$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft File: JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json) Hash identifier: YG9j8UMaHffLl4waF9E/Nrh/J6yWTpHa5GPv1848niE= Subject key identifier: 34:C5:AD:D7:09:61:DB:AC:42:99:C0:D2:AA:53:CC:1A:66:DC:3C:1C Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 01991E78C7A0DB4A1233C92FDCA62247AD7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft Manifest number: 13AB Signing time: Sat 06 Sep 2025 10:00:55 +0000 Manifest this update: Sat 06 Sep 2025 10:00:55 +0000 Manifest next update: Sun 07 Sep 2025 10:00:55 +0000 Files and hashes: 1: 1GXRp3uT7hSMRzWjOxU0QktVRiY.roa (hash: aqIqmb81zi2cD6sMblBWQoAdH8B6EoMHMa2iFTOnb0c=) 2: 7w1YPyzlBEZNMOyEUCFkNc0ECPQ.roa (hash: 0dazsLMYx/MeDO19uGuuYzM5rCd3NgH7NYuHWn+o7Y8=) 3: 9S6VN8W0AB42Tjfsy_52eVj_HF8.roa (hash: U/0clwp2HZIEVyJ8jDxjulKSBf1aha8MkLQgHpOloog=) 4: ASXdDgGnh8Klj0fzlnnnOhv5loU.roa (hash: wWWbyDkcRSYhjOCMVp5ySQLPVFoGVo9Lc8yvPSW0eIM=) 5: FCh0pju_b1XDjIA8N5RktFi16SI.roa (hash: nzz37F+/F7FQRtoCdt1NMVOBQ7kMdP9rhDen0hB2f8U=) 6: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: Zy1Je8b0r2xOdn5l30o3QSbVpXlyuG66bc+75xTs5ow=) 7: KKECh8K7hNffHVDT8ywINErgd1U.roa (hash: jFVe6x1L0XuZf3m6Z9ZwhiY43bHKM8ZXgM5AwxJ+SJ4=) 8: Neg-GaKgdY6gnpXCEHzkL9JlhS0.roa (hash: YgY5UaAq6hQXGaoygI0YizLwZ/ppqq3rjPmBhu92jjc=) 9: QBe6vAE6rYSA8KCQoO7i8f2keWY.roa (hash: /ZgtoN8+dacZMoQUvXB0j9wPVe+O1WRxUSH58QMyIv8=) 10: VuBKMZZHrZ1QSjnK1f8rGYyQD34.roa (hash: Yy9aJSbZa8jisjdlzD3JGDY9sTvRVpXk74KknU+efOI=) 11: XkXy4rFVu6JKAbUcEbjCs_ol8Mc.roa (hash: KEboU/fmZ1raaMqRFHeXS/DA8vof1Lf7hts2MdqUMFk=) 12: ZMDHfiorAQeHiAr2VSo31IrsX9Y.roa (hash: 2rW77gP54+olCRPQkqdpt6U7rC4Eivix0JgQsNBRA0A=) 13: b9LZtPjPcGkqch-QIMPmNiY1GfY.roa (hash: wVwwQPvK556ifQMFCqlsaWU8LCMEwKfjuZYfw4kZ7Ug=) 14: eq_1NPXQGhoWTMBNC9PaXKKEltM.roa (hash: Hq4HlvjEPgU16G6jBR0u/BxOO81trhl4PXHhgLXPBd4=) 15: u1jdAQ2eshDqHXq4UFjEjcuXmsI.roa (hash: 7O01VUQlx2/5mCx+t4SgO9Lggi1VIhx12oZO6kEvwsM=) 16: vhjrtMMdROIFj167BFR3pGrdrb8.roa (hash: mHe16RuP6X+5Fin2ZffJO/Ym51XZo7pnKG1BIGBPcUQ=) 17: vtNeTxZnHuMsF3rl3ZSPlMog7F0.roa (hash: FfGF+21HwGvE0iZhE2YJptjryuHFZ0BNSqu9xGqCr6Q=) 18: xtI4FxymYzhmmmKad9ZOkzTos1E.roa (hash: Xd4WHKpPZgsYedQWZYH07M7z75l0J2MM4sU9jDdQuXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 04:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1e:78:c7:a0:db:4a:12:33:c9:2f:dc:a6:22:47:ad:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Sep 6 10:00:55 2025 GMT Not After : Sep 7 10:00:55 2025 GMT Subject: CN=34c5add70961dbac4299c0d2aa53cc1a66dc3c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:d0:30:85:3e:b5:d7:64:2b:29:31:6b:bb: 89:a7:69:5c:ff:02:d0:45:81:3d:51:d2:16:b1:e1: 10:e9:7f:35:db:26:09:9a:8f:dd:89:4e:8b:8c:54: b4:66:f3:b3:a0:1b:cd:e8:50:70:44:e6:b8:76:87: 