$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft File: JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json) Hash identifier: gWfuZ5xspSXfSE0fPp6zU/VA4g09uKRM1kxnzyLWMGs= Subject key identifier: 3B:3B:05:C0:AB:1A:37:7D:10:BB:47:9E:22:C5:81:58:33:61:18:8B Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 01973CBED56D6F4A3DFE49C2D6AA23D2F0A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft Manifest number: 12B1 Signing time: Wed 04 Jun 2025 21:00:28 +0000 Manifest this update: Wed 04 Jun 2025 21:00:28 +0000 Manifest next update: Thu 05 Jun 2025 21:00:28 +0000 Files and hashes: 1: 1GXRp3uT7hSMRzWjOxU0QktVRiY.roa (hash: aqIqmb81zi2cD6sMblBWQoAdH8B6EoMHMa2iFTOnb0c=) 2: 7w1YPyzlBEZNMOyEUCFkNc0ECPQ.roa (hash: 0dazsLMYx/MeDO19uGuuYzM5rCd3NgH7NYuHWn+o7Y8=) 3: 8TY-Hfd5q5Rj4MUhE7CmY31LHyc.roa (hash: vPKsfH2lh7SZOShxHi9r8ed3IerCum4ryQQ50mXWvmI=) 4: 9S6VN8W0AB42Tjfsy_52eVj_HF8.roa (hash: U/0clwp2HZIEVyJ8jDxjulKSBf1aha8MkLQgHpOloog=) 5: ASXdDgGnh8Klj0fzlnnnOhv5loU.roa (hash: wWWbyDkcRSYhjOCMVp5ySQLPVFoGVo9Lc8yvPSW0eIM=) 6: FCh0pju_b1XDjIA8N5RktFi16SI.roa (hash: nzz37F+/F7FQRtoCdt1NMVOBQ7kMdP9rhDen0hB2f8U=) 7: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: Xf2/k0o9qpLx01TLFV0Hmvsvv+/dIdVLZkeeSa0o14Y=) 8: KKECh8K7hNffHVDT8ywINErgd1U.roa (hash: jFVe6x1L0XuZf3m6Z9ZwhiY43bHKM8ZXgM5AwxJ+SJ4=) 9: Neg-GaKgdY6gnpXCEHzkL9JlhS0.roa (hash: YgY5UaAq6hQXGaoygI0YizLwZ/ppqq3rjPmBhu92jjc=) 10: QBe6vAE6rYSA8KCQoO7i8f2keWY.roa (hash: /ZgtoN8+dacZMoQUvXB0j9wPVe+O1WRxUSH58QMyIv8=) 11: VuBKMZZHrZ1QSjnK1f8rGYyQD34.roa (hash: Yy9aJSbZa8jisjdlzD3JGDY9sTvRVpXk74KknU+efOI=) 12: XkXy4rFVu6JKAbUcEbjCs_ol8Mc.roa (hash: KEboU/fmZ1raaMqRFHeXS/DA8vof1Lf7hts2MdqUMFk=) 13: ZMDHfiorAQeHiAr2VSo31IrsX9Y.roa (hash: 2rW77gP54+olCRPQkqdpt6U7rC4Eivix0JgQsNBRA0A=) 14: b9LZtPjPcGkqch-QIMPmNiY1GfY.roa (hash: wVwwQPvK556ifQMFCqlsaWU8LCMEwKfjuZYfw4kZ7Ug=) 15: eq_1NPXQGhoWTMBNC9PaXKKEltM.roa (hash: Hq4HlvjEPgU16G6jBR0u/BxOO81trhl4PXHhgLXPBd4=) 16: u1jdAQ2eshDqHXq4UFjEjcuXmsI.roa (hash: 7O01VUQlx2/5mCx+t4SgO9Lggi1VIhx12oZO6kEvwsM=) 17: vhjrtMMdROIFj167BFR3pGrdrb8.roa (hash: mHe16RuP6X+5Fin2ZffJO/Ym51XZo7pnKG1BIGBPcUQ=) 18: vtNeTxZnHuMsF3rl3ZSPlMog7F0.roa (hash: FfGF+21HwGvE0iZhE2YJptjryuHFZ0BNSqu9xGqCr6Q=) 19: xtI4FxymYzhmmmKad9ZOkzTos1E.roa (hash: Xd4WHKpPZgsYedQWZYH07M7z75l0J2MM4sU9jDdQuXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3c:be:d5:6d:6f:4a:3d:fe:49:c2:d6:aa:23:d2:f0:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Jun 4 21:00:28 2025 GMT Not After : Jun 5 21:00:28 2025 GMT Subject: CN=3b3b05c0ab1a377d10bb479e22c581583361188b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:31:32:c7:96:f9:0c:d5:01:56:a9:ee:54:bd: 29:65:92:12:85:a9:02:31:66:ba:46:8e:4e:48:1c: 6a:3b:1b:53:4a:41:7f:56:d8:9d:fc:59:21:9b:7c: 