$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft File: JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json) Hash identifier: v5jSOyhewNsy2bHlVrklaN5C5YekhhfMViTHPStSyg0= Subject key identifier: FF:DD:5C:FA:7E:8B:F3:B9:C2:37:E8:81:ED:CA:30:B4:AE:93:86:97 Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019E1DC75C7CFC600007C533F9C2C014195D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft Manifest number: 165B Signing time: Tue 12 May 2026 20:01:05 +0000 Manifest this update: Tue 12 May 2026 20:01:05 +0000 Manifest next update: Wed 13 May 2026 20:01:05 +0000 Files and hashes: 1: AYBhm-n2DtjBD2-_VERC8enxMWk.roa (hash: iqyny5FgxwGBplZSuXLriIUaCy7cAoMGn0iYdefGN7Q=) 2: FXvxd8iSb5UOqnUQemVQoiPFHr0.roa (hash: xAaj8WYWxsUYDp5IjPLpIHhUT6JTzTLFtyE0B9OOTCo=) 3: Hhk99kTP4LCptCcuzr46HrrOd-M.roa (hash: KKoc5a/NPGDFa/jCr9dayn05xHXif4MHgG7H+qe8WPY=) 4: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: ddnSYClWB/R+iDqSRR/Ibl9SQeaK802yD7F9y/iauPA=) 5: OCOSxMuOE7etqm6ym3cnIhKe0pw.roa (hash: PN3RvFQgu5pZxlCTS4LWpAyJgk2AnIZ4RZiwMhHQpjM=) 6: QAlAc_HBKVW9DIWsgBjzQBqlU_E.roa (hash: 01SGs9bF17s9PyhMPPV7iXjRmYd6onnnyv/wBFXQkVo=) 7: aFDzVrUv1Lh1tFcqGx2iUSN6t2Q.roa (hash: R1nEMHyCK4EFeYy8SvPh7cZUDUUFnN2AYX39p24Ukns=) 8: cH5zbNz1Wh4pKh9CZsUewwJjPYc.roa (hash: o7xAeOganmOKEfHkamPKsHaW6ANhyRw4vYPfGEPHmXY=) 9: ekIg_EozOl2eKAl7YxwTNudO2Ck.roa (hash: H4suzunJCL6M7y1bzbaVMfsdpvdTVp5XzrKgoj5v1bk=) 10: kJQG6geGOu2RAJRA_7GzYnIhBYQ.roa (hash: XUqqP9TjiZCkPcmNHG3SdvuU3ttO6pgsFTxEU7wHJZE=) 11: mw4aax5neyyO7biCg_R2Z4yrLVY.roa (hash: kswP+nDZIDDBYumEaipi/RTPJYiM8dVDU96MMsZcT28=) 12: nmDQzXrowDtDsmaT7IpPejjRWG0.roa (hash: GXfSa12Z+HzkUJgQU3oz+bpDRacv3sjfzvlZHnK3Bnk=) 13: rlGWAgfAA94vdNw8Yce_2JC5ZQ0.roa (hash: mDS85C7fKFjtrZ9jEwtQ1X6vTpwU05nL4sqzCM649dA=) 14: x0Q_UA5bt6672Dm9-Yp-CrnW3nQ.roa (hash: ITlCsYh8cqhggq4VF3aslLQZ6vv7ci4qGlAuU+En704=) 15: ySuM-WxG5dbfi2CFirvx8xCRfuA.roa (hash: 1e/p6LGwMmHWJEevpgoA3E6bMz9Y+YCCH+tqNadZtdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:c7:5c:7c:fc:60:00:07:c5:33:f9:c2:c0:14:19:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: May 12 20:01:05 2026 GMT Not After : May 13 20:01:05 2026 GMT Subject: CN=ffdd5cfa7e8bf3b9c237e881edca30b4ae938697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:24:de:b2:c0:10:8a:52:eb:6d:99:0e:62:ea: 4a:dd:1a:47:dd:f1:e2:2f:d8:b8:27:df:ef:18:c8: 2c:b6:db:a7:47:eb:7e:30:c2:a7:7f:4d:61:c7:41: ec:5d:52:83:36:dc:d4:68:3e:3c:88:46:15:29:7a: 9a:dc:8c:39:f8:47:81:ea:21:eb:0c:19:bc:ed:a3: 85:8b:b3:b7:a9:99:b3:f4:c5:cc:bc:53:07:17:4a: a0:32:64:d9:21:96:49:d5:1c:e1:e1:2f:de:0d:ac: 