$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft File: JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json) Hash identifier: RBm+0V4FwrVMdEyI3cJm6hIgkaR0c8LsKNfpUvOKgX0= Subject key identifier: A0:8E:E2:5A:7B:AC:AE:E9:61:EC:FF:AD:E9:D8:40:DA:22:67:B1:B9 Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 01A0CFDB21077885F792908FE12B0DC6E31A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft Manifest number: 17C3 Signing time: Wed 23 Sep 2026 20:00:39 +0000 Manifest this update: Wed 23 Sep 2026 20:00:39 +0000 Manifest next update: Thu 24 Sep 2026 20:00:39 +0000 Files and hashes: 1: 1-J4PSDEl9d0llDjfWsIWQxWc6_I.roa (hash: ypQcjGIhT4f6yMw/Eo/q0CXm3np4TkiH1MrKx8KGA8U=) 2: FXvxd8iSb5UOqnUQemVQoiPFHr0.roa (hash: xAaj8WYWxsUYDp5IjPLpIHhUT6JTzTLFtyE0B9OOTCo=) 3: Hhk99kTP4LCptCcuzr46HrrOd-M.roa (hash: KKoc5a/NPGDFa/jCr9dayn05xHXif4MHgG7H+qe8WPY=) 4: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: 259wzlv4y4apsPRyJNYzrkunBFwwrs2Nwi7RgcVd8Rg=) 5: L1RzkfPfTsvXjCHGU9y2D9E0E90.roa (hash: 0f6/lFSOQ++NQjhLTXas3wh38lh/IbOn+eL45Gt4mH0=) 6: QAlAc_HBKVW9DIWsgBjzQBqlU_E.roa (hash: 01SGs9bF17s9PyhMPPV7iXjRmYd6onnnyv/wBFXQkVo=) 7: aFDzVrUv1Lh1tFcqGx2iUSN6t2Q.roa (hash: R1nEMHyCK4EFeYy8SvPh7cZUDUUFnN2AYX39p24Ukns=) 8: cH5zbNz1Wh4pKh9CZsUewwJjPYc.roa (hash: o7xAeOganmOKEfHkamPKsHaW6ANhyRw4vYPfGEPHmXY=) 9: ekIg_EozOl2eKAl7YxwTNudO2Ck.roa (hash: H4suzunJCL6M7y1bzbaVMfsdpvdTVp5XzrKgoj5v1bk=) 10: kJQG6geGOu2RAJRA_7GzYnIhBYQ.roa (hash: XUqqP9TjiZCkPcmNHG3SdvuU3ttO6pgsFTxEU7wHJZE=) 11: mw4aax5neyyO7biCg_R2Z4yrLVY.roa (hash: kswP+nDZIDDBYumEaipi/RTPJYiM8dVDU96MMsZcT28=) 12: nmDQzXrowDtDsmaT7IpPejjRWG0.roa (hash: GXfSa12Z+HzkUJgQU3oz+bpDRacv3sjfzvlZHnK3Bnk=) 13: rlGWAgfAA94vdNw8Yce_2JC5ZQ0.roa (hash: mDS85C7fKFjtrZ9jEwtQ1X6vTpwU05nL4sqzCM649dA=) 14: x0Q_UA5bt6672Dm9-Yp-CrnW3nQ.roa (hash: ITlCsYh8cqhggq4VF3aslLQZ6vv7ci4qGlAuU+En704=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:db:21:07:78:85:f7:92:90:8f:e1:2b:0d:c6:e3:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Sep 23 20:00:39 2026 GMT Not After : Sep 24 20:00:39 2026 GMT Subject: CN=a08ee25a7bacaee961ecffade9d840da2267b1b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:61:8d:43:80:3a:46:52:cf:df:79:a2:ca:f0: 36:fd:80:c0:a6:92:d7:26:8b:c6:92:8c:c8:02:ef: f4:68:88:33:92:de:de:2d:fb:a3:b4:e1:5b:f7:29: 09:4e:1c:97:e8:88:bc:55:85:fe:8a:fb:fd:1a:f0: 86:21:78:75:78:ed:c9:97:a1:ef:22:76:e6:bd:ab: 4b:a0:cf:fa:00:07:2b:50:07:2c:8a:b8:ee:26:53: 3f:6e:bd:72:0e:8e:16:61:02:ab:a4:b5:94:bc:14: ae:ac:7a:83:ad:18:5d:fc:f3:7b:40:f5:12:3d:43: c2:af:29:63:ae:04:23:46:ba:85:bd:17:ef:96:a5: a1:9c:3a:5b:d9:25:52:04:21:61:9d:1d:58:d5:4b: b5:85:f2:6f:9f:87:e8:78:9d:07:67:50:34:79:f6: 28:23:c6:53:55:f7:04:5e:3c:11:48:b8:1c:82:f9: 64:f2:01:34:e3:0a:08:92:d9:2e:c5:5a:0c:98:c0: 82:68:c8:10:01:8e:0e:a6:63:7a:95:6e:d4:c9:64: bd:69:b9:88:c7:f2:ca:7e:8c:48:b1:27:66:06:cf: 70:e5:3e:61:81:f1:02:bf:85:06:df:af:c3:b3:36: 5f:6b:68:78:be:12:b1:a9:06:85:63:f2:c0:ae:2f: 72:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8E:E2:5A:7B:AC:AE:E9:61:EC:FF:AD:E9:D8:40:DA:22:67:B1:B9 X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:74:b4:f3:fd:5d:5f:1c:70:17:09:32:01:14:26:2e:d5:e8: 45:13:7f:5e:07:a0:15:78:25:ff:dc:70:f2:74:77:67:82:85: 14:e8:a0:9f:de:e0:77:91:50:a6:7d:07:f9:e1:1f:c9:15:cc: 42:8d:88:d8:4d:b5:bf:26:41:7d:98:b6:e3:37:f4:46:d5:88: 5d:48:57:89:ca:60:1f:3e:fd:e2:0d:99:cd:76:ef:a3:67:ac: 6a:52:3c:75:39:4f:fd:60:6c:7d:de:ae:50:aa:4b:65:8d:c7: ac:94:be:d8:80:fa:0a:b1:91:6e:e5:a6:ff:f3:ff:29:92:5e: 75:81:e0:a8:29:31:82:98:08:ac:dc:57:27:b5:5f:b9:df:1f: 3c:ad:15:16:7d:70:2c:4e:1f:a3:7e:a7:92:b9:30:89:f1:ae: 26:60:f9:01:6d:6a:19:4d:60:d9:f1:20:ea:2c:4f:49:25:d3: f8:2f:36:21:93:f2:8e:6a:ca:04:21:37:a3:aa:e3:76:b5:4a: 00:dd:cb:73:3f:1c:5d:53:90:4e:8b:af:f4:43:fa:da:dd:0a: 83:a6:67:a2:78:02:b6:61:f9:76:df:9e:50:6b:31:29:90:66: 05:27:0f:fb:13:59:d3:74:21:89:29:70:61:5d:3b:28:cb:9c: 30:1b:d5:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDP2yEHeIX3kpCP4SsNxuMaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjYwOTIzMjAwMDM5WhcNMjYwOTI0MjAwMDM5WjAzMTEwLwYDVQQD EyhhMDhlZTI1YTdiYWNhZWU5NjFlY2ZmYWRlOWQ4NDBkYTIyNjdiMWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWGNQ4A6RlLP33miyvA2/YDAppLX JovGkozIAu/0aIgzkt7eLfujtOFb9ykJThyX6Ii8VYX+ivv9GvCGIXh1eO3Jl6Hv InbmvatLoM/6AAcrUAcsirjuJlM/br1yDo4WYQKrpLWUvBSurHqDrRhd/PN7QPUS PUPCryljrgQjRrqFvRfvlqWhnDpb2SVSBCFhnR1Y1Uu1hfJvn4foeJ0HZ1A0efYo I8ZTVfcEXjwRSLgcgvlk8gE04woIktkuxVoMmMCCaMgQAY4OpmN6lW7UyWS9abmI x/LKfoxIsSdmBs9w5T5hgfECv4UG36/DszZfa2h4vhKxqQaFY/LAri9ysQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCO4lp7rK7pYez/renYQNoiZ7G5MB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXS08/1d XxxwFwkyARQmLtXoRRN/XgegFXgl/9xw8nR3Z4KFFOign97gd5FQpn0H+eEfyRXM Qo2I2E21vyZBfZi24zf0RtWIXUhXicpgHz794g2ZzXbvo2esalI8dTlP/WBsfd6u UKpLZY3HrJS+2ID6CrGRbuWm//P/KZJedYHgqCkxgpgIrNxXJ7Vfud8fPK0VFn1w LE4fo36nkrkwifGuJmD5AW1qGU1g2fEg6ixPSSXT+C82IZPyjmrKBCE3o6rjdrVK AN3Lcz8cXVOQTouv9EP62t0Kg6ZnongCtmH5dt+eUGsxKZBmBScP+xNZ03QhiSlw YV07KMucMBvVxg== -----END CERTIFICATE-----Generated at Wed Sep 23 23:14:12 2026 by rpki-client