$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft File: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json) Hash identifier: Tmwcat0bP2IEinkGkg93FdNn7bgtR/jWGa/scAnSS0M= Subject key identifier: 92:FE:BD:3F:A8:2C:3D:04:DF:73:55:72:47:CD:F9:CF:EB:07:EE:8E Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 01982C6DBD9B7B62F073A41E0BB46B79AF07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft Manifest number: 162A Signing time: Mon 21 Jul 2025 10:00:46 +0000 Manifest this update: Mon 21 Jul 2025 10:00:46 +0000 Manifest next update: Tue 22 Jul 2025 10:00:46 +0000 Files and hashes: 1: 05T5QjbJNc87hT4My9l-JdCX1h4.roa (hash: iWvw7hOFWKPo65JahFO85oDHfJOnZV1Mm2k2unmLhhE=) 2: 1RAZSq7_BCIXMPLmCNYBwnRPVeM.roa (hash: iP8JwzeV1htPI5dhx1UE8Z1vTHtvlA2uWPOR/wMsfgs=) 3: 1wyAYxpyA9FCN1lyvO-C57LVFXA.roa (hash: y/6pL2V+BG6MuxMmBUR7F2hu5ij3F/ux58ms3Mk1R0w=) 4: 5m85a6z_82pxvCFTAubCZE3IDRY.roa (hash: yTwyQOsGZdUMHgKCUc+pKc+Yl8K88OgV6IbbvGfhyYk=) 5: CmOI9SR69ovMKrxlDxbUWh5QUU0.roa (hash: ebd4rV/RF1OTbOXyyPqPuU0N5clQOOerkc0GReb1J2w=) 6: Cw3KSb4w5fVGO1h3Oj_H-hpchVg.roa (hash: uQeSPU2EF8IdzkDhENLmsFnhh9oxYjUNdNs+h74gmgY=) 7: JAH3IXMvbG6Ys2dPmwodnWJGeoI.roa (hash: Gw60ldKvXUBK2ktt+kjbpS50udL3AC6hPM4eFLUJXXw=) 8: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: jzF2DAP/OfI2UxqOtJelLPl/OFgxzfiKeJhMlTBgP4c=) 9: WMM-Jj0p6VWzGlo6msh5tpjK74c.roa (hash: /4WO/iijr2ysoJfrqLnn3dB9+scGttOptVRk8eNo8H4=) 10: ZKvHQby0NQ22M7VFCjQ_KqulEx8.roa (hash: ivLBRNaqrPZubBjRNX4dYKOMZvwYNsaC4yTeWqcGhaw=) 11: g4rTsZZ6qTMpSVPR-7TASI0eYf8.roa (hash: H0dCl0trInj59i3ls7vMuF/05FWvOMm7A3kIRBvL3Rw=) 12: h7K92qiMiWFLtkqLXfWLx7T3RS0.roa (hash: SXAVcoWGoZlytOpyw4bPPikyafW7og6IlMVyTr7sX3s=) 13: kojEemV1y3p1Ig0PF0Qwwmhe1Bs.roa (hash: Oye8rISWv3W8lfSMiPLOOdMEyDfiF8khVTUsBLT1Pro=) 14: oWWO6Pva3OKGYV4SbuU_A-N5y1U.roa (hash: wiPRw1JJ6JQ3Y/GXPGUGO3wdWm/JMB2trum1N3IbVAQ=) 15: pPQq_lolA8g8QxXqDDucDfwuETo.roa (hash: L1m+KNUP0y0o8T6Tj0pDmrtwsUBi0b51YKd4t4w0w/g=) 16: qhjSfnViRtAuJX9-HloVGl6e8yQ.roa (hash: 0c4CC/UoASiPziDV/ISjZ0Wa5pg6sbXo1QCcNSiEk04=) 17: rGuulbHd9kRPQ-Vjw-QiFUOKt_A.roa (hash: B7yPzOPI+uMdkQOcYQEtalAjsrTFRRTxVc7BxeoQZ2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:2c:6d:bd:9b:7b:62:f0:73:a4:1e:0b:b4:6b:79:af:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Jul 21 10:00:46 2025 GMT Not After : Jul 22 10:00:46 2025 GMT Subject: CN=92febd3fa82c3d04df73557247cdf9cfeb07ee8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:01:f8:8b:57:6c:1a:e3:3c:c6:22:f4:ab:ff: 8c:fc:4e:c2:46:e1:26:09:4f:81:44:cd:20:3c:e5: 1e:7b:b1:d8:94:83:8b:55:eb:bf:6f:ba:27:68:86: 8e:41:cf:ef:6d:a4:8c:ea:7b:79:ca:08:78:cb:22: 58:62:cd:ca:a8:b2:25:b1:66:d5:ec:6a:2e:e3:96: 