$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft File: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json) Hash identifier: u1jT05tBf+ZLQEukHLjr5z+iEoEgIbsAKSf1LEj8Mh0= Subject key identifier: 2A:65:D0:00:C1:9E:26:57:1E:82:9C:F6:F1:14:51:8F:95:56:DC:99 Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 0197B88FC60CD92F37A12E2C29F99C071957 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft Manifest number: 15EE Signing time: Sat 28 Jun 2025 22:01:59 +0000 Manifest this update: Sat 28 Jun 2025 22:01:59 +0000 Manifest next update: Sun 29 Jun 2025 22:01:59 +0000 Files and hashes: 1: 05T5QjbJNc87hT4My9l-JdCX1h4.roa (hash: iWvw7hOFWKPo65JahFO85oDHfJOnZV1Mm2k2unmLhhE=) 2: 1RAZSq7_BCIXMPLmCNYBwnRPVeM.roa (hash: iP8JwzeV1htPI5dhx1UE8Z1vTHtvlA2uWPOR/wMsfgs=) 3: 1wyAYxpyA9FCN1lyvO-C57LVFXA.roa (hash: y/6pL2V+BG6MuxMmBUR7F2hu5ij3F/ux58ms3Mk1R0w=) 4: 5m85a6z_82pxvCFTAubCZE3IDRY.roa (hash: yTwyQOsGZdUMHgKCUc+pKc+Yl8K88OgV6IbbvGfhyYk=) 5: CmOI9SR69ovMKrxlDxbUWh5QUU0.roa (hash: ebd4rV/RF1OTbOXyyPqPuU0N5clQOOerkc0GReb1J2w=) 6: Cw3KSb4w5fVGO1h3Oj_H-hpchVg.roa (hash: uQeSPU2EF8IdzkDhENLmsFnhh9oxYjUNdNs+h74gmgY=) 7: JAH3IXMvbG6Ys2dPmwodnWJGeoI.roa (hash: Gw60ldKvXUBK2ktt+kjbpS50udL3AC6hPM4eFLUJXXw=) 8: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: 669DJ4YeToz3Nib41rEHva1T+ZFKI8THmq6wAUDW1NU=) 9: WMM-Jj0p6VWzGlo6msh5tpjK74c.roa (hash: /4WO/iijr2ysoJfrqLnn3dB9+scGttOptVRk8eNo8H4=) 10: ZKvHQby0NQ22M7VFCjQ_KqulEx8.roa (hash: ivLBRNaqrPZubBjRNX4dYKOMZvwYNsaC4yTeWqcGhaw=) 11: g4rTsZZ6qTMpSVPR-7TASI0eYf8.roa (hash: H0dCl0trInj59i3ls7vMuF/05FWvOMm7A3kIRBvL3Rw=) 12: h7K92qiMiWFLtkqLXfWLx7T3RS0.roa (hash: SXAVcoWGoZlytOpyw4bPPikyafW7og6IlMVyTr7sX3s=) 13: kojEemV1y3p1Ig0PF0Qwwmhe1Bs.roa (hash: Oye8rISWv3W8lfSMiPLOOdMEyDfiF8khVTUsBLT1Pro=) 14: oWWO6Pva3OKGYV4SbuU_A-N5y1U.roa (hash: wiPRw1JJ6JQ3Y/GXPGUGO3wdWm/JMB2trum1N3IbVAQ=) 15: pPQq_lolA8g8QxXqDDucDfwuETo.roa (hash: L1m+KNUP0y0o8T6Tj0pDmrtwsUBi0b51YKd4t4w0w/g=) 16: qhjSfnViRtAuJX9-HloVGl6e8yQ.roa (hash: 0c4CC/UoASiPziDV/ISjZ0Wa5pg6sbXo1QCcNSiEk04=) 17: rGuulbHd9kRPQ-Vjw-QiFUOKt_A.roa (hash: B7yPzOPI+uMdkQOcYQEtalAjsrTFRRTxVc7BxeoQZ2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:8f:c6:0c:d9:2f:37:a1:2e:2c:29:f9:9c:07:19:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Jun 28 22:01:59 2025 GMT Not After : Jun 29 22:01:59 2025 GMT Subject: CN=2a65d000c19e26571e829cf6f114518f9556dc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:8d:33:04:26:6e:30:fe:31:18:07:ca:b0: 29:63:96:c5:41:e1:66:47:1c:14:91:c9:77:4a:09: 53:60:7a:af:a4:69:7d:eb:15:68:5e:38:bb:69:b9: 2b:ff:72:e8:71:3c:88:56:12:65:cd:d4:0a:a0:75: 55:5d:0e:ba:40:86:a3:6e:8d:73:8f:64:53:8f:20: