$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft File: JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json) Hash identifier: PS0BhIxi9e41SERRbhmQiqX+jN4ztNNO7cX8Sx10zSg= Subject key identifier: DE:61:01:84:0E:FB:F6:70:03:C7:0D:6A:88:A4:6F:83:CF:1C:7E:89 Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 01982890B404C19CC7AE44720581F3465E8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft Manifest number: 132B Signing time: Sun 20 Jul 2025 16:00:28 +0000 Manifest this update: Sun 20 Jul 2025 16:00:28 +0000 Manifest next update: Mon 21 Jul 2025 16:00:28 +0000 Files and hashes: 1: 1GXRp3uT7hSMRzWjOxU0QktVRiY.roa (hash: aqIqmb81zi2cD6sMblBWQoAdH8B6EoMHMa2iFTOnb0c=) 2: 7w1YPyzlBEZNMOyEUCFkNc0ECPQ.roa (hash: 0dazsLMYx/MeDO19uGuuYzM5rCd3NgH7NYuHWn+o7Y8=) 3: 8TY-Hfd5q5Rj4MUhE7CmY31LHyc.roa (hash: vPKsfH2lh7SZOShxHi9r8ed3IerCum4ryQQ50mXWvmI=) 4: 9S6VN8W0AB42Tjfsy_52eVj_HF8.roa (hash: U/0clwp2HZIEVyJ8jDxjulKSBf1aha8MkLQgHpOloog=) 5: ASXdDgGnh8Klj0fzlnnnOhv5loU.roa (hash: wWWbyDkcRSYhjOCMVp5ySQLPVFoGVo9Lc8yvPSW0eIM=) 6: FCh0pju_b1XDjIA8N5RktFi16SI.roa (hash: nzz37F+/F7FQRtoCdt1NMVOBQ7kMdP9rhDen0hB2f8U=) 7: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: oWTnVqUrvIjeLx8zrctHToXPuTfGQIZ7lU//Gy6VixU=) 8: KKECh8K7hNffHVDT8ywINErgd1U.roa (hash: jFVe6x1L0XuZf3m6Z9ZwhiY43bHKM8ZXgM5AwxJ+SJ4=) 9: Neg-GaKgdY6gnpXCEHzkL9JlhS0.roa (hash: YgY5UaAq6hQXGaoygI0YizLwZ/ppqq3rjPmBhu92jjc=) 10: QBe6vAE6rYSA8KCQoO7i8f2keWY.roa (hash: /ZgtoN8+dacZMoQUvXB0j9wPVe+O1WRxUSH58QMyIv8=) 11: VuBKMZZHrZ1QSjnK1f8rGYyQD34.roa (hash: Yy9aJSbZa8jisjdlzD3JGDY9sTvRVpXk74KknU+efOI=) 12: XkXy4rFVu6JKAbUcEbjCs_ol8Mc.roa (hash: KEboU/fmZ1raaMqRFHeXS/DA8vof1Lf7hts2MdqUMFk=) 13: ZMDHfiorAQeHiAr2VSo31IrsX9Y.roa (hash: 2rW77gP54+olCRPQkqdpt6U7rC4Eivix0JgQsNBRA0A=) 14: b9LZtPjPcGkqch-QIMPmNiY1GfY.roa (hash: wVwwQPvK556ifQMFCqlsaWU8LCMEwKfjuZYfw4kZ7Ug=) 15: eq_1NPXQGhoWTMBNC9PaXKKEltM.roa (hash: Hq4HlvjEPgU16G6jBR0u/BxOO81trhl4PXHhgLXPBd4=) 16: u1jdAQ2eshDqHXq4UFjEjcuXmsI.roa (hash: 7O01VUQlx2/5mCx+t4SgO9Lggi1VIhx12oZO6kEvwsM=) 17: vhjrtMMdROIFj167BFR3pGrdrb8.roa (hash: mHe16RuP6X+5Fin2ZffJO/Ym51XZo7pnKG1BIGBPcUQ=) 18: vtNeTxZnHuMsF3rl3ZSPlMog7F0.roa (hash: FfGF+21HwGvE0iZhE2YJptjryuHFZ0BNSqu9xGqCr6Q=) 19: xtI4FxymYzhmmmKad9ZOkzTos1E.roa (hash: Xd4WHKpPZgsYedQWZYH07M7z75l0J2MM4sU9jDdQuXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:28:90:b4:04:c1:9c:c7:ae:44:72:05:81:f3:46:5e:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Jul 20 16:00:28 2025 GMT Not After : Jul 21 16:00:28 2025 GMT Subject: CN=de6101840efbf67003c70d6a88a46f83cf1c7e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bc:f5:c5:0e:c9:e7:a5:b9:78:f8:c5:76:a3: 5b:3f:54:cb:2f:33:69:35:70:bf:c8:59:65:ac:ed: 2a:50:f0:39:f5:c5:96:fc:9e:d2:cb:58:1a:bb:27: 