$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft File: JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json) Hash identifier: pZJ04pOBgCoolcStacQaSjjW52YbKn7KNk6ymLGIyks= Subject key identifier: A8:5D:29:47:E5:BF:3D:DF:67:CE:B5:ED:E7:E7:14:24:89:EE:83:47 Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 01A0CDECA13F5C66761573854FE0B13901EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft Manifest number: 17C2 Signing time: Wed 23 Sep 2026 11:00:31 +0000 Manifest this update: Wed 23 Sep 2026 11:00:31 +0000 Manifest next update: Thu 24 Sep 2026 11:00:31 +0000 Files and hashes: 1: 1-J4PSDEl9d0llDjfWsIWQxWc6_I.roa (hash: ypQcjGIhT4f6yMw/Eo/q0CXm3np4TkiH1MrKx8KGA8U=) 2: FXvxd8iSb5UOqnUQemVQoiPFHr0.roa (hash: xAaj8WYWxsUYDp5IjPLpIHhUT6JTzTLFtyE0B9OOTCo=) 3: Hhk99kTP4LCptCcuzr46HrrOd-M.roa (hash: KKoc5a/NPGDFa/jCr9dayn05xHXif4MHgG7H+qe8WPY=) 4: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: hv6i50Znae16sL1yRl+FrDgOQnh68VdbulkSsGuSrrY=) 5: L1RzkfPfTsvXjCHGU9y2D9E0E90.roa (hash: 0f6/lFSOQ++NQjhLTXas3wh38lh/IbOn+eL45Gt4mH0=) 6: QAlAc_HBKVW9DIWsgBjzQBqlU_E.roa (hash: 01SGs9bF17s9PyhMPPV7iXjRmYd6onnnyv/wBFXQkVo=) 7: aFDzVrUv1Lh1tFcqGx2iUSN6t2Q.roa (hash: R1nEMHyCK4EFeYy8SvPh7cZUDUUFnN2AYX39p24Ukns=) 8: cH5zbNz1Wh4pKh9CZsUewwJjPYc.roa (hash: o7xAeOganmOKEfHkamPKsHaW6ANhyRw4vYPfGEPHmXY=) 9: ekIg_EozOl2eKAl7YxwTNudO2Ck.roa (hash: H4suzunJCL6M7y1bzbaVMfsdpvdTVp5XzrKgoj5v1bk=) 10: kJQG6geGOu2RAJRA_7GzYnIhBYQ.roa (hash: XUqqP9TjiZCkPcmNHG3SdvuU3ttO6pgsFTxEU7wHJZE=) 11: mw4aax5neyyO7biCg_R2Z4yrLVY.roa (hash: kswP+nDZIDDBYumEaipi/RTPJYiM8dVDU96MMsZcT28=) 12: nmDQzXrowDtDsmaT7IpPejjRWG0.roa (hash: GXfSa12Z+HzkUJgQU3oz+bpDRacv3sjfzvlZHnK3Bnk=) 13: rlGWAgfAA94vdNw8Yce_2JC5ZQ0.roa (hash: mDS85C7fKFjtrZ9jEwtQ1X6vTpwU05nL4sqzCM649dA=) 14: x0Q_UA5bt6672Dm9-Yp-CrnW3nQ.roa (hash: ITlCsYh8cqhggq4VF3aslLQZ6vv7ci4qGlAuU+En704=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 11:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:ec:a1:3f:5c:66:76:15:73:85:4f:e0:b1:39:01:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Sep 23 11:00:31 2026 GMT Not After : Sep 24 11:00:31 2026 GMT Subject: CN=a85d2947e5bf3ddf67ceb5ede7e7142489ee8347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5e:04:28:e0:34:97:9b:5c:9f:73:e8:ec:d8: 0b:8f:19:1a:81:35:c8:b2:41:af:dc:01:c9:fe:ea: 44:77:aa:14:40:be:e6:f7:1a:2d:de:12:2c:dc:f3: 82:70:47:ed:77:dd:91:1b:62:eb:d1:d1:20:4e:53: e9:3d:11:a7:ac:5f:c6:0c:0d:3d:dd:b4:c1:3a:e2: 8a:8e:9b:04:22:1d:02:46:46:5c:82:7a:09:4e:d4: c1:ad:8f:3e:5f:48:bd:cf:16:71:7e:3b:f2:44:aa: ec:65:19:c8:66:1e:74:cb:e8:44:39:9f:b1:7f:61: ca:53:11:94:13:7a:26:bc:b6:0e:3f:97:f9:b0:fc: 73:35:29:7a:d7:2d:66:e2:1c:cd:7c:40:34:3d:3d: a7:40:ed:8a:f4:bd:bf:69:e0:77:4a:7a:6f:74:cb: 40:b2:e2:08:bb:d8:2b:67:a1:4d:1a:32:04:aa:78: 45:3b:88:ef:9a:6e:d6:a7:63:af:3c:ee:61:c4:ef: 00:b1:03:bd:b1:b5:28:50:3a:5e:c9:ea:ce:eb:0d: 24:4d:01:37:c4:5c:01:e3:10:4c:f1:05:ba:75:13: 46:75:65:de:85:0d:26:a7:6e:cc:27:f1:91:67:37: 89:a2:26:c2:42:45:c1:49:7e:3b:8a:d2:89:41:a6: 32:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5D:29:47:E5:BF:3D:DF:67:CE:B5:ED:E7:E7:14:24:89:EE:83:47 X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e4:4e:6f:17:ae:d6:48:30:18:ad:3c:9c:82:45:6a:9a:ec: 93:5d:ce:dd:1a:75:a6:4b:35:11:47:c7:47:c7:4f:a5:75:ce: f4:4a:df:08:49:24:5f:d5:0a:44:c4:24:96:36:e7:d9:63:11: 7e:ae:88:ae:4d:8b:eb:79:56:1b:9b:ee:0e:94:1b:ff:55:98: ab:95:9d:3f:2e:33:39:05:48:21:52:30:a9:0d:27:73:98:09: 52:0c:6b:34:fd:6d:7e:05:15:70:24:50:10:02:90:d7:0a:4e: a3:8d:83:7d:63:1c:2e:dd:81:e6:56:3c:1b:74:8e:39:ab:ea: c5:dc:04:b9:a0:6a:45:a7:d1:e3:48:e2:62:4b:dd:f9:9f:71: e7:f6:e0:6a:4c:39:0d:59:bc:4a:64:b9:46:ab:f4:68:85:f2: fc:04:99:57:ba:24:49:37:f8:97:01:51:e5:71:6f:e0:54:d4: 12:3d:09:43:09:37:3a:1e:d4:2d:c0:25:75:74:87:b0:4e:0c: 75:73:27:56:f2:33:18:d0:1f:1e:77:30:ac:cb:dd:8d:ff:0b: 47:f6:31:c8:ab:69:5f:8d:aa:5d:c6:8e:3a:e4:bf:31:7d:48: 02:39:04:79:1d:de:1d:f4:17:67:c0:1d:b0:43:f5:6f:f5:30: 05:74:48:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDN7KE/XGZ2FXOFT+CxOQHrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjYwOTIzMTEwMDMxWhcNMjYwOTI0MTEwMDMxWjAzMTEwLwYDVQQD EyhhODVkMjk0N2U1YmYzZGRmNjdjZWI1ZWRlN2U3MTQyNDg5ZWU4MzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl4EKOA0l5tcn3Po7NgLjxkagTXI skGv3AHJ/upEd6oUQL7m9xot3hIs3POCcEftd92RG2Lr0dEgTlPpPRGnrF/GDA09 3bTBOuKKjpsEIh0CRkZcgnoJTtTBrY8+X0i9zxZxfjvyRKrsZRnIZh50y+hEOZ+x f2HKUxGUE3omvLYOP5f5sPxzNSl61y1m4hzNfEA0PT2nQO2K9L2/aeB3SnpvdMtA suIIu9grZ6FNGjIEqnhFO4jvmm7Wp2OvPO5hxO8AsQO9sbUoUDpeyerO6w0kTQE3 xFwB4xBM8QW6dRNGdWXehQ0mp27MJ/GRZzeJoibCQkXBSX47itKJQaYyYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhdKUflvz3fZ8617efnFCSJ7oNHMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnuRObxeu 1kgwGK08nIJFaprsk13O3Rp1pks1EUfHR8dPpXXO9ErfCEkkX9UKRMQkljbn2WMR fq6Irk2L63lWG5vuDpQb/1WYq5WdPy4zOQVIIVIwqQ0nc5gJUgxrNP1tfgUVcCRQ EAKQ1wpOo42DfWMcLt2B5lY8G3SOOavqxdwEuaBqRafR40jiYkvd+Z9x5/bgakw5 DVm8SmS5Rqv0aIXy/ASZV7okSTf4lwFR5XFv4FTUEj0JQwk3Oh7ULcAldXSHsE4M dXMnVvIzGNAfHncwrMvdjf8LR/YxyKtpX42qXcaOOuS/MX1IAjkEeR3eHfQXZ8Ad sEP1b/UwBXRI/w== -----END CERTIFICATE-----Generated at Wed Sep 23 21:02:57 2026 by rpki-client