$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json) Hash identifier: jpR2gkJIQ2gBA/qCVukG4Z1W9zok7HVbz9re9Df7e7I= Subject key identifier: D7:8E:22:F8:CF:04:DA:6D:E7:F3:EE:1E:C1:44:17:B8:74:91:36:87 Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 0199FC8F6744C3C43AA3FA44C78E62BBA4B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft Manifest number: 12D8 Signing time: Sun 19 Oct 2025 13:01:20 +0000 Manifest this update: Sun 19 Oct 2025 13:01:20 +0000 Manifest next update: Mon 20 Oct 2025 13:01:20 +0000 Files and hashes: 1: 3_HM3LXI2dI7yCUkbwsS0LVmtPQ.roa (hash: dlvoBhBeGam9xbjGOiUpXKoso+XH3qNTVfnBCvdbd3Q=) 2: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: ONjEW8S5tLYcyGNcf+mIjJILI3u13TnVk9Hw26Uw+jw=) 3: E_7EA8UJkxlGETtzRt_qHmFJYsI.roa (hash: 407g7UlI6CqSY6AOA+kHrysQofaOwh0+lRwTxsDvEPM=) 4: EgzHUocwnSDaTR0mcH1N2AahbPA.roa (hash: qnns/hwFAonNH2cGnXK7MoaWY9Y+ZF5REF6qTFex00M=) 5: LBBRl1_5PTCAndMsefaH2qIgsWI.roa (hash: P4yu/hSYw0dip59FJgO1wKqB51hJxMddEa7BdAJON18=) 6: SFJQLYtyuvLa-Z-_p6GETmClzzQ.roa (hash: TpY/D4v+35T3Gg8FMD0C6YxKf8fx/yuDpF1EWp6QNws=) 7: SW2UHW6XXrCRSFkNV0CVmfSilT8.roa (hash: OU29d/hqTbWW7Cob/3TqpwPxH+8rWvDwLVXV+Khg58o=) 8: gLpL93_717seB53wtn-PIYRSJpQ.roa (hash: BEBryS8Pk5M96RkjmV9ApUKiEfxXTgBuMMQoR0rPtvE=) 9: lLTt27CvKVrZ46MtIxZb-bD0JJg.roa (hash: r41CVNzvdr3xjDNcNmmOPnidy7vQT3DjIW3YSNMbicI=) 10: sl5VJ3i7CbF6mq-XTH5pxWMmK5o.roa (hash: 4bfJxuYHYnVskQrhNVV+ZwN1afVTdgzyH0yWLAaqMRM=) 11: ve4kS1FSpKOZDfPOmvEJot6T9gc.roa (hash: /8G7vYP5BGzfa/caGIr/zNwzv8N1oQfYQzWhKIYfL+g=) 12: yiW-kmeX6T3jx-yL7EZZYoVvwps.roa (hash: QstF1sZuORe/6EM2aW5TGBrHuj8rjUHPJQAAamVQG0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:67:44:c3:c4:3a:a3:fa:44:c7:8e:62:bb:a4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Oct 19 13:01:20 2025 GMT Not After : Oct 20 13:01:20 2025 GMT Subject: CN=d78e22f8cf04da6de7f3ee1ec14417b874913687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:6e:4a:e7:82:4b:0a:dc:f8:92:36:78:f7: 10:89:af:15:b9:9f:05:91:9e:d0:c3:50:b9:f6:36: f6:02:b3:2e:40:0e:bb:97:3d:de:ec:45:31:2f:04: 4f:03:44:9c:c8:36:05:8d:3e:45:7e:1c:a5:84:21: 2d:e3:13:1a:b4:0e:49:40:99:58:64:e8:e8:a7:6f: d4:74:de:eb:e4:82:88:f1:89:d4:26:12:4e:4f:7e: 6b:8b:e4:73:e3:bc:62:90:b6:b2:76:bf:43:16:2d: d7:53:22:16:ee:d0:14:93:59:1a:10:7c:6c:e1:b4: f6:43:b0:a9:d9:45:e9:9e:ba:4f:c2:3a:6b:5f:9f: 9a:88:20:42:90:05:76:f0:b6:78:54:ad:44:c5:4d: 3d:29:03:f2:fb:2f:9f:fb:6d:f0:da:1f:d1:87:a4: 