$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft File: JxlBKRimYn-ZzOVcesoTkFe4V04.mft (raw, json) Hash identifier: ziSp+tQM1hNJRnNkz02BE5iHQfQJsraj0490OoiSHYk= Subject key identifier: C7:01:5E:91:43:D6:04:AC:21:15:84:76:6A:FE:75:8D:AE:F1:84:4F Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e Certificate serial: 0199FDD94B1845A56B2BB5BCD043B0ADB529 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft Manifest number: 0A33 Signing time: Sun 19 Oct 2025 19:01:40 +0000 Manifest this update: Sun 19 Oct 2025 19:01:40 +0000 Manifest next update: Mon 20 Oct 2025 19:01:40 +0000 Files and hashes: 1: 0egOCEDjjfjwdPmizCh3Cu6NbrQ.roa (hash: RjxfFq3fmsFbepGKowirBDzmyu+RZ3fSC5NUINYgMYU=) 2: 7W85Tt0gwzhkJWxBWSICyLMHvBg.roa (hash: JppPMnJbiXzbpD/Pc6qWhNpXFo8/+nx6fCwzyRamuQY=) 3: 8-PSvB9rLper4H4Z6i2q7Nh0gdw.roa (hash: 2qr0DY7SshfmBWBMPElwvi/+AJH/67rJ01N4KKU7q1A=) 4: BRryBhcZ86QRcNyyWRQXIrGL940.roa (hash: TpVPlst5x/81i653yEbzbStWflfy2GReIp1Tn60B8L0=) 5: C2IF6LAMNn3fJJb2qYaEnTh4WI4.roa (hash: KoYq60161i4xpC6NqHZA/Q8w9Njte/PcskDc5lUbshM=) 6: EJQRhvTA9imPwclwVgQbFkh0JFE.roa (hash: wCSwu07TXrbn08zc7CmiqRRyHHovVOMjCdUBle99/a8=) 7: JxlBKRimYn-ZzOVcesoTkFe4V04.crl (hash: cHB8fDss4aYfvuvvY8RynzqBvHPKKNTj2Sa6ygXL0DU=) 8: XP9c9FnVM83t2BcVhUGYjki34JA.roa (hash: 9MjxmhRyp3W6rmd2o7KozYAfmVW00slDjc1CHV4YtKA=) 9: ZvwtxuslzfQmqhln4NrT0EB6by0.roa (hash: /zi0GX6AY/hjXoyJfHeafiIns7K/28qT/TjfHjhKvFY=) 10: i6AMMlCBL4mI8fXSClWLBTgrr2w.roa (hash: ibC1icVFA9nVxcZkqXGl9glghEao/S766jYYimUgQ+I=) 11: noewYl5P0rkhAPD3Zn8s9bc2_qs.roa (hash: h2zqiA+vL/GF8rvskPe0YPXeCInpKFuXr/zZvqUEJgg=) 12: xdpBEJQBaSWnLzQMJf9F6VWUv60.roa (hash: rjp7KwUwTuEzo3eXkAycybNSdAwl1wu4fvs5dmuagvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:d9:4b:18:45:a5:6b:2b:b5:bc:d0:43:b0:ad:b5:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e Validity Not Before: Oct 19 19:01:40 2025 GMT Not After : Oct 20 19:01:40 2025 GMT Subject: CN=c7015e9143d604ac211584766afe758daef1844f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:43:4d:31:13:d2:6b:d6:69:42:87:75:da: af:86:3e:e8:0d:3a:8d:d6:6c:c1:02:96:ab:65:b5: 30:a7:c9:d1:c6:71:ef:12:9b:00:0c:4c:5f:70:29: a7:58:50:0d:a6:45:69:d6:5a:f8:ba:cc:b5:de:6e: 17:45:14:b3:a6:83:45:9d:a8:76:46:95:a1:e9:76: 5e:97:c6:ec:c7:4d:94:94:34:fc:b6:e5:23:c6:cb: e5:ad:f5:c2:bc:ab:f3:b2:ee:76:5b:2e:a8:ab:96: f0:e2:64:7e:6d:39:ba:37:9a:54:0a:5e:28:3c:e3: a8:23:d5:ea:ca:ba:39:b4:ee:3d:f5:1c:34:2f:9c: b9:08:d6:72:37:fb:6c:2e:3a:29:ce:d6:4b:ac:33: f9:51:24:5d:b5:ac:33:c8:5f:4f:9c:72:51:1e:51: 7e:35:ae:0f:b0:7f:6b:1c:65:6b:c7:48:e9:64:70: e1:b9:37:14:4b:f1:87:2b:25:ab:33:db:b3:b7:f4: 