$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft File: JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json) Hash identifier: s3C8in8SUnTCzW4NFEa/lGCC5mq5rZyWvr5WsYbyFNk= Subject key identifier: 4D:5A:A0:1D:04:3E:58:A8:C9:C2:33:09:B9:22:66:09:13:51:41:7A Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019F922260FA50D3A7CD6E32320D96A4DAFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft Manifest number: 171D Signing time: Fri 24 Jul 2026 03:19:14 +0000 Manifest this update: Fri 24 Jul 2026 03:19:14 +0000 Manifest next update: Sat 25 Jul 2026 03:19:14 +0000 Files and hashes: 1: 1-J4PSDEl9d0llDjfWsIWQxWc6_I.roa (hash: ypQcjGIhT4f6yMw/Eo/q0CXm3np4TkiH1MrKx8KGA8U=) 2: FXvxd8iSb5UOqnUQemVQoiPFHr0.roa (hash: xAaj8WYWxsUYDp5IjPLpIHhUT6JTzTLFtyE0B9OOTCo=) 3: Hhk99kTP4LCptCcuzr46HrrOd-M.roa (hash: KKoc5a/NPGDFa/jCr9dayn05xHXif4MHgG7H+qe8WPY=) 4: Ikjy73u8FLLPvcx7iUeOlhDA8JE.roa (hash: hbvcHuE5W3d/jXVY3JSOKIiGPMPw+HUEjcOgDOTcTlY=) 5: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: Pu4EyfzRVLHn7m7UiC9ZbZANp4S9PfDU8XdUA7ZzkQM=) 6: OCOSxMuOE7etqm6ym3cnIhKe0pw.roa (hash: PN3RvFQgu5pZxlCTS4LWpAyJgk2AnIZ4RZiwMhHQpjM=) 7: QAlAc_HBKVW9DIWsgBjzQBqlU_E.roa (hash: 01SGs9bF17s9PyhMPPV7iXjRmYd6onnnyv/wBFXQkVo=) 8: aFDzVrUv1Lh1tFcqGx2iUSN6t2Q.roa (hash: R1nEMHyCK4EFeYy8SvPh7cZUDUUFnN2AYX39p24Ukns=) 9: cH5zbNz1Wh4pKh9CZsUewwJjPYc.roa (hash: o7xAeOganmOKEfHkamPKsHaW6ANhyRw4vYPfGEPHmXY=) 10: ekIg_EozOl2eKAl7YxwTNudO2Ck.roa (hash: H4suzunJCL6M7y1bzbaVMfsdpvdTVp5XzrKgoj5v1bk=) 11: kJQG6geGOu2RAJRA_7GzYnIhBYQ.roa (hash: XUqqP9TjiZCkPcmNHG3SdvuU3ttO6pgsFTxEU7wHJZE=) 12: mw4aax5neyyO7biCg_R2Z4yrLVY.roa (hash: kswP+nDZIDDBYumEaipi/RTPJYiM8dVDU96MMsZcT28=) 13: nmDQzXrowDtDsmaT7IpPejjRWG0.roa (hash: GXfSa12Z+HzkUJgQU3oz+bpDRacv3sjfzvlZHnK3Bnk=) 14: rlGWAgfAA94vdNw8Yce_2JC5ZQ0.roa (hash: mDS85C7fKFjtrZ9jEwtQ1X6vTpwU05nL4sqzCM649dA=) 15: x0Q_UA5bt6672Dm9-Yp-CrnW3nQ.roa (hash: ITlCsYh8cqhggq4VF3aslLQZ6vv7ci4qGlAuU+En704=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 03:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:22:60:fa:50:d3:a7:cd:6e:32:32:0d:96:a4:da:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Jul 24 03:19:14 2026 GMT Not After : Jul 25 03:19:14 2026 GMT Subject: CN=4d5aa01d043e58a8c9c23309b92266091351417a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:db:7b:7d:6f:fd:ed:85:00:c2:a3:ce:9f:1b: b4:0c:b6:45:61:99:91:72:23:2d:b6:9d:7d:ed:71: c0:51:c3:7f:03:2a:7a:5f:93:ed:d2:8e:a4:23:1a: 43:d8:35:f2:3d:54:2c:69:87:9d:54:a8:a6:c5:84: 8c:34:8f:2c:12:ea:ba:3c:b9:8f:cb:0a:5f:36:24: df:f8:11:20:c9:ba:09:9c:f6:75:9f:f6:fc:f2:11: f9:80:bf:ec:5f:1d:fb:de:2c:d0:65:14:ef:12:90: 