82:c1:5c:b7:44:8a:6c:47:43:72:e6:c1:d6:b5:d0: 32:c0:f7:02:74:e1:0e:6b:98:9c:b0:79:d8:54:16: cc:18:96:92:fe:d9:d0:b2:4f:53:de:d9:48:74:05: a5:0e:55:b5:be:74:dd:65:fb:45:82:42:7f:fe:52: c3:53:aa:96:44:49:cb:27:12:09:d4:76:99:ae:eb: fb:1e:8e:a0:c5:0a:d0:69:13:78:fc:d1:1e:94:89: d4:70:73:d8:65:a6:3e:9b:ff:57:ed:21:81:13:6e: fb:45:ee:c1:23:76:9e:b5:e7:8c:1d:77:ab:9f:32: 3a:40:91:d5:41:62:dd:d5:2b:4b:13:1b:19:d0:77: a6:4a:32:ad:25:7e:14:53:af:1b:47:f0:f7:5b:b0: a9:8b:16:b1:a9:88:e7:ef:ba:5f:d9:4d:50:4b:ef: aa:0a:0b:cf:b2:42:29:ca:13:0e:bf:97:96:0d:ce: 97:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FE:BD:3F:A8:2C:3D:04:DF:73:55:72:47:CD:F9:CF:EB:07:EE:8E X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:59:b1:bc:7e:6c:0c:6e:ae:1c:b7:28:e7:22:b0:f5:f7:97: 58:8c:d2:67:81:ad:1c:9a:69:5c:8e:ae:62:3d:a1:d7:35:15: 70:31:be:d6:0f:a4:c2:02:3b:b7:79:04:4f:51:ed:66:05:7f: 7f:48:79:8d:f9:a4:dc:d3:f0:b6:7d:ec:db:c7:5e:9d:9d:19: a9:8a:72:cd:d8:f2:a5:ef:dc:cf:be:36:88:4f:ea:19:dd:46: f4:72:22:f0:49:0b:31:bf:1d:cc:34:3d:16:9e:bc:4f:fb:75: 6a:f7:76:01:f7:55:a3:e1:06:69:85:c2:18:55:28:42:d6:3f: 4b:86:90:96:75:16:b1:71:65:08:3e:3b:e4:f3:2f:5f:6a:99: a2:97:6f:67:7b:ed:80:23:79:20:01:23:53:84:60:97:be:84: d8:3c:71:d1:9d:d3:d6:e6:13:55:65:a6:75:aa:6e:7c:82:52: e9:c8:30:c9:f5:56:a9:3d:e1:0b:ad:93:ae:52:7f:cb:a2:5e: 7b:99:5b:23:13:0c:ac:c0:a2:a4:bd:ec:75:0d:60:db:32:6b: 0c:90:25:84:11:2a:cb:0f:88:1d:d8:8e:e3:6f:da:8f:13:16: 9e:bc:59:d4:e5:03:2d:e3:78:e8:28:bf:31:93:21:b4:85:27: e5:14:e7:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgsbb2be2Lwc6QeC7Rrea8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjUwNzIxMTAwMDQ2WhcNMjUwNzIyMTAwMDQ2WjAzMTEwLwYDVQQD Eyg5MmZlYmQzZmE4MmMzZDA0ZGY3MzU1NzI0N2NkZjljZmViMDdlZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQH4i1dsGuM8xiL0q/+M/E7CRuEm CU+BRM0gPOUee7HYlIOLVeu/b7onaIaOQc/vbaSM6nt5ygh4yyJYYs3KqLIlsWbV 7Gou45aCwVy3RIpsR0Ny5sHWtdAywPcCdOEOa5icsHnYVBbMGJaS/tnQsk9T3tlI dAWlDlW1vnTdZftFgkJ//lLDU6qWREnLJxIJ1HaZruv7Ho6gxQrQaRN4/NEelInU cHPYZaY+m/9X7SGBE277Re7BI3aeteeMHXernzI6QJHVQWLd1StLExsZ0HemSjKt JX4UU68bR/D3W7CpixaxqYjn77pf2U1QS++qCgvPskIpyhMOv5eWDc6XZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJL+vT+oLD0E33NVckfN+c/rB+6OMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVmxvH5s DG6uHLco5yKw9feXWIzSZ4GtHJppXI6uYj2h1zUVcDG+1g+kwgI7t3kET1HtZgV/ f0h5jfmk3NPwtn3s28denZ0ZqYpyzdjype/cz742iE/qGd1G9HIi8EkLMb8dzDQ9 Fp68T/t1avd2AfdVo+EGaYXCGFUoQtY/S4aQlnUWsXFlCD475PMvX2qZopdvZ3vt gCN5IAEjU4Rgl76E2Dxx0Z3T1uYTVWWmdapufIJS6cgwyfVWqT3hC62TrlJ/y6Je e5lbIxMMrMCipL3sdQ1g2zJrDJAlhBEqyw+IHdiO42/ajxMWnrxZ1OUDLeN46Ci/ MZMhtIUn5RTn4g== -----END CERTIFICATE-----Generated at Mon Jul 21 12:36:42 2025 by rpki-client