8:b7:0e:8f:32:33:31:72:b7:f2:16:57:54: d3:cc:aa:82:34:14:16:ca:b6:58:ad:97:5b:1f:90:97:27:a3: 0e:b2:64:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9NGInzy2RJX0j4KNRj+UtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjUxMDE5MTYwMTMyWhcNMjUxMDIwMTYwMTMyWjAzMTEwLwYDVQQD Eyg0YzBiZWEzOTI1YzM1MDYxNzBlNDg0MmVlMDYxNmQ0NDZmN2ZlZGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQFAKCAojfNGr+9EjH9AbiS66Pzb A71XraFGsG5A2zeUCE2TEdhB1mwUuWZLnyGGFu0Xuodk3Kat9A9d/eVyb+PHt35C 3YbMj4eDN/7vJVU0Tmoh/wB10IXri5JeOk+U3YakVBa+fE6nOgt1ZogYOFqv9A2d occNkHgLGqcXOEr28vOMfTfg3Dfhzj0WakEmSqCkA4nal+LscutI7glhvyKvbs1c TZ92E+4ksbIcBOJhwPrdoNhtpTbfNy/Z26E8DUO3ITwBEqi+R/vMvI5YB5IesgUC VF2Fu+Bqru9gwJjGwWBLyhZjxGwtb1OWUl5vmh8JvKTHUBMUiyT3FtgCrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwL6jklw1BhcOSELuBhbURvf+28MB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMWL/LVR DGjp3uHvFQit0c8g0RgO0W/AZGT8F7qPZVlP1Y3Fp3OzkpgHKwxq3uf8sLnRRHPJ OQKpzE+NBTpslRCVUYzdvORaDC2mjVgRApShdI09nmlBDaW+4n/kH4BkxL6sZ7H/ xw9yxGAYOZkwILob0bcupYaFAHG38T0l160cXKXOwTrmOJEUxvJfb/21WWOGi0QN f3k9wl5Jh3cQK+FTzi6jbxTHoVN+25qD74RSXb1Zb1yzrBp3K9jZmuR4ccGgTCLq n+OeQUFuTmy9cUsFmQksnsC/6MW2GDu4tw6PMjMxcrfyFldU08yqgjQUFsq2WK2X Wx+QlyejDrJkaQ== -----END CERTIFICATE-----Generated at Sun Oct 19 20:52:33 2025 by rpki-client