25:4a:f2:1d:75:20:fd:a0:0d:b3:48:40:b8:bf:07: d8:18:4b:14:6f:e8:4a:41:51:78:93:7e:23:e2:c8: ce:d1:ee:1d:b4:b3:89:ab:e3:38:7e:d4:b5:38:50: 4b:3c:05:a6:75:58:d9:18:24:53:89:ea:71:c9:ba: cf:ac:b6:f3:0e:06:33:2c:48:eb:fa:61:88:1c:ac: 8a:f8:51:cb:5e:d1:94:b7:37:45:de:fc:66:69:33: 6e:ab:f9:fe:77:d3:24:4f:41:29:61:2e:78:69:85: 1d:05:7d:b9:e9:76:20:45:de:9e:61:cb:bc:c6:0d: f6:fa:88:99:39:bd:af:70:fc:45:3e:80:3d:91:69: 12:50:c7:9f:ef:78:d4:0c:67:f5:da:d5:e5:58:2c: 7b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5A:A0:1D:04:3E:58:A8:C9:C2:33:09:B9:22:66:09:13:51:41:7A X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:6d:24:8c:f9:2b:d9:01:3d:33:52:7a:af:cd:b8:5f:a8:e6: f9:8e:8c:70:a3:86:ea:ac:f8:a5:6b:ca:b5:87:34:3a:34:af: 39:00:15:9b:51:d2:f2:28:db:a7:00:5e:96:50:80:97:15:78: 35:c5:58:14:01:ea:5b:2a:85:2f:fd:59:6a:db:82:5f:97:c9: 33:c4:f9:57:57:84:60:3b:8c:97:45:49:3a:e0:40:a0:b9:3b: 3d:d2:28:0f:e2:46:88:43:46:c5:2e:97:47:43:5e:80:b3:1a: 75:76:d3:de:65:03:a2:9e:7b:42:8b:90:1c:1d:4b:bd:bf:31: f6:f4:5d:4c:3b:60:2e:94:75:2a:33:a0:98:ce:f8:92:8e:02: 28:94:1b:f6:82:34:a5:6d:e0:dc:81:03:7d:7b:10:de:89:64: bd:19:78:4c:4d:4a:d0:2e:fb:10:d2:d0:fd:3c:54:d3:2c:46: 8a:46:1e:fa:ca:e7:13:e8:58:9c:c6:2f:f9:5b:92:61:21:6b: 01:5b:da:cd:9b:d4:46:da:ef:3e:00:44:f4:c9:f6:e4:3b:57: 91:79:d0:02:dd:99:b5:2b:ac:ca:e3:d3:18:6c:8e:d0:56:6c: 67:64:8b:ea:48:2e:35:d0:08:60:5c:40:ee:bd:f4:0e:16:cb: 41:9b:c8:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+SImD6UNOnzW4yMg2WpNr6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjYwNzI0MDMxOTE0WhcNMjYwNzI1MDMxOTE0WjAzMTEwLwYDVQQD Eyg0ZDVhYTAxZDA0M2U1OGE4YzljMjMzMDliOTIyNjYwOTEzNTE0MTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Nt7fW/97YUAwqPOnxu0DLZFYZmR ciMttp197XHAUcN/Ayp6X5Pt0o6kIxpD2DXyPVQsaYedVKimxYSMNI8sEuq6PLmP ywpfNiTf+BEgyboJnPZ1n/b88hH5gL/sXx373izQZRTvEpAlSvIddSD9oA2zSEC4 vwfYGEsUb+hKQVF4k34j4sjO0e4dtLOJq+M4ftS1OFBLPAWmdVjZGCRTiepxybrP rLbzDgYzLEjr+mGIHKyK+FHLXtGUtzdF3vxmaTNuq/n+d9MkT0EpYS54aYUdBX25 6XYgRd6eYcu8xg32+oiZOb2vcPxFPoA9kWkSUMef73jUDGf12tXlWCx7eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1aoB0EPlioycIzCbkiZgkTUUF6MB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj20kjPkr 2QE9M1J6r824X6jm+Y6McKOG6qz4pWvKtYc0OjSvOQAVm1HS8ijbpwBellCAlxV4 NcVYFAHqWyqFL/1ZatuCX5fJM8T5V1eEYDuMl0VJOuBAoLk7PdIoD+JGiENGxS6X R0NegLMadXbT3mUDop57QouQHB1Lvb8x9vRdTDtgLpR1KjOgmM74ko4CKJQb9oI0 pW3g3IEDfXsQ3olkvRl4TE1K0C77ENLQ/TxU0yxGikYe+srnE+hYnMYv+VuSYSFr AVvazZvURtrvPgBE9Mn25DtXkXnQAt2ZtSusyuPTGGyO0FZsZ2SL6kguNdAIYFxA 7r30DhbLQZvI4Q== -----END CERTIFICATE-----Generated at Fri Jul 24 11:45:10 2026 by rpki-client