$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft File: JxlBKRimYn-ZzOVcesoTkFe4V04.mft (raw, json) Hash identifier: immN5To5tzWzI+a4u3tEh7KrvIbnLsJA6GgJiyvTFe8= Subject key identifier: 67:81:97:69:60:F4:D9:FB:CA:27:C6:26:64:60:B7:1A:05:0C:A8:D3 Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e Certificate serial: 0199FFC849AED7904D3ED7161492BD0B888D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft Manifest number: 0A34 Signing time: Mon 20 Oct 2025 04:02:20 +0000 Manifest this update: Mon 20 Oct 2025 04:02:20 +0000 Manifest next update: Tue 21 Oct 2025 04:02:20 +0000 Files and hashes: 1: 0egOCEDjjfjwdPmizCh3Cu6NbrQ.roa (hash: RjxfFq3fmsFbepGKowirBDzmyu+RZ3fSC5NUINYgMYU=) 2: 7W85Tt0gwzhkJWxBWSICyLMHvBg.roa (hash: JppPMnJbiXzbpD/Pc6qWhNpXFo8/+nx6fCwzyRamuQY=) 3: 8-PSvB9rLper4H4Z6i2q7Nh0gdw.roa (hash: 2qr0DY7SshfmBWBMPElwvi/+AJH/67rJ01N4KKU7q1A=) 4: BRryBhcZ86QRcNyyWRQXIrGL940.roa (hash: TpVPlst5x/81i653yEbzbStWflfy2GReIp1Tn60B8L0=) 5: C2IF6LAMNn3fJJb2qYaEnTh4WI4.roa (hash: KoYq60161i4xpC6NqHZA/Q8w9Njte/PcskDc5lUbshM=) 6: EJQRhvTA9imPwclwVgQbFkh0JFE.roa (hash: wCSwu07TXrbn08zc7CmiqRRyHHovVOMjCdUBle99/a8=) 7: JxlBKRimYn-ZzOVcesoTkFe4V04.crl (hash: ktnY0Sk0YQPyGA2Bco+HFgQknBoCwD740Any0PEIYLM=) 8: XP9c9FnVM83t2BcVhUGYjki34JA.roa (hash: 9MjxmhRyp3W6rmd2o7KozYAfmVW00slDjc1CHV4YtKA=) 9: ZvwtxuslzfQmqhln4NrT0EB6by0.roa (hash: /zi0GX6AY/hjXoyJfHeafiIns7K/28qT/TjfHjhKvFY=) 10: i6AMMlCBL4mI8fXSClWLBTgrr2w.roa (hash: ibC1icVFA9nVxcZkqXGl9glghEao/S766jYYimUgQ+I=) 11: noewYl5P0rkhAPD3Zn8s9bc2_qs.roa (hash: h2zqiA+vL/GF8rvskPe0YPXeCInpKFuXr/zZvqUEJgg=) 12: xdpBEJQBaSWnLzQMJf9F6VWUv60.roa (hash: rjp7KwUwTuEzo3eXkAycybNSdAwl1wu4fvs5dmuagvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:c8:49:ae:d7:90:4d:3e:d7:16:14:92:bd:0b:88:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e Validity Not Before: Oct 20 04:02:20 2025 GMT Not After : Oct 21 04:02:20 2025 GMT Subject: CN=6781976960f4d9fbca27c6266460b71a050ca8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:88:86:25:a5:38:f6:10:50:a2:2d:ae:08:f3: 12:30:fb:1a:98:f6:d7:b9:c9:99:24:c3:27:ee:8e: ff:44:ac:2b:18:86:c8:ec:94:d5:74:59:64:5d:71: a9:5e:4a:68:da:c8:38:e0:71:bb:a8:73:d6:02:07: af:a6:ad:9a:0a:b6:6c:12:96:89:48:00:ab:1c:43: 93:69:89:cd:d2:cd:9a:36:e8:0e:0e:2d:30:e9:15: 89:25:2c:f6:90:89:b8:0f:5a:62:0a:bc:eb:f6:85: d0:09:23:7f:8b:17:3b:76:c6:d0:02:dd:81:57:ba: 05:60:fe:f6:b8:92:3b:d0:c6:94:c6:14:d8:fb:7b: f6:25:b1:e8:e7:ad:16:50:31:72:c0:97:fb:69:0b: ca:77:8e:37:a0:c6:0e:a8:6b:77:cb:ab:03:3f:01: 4a:16:2c:95:5f:93:d3:c8:be:e3:6a:c8:6c:7d:39: 0e:f2:13:c4:a6:84:83:ef:8a:52:77:d9:09:c8:44: 