$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft File: raJar-Ophw6VJK-gJlmH7VpaTaM.mft (raw, json) Hash identifier: U5pWr4dp+L9IGnfOca/acJUt+iuvqYjr90RrWYskQ2o= Subject key identifier: 20:B9:9A:08:37:12:1F:5D:8C:A4:2C:9E:3C:D5:CD:70:FA:05:8C:7B Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3 Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3 Certificate serial: 0197CA2749B341059EDD1009E21863A75D8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft Manifest number: 15F1 Signing time: Wed 02 Jul 2025 08:01:01 +0000 Manifest this update: Wed 02 Jul 2025 08:01:01 +0000 Manifest next update: Thu 03 Jul 2025 08:01:01 +0000 Files and hashes: 1: 3cvNvdSi3XGnlgqLMUXhh7Fbsns.roa (hash: RjSiDuOGFmz06JKyEcD4gXSDvTvwzOibXX44/BaGwzM=) 2: 4qU0lYZixQn_ajK7o9tm4-h59Yc.roa (hash: rJ9oCMP6AUNUzaOpIFXW5T5zkn6qUN20PTxwfzReYSQ=) 3: CKER9wKJnd8i3s1x_cuI1c5b5Gg.roa (hash: s6MpM43dZhbOOH2ONDtptW7UmeKZDzVPrS361Wp7DlU=) 4: ONUCtbkDeeY2PA4jyY-af2rV2nc.roa (hash: UqkqTmMsI7S3ytTnMMGoR5/dJydP8VGBx/KeOodELdE=) 5: QqlMdh24Ws5Csf0Uuo2IJQlJoC4.roa (hash: /8SKmiBGn8KNuuR9Z6Vc2oYu9cW/r06GpbN1vuAdWAE=) 6: VWz0dchWUkZQVyP3JtuInNAFbyA.roa (hash: SqCoHwQT1RKZsrh/slkYf8DtZsXR49Lw8MbGV9Z0lJQ=) 7: XG0f4whg8DTzg4ZpQd0f-UdmRXY.roa (hash: ZGcU72mX8VKGJYV72um72oY45czQYPy5f+/AekBe7rg=) 8: eTZvFVUGnDNHwq2npFaevM_pjLg.roa (hash: 18cD37AihQlqKhfJw/uFQO048dE0tdQTn3vqNmQm/DI=) 9: jOJJqoS_PgQTtahvKFyYtdpryQc.roa (hash: NLWvbfmQ0GpKEPm+5C3Z0gDnOHe3vz+adN0kchftPSM=) 10: nh8Wwn3Fj2yGVzqswDAx-hybLdE.roa (hash: XEpaT4HyqXFQYAhd7C6I8/JvL9+p58S8LPezKapKn1U=) 11: owgmBs4vbkkXbw2K0OuU1ejAVjM.roa (hash: hWN+IDhiOv5MeOYFdicsOLf4isT8+TWoYgyTGhIN3B8=) 12: raJar-Ophw6VJK-gJlmH7VpaTaM.crl (hash: RzKPbCPAWIrH9zUxSNflKt8L86opG6xMnBYxhogdlRU=) 13: w47kV22DUX2rmSAV17IslbqJZkE.roa (hash: jwhv3mxFNCUIHi+oaeb9HMdIuv95C0du8+Aflx3W8ng=) 14: zBMwGWWflzLxBSFNPzJ2aqEBgrE.roa (hash: Frie/26MAD4moXE2hcnRczEyt7GQngLuPdcorC2uOx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 08:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:ca:27:49:b3:41:05:9e:dd:10:09:e2:18:63:a7:5d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3 Validity Not Before: Jul 2 08:01:01 2025 GMT Not After : Jul 3 08:01:01 2025 GMT Subject: CN=20b99a0837121f5d8ca42c9e3cd5cd70fa058c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:91:cc:46:90:b7:e2:7d:c7:e3:d7:be:d5:d5: 0d:5c:14:97:0d:ab:40:6c:0a:98:4f:d0:5f:e6:63: d9:65:84:4c:a1:f3:05:a7:ef:79:a7:5a:3e:4a:37: 64:0e:b6:30:03:6e:67:1e:9d:6e:b3:21:f7:34:45: e1:1d:86:d5:b8:7e:c6:bf:fa:30:dd:b5:89:e9:06: 14:61:8d:5d:89:41:f5:45:af:11:33:b5:ad:7c:a2: 1d:ec:c8:68:a0:0c:77:d9:7e:09:84:ad:54:53:2b: d7:12:dc:e6:24:86:2f:0d:d9:62:9c:4c:1d:ff:4e: c0:64:06:82:89:fc:8e:1d:f1:76:42:ad:5b:17:48: 9b:0e:19:ac:9e:47:60:a2:6d:71:c6:2c:ed:21:51: 