$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft File: jrRB2tu-y2ll1OofBGzFyOKIF_w.mft (raw, json) Hash identifier: Qr4hD7A6h7Z9n4W/S57OPQzfEXT7vVksl14mrraZGoE= Subject key identifier: 22:1E:2C:08:98:52:D3:7D:24:63:02:80:45:DE:B7:53:4B:B1:FE:C8 Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Certificate serial: 0197B7EA7435B6E49A5ACE1B12E440CC5799 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft Manifest number: 0959 Signing time: Sat 28 Jun 2025 19:01:24 +0000 Manifest this update: Sat 28 Jun 2025 19:01:24 +0000 Manifest next update: Sun 29 Jun 2025 19:01:24 +0000 Files and hashes: 1: 0HSSdKGUJ1V74tRivg_DBTfUJug.roa (hash: 0GuMJkfhc9at/c8JLxWNa9SV+TQcnIp/5frD3uM5gT8=) 2: 4EZAXXjg-wdq7F5nmE22LQpMjC0.roa (hash: kcJ5zcoJ0uYbLEoOLz0za2EfJtjkENsqcX3HW2ukm9E=) 3: 8eOXfqAkJqXP3wXDUaIxraOki3I.roa (hash: R7bxKwNtqC/oTBwL83XqaIAv5I/52rZnoW3WSovbBso=) 4: AXHQCfctIE8qm3CfgJv5m741MvA.roa (hash: lH4T05hC4Vf3bniB6mDX0OL+0fbAvH0yQpklYBKbyMI=) 5: D39tyqkHzUar743HSOtaz_PbEVw.roa (hash: 3v479Ukt7ALaWZSOqE7SXtI+6RElyE29evHrm/wKO5s=) 6: FZ30BS7c99CQqzoVNy_qf_6mJzg.roa (hash: +/HEuopMgXs1AcyNXLuf5qhJ2S6YVu77GGZUrjSbO5s=) 7: HJxJ2GZiFuqjR8HWNpRugSy_a_s.roa (hash: a72+7u9UjrbbugH23m2wS6cJe4aft6U1gF2Wvpqdh0E=) 8: Mk19CM13YMFH7WXY4rkQd2VVD9M.roa (hash: ocRMjh+08/tYyEQx7PGNN6c6//DGSHJpqiQu69+SvEU=) 9: PBJjwWm3FNYmKDKlr11pHLlOrGk.roa (hash: /EDjQB/ySBsTi6pfh4zRjgsPbhtNFWDlr8va/X/KOwc=) 10: PQysa0gStaLJL9Thu5PyuDIF7kE.roa (hash: Mwu851ywkPXxaKp83LB3gVtyZ5Xct3QCemCLlVfmoYk=) 11: TwzZQrIn09c-90CtvFLCLT3vcWs.roa (hash: uBt9dC+yxyfdnRMBiRH64GG0vCjQQ3KJBUaUSBKn8oI=) 12: Uam3fdY-U_8FUcIs9C1Cu9j0kXU.roa (hash: lAwNykQezUevV1G5+PHKNJlIk5Yd8h58FItNjQ6jmrw=) 13: Wwx0ymxnwTUNgGtoQ6bmuG8xi8I.roa (hash: Duif3Xsm8vx9BAQ1DEEh/dpjs1UJXZja4M1PuzJXkHE=) 14: XJQW6cjujhEORDl3asfzceRsQq8.roa (hash: YLe1WKPBAxaQWWhGaDY3bNQMSMuaVm8vzXhx0IIMUzM=) 15: XT1M1ME1w2GWT-wkJaT2Unr_kG8.roa (hash: 6fvlVJZbvpl7K75DLt8sGvC1abVm/uU97W3kp9Hv4hM=) 16: jrRB2tu-y2ll1OofBGzFyOKIF_w.crl (hash: oFKCSZwzI550enwJXU49fHHTZKjFqm0tBY3ydfSebcM=) 17: koKSsh0-VJlmkHnyY2l_458AY1Y.roa (hash: wTDfdV34gD9aFGM5sgCKWF1UFQUQvF6lhIIkmPFqzYk=) 18: lXFx9ALxZQorihL48BvDF3NJkOc.roa (hash: XO0/325FUJcPPA5WPlVW2WrXVo9UePYr9iPMeGFfH+o=) 19: oASSpW3DbHAVm3j51eaZaxJHZhI.roa (hash: yrEWLwCdNgFCB4MeKY8zqq0fw2GLTP+HZekfTPCwc/g=) 20: pJgeOKkaI2IaIkWKQLfbLk35a4w.roa (hash: Coq6w5jiaEk77XJ1mE7tTSL+fJ0vuxmv1bAzLJXfEwY=) 21: pc5QkYWJRHSIUT4-aISn1B0ETL0.roa (hash: bGUIoNzoUj7sJpYGAF2W/rabzS0jqmoXnaDeHRq18Tc=) 22: q9Fght0eWnwg9L4cOjC-8MWuD_0.roa (hash: DogNwIUzNPICLsbvaitegQlMAv0jPMlhURxKnx1oUnY=) 23: roxXwaFrf3KkjRm0sygAv7oGPuc.roa (hash: +XL9L+dok2bHXelVksLQxh9+U/cP9zrebc0SlrcIfKY=) 24: wMyjLOgWza8MLMZCt_GDmRvtb-g.roa (hash: dLOXSzRovdIImBdeUt2cN/TfriVM7Y6eHA/JyGJylMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:ea:74:35:b6:e4:9a:5a:ce:1b:12:e4:40:cc:57:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Validity Not Before: Jun 28 19:01:24 2025 GMT Not After : Jun 29 19:01:24 2025 GMT Subject: CN=221e2c089852d37d2463028045deb7534bb1fec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fb:13:c8:c9:e6:1a:a3:23:6f:cd:10:da:2f: a0:c0:ed:7d:6c:2e:f9:d6:d7:00:3c:12:41:07:f0: 3b:07:41:01:bb:98:51:b3:2a:22:7d:73:28:d3:78: 4b:8c:a4:95:aa:ae:db:9c:69:29:3b:e9:95:b1:61: c4:ad:87:bf:20:cc:0e:1b:8a:fb:bd:b7:2c:a8:d2: 16:d7:d4:a6:70:d3:32:85:15:4d:47:f5:80:a7:0b: 19:37:f7:6b:ef:b2:d2:1d:de:aa:b1:37:04:2b:61: d5:db:59:f4:17:46:2d:39:98:1d:09:c1:79:cf:5a: bd:76:68:83:47:02:f3:83:85:d9:0b:66:71:ba:a7: 87:a3:da:ad:22:c6:29:f5:60:06:7e:5f:18:f3:06: c1:16:23:b1:3e:3b:86:b3:4d:bd:ac:08:78:13:53: dc:c2:69:be:cc:0e:60:34:21:61:5d:fb:40:fa:8e: e5:31:a1:15:2a:f5:36:26:7b:ee:c7:63:0f:33:58: 03:c3:1e:25:a0:3c:f4:e8:51:c4:b5:f7:55:04:02: f3:24:68:be:a8:08:b3:39:b1:1f:48:7e:da:f3:01: 54:a7:2e:ef:db:d7:df:16:d3:be:79:a5:33:e1:1d: f1:03:78:ce:82:84:36:62:c9:c6:f1:36:18:c1:4c: d7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1E:2C:08:98:52:D3:7D:24:63:02:80:45:DE:B7:53:4B:B1:FE:C8 X509v3 Authority Key Identifier: keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:68:42:e2:ee:98:aa:54:08:7c:b2:e0:ef:bf:02:59:c9:1f: 00:2b:0e:5e:5c:68:5d:29:36:d6:08:e3:16:50:1a:a9:a8:43: e4:b4:a2:97:1c:90:4e:e8:b2:83:13:f8:63:db:44:7d:d1:19: cf:da:a9:66:aa:38:64:04:51:93:bf:07:14:86:a1:2f:4e:ae: e2:5e:73:6f:b7:51:e1:09:fc:43:76:78:f9:e6:84:8a:b1:b2: aa:80:de:89:99:05:f6:36:93:d8:f8:7c:04:b4:e1:53:80:fd: a7:fa:04:b6:d9:c3:d3:80:66:12:27:55:8c:d1:72:90:33:b0: 1d:ec:2d:be:b2:eb:39:4e:ea:11:47:01:27:9f:13:13:e8:16: 74:8e:e5:51:f1:58:01:5a:7f:7a:1e:83:97:37:33:06:ec:ea: 3f:65:3d:e6:28:1a:bc:4f:a2:03:21:c5:e6:1c:3a:c0:f9:42: a0:6e:4f:3b:45:34:c2:ec:2c:3e:ef:f8:ba:66:db:3b:59:28: 5a:29:91:e3:dd:96:6a:72:9f:04:a6:9e:f6:c4:65:13:7b:51: 14:d5:8c:10:81:22:29:d4:7a:22:44:7d:c6:39:b6:ed:59:45: 7c:5d:a4:7f:cb:9b:4a:71:2d:3b:57:cd:6e:47:e8:2a:32:7c: bd:99:b7:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe36nQ1tuSaWs4bEuRAzFeZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4 ODE3ZmMwHhcNMjUwNjI4MTkwMTI0WhcNMjUwNjI5MTkwMTI0WjAzMTEwLwYDVQQD EygyMjFlMmMwODk4NTJkMzdkMjQ2MzAyODA0NWRlYjc1MzRiYjFmZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/sTyMnmGqMjb80Q2i+gwO19bC75 1tcAPBJBB/A7B0EBu5hRsyoifXMo03hLjKSVqq7bnGkpO+mVsWHErYe/IMwOG4r7 vbcsqNIW19SmcNMyhRVNR/WApwsZN/dr77LSHd6qsTcEK2HV21n0F0YtOZgdCcF5 z1q9dmiDRwLzg4XZC2ZxuqeHo9qtIsYp9WAGfl8Y8wbBFiOxPjuGs029rAh4E1Pc wmm+zA5gNCFhXftA+o7lMaEVKvU2Jnvux2MPM1gDwx4loDz06FHEtfdVBALzJGi+ qAizObEfSH7a8wFUpy7v29ffFtO+eaUz4R3xA3jOgoQ2YsnG8TYYwUzXFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIeLAiYUtN9JGMCgEXet1NLsf7IMB8GA1UdIwQY MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt NDZiOTQ5MDkyY2JlLzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGhC4u6Y qlQIfLLg778CWckfACsOXlxoXSk21gjjFlAaqahD5LSilxyQTuiygxP4Y9tEfdEZ z9qpZqo4ZARRk78HFIahL06u4l5zb7dR4Qn8Q3Z4+eaEirGyqoDeiZkF9jaT2Ph8 BLThU4D9p/oEttnD04BmEidVjNFykDOwHewtvrLrOU7qEUcBJ58TE+gWdI7lUfFY AVp/eh6DlzczBuzqP2U95igavE+iAyHF5hw6wPlCoG5PO0U0wuwsPu/4umbbO1ko WimR492WanKfBKae9sRlE3tRFNWMEIEiKdR6IkR9xjm27VlFfF2kf8ubSnEtO1fN bkfoKjJ8vZm3jQ== -----END CERTIFICATE-----Generated at Sat Jun 28 23:27:40 2025 by rpki-client