$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft File: JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json) Hash identifier: 8pjMncqnkzc40rg9gAYqz7J26mDQ55MCXz4B6qNARds= Subject key identifier: 8D:B4:2B:99:52:54:4A:8E:CC:BC:97:CA:A1:9B:2D:A7:19:55:B3:68 Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019D26280E039BDBA940405A0239016BA931 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft Manifest number: 15D8 Signing time: Wed 25 Mar 2026 18:00:52 +0000 Manifest this update: Wed 25 Mar 2026 18:00:52 +0000 Manifest next update: Thu 26 Mar 2026 18:00:52 +0000 Files and hashes: 1: Hhk99kTP4LCptCcuzr46HrrOd-M.roa (hash: KKoc5a/NPGDFa/jCr9dayn05xHXif4MHgG7H+qe8WPY=) 2: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: y4Q2RYpuClhEVpmvUeFrmd1Ij1NxSDT6vp6HLTZkpj4=) 3: OCOSxMuOE7etqm6ym3cnIhKe0pw.roa (hash: PN3RvFQgu5pZxlCTS4LWpAyJgk2AnIZ4RZiwMhHQpjM=) 4: QAlAc_HBKVW9DIWsgBjzQBqlU_E.roa (hash: 01SGs9bF17s9PyhMPPV7iXjRmYd6onnnyv/wBFXQkVo=) 5: V31h9beA1NjOun41S2jwpOz78Is.roa (hash: GlMTMFuGGPPKj686KygzUnOcrCykbZKdt6LpxxyxucY=) 6: aFDzVrUv1Lh1tFcqGx2iUSN6t2Q.roa (hash: R1nEMHyCK4EFeYy8SvPh7cZUDUUFnN2AYX39p24Ukns=) 7: cH5zbNz1Wh4pKh9CZsUewwJjPYc.roa (hash: o7xAeOganmOKEfHkamPKsHaW6ANhyRw4vYPfGEPHmXY=) 8: ekIg_EozOl2eKAl7YxwTNudO2Ck.roa (hash: H4suzunJCL6M7y1bzbaVMfsdpvdTVp5XzrKgoj5v1bk=) 9: kJQG6geGOu2RAJRA_7GzYnIhBYQ.roa (hash: XUqqP9TjiZCkPcmNHG3SdvuU3ttO6pgsFTxEU7wHJZE=) 10: mw4aax5neyyO7biCg_R2Z4yrLVY.roa (hash: kswP+nDZIDDBYumEaipi/RTPJYiM8dVDU96MMsZcT28=) 11: nmDQzXrowDtDsmaT7IpPejjRWG0.roa (hash: GXfSa12Z+HzkUJgQU3oz+bpDRacv3sjfzvlZHnK3Bnk=) 12: rlGWAgfAA94vdNw8Yce_2JC5ZQ0.roa (hash: mDS85C7fKFjtrZ9jEwtQ1X6vTpwU05nL4sqzCM649dA=) 13: x0Q_UA5bt6672Dm9-Yp-CrnW3nQ.roa (hash: ITlCsYh8cqhggq4VF3aslLQZ6vv7ci4qGlAuU+En704=) 14: ySuM-WxG5dbfi2CFirvx8xCRfuA.roa (hash: 1e/p6LGwMmHWJEevpgoA3E6bMz9Y+YCCH+tqNadZtdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 18:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:28:0e:03:9b:db:a9:40:40:5a:02:39:01:6b:a9:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Mar 25 18:00:52 2026 GMT Not After : Mar 26 18:00:52 2026 GMT Subject: CN=8db42b9952544a8eccbc97caa19b2da71955b368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1b:23:88:89:4b:71:4b:44:d5:a3:63:82:58: 2c:01:5d:11:64:56:30:89:c9:81:c4:12:64:93:4f: b7:a1:fc:9b:33:73:5f:66:c2:7a:a7:58:47:ca:00: 42:0e:05:56:2b:3a:fe:78:70:8e:8c:6f:dd:72:59: 17:83:71:7f:0e:f8:a5:c6:60:dc:11:25:38:a1:ca: 51:f8:14:33:c4:2e:11:07:72:1c:08:60:d4:4c:d8: 90:a1:20:43:dd:81:d6:fc:c4:6c:9b:75:65:9d:c7: b1:49:ec:41:cb:c5:f7:ce:f7:93:ed:a2:50:b3:77: 