$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft File: JxlBKRimYn-ZzOVcesoTkFe4V04.mft (raw, json) Hash identifier: qNXTt0bV8qV4wcfgv67NdhWiXOFdF2clwqRc7pzTqAQ= Subject key identifier: 43:1B:80:8F:FB:90:B3:85:E0:7E:BE:8F:CD:DA:40:3D:DE:82:6C:0F Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e Certificate serial: 0197B88FE8DC3B494EE58F49E0E86BDCD36E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft Manifest number: 08FF Signing time: Sat 28 Jun 2025 22:02:08 +0000 Manifest this update: Sat 28 Jun 2025 22:02:08 +0000 Manifest next update: Sun 29 Jun 2025 22:02:08 +0000 Files and hashes: 1: 0egOCEDjjfjwdPmizCh3Cu6NbrQ.roa (hash: RjxfFq3fmsFbepGKowirBDzmyu+RZ3fSC5NUINYgMYU=) 2: 35WlNYoicXeTaUW3mWXsagVOnPc.roa (hash: vhlE4c9NYewGiei7QNQOzx0MpfEcyu07VzFHTp1o4sI=) 3: 8-PSvB9rLper4H4Z6i2q7Nh0gdw.roa (hash: 2qr0DY7SshfmBWBMPElwvi/+AJH/67rJ01N4KKU7q1A=) 4: BRryBhcZ86QRcNyyWRQXIrGL940.roa (hash: TpVPlst5x/81i653yEbzbStWflfy2GReIp1Tn60B8L0=) 5: C2IF6LAMNn3fJJb2qYaEnTh4WI4.roa (hash: KoYq60161i4xpC6NqHZA/Q8w9Njte/PcskDc5lUbshM=) 6: JxlBKRimYn-ZzOVcesoTkFe4V04.crl (hash: dONsnvgkT9ZQtzCv5mC3889WP496kPj+nlBPkSq6Zp0=) 7: Ntn0KC9hNBdEOU4APTAFvwKoJWM.roa (hash: Nm8YrLspYKdECPfNk4gMXsfWH7pa2i2J/txkaQvcJKs=) 8: UAFcUuKvgonvhSs4MdOglxDeP9A.roa (hash: cBXXRFGKUV+6kMfUTrzWb6w7ZuBP1z44qOPAvbDDmRo=) 9: XP9c9FnVM83t2BcVhUGYjki34JA.roa (hash: 9MjxmhRyp3W6rmd2o7KozYAfmVW00slDjc1CHV4YtKA=) 10: gxK89RXnzcMvFdlQ7jq2DEQi6CM.roa (hash: DiuewJZ1D8bxat1ZErkK+d8ROeDyP8jPaLLb/UJ0bkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 22:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:8f:e8:dc:3b:49:4e:e5:8f:49:e0:e8:6b:dc:d3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e Validity Not Before: Jun 28 22:02:08 2025 GMT Not After : Jun 29 22:02:08 2025 GMT Subject: CN=431b808ffb90b385e07ebe8fcdda403dde826c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:67:51:5a:19:11:29:79:a0:c9:67:bd:6d:e2: fb:00:66:92:f2:2f:d2:26:54:2f:1a:b0:ad:d7:3d: 61:72:99:f0:72:23:25:57:86:1b:3b:e4:62:23:3f: 17:31:67:92:68:f2:b6:23:a9:93:64:3e:13:87:b5: 0b:76:93:28:c8:cf:6c:af:4d:e2:4c:76:c3:8e:a7: b4:31:d1:5c:40:74:26:a9:79:08:0d:23:b5:86:5f: 41:75:5c:23:a4:87:a6:4c:2e:3d:62:fe:32:e8:dc: c3:e6:fe:f3:92:9c:4f:86:73:38:a6:b4:83:20:b5: 37:95:2e:f9:a8:78:1e:c3:15:b8:3e:71:66:bf:cb: 10:0d:53:13:a0:3b:2c:b8:ba:1e:83:57:c0:2b:1b: 22:f4:b6:ff:62:05:a6:15:b6:31:e4:0c:07:da:59: b1:84:ea:d6:74:2e:76:03:c2:01:c4:dc:9f:bf:80: b1:46:e0:ee:ad:95:99:51:43:f1:74:e4:d8:57:d7: 8f:c9:01:b1:df:67:53:b8:5d:99:c3:60:84:7e:ef: 