$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft File: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json) Hash identifier: DVD1ThOdqYH25xk+cxiLz8FVWXIMMq76FV66HA6b8Y8= Subject key identifier: 0C:7B:B3:13:F4:1D:70:26:F0:26:9B:50:07:18:F4:62:98:00:07:EC Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 019F9391E13901925B22F0BDE93AADF3EEF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft Manifest number: 1A06 Signing time: Fri 24 Jul 2026 10:00:38 +0000 Manifest this update: Fri 24 Jul 2026 10:00:38 +0000 Manifest next update: Sat 25 Jul 2026 10:00:38 +0000 Files and hashes: 1: 17xPyZlJEOUx5zEX8ZO8erx4H74.roa (hash: o78ZIjezoB+5hFnpSV2hhbyqsGtrTAReQHzLkPsSMs8=) 2: 1HSk7ol-NPF4p9rYRcl-Q6JPZDo.roa (hash: +FiTw/39WUh9LOAGYF5ppee39UlTfw1pjYmCcmzZE8I=) 3: 1wsMVCeL93UzN5b0Yvsk2yYuWLA.roa (hash: 99X69fNFzFuCPq29Xhv4yLun4KnsOh44dtaBCjapBbQ=) 4: 2RHKEFUbX-V0Mf6y31Iq5dGlemY.roa (hash: 22aNA0RqHM/lo1ZuXKI24lPSyNZYgt9FvnHMilKuHJY=) 5: 2q-y1nHjenu9twtcEVm8uPj-ddE.roa (hash: kKq4uoPjr9yzILuLqmWkg6QD55vf8pDPM+f+YLfRhpg=) 6: C58HKVenwwmbh1jkwoeqIUWdglo.roa (hash: dbM/VaOE1y6PqBg/KjdbXvgt9ovsuviuBnEC3nra0Jo=) 7: Ebg0ux5rcibv_t_FMLVeGO1p-6s.roa (hash: /4FrUXbz6Hz/uPMenmCysdLSPs/BOSlhWYQVSb8RAn0=) 8: GEKxvGic2KzXVJsj3dcok72CGco.roa (hash: aFBfIqFU6Ts846KW9SXo+ReP3IL9/U988JwYsIxQACw=) 9: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: FEQi9fqvap8ukoZZIDv67D5ZJxSi8opf53vJkJpN4ak=) 10: TN_g4sfmmPrHK_oZ30J7gNWtpIY.roa (hash: m5dgi6YlmiEMbhGuQK1tT2ie/bg//bcOLn6xqpAH6Zs=) 11: U_DCEtPw_hUMwrzj8r6wUIXBPig.roa (hash: zOV0/cSp312KHscfdmAUHtLOyMQW+m7fH0EzuAciKbU=) 12: WPjlp9q2_irNOFHbvH1KxHiPhtg.roa (hash: nGNubH07FwuuTBRkZu6sDa2SbPeua6Dt0ORJDlPOSMk=) 13: XN_p-sqTTpQdvZdqnomBwUtRNNM.roa (hash: HRB9t7n0E4cKuHQdIQOGsxZo9JNdxIwvrn+lUw1J63U=) 14: XVl9Jn76mWQ8ncaJ_wDuumCSFsA.roa (hash: Hs6XsuXHPXeVRFbGDUcPFLc6y5U4gwmlkZ/AR7/NeXE=) 15: js8xc1HEU1XUI0sBZfF0bl5Ntsc.roa (hash: AdO5qS0u+S/3mUbxDukdjf7Jfxyoy7D8xgFedRy81VA=) 16: k_MSpCKVnChWzSccoFJBjl40Vo8.roa (hash: VdSgjLWna9h9svrbMMSXJmkEe/+wqNq0RNqZ0DwPUZc=) 17: xyAifHL4yJafsXbZXrkrgodDKkI.roa (hash: 5dlJ/03oKMrYHI2ijFPlXqVyiklmxqeJzGBSWajGiKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:93:91:e1:39:01:92:5b:22:f0:bd:e9:3a:ad:f3:ee:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Jul 24 10:00:38 2026 GMT Not After : Jul 25 10:00:38 2026 GMT Subject: CN=0c7bb313f41d7026f0269b500718f462980007ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:85:13:64:8c:8f:6c:2e:e4:b2:4f:0e:dc:a8: 52:86:9e:39:88:05:6c:73:2c:5e:42:2e:8e:69:59: bd:ba:14:71:00:c5:74:4c:73:74:fc:de:db:81:2b: e2:bc:b4:07:f0:ec:a1:15:fa:c9:14:0a:34:e0:d3: 17:03:ce:75:a2:d4:86:4e:a1:f8:a3:4f:33:95:ac: b8:16:e9:53:13:1a:c2:04:76:2b:1d:bf:f3:1a:fe: 20:b5:a8:d5:ce:5a:ab:53:ac:04:6a:1d:51:28:67: 84:4e:57:99:93:24:cc:ec:2a:88:ba:04:2a:3c:d0: 07:62:f3:bc:7b:13:53:8f:a7:87:9e:1e:cd:d2:c4: 11:01:99:83:ff:a2:2e:b0:24:ed:b0:11:e6:93:b0: 70:a1:57:fa:6d:35:44:83:15:3e:44:71:e3:28:ef: cc:7b:07:21:ee:f9:e2:fc:1b:d8:dd:bd:c8:d6:de: 01:3c:b7:7b:d6:80:2d:80:d4:72:f7:b3:d0:30:f9: 97:b5:90:d0:29:47:4a:90:d9:e7:3a:0a:95:4a:46: e2:f1:4b:a8:a9:47:f1:38:16:7a:6e:c3:4e:71:13: 1f:ed:08:ef:e7:92:26:e0:d2:5e:6a:0a:5c:9c:ac: 2d:8d:83:5c:fc:31:3d:57:70:cd:30:f7:a2:28:4f: 02:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7B:B3:13:F4:1D:70:26:F0:26:9B:50:07:18:F4:62:98:00:07:EC X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:39:fd:ed:81:a6:1c:3d:f4:7c:a0:32:31:b7:ab:a8:22:ff: bd:38:dc:19:8e:18:d7:14:ab:73:93:e8:d0:f8:7c:ae:c2:86: b1:86:f4:c2:54:07:b0:c2:20:30:f5:4d:5e:eb:6a:2b:a3:88: 5d:f2:e1:b2:77:ba:74:11:3e:5c:74:ff:13:7a:b0:cf:a3:4c: c9:c0:31:c7:28:2e:96:73:f6:62:f0:e6:23:a7:ae:e3:cd:b7: 2e:36:fa:9b:8c:b0:6e:a4:8b:a4:ba:4e:fb:81:ff:d6:a1:4d: 19:ed:97:35:51:9b:88:ff:2c:75:c8:20:e1:8b:5f:48:68:06: b6:c0:67:80:22:47:98:ef:78:46:69:61:ee:96:7a:44:3b:cc: 34:aa:e9:8a:10:b2:e6:bd:7e:11:16:d9:fa:49:e4:f2:5b:d2: b9:cf:ce:88:04:c2:7a:5e:07:f3:60:4c:fe:59:5a:72:2f:4c: 83:ec:c8:0a:b8:55:c5:fe:94:78:df:bb:9d:6b:a4:68:eb:64: 2a:41:f3:50:3e:f0:a3:32:4f:ee:96:08:47:1d:9c:83:09:5a: af:91:2e:ab:f3:ca:d4:21:9c:ee:52:fa:1f:07:ff:c6:ef:fa: 40:58:5f:c2:52:69:cd:51:f5:fc:2f:6e:7b:9f:ab:f7:fc:19: 3e:e7:e5:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+TkeE5AZJbIvC96Tqt8+70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjYwNzI0MTAwMDM4WhcNMjYwNzI1MTAwMDM4WjAzMTEwLwYDVQQD EygwYzdiYjMxM2Y0MWQ3MDI2ZjAyNjliNTAwNzE4ZjQ2Mjk4MDAwN2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4UTZIyPbC7ksk8O3KhShp45iAVs cyxeQi6OaVm9uhRxAMV0THN0/N7bgSvivLQH8OyhFfrJFAo04NMXA851otSGTqH4 o08zlay4FulTExrCBHYrHb/zGv4gtajVzlqrU6wEah1RKGeETleZkyTM7CqIugQq PNAHYvO8exNTj6eHnh7N0sQRAZmD/6IusCTtsBHmk7BwoVf6bTVEgxU+RHHjKO/M ewch7vni/BvY3b3I1t4BPLd71oAtgNRy97PQMPmXtZDQKUdKkNnnOgqVSkbi8Uuo qUfxOBZ6bsNOcRMf7Qjv55Im4NJeagpcnKwtjYNc/DE9V3DNMPeiKE8CqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAx7sxP0HXAm8CabUAcY9GKYAAfsMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDn97YGm HD30fKAyMberqCL/vTjcGY4Y1xSrc5Po0Ph8rsKGsYb0wlQHsMIgMPVNXutqK6OI XfLhsne6dBE+XHT/E3qwz6NMycAxxygulnP2YvDmI6eu4823Ljb6m4ywbqSLpLpO +4H/1qFNGe2XNVGbiP8sdcgg4YtfSGgGtsBngCJHmO94Rmlh7pZ6RDvMNKrpihCy 5r1+ERbZ+knk8lvSuc/OiATCel4H82BM/llaci9Mg+zICrhVxf6UeN+7nWukaOtk KkHzUD7wozJP7pYIRx2cgwlar5Euq/PK1CGc7lL6Hwf/xu/6QFhfwlJpzVH1/C9u e5+r9/wZPuflPA== -----END CERTIFICATE-----Generated at Fri Jul 24 15:21:27 2026 by rpki-client