$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft File: raJar-Ophw6VJK-gJlmH7VpaTaM.mft (raw, json) Hash identifier: dJvp2zSYb+HFxwAsp/BCSZ/wi3gVsTBLUnwIfSkCGfg= Subject key identifier: 23:7E:4E:C1:1E:83:EC:9C:E9:09:EB:FD:18:73:97:9E:99:74:AD:1E Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3 Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3 Certificate serial: 01983B72C1BC7B1B6ACB20D4F688ABE313ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft Manifest number: 162C Signing time: Thu 24 Jul 2025 08:00:33 +0000 Manifest this update: Thu 24 Jul 2025 08:00:33 +0000 Manifest next update: Fri 25 Jul 2025 08:00:33 +0000 Files and hashes: 1: 3cvNvdSi3XGnlgqLMUXhh7Fbsns.roa (hash: RjSiDuOGFmz06JKyEcD4gXSDvTvwzOibXX44/BaGwzM=) 2: 4qU0lYZixQn_ajK7o9tm4-h59Yc.roa (hash: rJ9oCMP6AUNUzaOpIFXW5T5zkn6qUN20PTxwfzReYSQ=) 3: CKER9wKJnd8i3s1x_cuI1c5b5Gg.roa (hash: s6MpM43dZhbOOH2ONDtptW7UmeKZDzVPrS361Wp7DlU=) 4: ONUCtbkDeeY2PA4jyY-af2rV2nc.roa (hash: UqkqTmMsI7S3ytTnMMGoR5/dJydP8VGBx/KeOodELdE=) 5: QqlMdh24Ws5Csf0Uuo2IJQlJoC4.roa (hash: /8SKmiBGn8KNuuR9Z6Vc2oYu9cW/r06GpbN1vuAdWAE=) 6: VWz0dchWUkZQVyP3JtuInNAFbyA.roa (hash: SqCoHwQT1RKZsrh/slkYf8DtZsXR49Lw8MbGV9Z0lJQ=) 7: XG0f4whg8DTzg4ZpQd0f-UdmRXY.roa (hash: ZGcU72mX8VKGJYV72um72oY45czQYPy5f+/AekBe7rg=) 8: eTZvFVUGnDNHwq2npFaevM_pjLg.roa (hash: 18cD37AihQlqKhfJw/uFQO048dE0tdQTn3vqNmQm/DI=) 9: jOJJqoS_PgQTtahvKFyYtdpryQc.roa (hash: NLWvbfmQ0GpKEPm+5C3Z0gDnOHe3vz+adN0kchftPSM=) 10: nh8Wwn3Fj2yGVzqswDAx-hybLdE.roa (hash: XEpaT4HyqXFQYAhd7C6I8/JvL9+p58S8LPezKapKn1U=) 11: owgmBs4vbkkXbw2K0OuU1ejAVjM.roa (hash: hWN+IDhiOv5MeOYFdicsOLf4isT8+TWoYgyTGhIN3B8=) 12: raJar-Ophw6VJK-gJlmH7VpaTaM.crl (hash: DaAy0IDCvzL9/80CZ6EP9zKUFaL5vaoqPhMf4IzDuFQ=) 13: w47kV22DUX2rmSAV17IslbqJZkE.roa (hash: jwhv3mxFNCUIHi+oaeb9HMdIuv95C0du8+Aflx3W8ng=) 14: weNgwIA48_rsRspTEOQkflneJ2o.roa (hash: baMtWqaZx8ecWxf9Y9oBJPogfPJJVeJm66CO34ozZyM=) 15: zBMwGWWflzLxBSFNPzJ2aqEBgrE.roa (hash: Frie/26MAD4moXE2hcnRczEyt7GQngLuPdcorC2uOx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 08:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3b:72:c1:bc:7b:1b:6a:cb:20:d4:f6:88:ab:e3:13:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3 Validity Not Before: Jul 24 08:00:33 2025 GMT Not After : Jul 25 08:00:33 2025 GMT Subject: CN=237e4ec11e83ec9ce909ebfd1873979e9974ad1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:f4:ca:53:8c:e5:89:c2:ed:9f:12:a8:7d: 34:30:6a:77:fd:ba:0a:92:09:33:64:be:01:11:f4: 23:09:7c:a3:2e:de:69:27:74:87:64:89:28:8b:b4: 76:be:f2:8b:35:49:1b:0e:1a:61:64:6e:0e:0a:47: ca:b1:8d:86:a9:23:82:46:32:cb:34:65:91:ee:80: c1:06:c4:3d:1f:6a:c8:15:a2:ac:ea:01:cf:4f:31: c3:ab:40:56:8d:f5:34:2d:72:5a:97:d3:0d:36:97: 22:eb:2f:0e:c0:da:df:dd:1a:86:fb:2b:2a:3f:d2: d8:8b:a9:9f:a2:d8:64:7b:40:33:f2:be:9e:01:b9: a7:d7:a9:68:ee:4d:04:c4:31:33:23:14:3c:c8:09: 6c:60:a1:1a:7d:63:32:85:e6:3c:0f:2c:cf:04:ff: 04:12:e6:62:49:5b:9a:93:70:39:f4:93:96:1c:27: 6f:51:52:32:57:28:d5:4a:f8:10:89:16:3a:cc:cc: bc:e4:4e:30:f7:27:a1:1d:98:ac:b7:0b:10:63:49: 64:9d:89:81:b3:31:9c:81:15:d8:12:4f:99:ea:0e: f9:00:84:cf:c8:bf:c7:4d:c7:fd:6b:0d:a9:3b:34: b9:03:96:c8:23:eb:f6:36:56:9f:51:87:a9:17:60: c9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7E:4E:C1:1E:83:EC:9C:E9:09:EB:FD:18:73:97:9E:99:74:AD:1E X509v3 Authority Key Identifier: keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:04:a7:c9:ed:c4:70:ff:af:d7:27:a4:8f:20:43:d6:b6:b9: c3:05:6b:0e:a9:45:63:fa:59:e7:fd:6f:dc:22:06:f7:01:c3: 69:2a:5e:b4:c7:01:fb:ce:8c:ce:d1:9d:9e:d2:3d:b2:72:7b: 0b:7c:b8:bc:4c:22:60:3c:18:dd:04:9d:b3:44:b6:95:3d:34: 65:9e:ca:bd:ef:ec:ae:7c:1b:a4:f3:fc:27:8e:9b:2f:b1:e6: 43:70:36:74:29:f2:09:22:6f:1f:b1:d6:d5:03:55:d2:b2:76: a1:3b:5e:15:7c:db:15:ac:9a:42:41:5e:19:b4:44:09:b2:85: 6a:fc:55:7c:5d:da:c8:14:f8:00:4d:87:90:05:3d:9c:07:a2: a8:e7:59:0a:ba:8e:ab:d0:5e:43:ec:ae:55:d2:83:c5:51:88: 36:30:24:7a:f1:ee:3f:5b:a4:f3:10:e4:47:48:48:b2:ff:6e: 9c:f2:02:0d:62:2e:05:b1:eb:48:4e:ae:a4:6c:76:60:d0:c1: 9c:0b:f5:25:5e:27:59:6c:f2:c4:72:36:d3:9f:f1:fb:ab:83: d0:e5:83:a6:57:7b:a5:02:df:0d:2a:b5:6e:a6:89:92:2e:e0: bc:de:d4:13:bf:d2:a1:32:16:76:91:39:d9:39:6e:e6:73:c6: f7:1f:a4:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg7csG8extqyyDU9oir4xPtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYTI1YWFmZTNhOTg3MGU5NTI0YWZhMDI2NTk4N2VkNWE1 YTRkYTMwHhcNMjUwNzI0MDgwMDMzWhcNMjUwNzI1MDgwMDMzWjAzMTEwLwYDVQQD EygyMzdlNGVjMTFlODNlYzljZTkwOWViZmQxODczOTc5ZTk5NzRhZDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8L0ylOM5YnC7Z8SqH00MGp3/boK kgkzZL4BEfQjCXyjLt5pJ3SHZIkoi7R2vvKLNUkbDhphZG4OCkfKsY2GqSOCRjLL NGWR7oDBBsQ9H2rIFaKs6gHPTzHDq0BWjfU0LXJal9MNNpci6y8OwNrf3RqG+ysq P9LYi6mfothke0Az8r6eAbmn16lo7k0ExDEzIxQ8yAlsYKEafWMyheY8DyzPBP8E EuZiSVuak3A59JOWHCdvUVIyVyjVSvgQiRY6zMy85E4w9yehHZistwsQY0lknYmB szGcgRXYEk+Z6g75AITPyL/HTcf9aw2pOzS5A5bII+v2NlafUYepF2DJOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCN+TsEeg+yc6Qnr/Rhzl56ZdK0eMB8GA1UdIwQY MBaAFK2iWq/jqYcOlSSvoCZZh+1aWk2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUt OWQ1ODc1ZDg2MzczLzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUtOWQ1ODc1ZDg2Mzcz LzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIASnye3E cP+v1yekjyBD1ra5wwVrDqlFY/pZ5/1v3CIG9wHDaSpetMcB+86MztGdntI9snJ7 C3y4vEwiYDwY3QSds0S2lT00ZZ7Kve/srnwbpPP8J46bL7HmQ3A2dCnyCSJvH7HW 1QNV0rJ2oTteFXzbFayaQkFeGbRECbKFavxVfF3ayBT4AE2HkAU9nAeiqOdZCrqO q9BeQ+yuVdKDxVGINjAkevHuP1uk8xDkR0hIsv9unPICDWIuBbHrSE6upGx2YNDB nAv1JV4nWWzyxHI205/x+6uD0OWDpld7pQLfDSq1bqaJki7gvN7UE7/SoTIWdpE5 2Tlu5nPG9x+kMw== -----END CERTIFICATE-----Generated at Thu Jul 24 17:20:46 2025 by rpki-client