ff:9a:f7:26:b5:7a:6e:c2:ac:14:ae:93:00:04:51: 6c:b7:51:13:40:06:6f:7c:73:2b:11:08:42:34:74: 2c:90:24:0c:c1:31:e8:19:a0:a9:7d:61:dd:47:40: 57:77:5d:a1:6f:b9:3b:c1:c7:59:4f:3c:f9:04:02: e7:bd:98:27:78:4f:61:58:29:05:92:c1:01:43:9a: dc:36:f6:33:50:a3:33:3d:95:55:62:4b:b7:eb:c2: 3b:1d:40:87:65:30:87:5e:74:d7:0b:70:a9:98:ad: 65:15:b5:02:1e:f5:17:b9:ce:df:17:08:8e:a0:02: 67:aa:a3:f0:d5:0b:5e:18:a1:eb:d0:c3:8d:99:1c: 60:d7:a8:6e:b7:c0:11:32:53:71:c3:5f:94:29:05: b2:c9:41:8e:46:bc:3a:1c:f3:f5:49:32:c8:4e:71: 3b:56:f9:93:d3:71:1e:89:8b:8b:b8:e6:07:61:0a: be:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:65:D0:00:C1:9E:26:57:1E:82:9C:F6:F1:14:51:8F:95:56:DC:99 X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:74:0d:91:2d:f2:60:f9:45:83:da:83:30:aa:2c:1d:5f:a2: 7e:d5:8b:39:bf:d3:dc:5e:45:61:18:68:cd:88:8c:3a:fe:df: 2b:ce:2d:36:58:32:50:1e:ff:df:ab:15:f0:45:a3:f3:37:f1: 00:6a:25:99:e6:41:d3:85:4c:7c:40:53:98:b0:24:fb:ae:a9: 1e:13:ac:20:84:03:a3:3c:4d:67:e6:af:54:00:17:01:b7:9f: f5:7a:1d:34:b4:2d:ed:8b:fe:14:da:de:b1:e5:f7:89:89:6f: 10:17:89:3e:db:52:1d:d2:07:a0:19:f9:9b:b0:ca:91:cc:27: cb:18:30:96:87:2c:66:7f:52:7f:e7:3a:62:c5:87:9e:1f:ab: 04:ea:75:25:a6:0d:47:f6:11:ad:23:78:4c:21:22:8f:77:fd: ef:50:f6:78:81:2f:5a:ea:90:c7:34:ab:1f:e5:54:64:31:61: 25:a6:b5:60:21:cb:12:b9:13:49:1f:b3:f4:bd:5d:86:de:cb: ea:5c:c0:a7:31:b6:f9:4c:cb:08:f5:7f:67:7f:96:7f:50:d8: 00:35:d6:6f:2e:8c:5c:39:a3:9c:10:f9:a2:67:ff:36:8b:b8: 2d:0a:0d:57:ef:01:d9:df:db:eb:eb:f3:ea:ba:de:a5:ee:9f: ef:f4:ba:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4j8YM2S83oS4sKfmcBxlXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjUwNjI4MjIwMTU5WhcNMjUwNjI5MjIwMTU5WjAzMTEwLwYDVQQD EygyYTY1ZDAwMGMxOWUyNjU3MWU4MjljZjZmMTE0NTE4Zjk1NTZkYzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+GNMwQmbjD+MRgHyrApY5bFQeFm RxwUkcl3SglTYHqvpGl96xVoXji7abkr/3LocTyIVhJlzdQKoHVVXQ66QIajbo1z j2RTjyD/mvcmtXpuwqwUrpMABFFst1ETQAZvfHMrEQhCNHQskCQMwTHoGaCpfWHd R0BXd12hb7k7wcdZTzz5BALnvZgneE9hWCkFksEBQ5rcNvYzUKMzPZVVYku368I7 HUCHZTCHXnTXC3CpmK1lFbUCHvUXuc7fFwiOoAJnqqPw1QteGKHr0MONmRxg16hu t8ARMlNxw1+UKQWyyUGORrw6HPP1STLITnE7VvmT03EeiYuLuOYHYQq+FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpl0ADBniZXHoKc9vEUUY+VVtyZMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHQNkS3y YPlFg9qDMKosHV+iftWLOb/T3F5FYRhozYiMOv7fK84tNlgyUB7/36sV8EWj8zfx AGolmeZB04VMfEBTmLAk+66pHhOsIIQDozxNZ+avVAAXAbef9XodNLQt7Yv+FNre seX3iYlvEBeJPttSHdIHoBn5m7DKkcwnyxgwlocsZn9Sf+c6YsWHnh+rBOp1JaYN R/YRrSN4TCEij3f971D2eIEvWuqQxzSrH+VUZDFhJaa1YCHLErkTSR+z9L1dht7L 6lzApzG2+UzLCPV/Z3+Wf1DYADXWby6MXDmjnBD5omf/Nou4LQoNV+8B2d/b6+vz 6rrepe6f7/S6oA== -----END CERTIFICATE-----Generated at Sat Jun 28 23:27:36 2025 by rpki-client