$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft File: raJar-Ophw6VJK-gJlmH7VpaTaM.mft (raw, json) Hash identifier: 1J/eDEGxdjaNRQF5AKPF8dHHgxpuH6jT8rC+aXr11bs= Subject key identifier: E9:A3:BA:4C:F4:C7:7B:C9:E2:36:28:A1:B8:F8:B2:08:75:54:71:33 Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3 Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3 Certificate serial: 0198D6CCE7FB7D9D2BF7FCBA58899C839844 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft Manifest number: 167E Signing time: Sat 23 Aug 2025 12:00:09 +0000 Manifest this update: Sat 23 Aug 2025 12:00:09 +0000 Manifest next update: Sun 24 Aug 2025 12:00:09 +0000 Files and hashes: 1: 3cvNvdSi3XGnlgqLMUXhh7Fbsns.roa (hash: RjSiDuOGFmz06JKyEcD4gXSDvTvwzOibXX44/BaGwzM=) 2: 4qU0lYZixQn_ajK7o9tm4-h59Yc.roa (hash: rJ9oCMP6AUNUzaOpIFXW5T5zkn6qUN20PTxwfzReYSQ=) 3: CKER9wKJnd8i3s1x_cuI1c5b5Gg.roa (hash: s6MpM43dZhbOOH2ONDtptW7UmeKZDzVPrS361Wp7DlU=) 4: QqlMdh24Ws5Csf0Uuo2IJQlJoC4.roa (hash: /8SKmiBGn8KNuuR9Z6Vc2oYu9cW/r06GpbN1vuAdWAE=) 5: VWz0dchWUkZQVyP3JtuInNAFbyA.roa (hash: SqCoHwQT1RKZsrh/slkYf8DtZsXR49Lw8MbGV9Z0lJQ=) 6: XG0f4whg8DTzg4ZpQd0f-UdmRXY.roa (hash: ZGcU72mX8VKGJYV72um72oY45czQYPy5f+/AekBe7rg=) 7: eTZvFVUGnDNHwq2npFaevM_pjLg.roa (hash: 18cD37AihQlqKhfJw/uFQO048dE0tdQTn3vqNmQm/DI=) 8: jOJJqoS_PgQTtahvKFyYtdpryQc.roa (hash: NLWvbfmQ0GpKEPm+5C3Z0gDnOHe3vz+adN0kchftPSM=) 9: ngVIm6V8McjWt-UsDZ8SI1OBzB8.roa (hash: TG6EiZUK8fMKZ//ITtR5n/6R2Ry6qOs7fabIjuGyGt8=) 10: nh8Wwn3Fj2yGVzqswDAx-hybLdE.roa (hash: XEpaT4HyqXFQYAhd7C6I8/JvL9+p58S8LPezKapKn1U=) 11: owgmBs4vbkkXbw2K0OuU1ejAVjM.roa (hash: hWN+IDhiOv5MeOYFdicsOLf4isT8+TWoYgyTGhIN3B8=) 12: raJar-Ophw6VJK-gJlmH7VpaTaM.crl (hash: FBnwQS/awKMNC23aW4Q6WJYNUWOuay8ZuJ5NPiBVogY=) 13: w47kV22DUX2rmSAV17IslbqJZkE.roa (hash: jwhv3mxFNCUIHi+oaeb9HMdIuv95C0du8+Aflx3W8ng=) 14: weNgwIA48_rsRspTEOQkflneJ2o.roa (hash: baMtWqaZx8ecWxf9Y9oBJPogfPJJVeJm66CO34ozZyM=) 15: zBMwGWWflzLxBSFNPzJ2aqEBgrE.roa (hash: Frie/26MAD4moXE2hcnRczEyt7GQngLuPdcorC2uOx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:cc:e7:fb:7d:9d:2b:f7:fc:ba:58:89:9c:83:98:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3 Validity Not Before: Aug 23 12:00:09 2025 GMT Not After : Aug 24 12:00:09 2025 GMT Subject: CN=e9a3ba4cf4c77bc9e23628a1b8f8b20875547133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:85:c1:a9:93:ad:18:e0:0e:9a:6a:bb:d9:49: 37:e6:4d:6a:a3:0f:7e:c5:f5:9d:a0:81:2d:fa:1c: 53:a8:de:46:69:36:ab:83:38:4e:88:b6:97:c9:f1: 31:00:d2:b7:bb:65:b8:01:89:5e:c7:d3:59:9a:cd: d4:8a:b5:fe:67:6f:07:19:77:cc:a7:7f:3b:33:3c: 09:05:54:71:8d:8c:c1:0c:64:5c:40:55:9e:6f:5c: 9d:d8:44:62:e0:7c:f3:2f:b2:52:03:71:93:61:de: 3a:dd:ca:f5:e1:a9:82:d3:44:69:f2:5e:79:2c:73: 99:1a:b1:15:a1:a0:c5:39:be:62:ec:ee:cd:5f:bb: f8:ec:20:ac:b2:19:2f:f7:11:ca:7b:3a:f6:d6:24: f3:95:ec:08:ce:db:bc:4b:19:c7:1b:0d:e2:37:21: 79:39:fd:60:bd:ff:81:c9:71:95:a2:71:db:9a:a6: 6d:72:f0:1d:1f:ff:04:bc:91:fb:2a:e3:33:bc:37: af:25:52:65:6d:41:98:4b:59:bd:7b:24:38:23:5b: 7d:3b:ff:df:89:f5:a1:4c:0a:aa:6f:0a:00:5c:0b: ce:bc:61:89:56:49:44:1e:f8:38:92:1c:c4:93:47: 81:c3:a7:da:85:42:9d:1a:6d:82:aa:40:c9:5e:25: 01:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A3:BA:4C:F4:C7:7B:C9:E2:36:28:A1:B8:F8:B2:08:75:54:71:33 X509v3 Authority Key Identifier: keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:8c:4e:e0:f8:a9:35:69:21:5a:0a:70:b6:e0:27:6e:34:2b: 48:79:65:71:49:31:ec:37:39:15:90:d6:24:fa:8a:90:71:cb: 95:dc:3a:4b:b8:7e:8c:45:9d:40:c2:ed:82:e8:e6:cc:49:df: f6:38:85:19:9b:52:78:86:4c:e3:0d:7d:2d:a0:f7:53:7a:29: e9:ca:e5:a7:4f:3e:03:ab:49:9f:5d:56:e5:d8:25:c4:00:d2: ff:ee:89:55:0d:9c:20:c3:e1:b0:d9:0f:d7:9d:c8:73:7e:86: c6:84:a4:9a:29:d1:8e:d4:8d:3d:94:01:30:fb:20:6e:9e:44: 89:5a:9e:13:62:aa:dd:d0:94:ad:7f:3f:69:65:1a:f2:78:b5: 5e:1d:d6:b0:7b:5d:68:f5:ce:c4:14:c4:0a:96:66:73:52:53: a6:86:52:11:5e:5d:c4:ce:50:bf:6d:57:2f:94:a2:a4:80:20: 48:47:ec:1e:8a:3c:2e:c3:ac:c9:94:68:a1:f0:05:41:be:b7: fa:60:41:41:db:6e:ca:43:6f:b1:86:49:48:d0:98:49:36:88: 9c:e7:1d:af:cd:af:ed:a9:c7:00:00:7c:33:0c:41:58:60:94: bd:ab:ba:b6:c4:37:ad:5f:15:9f:98:a4:d3:79:5f:e8:57:46: 3b:74:f9:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWzOf7fZ0r9/y6WImcg5hEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYTI1YWFmZTNhOTg3MGU5NTI0YWZhMDI2NTk4N2VkNWE1 YTRkYTMwHhcNMjUwODIzMTIwMDA5WhcNMjUwODI0MTIwMDA5WjAzMTEwLwYDVQQD EyhlOWEzYmE0Y2Y0Yzc3YmM5ZTIzNjI4YTFiOGY4YjIwODc1NTQ3MTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIXBqZOtGOAOmmq72Uk35k1qow9+ xfWdoIEt+hxTqN5GaTargzhOiLaXyfExANK3u2W4AYlex9NZms3UirX+Z28HGXfM p387MzwJBVRxjYzBDGRcQFWeb1yd2ERi4HzzL7JSA3GTYd463cr14amC00Rp8l55 LHOZGrEVoaDFOb5i7O7NX7v47CCsshkv9xHKezr21iTzlewIztu8SxnHGw3iNyF5 Of1gvf+ByXGVonHbmqZtcvAdH/8EvJH7KuMzvDevJVJlbUGYS1m9eyQ4I1t9O//f ifWhTAqqbwoAXAvOvGGJVklEHvg4khzEk0eBw6fahUKdGm2CqkDJXiUBRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmjukz0x3vJ4jYoobj4sgh1VHEzMB8GA1UdIwQY MBaAFK2iWq/jqYcOlSSvoCZZh+1aWk2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUt OWQ1ODc1ZDg2MzczLzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUtOWQ1ODc1ZDg2Mzcz LzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIxO4Pip NWkhWgpwtuAnbjQrSHllcUkx7Dc5FZDWJPqKkHHLldw6S7h+jEWdQMLtgujmzEnf 9jiFGZtSeIZM4w19LaD3U3op6crlp08+A6tJn11W5dglxADS/+6JVQ2cIMPhsNkP 153Ic36GxoSkminRjtSNPZQBMPsgbp5EiVqeE2Kq3dCUrX8/aWUa8ni1Xh3WsHtd aPXOxBTECpZmc1JTpoZSEV5dxM5Qv21XL5SipIAgSEfsHoo8LsOsyZRoofAFQb63 +mBBQdtuykNvsYZJSNCYSTaInOcdr82v7anHAAB8MwxBWGCUvau6tsQ3rV8Vn5ik 03lf6FdGO3T5qA== -----END CERTIFICATE-----Generated at Sat Aug 23 17:02:30 2025 by rpki-client