75:36:97:aa:e1:69:50:9d:19:5f:c2:08:25:d6:d5: 63:3e:58:b6:33:3e:56:71:98:f7:22:74:85:20:4c: 37:ac:ed:56:1a:f4:69:4f:02:78:4a:70:4e:44:95: a7:ce:ec:3f:32:5d:27:53:df:b2:bc:6c:3b:78:b8: a1:4e:3d:55:2d:a9:e4:80:bb:01:10:43:fd:fc:a4: 6d:d3:ee:cc:04:2b:68:97:4d:30:f8:33:ed:c7:d8: 26:de:9e:20:2c:5d:08:4c:49:7b:c2:7b:a8:0e:45: 8d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B9:9A:08:37:12:1F:5D:8C:A4:2C:9E:3C:D5:CD:70:FA:05:8C:7B X509v3 Authority Key Identifier: keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:85:f5:ce:06:fb:dc:7b:39:11:60:82:e7:40:01:ab:82:e6: 0a:c6:70:0b:1e:20:22:0f:3a:fc:b5:09:f7:a0:c9:f2:f9:96: a4:8e:6f:b0:b7:96:39:fa:d3:f9:99:04:5f:4d:9b:dd:10:f1: d6:bc:56:86:01:65:c3:7c:7a:e6:12:78:74:28:42:dd:4c:0a: 53:0f:a0:fc:1d:e5:bd:65:ca:ba:1e:3d:7a:40:88:15:e3:0a: 03:cb:42:c0:14:ad:89:ff:c9:0c:5f:c3:fc:ff:e3:7a:c4:0b: af:0a:5c:03:2d:ed:65:8f:d1:90:ae:a9:3f:99:11:88:b0:f5: 5f:93:c9:21:4c:6c:89:73:9d:d6:06:28:3a:64:01:21:e8:0d: 68:c6:4c:57:db:12:f5:9c:de:95:b1:5f:71:18:1d:9f:01:2c: eb:97:79:37:77:19:9a:82:69:cb:e4:16:8c:01:24:77:a6:42: d5:96:56:80:e6:c3:7f:a9:5e:7b:ba:d2:c3:1d:88:64:85:3b: 51:6f:42:bf:85:c1:b0:41:be:7d:1e:c5:60:6b:f0:ef:0b:32: e0:20:1f:fc:3a:28:6b:39:b2:6b:d2:47:71:e6:d5:9c:a5:4d: 8b:4a:65:c3:f9:76:78:1f:f0:2e:4f:38:8c:79:cd:97:e3:27: 2c:bc:17:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfKJ0mzQQWe3RAJ4hhjp12KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYTI1YWFmZTNhOTg3MGU5NTI0YWZhMDI2NTk4N2VkNWE1 YTRkYTMwHhcNMjUwNzAyMDgwMTAxWhcNMjUwNzAzMDgwMTAxWjAzMTEwLwYDVQQD EygyMGI5OWEwODM3MTIxZjVkOGNhNDJjOWUzY2Q1Y2Q3MGZhMDU4YzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJHMRpC34n3H49e+1dUNXBSXDatA bAqYT9Bf5mPZZYRMofMFp+95p1o+SjdkDrYwA25nHp1usyH3NEXhHYbVuH7Gv/ow 3bWJ6QYUYY1diUH1Ra8RM7WtfKId7MhooAx32X4JhK1UUyvXEtzmJIYvDdlinEwd /07AZAaCifyOHfF2Qq1bF0ibDhmsnkdgom1xxiztIVF1Npeq4WlQnRlfwggl1tVj Pli2Mz5WcZj3InSFIEw3rO1WGvRpTwJ4SnBORJWnzuw/Ml0nU9+yvGw7eLihTj1V LankgLsBEEP9/KRt0+7MBCtol00w+DPtx9gm3p4gLF0ITEl7wnuoDkWNVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCC5mgg3Eh9djKQsnjzVzXD6BYx7MB8GA1UdIwQY MBaAFK2iWq/jqYcOlSSvoCZZh+1aWk2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUt OWQ1ODc1ZDg2MzczLzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUtOWQ1ODc1ZDg2Mzcz LzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoX1zgb7 3Hs5EWCC50ABq4LmCsZwCx4gIg86/LUJ96DJ8vmWpI5vsLeWOfrT+ZkEX02b3RDx 1rxWhgFlw3x65hJ4dChC3UwKUw+g/B3lvWXKuh49ekCIFeMKA8tCwBStif/JDF/D /P/jesQLrwpcAy3tZY/RkK6pP5kRiLD1X5PJIUxsiXOd1gYoOmQBIegNaMZMV9sS 9ZzelbFfcRgdnwEs65d5N3cZmoJpy+QWjAEkd6ZC1ZZWgObDf6lee7rSwx2IZIU7 UW9Cv4XBsEG+fR7FYGvw7wsy4CAf/Dooazmya9JHcebVnKVNi0plw/l2eB/wLk84 jHnNl+MnLLwXMQ== -----END CERTIFICATE-----Generated at Wed Jul 2 15:45:10 2025 by rpki-client