$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft File: JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json) Hash identifier: Ziti6H2DkhvXux8t4fFVHEaRnz6JkowXO0YAIY3ba80= Subject key identifier: 2C:1A:29:1B:C0:2D:89:18:EE:07:AE:1C:6E:3D:A1:0F:DD:BA:39:95 Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 01A1DB70216D056C889C1783FE1923737C94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft Manifest number: 1858 Signing time: Sat 14 Nov 2026 19:02:01 +0000 Manifest this update: Sat 14 Nov 2026 19:02:01 +0000 Manifest next update: Sun 15 Nov 2026 19:02:01 +0000 Files and hashes: 1: 1-J4PSDEl9d0llDjfWsIWQxWc6_I.roa (hash: ypQcjGIhT4f6yMw/Eo/q0CXm3np4TkiH1MrKx8KGA8U=) 2: 3n9XizaKwZKT4WO2CLSH6P7jG-U.roa (hash: 95g99Anf9OIfp+fQ7AnBYhYM1WI5W4uhm2PB27zdzWk=) 3: Hhk99kTP4LCptCcuzr46HrrOd-M.roa (hash: KKoc5a/NPGDFa/jCr9dayn05xHXif4MHgG7H+qe8WPY=) 4: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: +yUXoITawQZdBRzo6aXw037cf2U6WApMgbrIzF+HIRo=) 5: QAlAc_HBKVW9DIWsgBjzQBqlU_E.roa (hash: 01SGs9bF17s9PyhMPPV7iXjRmYd6onnnyv/wBFXQkVo=) 6: _MJAcicymoNzDFYrN1ABbaDOmig.roa (hash: t92C0XjQQTU7PVrgpoVSk3RSmKTbNYZs6AqGWGG6l7M=) 7: aFDzVrUv1Lh1tFcqGx2iUSN6t2Q.roa (hash: R1nEMHyCK4EFeYy8SvPh7cZUDUUFnN2AYX39p24Ukns=) 8: ekIg_EozOl2eKAl7YxwTNudO2Ck.roa (hash: H4suzunJCL6M7y1bzbaVMfsdpvdTVp5XzrKgoj5v1bk=) 9: kJQG6geGOu2RAJRA_7GzYnIhBYQ.roa (hash: XUqqP9TjiZCkPcmNHG3SdvuU3ttO6pgsFTxEU7wHJZE=) 10: kmi4lr3MErMKudzvPnpA_A5RB3Y.roa (hash: SC5wL99tgoNwibuu73Ez4JxzgoQtqvgGQyrdYV2hN10=) 11: mw4aax5neyyO7biCg_R2Z4yrLVY.roa (hash: kswP+nDZIDDBYumEaipi/RTPJYiM8dVDU96MMsZcT28=) 12: nmDQzXrowDtDsmaT7IpPejjRWG0.roa (hash: GXfSa12Z+HzkUJgQU3oz+bpDRacv3sjfzvlZHnK3Bnk=) 13: rlGWAgfAA94vdNw8Yce_2JC5ZQ0.roa (hash: mDS85C7fKFjtrZ9jEwtQ1X6vTpwU05nL4sqzCM649dA=) 14: x0Q_UA5bt6672Dm9-Yp-CrnW3nQ.roa (hash: ITlCsYh8cqhggq4VF3aslLQZ6vv7ci4qGlAuU+En704=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:70:21:6d:05:6c:88:9c:17:83:fe:19:23:73:7c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Nov 14 19:02:01 2026 GMT Not After : Nov 15 19:02:01 2026 GMT Subject: CN=2c1a291bc02d8918ee07ae1c6e3da10fddba3995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e2:c0:33:1a:a7:72:e1:80:fd:3d:8c:a2:e7: 9c:81:bb:2e:b4:24:e2:69:fd:0a:b8:1c:d1:3a:fd: c7:0e:4a:f0:ff:07:89:b4:f3:e7:c9:e2:1b:7a:b3: 39:fd:99:b0:87:57:74:4f:15:62:f7:97:61:0c:6e: bd:ee:ad:d6:9e:a6:9c:d5:d0:dd:0b:14:8a:44:98: ca:9c:df:68:80:19:30:98:22:e8:43:3b:89:20:64: 91:5d:cf:26:88:0a:14:52:99:2c:48:b6:35:72:7f: af:6b:9d:b1:6b:1e:8a:8a:12:34:a4:cd:8f:f3:be: b0:2c:f6:26:36:fd:54:16:0c:7d:c0:44:03:db:d0: 63:2b:ac:fd:c9:1a:7a:03:99:a0:50:2b:f0:2f:ff: 5a:8e:63:e9:da:6d:fd:38:12:c8:e1:0f:77:09:3c: 88:ea:35:fd:06:f4:90:04:b7:e7:11:37:bd:63:40: 79:45:1a:0f:85:6e:45:e1:b2:e4:c1:7a:5b:ff:c5: f1:a7:38:20:29:57:82:3e:8b:10:d1:fc:79:48:37: b4:dc:d1:df:8d:4c:70:a1:28:39:cd:c1:28:a1:e0: e9:19:bc:07:77:ef:aa:b1:fb:bd:73:cb:06:f6:42: 0a:3e:50:10:94:4c:d1:f1:a7:97:71:c9:b5:e2:45: 8f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1A:29:1B:C0:2D:89:18:EE:07:AE:1C:6E:3D:A1:0F:DD:BA:39:95 X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:69:e1:90:f5:1f:be:ee:d6:74:22:aa:7f:6d:5e:d6:2a:14: 01:8e:fc:02:d6:47:1c:33:d9:b6:92:80:fa:c2:df:a3:85:77: f1:55:60:5f:8e:99:b9:4f:3b:30:9b:67:7d:36:08:29:70:ee: 71:3c:ea:b9:ab:95:3e:85:b6:37:26:3c:78:3d:d2:53:83:13: c7:8e:0a:52:b8:30:dc:bf:12:2b:6d:e5:c2:a5:66:f6:16:a8: 85:33:ed:fa:5c:50:02:ab:61:15:21:1d:cf:90:d4:0f:c6:8a: eb:94:1f:4e:da:ef:66:c1:b8:30:33:6e:3a:6d:6d:67:20:df: e9:c7:94:af:7f:2c:fe:42:ae:08:2b:ac:b6:b1:0f:db:4e:07: c5:53:9b:62:db:bb:e4:2b:eb:8c:d8:84:f7:ec:f6:c8:05:44: b8:95:7a:24:b3:af:3d:0c:c2:06:6e:26:3e:65:95:de:e3:9f: 1f:27:6c:95:14:f5:dc:20:dd:4f:3b:67:3d:27:00:ec:cb:fd: 73:0b:6e:f1:82:de:d1:da:de:df:cf:64:91:3b:a1:19:e5:df: cd:43:76:49:9f:7b:e6:27:59:11:e4:54:3d:b9:b6:e9:6d:69: 3b:ac:48:18:33:3c:2c:10:1c:b7:39:66:fd:17:57:e3:38:5d: a7:f8:a0:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHbcCFtBWyInBeD/hkjc3yUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjYxMTE0MTkwMjAxWhcNMjYxMTE1MTkwMjAxWjAzMTEwLwYDVQQD EygyYzFhMjkxYmMwMmQ4OTE4ZWUwN2FlMWM2ZTNkYTEwZmRkYmEzOTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OLAMxqncuGA/T2MouecgbsutCTi af0KuBzROv3HDkrw/weJtPPnyeIberM5/Zmwh1d0TxVi95dhDG697q3Wnqac1dDd CxSKRJjKnN9ogBkwmCLoQzuJIGSRXc8miAoUUpksSLY1cn+va52xax6KihI0pM2P 876wLPYmNv1UFgx9wEQD29BjK6z9yRp6A5mgUCvwL/9ajmPp2m39OBLI4Q93CTyI 6jX9BvSQBLfnETe9Y0B5RRoPhW5F4bLkwXpb/8XxpzggKVeCPosQ0fx5SDe03NHf jUxwoSg5zcEooeDpGbwHd++qsfu9c8sG9kIKPlAQlEzR8aeXccm14kWPKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwaKRvALYkY7geuHG49oQ/dujmVMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWnhkPUf vu7WdCKqf21e1ioUAY78AtZHHDPZtpKA+sLfo4V38VVgX46ZuU87MJtnfTYIKXDu cTzquauVPoW2NyY8eD3SU4MTx44KUrgw3L8SK23lwqVm9haohTPt+lxQAqthFSEd z5DUD8aK65QfTtrvZsG4MDNuOm1tZyDf6ceUr38s/kKuCCustrEP204HxVObYtu7 5CvrjNiE9+z2yAVEuJV6JLOvPQzCBm4mPmWV3uOfHydslRT13CDdTztnPScA7Mv9 cwtu8YLe0dre389kkTuhGeXfzUN2SZ975idZEeRUPbm26W1pO6xIGDM8LBActzlm /RdX4zhdp/igMg== -----END CERTIFICATE-----Generated at Sat Nov 14 22:38:47 2026 by rpki-client