$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft File: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json) Hash identifier: jcNxTVtsXjJqEJ0hf7njhFjzV7zYMcKIYv/UGvBc9+M= Subject key identifier: C3:19:A4:9B:5B:52:F6:58:F4:E0:23:38:3A:8B:EE:57:E5:95:89:20 Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 0199FBB3663741FDD5C209F1FAEC009B4EC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft Manifest number: 171B Signing time: Sun 19 Oct 2025 09:01:02 +0000 Manifest this update: Sun 19 Oct 2025 09:01:02 +0000 Manifest next update: Mon 20 Oct 2025 09:01:02 +0000 Files and hashes: 1: 05T5QjbJNc87hT4My9l-JdCX1h4.roa (hash: iWvw7hOFWKPo65JahFO85oDHfJOnZV1Mm2k2unmLhhE=) 2: 1RAZSq7_BCIXMPLmCNYBwnRPVeM.roa (hash: iP8JwzeV1htPI5dhx1UE8Z1vTHtvlA2uWPOR/wMsfgs=) 3: 5m85a6z_82pxvCFTAubCZE3IDRY.roa (hash: yTwyQOsGZdUMHgKCUc+pKc+Yl8K88OgV6IbbvGfhyYk=) 4: CmOI9SR69ovMKrxlDxbUWh5QUU0.roa (hash: ebd4rV/RF1OTbOXyyPqPuU0N5clQOOerkc0GReb1J2w=) 5: Cw3KSb4w5fVGO1h3Oj_H-hpchVg.roa (hash: uQeSPU2EF8IdzkDhENLmsFnhh9oxYjUNdNs+h74gmgY=) 6: JAH3IXMvbG6Ys2dPmwodnWJGeoI.roa (hash: Gw60ldKvXUBK2ktt+kjbpS50udL3AC6hPM4eFLUJXXw=) 7: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: VfsKwwSIPbzAkBpXTH4ALB402j2KJdghoJKedWFDR8E=) 8: OX7N03gSPb4sMX_V-5X6zyQ6WaA.roa (hash: BlJco9f8HDqfOjHCtNduALgKgBNAz1Kj7Oy3Vc4sp3s=) 9: WMM-Jj0p6VWzGlo6msh5tpjK74c.roa (hash: /4WO/iijr2ysoJfrqLnn3dB9+scGttOptVRk8eNo8H4=) 10: g4rTsZZ6qTMpSVPR-7TASI0eYf8.roa (hash: H0dCl0trInj59i3ls7vMuF/05FWvOMm7A3kIRBvL3Rw=) 11: h7K92qiMiWFLtkqLXfWLx7T3RS0.roa (hash: SXAVcoWGoZlytOpyw4bPPikyafW7og6IlMVyTr7sX3s=) 12: kojEemV1y3p1Ig0PF0Qwwmhe1Bs.roa (hash: Oye8rISWv3W8lfSMiPLOOdMEyDfiF8khVTUsBLT1Pro=) 13: oWWO6Pva3OKGYV4SbuU_A-N5y1U.roa (hash: wiPRw1JJ6JQ3Y/GXPGUGO3wdWm/JMB2trum1N3IbVAQ=) 14: pPQq_lolA8g8QxXqDDucDfwuETo.roa (hash: L1m+KNUP0y0o8T6Tj0pDmrtwsUBi0b51YKd4t4w0w/g=) 15: qhjSfnViRtAuJX9-HloVGl6e8yQ.roa (hash: 0c4CC/UoASiPziDV/ISjZ0Wa5pg6sbXo1QCcNSiEk04=) 16: sgjR_TQoyxizIzgpiP-8OxPCBvo.roa (hash: iPQU3YE5gJm0+Jc6VvldyH+AsK4ZTxvbcSdICCWexFM=) 17: wEmUsp4YHWLJBUqUou-fXnddnNI.roa (hash: mZCp4WYgBJMwxzFtP8EVDxeoQ9DuWh60+a4TXLeKQbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:b3:66:37:41:fd:d5:c2:09:f1:fa:ec:00:9b:4e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Oct 19 09:01:02 2025 GMT Not After : Oct 20 09:01:02 2025 GMT Subject: CN=c319a49b5b52f658f4e023383a8bee57e5958920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ef:92:5e:bc:23:01:6e:6f:c3:fd:41:29:c1: 8d:bc:e6:52:52:eb:96:f4:50:3f:d6:66:05:d2:48: 29:a4:5f:87:2a:5d:15:59:82:50:57:66:5b:0a:e9: f6:b0:d6:39:69:c8:d1:28:ad:23:ad:23:16:23:c3: 33:ff:e5:cf:64:7f:65:c6:6d:4c:a3:fb:1c:b5:1a: e4:84:28:3b:0b:cd:06:5e:af:9a:ea:b6:20:1c:92: 89:f2:f5:f1:30:74:87:b1:9c:34:d9:95:3e:86:12: ee:b2:c5:a4:0d:5a:ed:4b:95:f1:15:6c:b1:14:71: d3:f7:4c:f4:4c:19:44:85:1a:72:4f:52:f2:83:fe: fd:e4:7d:66:21:8b:73:5d:d9:ba:32:cc:d0:6d:55: fa:c0:8e:b7:56:c2:f7:08:aa:20:7d:28:d5:2d:10: 2a:21:3b:ce:e2:89:0c:ee:5d:e7:38:90:d9:08:2d: d8:b3:c5:dc:9c:ea:2e:3d:04:94:7e:0c:85:de:38: 9a:0a:90:ce:4f:a1:58:45:fb:91:53:31:5a:fc:7c: 28:85:c1:8e:39:e0:55:07:83:77:84:09:9c:e0:11: 9c:da:22:92:15:bc:e6:f1:05:39:97:78:69:c9:5c: 1b:7c:2b:50:65:75:e4:33:d0:cb:37:21:bb:52:19: 27:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:19:A4:9B:5B:52:F6:58:F4:E0:23:38:3A:8B:EE:57:E5:95:89:20 X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ce:76:85:ed:0e:6e:15:e8:14:e4:5f:d8:9c:b2:51:fa:1d: fd:12:6e:f3:b4:61:d9:cd:18:5d:70:eb:17:10:ca:55:a9:64: 74:3d:b2:3b:84:36:c1:df:72:0e:cd:52:68:4f:88:64:b7:09: da:be:53:83:6e:26:da:ce:bd:63:22:f5:2d:af:a5:53:ac:10: fb:a1:39:8f:24:6b:57:70:74:ce:a1:0d:2f:a8:b3:a3:54:b2: a6:63:4f:34:0e:6c:b4:f4:97:8b:d0:99:04:fb:d9:b5:b5:9f: 5d:f5:7d:92:8a:98:74:f1:56:c3:0e:0f:51:cd:26:ff:6c:27: c9:8f:d5:d5:14:db:fa:5e:8a:23:f7:f5:31:4a:dd:35:89:16: 1e:e1:d2:5f:8c:b5:d9:b4:f5:ee:09:5a:5a:cc:44:af:ab:d5: 49:27:e1:1a:cd:de:9c:7e:67:f5:0f:6b:c1:8f:d6:31:57:23: 32:5d:73:ca:31:fd:25:6d:dd:62:dd:94:dd:9a:92:4c:1d:dc: 21:02:40:a6:49:fa:73:27:97:c1:79:4a:d6:3b:63:fb:8b:77: 23:9c:d1:7e:46:09:79:9d:41:76:5e:35:72:2f:b0:2a:a4:c0: 5e:98:e4:ad:dd:3a:1c:0f:87:ea:9e:4d:0c:84:e0:8a:49:b5: 0c:42:6e:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7s2Y3Qf3Vwgnx+uwAm07EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjUxMDE5MDkwMTAyWhcNMjUxMDIwMDkwMTAyWjAzMTEwLwYDVQQD EyhjMzE5YTQ5YjViNTJmNjU4ZjRlMDIzMzgzYThiZWU1N2U1OTU4OTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e+SXrwjAW5vw/1BKcGNvOZSUuuW 9FA/1mYF0kgppF+HKl0VWYJQV2ZbCun2sNY5acjRKK0jrSMWI8Mz/+XPZH9lxm1M o/sctRrkhCg7C80GXq+a6rYgHJKJ8vXxMHSHsZw02ZU+hhLussWkDVrtS5XxFWyx FHHT90z0TBlEhRpyT1Lyg/795H1mIYtzXdm6MszQbVX6wI63VsL3CKogfSjVLRAq ITvO4okM7l3nOJDZCC3Ys8XcnOouPQSUfgyF3jiaCpDOT6FYRfuRUzFa/HwohcGO OeBVB4N3hAmc4BGc2iKSFbzm8QU5l3hpyVwbfCtQZXXkM9DLNyG7UhknLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMZpJtbUvZY9OAjODqL7lfllYkgMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATc52he0O bhXoFORf2JyyUfod/RJu87Rh2c0YXXDrFxDKValkdD2yO4Q2wd9yDs1SaE+IZLcJ 2r5Tg24m2s69YyL1La+lU6wQ+6E5jyRrV3B0zqENL6izo1SypmNPNA5stPSXi9CZ BPvZtbWfXfV9koqYdPFWww4PUc0m/2wnyY/V1RTb+l6KI/f1MUrdNYkWHuHSX4y1 2bT17glaWsxEr6vVSSfhGs3enH5n9Q9rwY/WMVcjMl1zyjH9JW3dYt2U3ZqSTB3c IQJApkn6cyeXwXlK1jtj+4t3I5zRfkYJeZ1Bdl41ci+wKqTAXpjkrd06HA+H6p5N DITgikm1DEJuZA== -----END CERTIFICATE-----Generated at Sun Oct 19 17:31:19 2025 by rpki-client