4c:eb:07:dc:43:af:66:a6:82:8f:db:51:a8:64:73: c6:e3:f2:cc:94:f8:00:d6:35:f1:37:60:df:7e:fe: d5:52:4c:e3:c0:ac:48:6b:11:56:e5:f9:0e:23:9d: 9d:b4:74:c4:75:1e:d1:29:a7:7f:ad:6c:37:63:d0: a0:be:0b:16:18:99:ce:66:6c:b1:66:12:9e:c4:3e: 7d:a2:6f:72:58:d7:32:27:24:95:49:12:2c:d0:1f: c5:ff:17:9d:84:74:99:fd:11:a0:92:29:2e:da:91: be:2e:63:38:3b:da:21:c9:0f:71:cb:66:82:22:58: de:52:c8:91:95:6e:c0:2e:d3:23:5d:68:96:2d:4e: 4f:7f:1d:85:b5:3c:bb:ce:4d:a3:6f:0b:53:a8:ca: 8d:95:e4:51:73:56:5e:71:2d:f2:cf:6d:f7:00:26: c6:f4:1d:07:2d:6e:c0:35:57:cd:6d:2a:45:9d:7f: e9:63:3c:a2:fa:71:84:3d:6b:0b:57:d8:78:24:ee: 86:8e:da:7f:94:5b:d6:9c:a9:8b:61:5b:94:03:d4: cd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3B:05:C0:AB:1A:37:7D:10:BB:47:9E:22:C5:81:58:33:61:18:8B X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:19:80:b5:22:5a:f5:15:9d:04:ca:f1:af:d2:be:7f:43:f6: a5:24:5a:54:4c:5f:f8:b0:91:6b:01:d5:0c:36:2c:c4:c4:95: c0:22:57:42:ff:12:e2:f0:a6:35:05:0c:49:e4:cc:bb:d7:f1: 5d:3f:58:9a:ed:5a:37:c0:e8:ce:71:5c:b1:20:55:60:31:c5: 63:e8:a8:f6:b6:b0:8f:89:4d:e4:58:dc:24:6f:f9:a4:68:2d: 7a:92:33:4d:b4:14:e0:4a:b9:26:78:95:99:c4:be:ca:12:c9: 3b:9d:19:07:d4:9a:58:f4:71:78:7d:d1:64:24:6f:fc:02:31: 6f:8e:29:c5:36:55:27:b3:a4:fa:d2:bd:48:f8:67:51:d8:40: 6a:1c:9e:b6:a0:b7:a0:e9:85:1b:12:8b:0c:aa:41:de:35:25: dc:39:0a:6b:ca:11:f1:0c:54:13:7d:1c:25:71:59:6f:63:51: 5f:a3:38:6c:35:a6:d1:41:25:2a:09:92:e4:a4:d5:04:ac:cf: d9:bd:d7:75:a7:d0:a2:75:9a:80:43:be:ac:54:69:39:2b:2a: 86:26:d3:36:a6:99:b0:5e:59:45:52:b9:4e:a3:85:a4:e2:55: 9c:34:0e:05:a2:af:31:f7:69:88:85:29:06:f4:09:88:f5:4d: ee:30:60:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc8vtVtb0o9/knC1qoj0vCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjUwNjA0MjEwMDI4WhcNMjUwNjA1MjEwMDI4WjAzMTEwLwYDVQQD EygzYjNiMDVjMGFiMWEzNzdkMTBiYjQ3OWUyMmM1ODE1ODMzNjExODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDEyx5b5DNUBVqnuVL0pZZIShakC MWa6Ro5OSBxqOxtTSkF/Vtid/Fkhm3xM6wfcQ69mpoKP21GoZHPG4/LMlPgA1jXx N2Dffv7VUkzjwKxIaxFW5fkOI52dtHTEdR7RKad/rWw3Y9CgvgsWGJnOZmyxZhKe xD59om9yWNcyJySVSRIs0B/F/xedhHSZ/RGgkiku2pG+LmM4O9ohyQ9xy2aCIlje UsiRlW7ALtMjXWiWLU5Pfx2FtTy7zk2jbwtTqMqNleRRc1ZecS3yz233ACbG9B0H LW7ANVfNbSpFnX/pYzyi+nGEPWsLV9h4JO6Gjtp/lFvWnKmLYVuUA9TNGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDs7BcCrGjd9ELtHniLFgVgzYRiLMB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBmAtSJa 9RWdBMrxr9K+f0P2pSRaVExf+LCRawHVDDYsxMSVwCJXQv8S4vCmNQUMSeTMu9fx XT9Ymu1aN8DoznFcsSBVYDHFY+io9rawj4lN5FjcJG/5pGgtepIzTbQU4Eq5JniV mcS+yhLJO50ZB9SaWPRxeH3RZCRv/AIxb44pxTZVJ7Ok+tK9SPhnUdhAahyetqC3 oOmFGxKLDKpB3jUl3DkKa8oR8QxUE30cJXFZb2NRX6M4bDWm0UElKgmS5KTVBKzP 2b3XdafQonWagEO+rFRpOSsqhibTNqaZsF5ZRVK5TqOFpOJVnDQOBaKvMfdpiIUp BvQJiPVN7jBgMA== -----END CERTIFICATE-----Generated at Thu Jun 5 00:01:13 2025 by rpki-client