26:0d:fd:ae:ba:a3:d0:85:56:c1:72:56:a7:bb:b3: 8e:c4:12:47:fb:07:49:c8:6f:03:61:42:65:aa:e4: 38:43:da:4b:81:7b:cc:2f:06:77:de:dc:af:81:c2: 93:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1B:80:8F:FB:90:B3:85:E0:7E:BE:8F:CD:DA:40:3D:DE:82:6C:0F X509v3 Authority Key Identifier: keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a2:b9:74:67:6f:b6:b0:59:19:8d:47:06:67:10:58:0b:2a: e0:09:2a:bf:b2:f9:17:22:af:57:3a:dc:5c:fe:86:eb:f1:1f: 05:b8:47:77:eb:d3:c4:ef:6b:32:7e:b2:bf:1b:6d:91:28:3e: a6:ac:40:6e:a6:6c:0b:72:16:a2:28:70:e1:d2:7a:b8:22:ff: 42:b7:92:9e:31:a5:72:78:bb:02:30:d9:e7:8c:d6:b5:8a:00: ad:ef:20:53:b6:87:3e:3f:de:b7:27:49:87:40:19:88:bf:09: 3e:56:9b:8d:05:b4:15:64:7a:ce:88:e3:b9:64:04:92:6f:c9: be:75:79:e9:a9:15:9b:87:d6:ce:79:34:ee:21:a0:f9:f9:64: d3:07:5e:00:94:04:f1:07:50:ed:cd:03:89:04:89:8c:c0:85: ae:f6:73:33:a0:1c:52:16:f4:cc:67:98:31:c9:f7:1b:9a:4c: b7:20:b7:ec:42:f2:e9:86:e0:b9:70:5a:54:16:ce:0d:39:48: 3f:ac:dc:e1:a5:23:09:d4:85:63:a9:83:10:07:cb:5f:87:e3: 4d:eb:88:26:14:5e:36:d6:bd:8f:06:b5:80:9f:3e:0f:a2:f1: 63:8e:19:32:e0:bf:94:ea:f1:a3:20:f7:de:46:76:7c:33:50: 0d:e1:fc:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4j+jcO0lO5Y9J4Ohr3NNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MTk0MTI5MThhNjYyN2Y5OWNjZTU1YzdhY2ExMzkwNTdi ODU3NGUwHhcNMjUwNjI4MjIwMjA4WhcNMjUwNjI5MjIwMjA4WjAzMTEwLwYDVQQD Eyg0MzFiODA4ZmZiOTBiMzg1ZTA3ZWJlOGZjZGRhNDAzZGRlODI2YzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGdRWhkRKXmgyWe9beL7AGaS8i/S JlQvGrCt1z1hcpnwciMlV4YbO+RiIz8XMWeSaPK2I6mTZD4Th7ULdpMoyM9sr03i THbDjqe0MdFcQHQmqXkIDSO1hl9BdVwjpIemTC49Yv4y6NzD5v7zkpxPhnM4prSD ILU3lS75qHgewxW4PnFmv8sQDVMToDssuLoeg1fAKxsi9Lb/YgWmFbYx5AwH2lmx hOrWdC52A8IBxNyfv4CxRuDurZWZUUPxdOTYV9ePyQGx32dTuF2Zw2CEfu8mDf2u uqPQhVbBclanu7OOxBJH+wdJyG8DYUJlquQ4Q9pLgXvMLwZ33tyvgcKTewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMbgI/7kLOF4H6+j83aQD3egmwPMB8GA1UdIwQY MBaAFCcZQSkYpmJ/mczlXHrKE5BXuFdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYt NGUyMjM5MTdiODYwLzEvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYtNGUyMjM5MTdiODYw LzEvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaK5dGdv trBZGY1HBmcQWAsq4Akqv7L5FyKvVzrcXP6G6/EfBbhHd+vTxO9rMn6yvxttkSg+ pqxAbqZsC3IWoihw4dJ6uCL/QreSnjGlcni7AjDZ54zWtYoAre8gU7aHPj/etydJ h0AZiL8JPlabjQW0FWR6zojjuWQEkm/JvnV56akVm4fWznk07iGg+flk0wdeAJQE 8QdQ7c0DiQSJjMCFrvZzM6AcUhb0zGeYMcn3G5pMtyC37ELy6YbguXBaVBbODTlI P6zc4aUjCdSFY6mDEAfLX4fjTeuIJhReNta9jwa1gJ8+D6LxY44ZMuC/lOrxoyD3 3kZ2fDNQDeH89A== -----END CERTIFICATE-----Generated at Sun Jun 29 06:29:28 2025 by rpki-client