$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft File: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json) Hash identifier: frPnvWTWix/Vq2l7bpX545JFyBN+MGQye9+GCmmow40= Subject key identifier: 57:CE:45:88:89:EF:75:12:C1:97:AE:67:3A:91:D2:AF:BE:89:E4:E2 Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 01A12CC54F96B0F2236757B5122CFA604A5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft Manifest number: 1AE0 Signing time: Sun 11 Oct 2026 21:01:30 +0000 Manifest this update: Sun 11 Oct 2026 21:01:30 +0000 Manifest next update: Mon 12 Oct 2026 21:01:30 +0000 Files and hashes: 1: 17xPyZlJEOUx5zEX8ZO8erx4H74.roa (hash: o78ZIjezoB+5hFnpSV2hhbyqsGtrTAReQHzLkPsSMs8=) 2: 1HSk7ol-NPF4p9rYRcl-Q6JPZDo.roa (hash: +FiTw/39WUh9LOAGYF5ppee39UlTfw1pjYmCcmzZE8I=) 3: 1wsMVCeL93UzN5b0Yvsk2yYuWLA.roa (hash: 99X69fNFzFuCPq29Xhv4yLun4KnsOh44dtaBCjapBbQ=) 4: 2RHKEFUbX-V0Mf6y31Iq5dGlemY.roa (hash: 22aNA0RqHM/lo1ZuXKI24lPSyNZYgt9FvnHMilKuHJY=) 5: 2q-y1nHjenu9twtcEVm8uPj-ddE.roa (hash: kKq4uoPjr9yzILuLqmWkg6QD55vf8pDPM+f+YLfRhpg=) 6: C58HKVenwwmbh1jkwoeqIUWdglo.roa (hash: dbM/VaOE1y6PqBg/KjdbXvgt9ovsuviuBnEC3nra0Jo=) 7: Ebg0ux5rcibv_t_FMLVeGO1p-6s.roa (hash: /4FrUXbz6Hz/uPMenmCysdLSPs/BOSlhWYQVSb8RAn0=) 8: GEKxvGic2KzXVJsj3dcok72CGco.roa (hash: aFBfIqFU6Ts846KW9SXo+ReP3IL9/U988JwYsIxQACw=) 9: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: 4BVNgMEcotHJAXU0tE0ybgF72BlIALXbOHrajwufaso=) 10: TN_g4sfmmPrHK_oZ30J7gNWtpIY.roa (hash: m5dgi6YlmiEMbhGuQK1tT2ie/bg//bcOLn6xqpAH6Zs=) 11: U_DCEtPw_hUMwrzj8r6wUIXBPig.roa (hash: zOV0/cSp312KHscfdmAUHtLOyMQW+m7fH0EzuAciKbU=) 12: WPjlp9q2_irNOFHbvH1KxHiPhtg.roa (hash: nGNubH07FwuuTBRkZu6sDa2SbPeua6Dt0ORJDlPOSMk=) 13: XVl9Jn76mWQ8ncaJ_wDuumCSFsA.roa (hash: Hs6XsuXHPXeVRFbGDUcPFLc6y5U4gwmlkZ/AR7/NeXE=) 14: h-WKTlUMQLOqlyLFoGBOWfk4OrY.roa (hash: ieHJu/E+ae+fHEeWcEYzkuUUaqlobiXz9aHuLMbuIyg=) 15: hscVJa1zcFdyUccI8x5yH0qcNiw.roa (hash: uNP1bqmcK4itRcnCcHmI+yjjtNKZn/HDFyPe+Myxey8=) 16: js8xc1HEU1XUI0sBZfF0bl5Ntsc.roa (hash: AdO5qS0u+S/3mUbxDukdjf7Jfxyoy7D8xgFedRy81VA=) 17: k_MSpCKVnChWzSccoFJBjl40Vo8.roa (hash: VdSgjLWna9h9svrbMMSXJmkEe/+wqNq0RNqZ0DwPUZc=) 18: xyAifHL4yJafsXbZXrkrgodDKkI.roa (hash: 5dlJ/03oKMrYHI2ijFPlXqVyiklmxqeJzGBSWajGiKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:2c:c5:4f:96:b0:f2:23:67:57:b5:12:2c:fa:60:4a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Oct 11 21:01:30 2026 GMT Not After : Oct 12 21:01:30 2026 GMT Subject: CN=57ce458889ef7512c197ae673a91d2afbe89e4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f2:d4:25:b9:12:37:bc:e8:6f:da:51:9b:ff: bd:08:f7:5d:a5:44:ee:e0:d5:ba:8d:d2:dc:5f:69: f1:4c:df:34:eb:17:2e:1a:65:5d:82:49:a7:b0:bf: 01:ad:79:62:66:f2:53:93:54:7e:60:f3:ef:6a:b3: cf:43:bc:eb:d2:b9:5e:51:40:d7:fa:dc:e9:f3:3f: 5c:a7:bf:13:c7:26:b1:31:f8:8b:89:ad:66:f1:d2: 6d:40:f2:33:dd:1a:93:43:bf:1d:09:4b:ff:c7:fc: 87:ba:b3:35:fd:7d:cf:cd:24:9f:fb:2a:85:bd:e4: a0:84:4a:26:1d:13:18:be:97:d8:79:ac:3b:c6:6e: f9:be:37:54:56:b0:01:63:1d:38:f2:a1:80:56:f8: 91:e9:fd:36:87:4d:4b:83:d6:b9:17:75:cb:ce:88: f7:52:d3:6c:b4:00:92:f4:e1:09:91:74:6b:bc:d2: 93:f6:53:17:0f:8a:42:d2:d0:c5:ab:3e:48:1b:6e: e4:81:cc:e6:42:2f:58:e3:84:6e:ec:f0:91:b8:0f: 47:62:25:b0:41:97:1d:da:27:e2:50:0a:36:96:db: da:d4:4e:65:cd:87:5c:bb:8b:21:da:16:8e:fb:57: e4:9f:a0:02:6f:4d:11:27:fa:6c:93:f1:d1:67:ef: 5b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CE:45:88:89:EF:75:12:C1:97:AE:67:3A:91:D2:AF:BE:89:E4:E2 X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e3:1d:22:53:93:30:68:e6:0f:8d:fe:d4:05:16:63:77:50: 7d:c0:49:ff:4d:f9:98:e7:a4:b3:8e:89:33:e8:dc:de:08:44: b2:a5:67:ed:07:0e:74:9f:2f:9e:b6:75:84:2f:d0:70:a6:55: 8a:3a:55:bd:4c:af:47:0e:b1:3b:b5:0b:cd:14:01:72:a6:6d: 7f:12:c9:12:f3:59:87:b8:74:24:ea:dd:e1:e2:e1:4f:65:55: 93:72:41:5e:c2:69:6f:a9:1e:0b:74:e8:e4:b4:bd:b2:21:d7: cb:4c:7b:60:06:43:e0:33:a4:c1:ed:2a:3b:04:63:b7:47:c4: 5a:cc:b3:63:6c:5a:e4:bd:4e:3c:09:bc:69:5d:05:90:e4:11: fb:61:45:82:00:53:ac:6b:f9:df:83:b1:15:3f:d7:4b:fc:02: 4d:22:ac:e8:cc:04:09:9b:ea:7e:09:c0:6e:37:dc:c5:2e:57: 1f:4e:f1:18:59:c7:23:56:89:bd:41:e9:d7:55:61:89:ca:24: a8:c0:5b:e2:d8:5a:8b:ef:0f:d9:b7:8d:a1:aa:65:3d:e7:3d: ac:8b:40:03:85:6d:83:9d:01:7b:3e:ca:2b:e7:45:c1:04:2b: 8a:49:07:16:82:fc:93:4b:41:fc:ee:ee:90:99:61:3c:58:b3: 8b:2e:03:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEsxU+WsPIjZ1e1Eiz6YEpdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjYxMDExMjEwMTMwWhcNMjYxMDEyMjEwMTMwWjAzMTEwLwYDVQQD Eyg1N2NlNDU4ODg5ZWY3NTEyYzE5N2FlNjczYTkxZDJhZmJlODllNGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPLUJbkSN7zob9pRm/+9CPddpUTu 4NW6jdLcX2nxTN806xcuGmVdgkmnsL8BrXliZvJTk1R+YPPvarPPQ7zr0rleUUDX +tzp8z9cp78TxyaxMfiLia1m8dJtQPIz3RqTQ78dCUv/x/yHurM1/X3PzSSf+yqF veSghEomHRMYvpfYeaw7xm75vjdUVrABYx048qGAVviR6f02h01Lg9a5F3XLzoj3 UtNstACS9OEJkXRrvNKT9lMXD4pC0tDFqz5IG27kgczmQi9Y44Ru7PCRuA9HYiWw QZcd2ifiUAo2ltva1E5lzYdcu4sh2haO+1fkn6ACb00RJ/psk/HRZ+9bSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfORYiJ73USwZeuZzqR0q++ieTiMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+MdIlOT MGjmD43+1AUWY3dQfcBJ/035mOeks46JM+jc3ghEsqVn7QcOdJ8vnrZ1hC/QcKZV ijpVvUyvRw6xO7ULzRQBcqZtfxLJEvNZh7h0JOrd4eLhT2VVk3JBXsJpb6keC3To 5LS9siHXy0x7YAZD4DOkwe0qOwRjt0fEWsyzY2xa5L1OPAm8aV0FkOQR+2FFggBT rGv534OxFT/XS/wCTSKs6MwECZvqfgnAbjfcxS5XH07xGFnHI1aJvUHp11Vhicok qMBb4thai+8P2beNoaplPec9rItAA4Vtg50Bez7KK+dFwQQrikkHFoL8k0tB/O7u kJlhPFiziy4DaQ== -----END CERTIFICATE-----Generated at Mon Oct 12 01:01:05 2026 by rpki-client