26:89:93:b8:4b:b9:35:2b:b3:dd:94:9d:85:56:12: 16:49:59:25:00:ae:91:55:73:e9:92:a7:70:70:6b: 2d:4f:8a:a3:d7:33:db:5b:99:e5:66:93:93:42:5c: 68:c5:38:14:ba:b4:31:cc:59:2d:61:2b:fa:b8:82: 3e:f3:b0:1d:29:1f:88:a8:5b:93:08:7b:34:7a:81: 7d:8a:b7:88:ea:af:47:fd:2e:c2:db:2d:c6:ac:95: 37:d4:1e:9b:a5:dd:91:15:8a:d0:ff:06:df:9a:b2: 36:fb:c3:e9:4c:58:b7:17:47:59:d2:7a:40:e1:b2: 4d:cd:f5:52:7b:59:19:3a:cd:3a:04:0f:db:eb:5b: ff:5c:bb:aa:29:05:ac:94:dd:97:33:5e:55:d4:62: f1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DD:5C:FA:7E:8B:F3:B9:C2:37:E8:81:ED:CA:30:B4:AE:93:86:97 X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a5:cd:e3:f1:ec:cb:8b:dc:ba:78:45:a1:5d:f1:bf:40:c1: a8:76:d6:ad:be:0d:55:72:2b:c0:89:26:80:4d:2c:ba:77:7a: 76:51:7d:c8:23:67:78:6a:80:11:0e:c6:68:70:6f:9e:80:51: 7e:58:21:de:08:60:d7:1f:64:4b:94:ae:ff:6e:96:7b:e5:0e: 3d:52:ec:76:75:4b:02:eb:3b:22:55:68:f6:36:b4:08:87:20: f4:d9:60:a6:39:d2:3e:25:1e:2c:dd:01:55:5c:f3:a5:b7:f6: 2e:af:cc:50:25:f4:1b:78:36:d3:b7:54:a4:cd:92:fd:7a:b8: 0a:1b:00:a9:f9:d3:e2:42:22:8f:4c:43:88:84:8e:0b:7e:a8: 09:d6:ba:2e:7f:6c:84:42:2d:f3:eb:bd:fe:1d:43:12:c7:a7: 68:da:3d:e5:31:20:07:aa:22:14:9b:f8:08:78:62:f0:f1:e5: 44:2d:85:79:0d:15:91:52:41:07:be:ae:6e:cb:17:77:08:49: 5d:27:32:27:f4:1b:94:8f:1d:c8:d7:41:c2:9d:ed:a5:28:fa: 61:fb:db:31:75:84:6a:f4:35:db:aa:dc:a1:e4:43:2a:f5:8d: 20:33:bd:b4:f9:ca:b6:78:39:98:56:da:eb:0a:a9:99:83:5a: c3:f6:c8:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dx1x8/GAAB8Uz+cLAFBldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjYwNTEyMjAwMTA1WhcNMjYwNTEzMjAwMTA1WjAzMTEwLwYDVQQD EyhmZmRkNWNmYTdlOGJmM2I5YzIzN2U4ODFlZGNhMzBiNGFlOTM4Njk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiTessAQilLrbZkOYupK3RpH3fHi L9i4J9/vGMgsttunR+t+MMKnf01hx0HsXVKDNtzUaD48iEYVKXqa3Iw5+EeB6iHr DBm87aOFi7O3qZmz9MXMvFMHF0qgMmTZIZZJ1Rzh4S/eDawmiZO4S7k1K7PdlJ2F VhIWSVklAK6RVXPpkqdwcGstT4qj1zPbW5nlZpOTQlxoxTgUurQxzFktYSv6uII+ 87AdKR+IqFuTCHs0eoF9ireI6q9H/S7C2y3GrJU31B6bpd2RFYrQ/wbfmrI2+8Pp TFi3F0dZ0npA4bJNzfVSe1kZOs06BA/b61v/XLuqKQWslN2XM15V1GLxMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/dXPp+i/O5wjfoge3KMLSuk4aXMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfaXN4/Hs y4vcunhFoV3xv0DBqHbWrb4NVXIrwIkmgE0sund6dlF9yCNneGqAEQ7GaHBvnoBR flgh3ghg1x9kS5Su/26We+UOPVLsdnVLAus7IlVo9ja0CIcg9NlgpjnSPiUeLN0B VVzzpbf2Lq/MUCX0G3g207dUpM2S/Xq4ChsAqfnT4kIij0xDiISOC36oCda6Ln9s hEIt8+u9/h1DEsenaNo95TEgB6oiFJv4CHhi8PHlRC2FeQ0VkVJBB76ubssXdwhJ XScyJ/QblI8dyNdBwp3tpSj6YfvbMXWEavQ126rcoeRDKvWNIDO9tPnKtng5mFba 6wqpmYNaw/bIhg== -----END CERTIFICATE-----Generated at Wed May 13 02:30:01 2026 by rpki-client