$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: +PYe8M5nvy909IL6kUXWSo0CN01nXYdCAB7kylWPlcM= Subject key identifier: 82:FF:8F:89:38:E3:41:5C:64:01:24:F1:F6:4E:94:90:79:A4:99:91 Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 019827EBFF9ACEAD5786E1EA09B6DBAA05E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 158F Signing time: Sun 20 Jul 2025 13:00:34 +0000 Manifest this update: Sun 20 Jul 2025 13:00:34 +0000 Manifest next update: Mon 21 Jul 2025 13:00:34 +0000 Files and hashes: 1: A3slZgyg9eemzONzeM4ZjQZOkQA.roa (hash: X0hOJW7H3OQv8gNe/Scffw0tX7rp3lfITg3c2bDp62I=) 2: Dyi32KlOskocQHPe6FUF7ELQs5U.roa (hash: D3EF+UreJY6p0ckzuksgWXVvYetF6sITxKDGv/w2L0k=) 3: FJEFcX2c3QiytgwJXtBXdfXF7AQ.roa (hash: wDOQFjMrdpmJOwUI55qSC810FFGrsaY4QPcOoJKWykM=) 4: G_noKzntiWHLaHSdta1FputJESM.roa (hash: 76HBYH18Q5+wfRzE5ydGp21BC62rcsuS2tSvCzBrWp8=) 5: K9IKE8UzWzIlRqgdm5DBscj4DXI.roa (hash: TmNOvsKyJxclTHoJrrP+Wz2lJl3QKp06vZRtwf2Wkwo=) 6: Orf0-crrS-m0d2xw75OekVLRhcU.roa (hash: NyC6YqKt0FNmC1unp3jevt47/gr2Ss5dzqvXJGD2AjU=) 7: THZGRo10wjMlm6DbRUy7KjrwfkM.roa (hash: 9FjGohVB5WEFkwBSNZEgEcooaudVJnnxxDK2Jy9/LgI=) 8: VmEKVuU_uT-v34QUxuvTEoMoaug.roa (hash: lCfgs7Wts05rdP9N+OaYxsLVxOabAGR5SUtGArrm95M=) 9: Vxz_brs8mMP8pyfBjMG6SqLCoLA.roa (hash: InPdcQtGkZTGLva52kv6ADnfkbCulTXgK4jOcLs8G7M=) 10: Xmin5XG-kRl49Vt7ZEcTgSLDhDM.roa (hash: DHMC7YXYfDSAA2x6JnOvMwJT1zdpAymlypp6F1bKmgY=) 11: Yfzph1m23vmbClyvIoORpS1CW-E.roa (hash: SuwU2G9eYZ/n+GS6xB/GEsh3UziEYPdyi1WD5kRpjAo=) 12: _vcj5hH5PQmqE-mf4-B7kcWGpfg.roa (hash: ReLlnYnzQbiQ5Pk/0fIjBSPY1fpdoMBMJpSnkiSreWk=) 13: d-sWN4azI8sU7mlb0U-920Rsmtc.roa (hash: eiusVr40X1jFuIAj+CFi96eXy2bKXAQXnB20dKkv/70=) 14: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: QxTqih5xzqYJQ49uH+UIG7+Ey9qgTKhMvfss1NmdSY8=) 15: mwm5rC4rfoUfkUGj1keywZQhhGw.roa (hash: dDwtNYt9WubuetSqef0LQakniH0rgBVhQK32OI1f1fU=) 16: nyxtNnWsxM3-5IIVvMZ44cQVEYU.roa (hash: ub8VtVKtgWVEPS0rlKsjT0ZjeuiFnfLTw/tC6ZpW/Vo=) 17: v5kzcztD_Zc4DwbwnN4YfKR9YoA.roa (hash: 33e8kQ++AVlCN79vtcp+1+C+oGUNBxplYHYOGaRMl58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 06:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:eb:ff:9a:ce:ad:57:86:e1:ea:09:b6:db:aa:05:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Jul 20 13:00:34 2025 GMT Not After : Jul 21 13:00:34 2025 GMT Subject: CN=82ff8f8938e3415c640124f1f64e949079a49991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c7:cc:3a:fe:25:b3:71:f5:0d:c7:83:81:42: fc:0b:97:88:6e:72:44:2d:b0:d4:c5:f4:f6:4b:a2: 0f:d7:e2:a8:2a:02:68:c3:6c:46:0e:a5:81:d8:3e: 3b:2b:c0:54:b6:75:78:b7:60:2a:9d:56:9f:84:2b: 4e:7e:c9:d9:e2:23:d6:7b:da:c0:13:a6:24:8b:47: 6d:69:42:51:1d:da:70:f0:c8:3b:a8:45:57:35:9f: 