$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft File: jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft (raw, json) Hash identifier: IU+F0KrFCS0f0cmetsfRlRvFsR+++3grP0WlKNvLl1w= Subject key identifier: AB:63:88:E7:F3:EA:F6:49:75:9E:CC:7C:07:98:EE:A8:82:CD:4C:2C Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24 Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624 Certificate serial: 019830B8E2A8F6FEBDFAD309E1303488F6C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft Manifest number: 0EDB Signing time: Tue 22 Jul 2025 06:01:19 +0000 Manifest this update: Tue 22 Jul 2025 06:01:19 +0000 Manifest next update: Wed 23 Jul 2025 06:01:19 +0000 Files and hashes: 1: 0JcOAjVYzD7ATTRTY6zM_FW7ibk.roa (hash: ae6zh695aCdxOBAb92vW9Mqs/ewqcDH7wayEClXo5lU=) 2: 1-Y2dKMtSX_HHImXALZ9Ywq-mBt0.roa (hash: 7qyTbmtwccyXrpltxd1wqJPnd+/MFLmBgiiCsu8AQkU=) 3: 2QTRX3rMARDGeCqwmM0inJSU1I8.roa (hash: JqKkV8sJ2151XjqigefJVjz+CjQivqO6Q6p2fwfafME=) 4: 9fRtydBjgnhbFaykZOo5uuxjF38.roa (hash: RH3Om+bNuUzjZrbi9dURSTYAb514YDgcJdJj7pg2lZE=) 5: EY7ogwruZGSD63obEpUnqn0nkuo.roa (hash: eHBlu7ijObgowuU+joBjfNNXkGVZmY2eT3u/EnffphU=) 6: HJWy01pqJrtg2Vo5SudbPdEEkd4.roa (hash: Vr6k9Sg54f+U5YuclxncYArpuGy+CEnoAy/c+X99oH4=) 7: IYKB-HSEiCq4O7HvrSnxClTqE4I.roa (hash: HbfqesX7Z3CjfGeH5MdNYm5FcZQ54JXRPRk/orWo/qA=) 8: PT8j9eHtg5ttD87ZTwg2GzdumEg.roa (hash: 6rQ85ph5sdL+xNggsMfKZpzXGn+sK3MhYgm3m97nS/I=) 9: ZlUjZQcl9nR0SUVxsgzMhtk30HU.roa (hash: RueFoN4i6RiouAbfwEgZPqUPq4WVTXhPv6TjG8c7n5M=) 10: _K57y8dAfTW_4za5nQ1yw_fKnZI.roa (hash: Rymw72FXGoLgMvCj/WyEf1Es/Ms+t2XEE94XwkN2BgM=) 11: aAifBze_JXbbUHJNy418NFONnUo.roa (hash: rLLARXHfwNDLekNJ80A4f1i0LwTr3pN9Pr1HKxuL2t0=) 12: foR2m61HjPqfHMhA9Ix6Kf8yr6M.roa (hash: maf/3FkUEYfY53s6cIQgES3ADrhkolDvLrwLZz7ie3E=) 13: g6TYrOiqfeY_zc4wZ63S9GaTHtA.roa (hash: McFJsvyZf/CJB69UHaeJLyOzFI33CZnDxz9asvMb9+k=) 14: hiMcEIjHUWN5FsB7VlVyAr5izXE.roa (hash: 6yVp6mlnWSD0tIxqmD2GQ7svu30uQXkMfzEBlI3SWXo=) 15: jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl (hash: 0gc3jAfWSXxgjpeFtzHAcosnkC++RC0zASrmUhEVFjM=) 16: mXX0pAjU5w8oM8Kw23jhrgx4Wvk.roa (hash: sc8dapOFwgxs0Xrg6eWIDXxwfzY184TsGMxeq92yyGI=) 17: o0ZwaYj89qD05J13n0pZ23X4IIA.roa (hash: Y8iKBwsONnOxQpFezT8Qy8hc9RHNcwVnuvC+XOuLtNY=) 18: ySGM40xeAZyu32ERIMnkJoio4hw.roa (hash: w5mMTd2fQSF1PurNOaDTdU1aGhD+Vitko+NZO/EWYYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 06:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:30:b8:e2:a8:f6:fe:bd:fa:d3:09:e1:30:34:88:f6:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624 Validity Not Before: Jul 22 06:01:19 2025 GMT Not After : Jul 23 06:01:19 2025 GMT Subject: CN=ab6388e7f3eaf649759ecc7c0798eea882cd4c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:73:04:d5:fd:8b:84:3b:bc:7c:f8:0c:8e:b0: f7:27:cd:e1:4c:54:9a:8b:39:1e:f8:b3:b5:39:db: 9a:d4:da:b1:15:33:e3:35:c1:86:a5:50:ac:a0:c1: 31:41:13:39:86:0b:d6:c7:1c:60:79:bb:b9:d0:bf: 3d:7c:b1:ea:a7:07:c9:e1:63:73:bf:5b:d7:f3:b2: d3:cf:b6:59:7e:13:ec:d7:67:f3:b4:2b:25:ff:02: db:9a:e5:67:36:e1:7c:6a:2e:96:38:cd:2e:29:e2: 6f:66:26:1d:1b:e3:8d:7b:39:1f:a6:bc:9f:83:aa: 83:60:4a:9b:07:2a:06:43:fe:b8:19:a1:80:52:55: 41:b4:2e:74:aa:b6:b4:3a:b8:b8:63:67:30:2d:29: 67:62:4f:76:e5:f0:6f:d7:ec:3d:52:88:95:d9:b5: 00:0d:67:91:0f:6e:ce:5c:af:c3:80:ec:93:82:02: 31:d6:97:28:18:8d:23:95:49:f7:2e:81:a4:c8:2e: ba:4c:0e:3c:2c:be:07:c6:af:14:15:9c:f5:1f:08: 30:ce:05:9a:c8:ed:5a:5f:97:36:09:5f:80:2f:b7: 61:a0:e7:a4:21:7c:4d:37:99:13:58:0f:a7:a0:0a: fd:f8:62:df:c6:27:96:f0:13:95:34:70:a5:74:e5: 03:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:63:88:E7:F3:EA:F6:49:75:9E:CC:7C:07:98:EE:A8:82:CD:4C:2C X509v3 Authority Key Identifier: keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:08:e7:7a:e3:02:ee:09:23:5b:1b:07:dc:7f:ce:75:5d:26: 9f:71:86:e2:82:85:8e:ac:da:d0:36:0f:24:c9:f1:7e:28:39: ab:af:d7:16:39:4d:53:c6:aa:07:5b:f4:62:b1:2e:75:83:37: 8d:43:00:ac:92:f0:a8:9e:eb:1f:ad:f0:2a:a7:ff:03:a6:96: 59:94:b0:d3:fb:85:c6:90:8a:ca:da:e2:c4:03:42:b8:c7:9c: 71:a6:59:79:f6:ab:c1:a5:6b:fa:06:f3:9c:e0:0b:de:cd:ce: d6:55:15:7e:4e:2a:79:60:8b:ae:d0:74:07:65:8a:3f:df:fc: 71:a4:c9:a0:e2:b9:2d:28:b8:6d:e1:5a:d1:6d:a2:f9:6a:23: 1e:41:b1:a4:de:7a:03:4d:4d:f4:10:cb:43:c4:21:4c:c9:00: 4b:26:30:14:be:b9:58:66:a6:13:79:1c:9b:cc:20:83:4d:87: 85:e6:3b:71:2c:1d:a8:aa:3f:31:c4:b8:a8:5f:17:98:6d:d3: ac:1d:7f:c7:3e:34:b4:46:7c:14:82:75:7e:69:48:7d:62:05: 6c:e9:ba:f3:5f:1f:7a:28:f8:0c:0d:8a:2f:19:7e:7c:ba:a3: 47:d9:8d:10:20:c8:d7:af:e0:32:f2:c7:b4:dc:06:05:78:62: 89:d2:98:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgwuOKo9v69+tMJ4TA0iPbCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjI2YzkwOWViNDk1MTE1NGJjZWU4MjIxZTQzOTUxYjQy NTc2MjQwHhcNMjUwNzIyMDYwMTE5WhcNMjUwNzIzMDYwMTE5WjAzMTEwLwYDVQQD EyhhYjYzODhlN2YzZWFmNjQ5NzU5ZWNjN2MwNzk4ZWVhODgyY2Q0YzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nME1f2LhDu8fPgMjrD3J83hTFSa izke+LO1Odua1NqxFTPjNcGGpVCsoMExQRM5hgvWxxxgebu50L89fLHqpwfJ4WNz v1vX87LTz7ZZfhPs12fztCsl/wLbmuVnNuF8ai6WOM0uKeJvZiYdG+ONezkfpryf g6qDYEqbByoGQ/64GaGAUlVBtC50qra0Ori4Y2cwLSlnYk925fBv1+w9UoiV2bUA DWeRD27OXK/DgOyTggIx1pcoGI0jlUn3LoGkyC66TA48LL4Hxq8UFZz1HwgwzgWa yO1aX5c2CV+AL7dhoOekIXxNN5kTWA+noAr9+GLfxieW8BOVNHCldOUD5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtjiOfz6vZJdZ7MfAeY7qiCzUwsMB8GA1UdIwQY MBaAFI5ibJCetJURVLzugiHkOVG0JXYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAt ZTk3ZDFkMDIyMGFmLzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAtZTk3ZDFkMDIyMGFm LzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegjneuMC 7gkjWxsH3H/OdV0mn3GG4oKFjqza0DYPJMnxfig5q6/XFjlNU8aqB1v0YrEudYM3 jUMArJLwqJ7rH63wKqf/A6aWWZSw0/uFxpCKytrixANCuMeccaZZefarwaVr+gbz nOAL3s3O1lUVfk4qeWCLrtB0B2WKP9/8caTJoOK5LSi4beFa0W2i+WojHkGxpN56 A01N9BDLQ8QhTMkASyYwFL65WGamE3kcm8wgg02HheY7cSwdqKo/McS4qF8XmG3T rB1/xz40tEZ8FIJ1fmlIfWIFbOm6818feij4DA2KLxl+fLqjR9mNECDI16/gMvLH tNwGBXhiidKYBA== -----END CERTIFICATE-----Generated at Tue Jul 22 11:56:26 2025 by rpki-client