4e:52:07:bf:9b:6e:8e:af:55:2e:fb:d1:52:8d:3c: c0:95:a5:e4:46:59:fe:b5:55:c6:75:24:c0:ce:8c: f6:3a:2d:3c:d5:49:ef:63:fe:42:65:15:26:78:47: 3a:52:c2:45:51:9c:7c:d8:37:1a:83:fa:9a:72:c7: 26:62:1c:36:af:76:79:87:e9:d8:32:2d:e9:5b:b6: 5c:f6:79:59:cb:a9:32:8b:5d:18:b0:75:1d:9f:68: d6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8E:22:F8:CF:04:DA:6D:E7:F3:EE:1E:C1:44:17:B8:74:91:36:87 X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:85:64:cf:84:71:34:a2:33:5c:72:20:0d:c2:61:86:84:b2: ae:e0:1d:65:f4:66:8a:d4:12:bb:63:63:ed:45:9c:ce:d1:6e: 95:a3:2f:2b:f1:58:3e:22:a5:8f:00:60:7d:06:d4:6b:67:b1: 05:23:d5:a0:04:67:ca:4f:56:59:c8:b5:df:50:28:d6:3f:70: cb:45:d7:63:53:05:f4:fc:f3:d7:0e:f3:83:6c:38:31:28:8a: c8:bd:a4:1b:e6:ab:d0:59:56:6f:53:fc:fe:a8:9f:82:67:05: ec:ff:c5:2a:07:c9:de:66:2c:51:3c:f7:4d:89:86:fe:95:5a: 4b:1e:b0:8d:aa:74:e0:ec:3c:63:2e:e4:2c:3c:f3:f5:05:e2: 37:bf:08:a9:6c:56:01:a5:5b:75:4d:b9:24:d7:45:35:21:9a: 9e:c0:a3:62:b4:aa:8c:91:a4:f9:c9:3b:bc:b9:2a:a7:ff:c4: e9:28:a8:a2:40:73:0c:b9:51:80:c0:69:94:f1:64:63:a7:ba: 12:d1:36:fd:a9:8f:d5:c6:41:22:00:75:a2:af:f2:dd:87:66: ba:61:78:57:8f:3f:f3:20:82:4c:23:b4:ae:d2:4f:c6:ab:1f: f8:3a:26:08:f0:bd:a1:0d:5c:75:23:de:17:d9:e8:65:e6:92: 1d:62:d6:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j2dEw8Q6o/pEx45iu6S2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjUxMDE5MTMwMTIwWhcNMjUxMDIwMTMwMTIwWjAzMTEwLwYDVQQD EyhkNzhlMjJmOGNmMDRkYTZkZTdmM2VlMWVjMTQ0MTdiODc0OTEzNjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBZuSueCSwrc+JI2ePcQia8VuZ8F kZ7Qw1C59jb2ArMuQA67lz3e7EUxLwRPA0ScyDYFjT5FfhylhCEt4xMatA5JQJlY ZOjop2/UdN7r5IKI8YnUJhJOT35ri+Rz47xikLaydr9DFi3XUyIW7tAUk1kaEHxs 4bT2Q7Cp2UXpnrpPwjprX5+aiCBCkAV28LZ4VK1ExU09KQPy+y+f+23w2h/Rh6RO Uge/m26Or1Uu+9FSjTzAlaXkRln+tVXGdSTAzoz2Oi081UnvY/5CZRUmeEc6UsJF UZx82Dcag/qacscmYhw2r3Z5h+nYMi3pW7Zc9nlZy6kyi10YsHUdn2jW2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeOIvjPBNpt5/PuHsFEF7h0kTaHMB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoVkz4Rx NKIzXHIgDcJhhoSyruAdZfRmitQSu2Nj7UWcztFulaMvK/FYPiKljwBgfQbUa2ex BSPVoARnyk9WWci131Ao1j9wy0XXY1MF9Pzz1w7zg2w4MSiKyL2kG+ar0FlWb1P8 /qifgmcF7P/FKgfJ3mYsUTz3TYmG/pVaSx6wjap04Ow8Yy7kLDzz9QXiN78IqWxW AaVbdU25JNdFNSGansCjYrSqjJGk+ck7vLkqp//E6SiookBzDLlRgMBplPFkY6e6 EtE2/amP1cZBIgB1oq/y3YdmumF4V48/8yCCTCO0rtJPxqsf+DomCPC9oQ1cdSPe F9noZeaSHWLWRw== -----END CERTIFICATE-----Generated at Sun Oct 19 15:06:11 2025 by rpki-client