97:1d:e6:27:0c:1a:a5:4c:4c:d5:b8:d9:50:a2:ca: ef:24:30:d5:eb:0d:bd:32:80:e7:3d:8b:c1:5f:38: a4:aa:ca:d0:8f:23:8a:e3:3d:ce:98:83:01:37:01: ba:0a:2d:41:8a:37:a0:64:ae:d3:91:f8:c7:01:c3: c0:8a:6e:83:08:54:99:48:40:fa:ff:fb:ab:92:d1: ff:66:0f:2b:75:0e:af:39:98:6d:64:24:0d:c1:25: 1e:87:79:1f:80:bb:73:fd:24:8b:3b:af:17:67:f4: 10:5a:cb:a8:53:60:c1:ba:df:07:cd:a7:7c:9a:c7: 3d:12:a0:9c:01:fd:64:9f:8a:1b:b9:9a:fa:65:a7: d8:de:36:19:6d:b7:24:3f:e6:6f:91:0d:9d:1f:cf: 4b:19:1e:a8:8b:9d:57:1a:a1:60:b3:ac:7e:5e:fa: dc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FF:8F:89:38:E3:41:5C:64:01:24:F1:F6:4E:94:90:79:A4:99:91 X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f0:2e:bb:07:97:b2:7d:b2:bf:d9:0c:f3:82:52:40:f4:b9: 75:6c:61:a3:18:44:b1:02:20:d2:22:3b:81:6c:65:a9:f5:58: 00:b0:7d:ff:cc:e1:74:d0:68:5f:f2:1c:5f:19:f9:14:97:e3: 14:2f:fa:1e:81:de:47:90:22:6f:4c:88:8e:b5:6e:86:c2:2d: f4:78:90:d4:59:7b:6f:00:bc:87:c9:b7:3f:26:7a:17:57:bb: 0f:ad:13:f2:f5:ba:19:ec:bc:11:05:7c:80:28:af:4c:ce:80: c7:88:1b:dc:b5:30:f5:86:5c:91:56:b3:af:c9:aa:0f:8c:7f: b3:b3:8e:6d:d7:4d:5c:e5:4e:29:aa:96:3a:ae:ac:27:9b:6e: 87:8f:6b:87:72:33:1e:84:c8:89:14:c0:3d:8d:70:c9:c8:e0: 3f:1f:e6:74:56:16:00:a7:4b:a9:9f:d6:7a:90:73:bd:00:79: a0:d9:d6:26:b0:d4:54:76:ba:a3:b4:fc:63:13:4e:19:80:60: 84:ba:d5:ce:00:2d:d7:35:d7:03:b6:86:d2:0d:07:dd:1b:81: 8e:80:60:02:14:31:91:78:6b:f2:a4:c7:08:61:d2:c7:44:d1: 99:a6:41:a8:7c:99:48:2e:23:44:ef:89:de:e4:66:83:66:7c: 21:cc:21:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgn6/+azq1XhuHqCbbbqgXpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjUwNzIwMTMwMDM0WhcNMjUwNzIxMTMwMDM0WjAzMTEwLwYDVQQD Eyg4MmZmOGY4OTM4ZTM0MTVjNjQwMTI0ZjFmNjRlOTQ5MDc5YTQ5OTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMfMOv4ls3H1DceDgUL8C5eIbnJE LbDUxfT2S6IP1+KoKgJow2xGDqWB2D47K8BUtnV4t2AqnVafhCtOfsnZ4iPWe9rA E6Yki0dtaUJRHdpw8Mg7qEVXNZ+XHeYnDBqlTEzVuNlQosrvJDDV6w29MoDnPYvB XzikqsrQjyOK4z3OmIMBNwG6Ci1BijegZK7TkfjHAcPAim6DCFSZSED6//urktH/ Zg8rdQ6vOZhtZCQNwSUeh3kfgLtz/SSLO68XZ/QQWsuoU2DBut8Hzad8msc9EqCc Af1kn4obuZr6ZafY3jYZbbckP+ZvkQ2dH89LGR6oi51XGqFgs6x+Xvrc/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIL/j4k440FcZAEk8fZOlJB5pJmRMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPAuuweX sn2yv9kM84JSQPS5dWxhoxhEsQIg0iI7gWxlqfVYALB9/8zhdNBoX/IcXxn5FJfj FC/6HoHeR5Aib0yIjrVuhsIt9HiQ1Fl7bwC8h8m3PyZ6F1e7D60T8vW6Gey8EQV8 gCivTM6Ax4gb3LUw9YZckVazr8mqD4x/s7OObddNXOVOKaqWOq6sJ5tuh49rh3Iz HoTIiRTAPY1wycjgPx/mdFYWAKdLqZ/WepBzvQB5oNnWJrDUVHa6o7T8YxNOGYBg hLrVzgAt1zXXA7aG0g0H3RuBjoBgAhQxkXhr8qTHCGHSx0TRmaZBqHyZSC4jRO+J 3uRmg2Z8Icwhwg== -----END CERTIFICATE-----Generated at Sun Jul 20 14:41:06 2025 by rpki-client