7e:29:df:67:9d:36:49:99:5d:0b:84:09:00:c4:4f: 6d:4a:70:0d:f0:c0:8c:43:7e:95:81:92:e9:94:8c: e5:21:ad:3f:14:e4:7b:ec:2e:bf:fa:4d:55:cd:b7: 12:bd:74:a6:63:65:44:e1:4b:eb:4c:5b:0b:61:4b: b5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:81:97:69:60:F4:D9:FB:CA:27:C6:26:64:60:B7:1A:05:0C:A8:D3 X509v3 Authority Key Identifier: keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:c4:10:a9:be:74:02:8f:ee:62:ed:fe:f4:62:d0:9d:fc:9d: d0:32:2d:50:fa:83:e7:66:82:85:0a:0a:73:6b:c2:1c:8e:bc: f5:1d:92:c6:21:f9:95:af:f4:06:ca:d3:8a:09:4b:b0:62:e3: 85:47:12:4a:f7:61:9d:ab:43:1a:ee:ec:d7:a2:6f:55:cc:59: cd:9e:8f:06:63:48:cf:ce:64:30:97:e5:32:92:68:b4:2f:3f: 76:b4:10:44:c8:3b:54:49:40:be:80:6d:02:c7:fa:30:4d:8e: 08:2e:c8:cf:3c:dd:e1:07:d9:2d:2a:7e:13:17:18:67:db:6f: 4f:98:8d:a3:f0:48:25:14:ba:e9:3c:92:cb:50:24:2d:75:0d: 90:de:08:dc:bd:2c:f2:97:40:52:98:56:7f:8a:d7:db:f4:59: 17:b7:96:e4:94:fa:c8:71:8c:e7:94:b2:f3:a2:9d:fa:3d:fd: 13:1a:7a:df:50:15:2c:42:5b:e7:2c:cd:c8:ae:aa:5b:6a:c0: 74:91:ae:58:cf:37:56:00:a5:77:0c:51:00:5f:fb:b4:c8:4c: dd:63:1a:84:82:33:6f:75:b8:cb:07:7e:a8:fc:a5:09:81:02: 8d:8e:76:29:3f:1e:39:a1:16:44:d7:eb:81:4b:7d:34:c5:67: 54:9a:e7:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn/yEmu15BNPtcWFJK9C4iNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MTk0MTI5MThhNjYyN2Y5OWNjZTU1YzdhY2ExMzkwNTdi ODU3NGUwHhcNMjUxMDIwMDQwMjIwWhcNMjUxMDIxMDQwMjIwWjAzMTEwLwYDVQQD Eyg2NzgxOTc2OTYwZjRkOWZiY2EyN2M2MjY2NDYwYjcxYTA1MGNhOGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYiGJaU49hBQoi2uCPMSMPsamPbX ucmZJMMn7o7/RKwrGIbI7JTVdFlkXXGpXkpo2sg44HG7qHPWAgevpq2aCrZsEpaJ SACrHEOTaYnN0s2aNugODi0w6RWJJSz2kIm4D1piCrzr9oXQCSN/ixc7dsbQAt2B V7oFYP72uJI70MaUxhTY+3v2JbHo560WUDFywJf7aQvKd443oMYOqGt3y6sDPwFK FiyVX5PTyL7jashsfTkO8hPEpoSD74pSd9kJyER+Kd9nnTZJmV0LhAkAxE9tSnAN 8MCMQ36VgZLplIzlIa0/FOR77C6/+k1VzbcSvXSmY2VE4UvrTFsLYUu1JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeBl2lg9Nn7yifGJmRgtxoFDKjTMB8GA1UdIwQY MBaAFCcZQSkYpmJ/mczlXHrKE5BXuFdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYt NGUyMjM5MTdiODYwLzEvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYtNGUyMjM5MTdiODYw LzEvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8QQqb50 Ao/uYu3+9GLQnfyd0DItUPqD52aChQoKc2vCHI689R2SxiH5la/0BsrTiglLsGLj hUcSSvdhnatDGu7s16JvVcxZzZ6PBmNIz85kMJflMpJotC8/drQQRMg7VElAvoBt Asf6ME2OCC7Izzzd4QfZLSp+ExcYZ9tvT5iNo/BIJRS66TySy1AkLXUNkN4I3L0s 8pdAUphWf4rX2/RZF7eW5JT6yHGM55Sy86Kd+j39Exp631AVLEJb5yzNyK6qW2rA dJGuWM83VgCldwxRAF/7tMhM3WMahIIzb3W4ywd+qPylCYECjY52KT8eOaEWRNfr gUt9NMVnVJrnrA== -----END CERTIFICATE-----Generated at Mon Oct 20 08:47:11 2025 by rpki-client