3d:c3:f5:ad:de:5e:41:e8:02:a1:45:32:00:3b:19: 62:76:2f:29:d5:5c:73:fd:ee:3c:d6:a3:68:fd:8f: ff:bb:63:aa:0b:42:fe:eb:c7:02:11:df:99:1b:85: 9d:28:89:6e:97:7f:00:d2:36:97:66:4d:70:a9:90: ae:b3:c7:f2:06:92:f3:b9:8d:35:b5:b2:20:20:0e: c2:71:bc:3e:3b:a2:31:0a:c3:ed:d4:89:b7:a5:2f: 7e:d4:5e:3e:20:b5:d2:3e:66:82:be:96:e5:ff:68: 38:6d:e9:b1:4d:61:3d:fa:3a:8c:02:d7:44:e4:9e: 40:0b:2d:1d:d9:73:6d:a6:af:4b:a5:81:43:65:e2: 2f:b5:12:58:1c:a0:c2:4e:15:cc:f5:33:49:d9:ef: b5:e6:0f:2a:4f:cb:93:99:06:9c:70:96:d5:69:9d: 36:a1:c0:87:99:35:fe:e8:4e:05:b8:39:0c:40:0d: 49:1e:51:56:d8:4a:1d:44:4f:c9:e4:14:8f:e5:9e: 8e:ff:95:1e:13:61:a0:62:b4:9e:c7:44:05:ad:24: bd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:61:01:84:0E:FB:F6:70:03:C7:0D:6A:88:A4:6F:83:CF:1C:7E:89 X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:57:f2:26:70:94:8d:77:2b:0a:b9:21:f9:95:13:d2:db:4a: 73:9f:04:00:f5:52:04:15:8b:18:c5:85:0a:2b:ca:88:a4:bf: 69:9e:8d:3c:54:74:a8:0e:b8:a2:90:7e:0f:4a:5a:98:10:46: 4e:9c:ba:27:65:1d:73:b0:57:cb:a9:ef:b3:1d:5f:5f:d8:6c: 1a:8a:74:64:1f:61:21:b9:c8:2b:c3:6e:06:dc:dc:a8:92:40: 34:a3:79:91:20:6f:a1:6e:77:db:4b:c3:dc:7b:66:d7:14:47: 28:30:d1:89:48:16:ce:d7:f1:02:7e:19:fc:37:ee:f2:dc:63: ae:ed:ab:ba:ee:a2:71:58:82:32:bb:93:09:2e:e5:42:21:32: a2:89:6b:4b:d4:b1:1a:de:ee:77:2f:b6:ac:d5:a7:9d:15:92: 89:99:0d:20:d3:c7:b6:24:3d:fc:f9:45:5d:18:4f:6a:cb:28: 80:66:10:e1:92:6e:62:25:be:e0:87:a3:35:de:0d:2f:83:03: a8:e9:00:97:31:5d:9e:44:d4:a1:d7:4d:47:f7:15:7b:32:6b: 0b:cd:3d:c0:fd:67:e5:58:a3:90:63:48:41:e0:ca:f1:77:12: 14:b2:34:ec:7c:51:be:15:17:80:8b:87:ec:39:9a:7f:75:5c: 30:e3:7f:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgokLQEwZzHrkRyBYHzRl6PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjUwNzIwMTYwMDI4WhcNMjUwNzIxMTYwMDI4WjAzMTEwLwYDVQQD EyhkZTYxMDE4NDBlZmJmNjcwMDNjNzBkNmE4OGE0NmY4M2NmMWM3ZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbz1xQ7J56W5ePjFdqNbP1TLLzNp NXC/yFllrO0qUPA59cWW/J7Sy1gauyc9w/Wt3l5B6AKhRTIAOxlidi8p1Vxz/e48 1qNo/Y//u2OqC0L+68cCEd+ZG4WdKIlul38A0jaXZk1wqZCus8fyBpLzuY01tbIg IA7Ccbw+O6IxCsPt1Im3pS9+1F4+ILXSPmaCvpbl/2g4bemxTWE9+jqMAtdE5J5A Cy0d2XNtpq9LpYFDZeIvtRJYHKDCThXM9TNJ2e+15g8qT8uTmQaccJbVaZ02ocCH mTX+6E4FuDkMQA1JHlFW2EodRE/J5BSP5Z6O/5UeE2GgYrSex0QFrSS9oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5hAYQO+/ZwA8cNaoikb4PPHH6JMB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1fyJnCU jXcrCrkh+ZUT0ttKc58EAPVSBBWLGMWFCivKiKS/aZ6NPFR0qA64opB+D0pamBBG Tpy6J2Udc7BXy6nvsx1fX9hsGop0ZB9hIbnIK8NuBtzcqJJANKN5kSBvoW5320vD 3Htm1xRHKDDRiUgWztfxAn4Z/Dfu8txjru2ruu6icViCMruTCS7lQiEyoolrS9Sx Gt7udy+2rNWnnRWSiZkNINPHtiQ9/PlFXRhPassogGYQ4ZJuYiW+4IejNd4NL4MD qOkAlzFdnkTUoddNR/cVezJrC809wP1n5VijkGNIQeDK8XcSFLI07HxRvhUXgIuH 7Dmaf3VcMON/Jg== -----END CERTIFICATE-----Generated at Sun Jul 20 20:24:18 2025 by rpki-client