92:59:b5:d4:2f:fd:92:a4:88:f5:bf:09:59:ab:f6: 2f:50:5c:07:ae:d2:dc:4d:e8:67:a0:21:29:c6:5a: 6c:47:be:ff:18:df:1b:b4:5a:09:0d:d7:9a:8a:71: 4c:19:44:8c:b7:bd:83:52:5d:45:37:55:f9:44:79: 79:d6:a0:9f:ca:bc:56:74:0e:6f:2e:c7:92:13:83: ea:0c:e2:15:2d:01:37:77:3d:2a:5a:10:d5:a8:65: fb:15:e9:11:0e:87:9b:d7:cb:4b:43:54:10:ba:7f: 51:03:5b:49:4a:d5:f7:e5:b2:e6:d4:58:90:89:41: f4:46:cf:cf:f2:06:2c:26:d9:b4:3a:97:e0:b0:c1: 95:82:a6:49:31:27:5d:6b:12:2c:ce:07:e8:35:8c: 89:1d:e3:3d:88:d4:dc:66:d0:59:74:d0:b8:69:29: fb:16:15:39:f3:f4:e1:f8:25:98:dc:92:83:4f:0c: 43:71:0d:6f:d4:93:bc:a8:b7:65:4e:8a:28:f4:7e: 88:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C5:AD:D7:09:61:DB:AC:42:99:C0:D2:AA:53:CC:1A:66:DC:3C:1C X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:27:68:fb:41:ad:6a:41:08:5b:68:bd:7c:18:7c:5a:6a:a5: d4:96:30:b4:7d:0f:23:bd:a2:f9:32:14:a1:f9:f3:ab:c5:86: 47:38:b7:79:f3:d5:0c:6f:93:ec:f0:ea:c3:fd:da:ca:dc:f1: 79:25:a7:d8:7f:0d:a2:9a:8b:1d:dd:0c:91:be:72:01:64:0c: 01:e5:fb:3e:cd:dc:ab:dd:dd:03:61:43:19:05:90:45:42:4a: 75:44:1d:de:bd:6d:a4:26:cc:ea:65:5d:fc:0f:61:15:53:6b: d5:7d:11:37:58:57:bd:07:1c:31:bc:4a:35:3e:ac:2f:0d:f8: 2f:08:17:71:cd:da:dd:77:20:83:56:64:3c:69:e9:80:40:52: c9:41:16:f0:50:33:7b:a2:b5:18:fe:88:eb:19:a9:9e:ef:3b: 0c:ad:5f:2d:e2:6f:e1:ad:bb:bc:fc:27:6a:bd:96:1d:26:f7: 9f:fa:99:2c:89:66:3d:89:e5:b3:a0:5a:22:78:5e:a5:85:1b: 98:10:80:c7:ed:cb:34:3f:2a:57:00:dc:b0:09:ac:21:6c:53: 35:37:ca:cb:71:a1:75:42:7c:fd:48:e0:ae:04:de:6a:17:e8: 63:29:76:96:80:fc:8b:bd:47:94:43:83:25:93:ed:6d:4d:b0: 54:de:f1:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkeeMeg20oSM8kv3KYiR619MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjUwOTA2MTAwMDU1WhcNMjUwOTA3MTAwMDU1WjAzMTEwLwYDVQQD EygzNGM1YWRkNzA5NjFkYmFjNDI5OWMwZDJhYTUzY2MxYTY2ZGMzYzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyvQMIU+tddkKykxa7uJp2lc/wLQ RYE9UdIWseEQ6X812yYJmo/diU6LjFS0ZvOzoBvN6FBwROa4doeSWbXUL/2SpIj1 vwlZq/YvUFwHrtLcTehnoCEpxlpsR77/GN8btFoJDdeainFMGUSMt72DUl1FN1X5 RHl51qCfyrxWdA5vLseSE4PqDOIVLQE3dz0qWhDVqGX7FekRDoeb18tLQ1QQun9R A1tJStX35bLm1FiQiUH0Rs/P8gYsJtm0OpfgsMGVgqZJMSddaxIszgfoNYyJHeM9 iNTcZtBZdNC4aSn7FhU58/Th+CWY3JKDTwxDcQ1v1JO8qLdlTooo9H6IZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTFrdcJYdusQpnA0qpTzBpm3DwcMB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCdo+0Gt akEIW2i9fBh8Wmql1JYwtH0PI72i+TIUofnzq8WGRzi3efPVDG+T7PDqw/3aytzx eSWn2H8NopqLHd0Mkb5yAWQMAeX7Ps3cq93dA2FDGQWQRUJKdUQd3r1tpCbM6mVd /A9hFVNr1X0RN1hXvQccMbxKNT6sLw34LwgXcc3a3Xcgg1ZkPGnpgEBSyUEW8FAz e6K1GP6I6xmpnu87DK1fLeJv4a27vPwnar2WHSb3n/qZLIlmPYnls6BaInhepYUb mBCAx+3LND8qVwDcsAmsIWxTNTfKy3GhdUJ8/UjgrgTeahfoYyl2loD8i71HlEOD JZPtbU2wVN7xKw== -----END CERTIFICATE-----Generated at Sat Sep 6 11:47:18 2025 by rpki-client