37:e3:01:25:41:78:c2:30:88:81:f5:9d:d9:57:e8: 62:14:99:e6:c6:53:80:b7:39:cd:76:e7:2a:0b:75: 16:7c:88:99:d5:f1:0b:8f:ec:66:c0:63:63:85:a0: 39:2a:17:af:b5:a1:75:60:37:fd:91:7a:b7:d4:38: 56:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:01:5E:91:43:D6:04:AC:21:15:84:76:6A:FE:75:8D:AE:F1:84:4F X509v3 Authority Key Identifier: keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:83:d2:14:72:c0:60:6e:95:39:d9:95:ef:92:db:e1:98:90: 79:f3:83:58:22:e3:4c:e4:61:ef:c6:11:d0:d9:3b:84:38:0f: d3:16:29:2b:de:10:fe:d9:67:ac:b7:b1:3a:2d:80:b6:35:8a: a3:71:1a:85:a7:9b:c7:2f:f8:a3:42:a2:77:3f:c8:71:ec:ad: 83:4d:e1:64:26:73:bc:5e:04:94:24:55:7d:f6:7c:f4:af:94: 93:28:e3:39:81:fa:2e:48:e6:51:4c:e5:7a:c6:68:ba:77:7b: 63:4b:c7:2f:b5:1f:16:7f:1c:ce:b7:c4:d3:a7:6e:9a:67:d5: 92:16:c1:41:0f:df:ff:30:ad:e0:38:60:17:ce:cd:be:fb:4e: 81:d0:48:38:54:7a:25:a6:a6:1c:3c:17:2b:40:33:95:db:e0: ab:4f:9b:18:17:43:54:0e:81:93:2b:4a:80:90:90:f8:90:65: 74:ee:9a:43:e2:22:1e:b8:f7:66:96:23:ab:2c:b0:c6:bd:ea: ef:01:cb:5a:b1:a3:78:f0:7a:3c:33:ae:a1:e5:7f:51:c7:f9: 9f:de:7a:27:65:85:48:39:74:01:15:6e:3b:ad:1f:38:a5:3b: 37:b9:13:b9:4d:c4:e0:3e:b0:36:07:d0:15:7a:f8:93:72:1f: 3e:59:9f:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn92UsYRaVrK7W80EOwrbUpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MTk0MTI5MThhNjYyN2Y5OWNjZTU1YzdhY2ExMzkwNTdi ODU3NGUwHhcNMjUxMDE5MTkwMTQwWhcNMjUxMDIwMTkwMTQwWjAzMTEwLwYDVQQD EyhjNzAxNWU5MTQzZDYwNGFjMjExNTg0NzY2YWZlNzU4ZGFlZjE4NDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzhDTTET0mvWaUKHddqvhj7oDTqN 1mzBAparZbUwp8nRxnHvEpsADExfcCmnWFANpkVp1lr4usy13m4XRRSzpoNFnah2 RpWh6XZel8bsx02UlDT8tuUjxsvlrfXCvKvzsu52Wy6oq5bw4mR+bTm6N5pUCl4o POOoI9Xqyro5tO499Rw0L5y5CNZyN/tsLjopztZLrDP5USRdtawzyF9PnHJRHlF+ Na4PsH9rHGVrx0jpZHDhuTcUS/GHKyWrM9uzt/Q34wElQXjCMIiB9Z3ZV+hiFJnm xlOAtznNducqC3UWfIiZ1fELj+xmwGNjhaA5KhevtaF1YDf9kXq31DhWCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcBXpFD1gSsIRWEdmr+dY2u8YRPMB8GA1UdIwQY MBaAFCcZQSkYpmJ/mczlXHrKE5BXuFdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYt NGUyMjM5MTdiODYwLzEvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYtNGUyMjM5MTdiODYw LzEvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAroPSFHLA YG6VOdmV75Lb4ZiQefODWCLjTORh78YR0Nk7hDgP0xYpK94Q/tlnrLexOi2AtjWK o3Eahaebxy/4o0Kidz/Iceytg03hZCZzvF4ElCRVffZ89K+UkyjjOYH6LkjmUUzl esZound7Y0vHL7UfFn8czrfE06dummfVkhbBQQ/f/zCt4DhgF87NvvtOgdBIOFR6 JaamHDwXK0Azldvgq0+bGBdDVA6BkytKgJCQ+JBldO6aQ+IiHrj3ZpYjqyywxr3q 7wHLWrGjePB6PDOuoeV/Ucf5n956J2WFSDl0ARVuO60fOKU7N7kTuU3E4D6wNgfQ FXr4k3IfPlmfhw== -----END CERTIFICATE-----Generated at Mon Oct 20 00:09:10 2025 by rpki-client