16:77:87:aa:fa:07:3c:f0:50:de:80:a5:86:c9:72: d1:06:a8:bb:59:24:76:44:80:2d:98:6d:13:db:7c: 90:94:65:82:1a:84:fe:db:95:e0:e7:ec:f7:91:72: 75:d4:8c:71:0a:74:74:1a:c2:70:40:3b:15:33:c0: 7f:26:e6:06:dd:d9:9f:8d:d5:70:fa:7f:15:c8:e8: 7e:e0:2f:7f:35:b6:cb:85:6c:d9:ec:db:8a:e6:be: 50:9a:33:df:c7:78:9f:e8:9a:f9:4f:9a:54:56:4e: 84:62:60:f7:0d:f2:40:0a:1f:48:93:da:b8:c5:51: 2f:6b:f8:cc:14:25:d0:69:c8:c3:80:f6:54:54:23: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B4:2B:99:52:54:4A:8E:CC:BC:97:CA:A1:9B:2D:A7:19:55:B3:68 X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:59:f0:d0:54:9c:73:ad:fa:9c:22:e5:3f:01:43:00:91:32: 31:80:4e:f9:79:68:e6:24:06:b8:7b:41:5b:78:98:6e:ff:1f: 8b:72:e7:29:ac:92:9e:5a:b1:f0:3c:a5:c4:12:26:1e:80:47: 2b:e5:c3:83:39:23:45:fd:57:d3:0f:f5:4f:6a:1e:66:8f:c0: 94:2a:4e:78:f6:0f:8a:d2:b5:37:7f:39:a1:fe:ea:9c:6e:9c: f8:2a:f8:d7:fd:3a:8e:2a:4a:1e:2e:22:6d:fd:03:a5:32:3b: f6:38:57:93:57:ad:1e:17:9d:6b:20:2e:2b:4a:9b:6b:a6:01: a8:ea:e8:3c:3a:af:46:8e:aa:83:7e:bd:e8:b1:7f:5f:eb:60: 51:5e:88:20:82:bf:cd:51:f4:11:1c:e1:68:29:79:c9:ab:cb: 21:53:92:17:d3:4e:40:c4:d1:34:44:b7:47:82:b1:ca:28:3b: 88:f9:b1:7b:29:f2:99:3e:e2:11:4b:82:e3:9c:2c:77:03:e3: 7d:f9:d3:40:8f:72:5a:1a:01:dd:a1:20:ea:e9:da:83:84:cd: 77:0a:6e:5e:67:bc:81:ae:4e:f2:9a:47:3b:91:79:cf:1c:36: 25:35:e5:3c:0d:c3:b3:66:2c:17:59:ac:db:7f:73:44:eb:5d: 06:34:c0:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mKA4Dm9upQEBaAjkBa6kxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjYwMzI1MTgwMDUyWhcNMjYwMzI2MTgwMDUyWjAzMTEwLwYDVQQD Eyg4ZGI0MmI5OTUyNTQ0YThlY2NiYzk3Y2FhMTliMmRhNzE5NTViMzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhsjiIlLcUtE1aNjglgsAV0RZFYw icmBxBJkk0+3ofybM3NfZsJ6p1hHygBCDgVWKzr+eHCOjG/dclkXg3F/DvilxmDc ESU4ocpR+BQzxC4RB3IcCGDUTNiQoSBD3YHW/MRsm3VlncexSexBy8X3zveT7aJQ s3cWd4eq+gc88FDegKWGyXLRBqi7WSR2RIAtmG0T23yQlGWCGoT+25Xg5+z3kXJ1 1IxxCnR0GsJwQDsVM8B/JuYG3dmfjdVw+n8VyOh+4C9/NbbLhWzZ7NuK5r5QmjPf x3if6Jr5T5pUVk6EYmD3DfJACh9Ik9q4xVEva/jMFCXQacjDgPZUVCPx1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI20K5lSVEqOzLyXyqGbLacZVbNoMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1nw0FSc c636nCLlPwFDAJEyMYBO+Xlo5iQGuHtBW3iYbv8fi3LnKaySnlqx8DylxBImHoBH K+XDgzkjRf1X0w/1T2oeZo/AlCpOePYPitK1N385of7qnG6c+Cr41/06jipKHi4i bf0DpTI79jhXk1etHhedayAuK0qba6YBqOroPDqvRo6qg3696LF/X+tgUV6IIIK/ zVH0ERzhaCl5yavLIVOSF9NOQMTRNES3R4Kxyig7iPmxeynymT7iEUuC45wsdwPj ffnTQI9yWhoB3aEg6unag4TNdwpuXme8ga5O8ppHO5F5zxw2JTXlPA3Ds2YsF1ms 239zROtdBjTAhA== -----END CERTIFICATE-----Generated at Thu Mar 26 04:59:07 2026 by rpki-client