$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft File: JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json) Hash identifier: wunJosCY65fxEDBfRs8umZd77xmgdsVB1S2bFVNfpJk= Subject key identifier: 2F:4D:04:B9:D0:A4:9F:5D:C2:92:58:F6:5E:8A:B8:7D:3F:DF:44:76 Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 019CD466967ACD773732E5F899D829C9580D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft Manifest number: 1599 Signing time: Mon 09 Mar 2026 21:00:18 +0000 Manifest this update: Mon 09 Mar 2026 21:00:18 +0000 Manifest next update: Tue 10 Mar 2026 21:00:18 +0000 Files and hashes: 1: CkpruVXBRC35FNzBxsHtHzElTcQ.roa (hash: M8G0Fw/AyLb57D4pQj+p7wHrZ6ZAg2uq5cvqL/37hsU=) 2: DASfpt6NusBMafxKXMbsXkknaLs.roa (hash: 7Q1f4G/K2mV4OPswZej+EeWKFQMe4TLAgeu5GM1kraI=) 3: ESMuZH3p8eZcfxjSdFlU49_G9BY.roa (hash: eU/RIl1p7nycsadiq5D1MCtC0gJOFnvD+JDmCJY+OA8=) 4: H4PmoPs09fxsoMyeNbvcLTDl7tg.roa (hash: g6se6YwWnPf1EHgnkVuLefIVI+viGWgQPBM+Zec15uI=) 5: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: 6ZBJm3iVapR9lCW8D49v+Ak+VL+QvUs/Q6012h5sjag=) 6: VHgUN5juRzMz3CUHZPoEHnzr2z0.roa (hash: VXSqzrkX+ABn4jZnd4wHdBjnPgDeVeSEP9mmDyjcGMQ=) 7: WuM6D54bD9ZW12al4cadO05OlhA.roa (hash: KSoGE/L4hSg6At0Y5RkAFE3o/b5P/zSmERN2VFp1fMQ=) 8: Y-rwo6ja1_SXsDsjjZenySjEjo8.roa (hash: ZsKC9kHfKh+n+8/Xir5wlK+HjS6IcJLLArYCrxMRmAk=) 9: fRUNIQ1_jYWQdZrSZ4luryAQJDQ.roa (hash: ty6oOnSu+ZODj+9+2x+cpkE7v0JL9rnydZY11LzAwgQ=) 10: jTbrb1TbwgaHuVljIE6syUVcGbE.roa (hash: 1xz+1g5hD0xQyll98W3vSqycYShnYZQgn+0XxOIFh6g=) 11: lNSsiMsgFC3PSDwg_wipOCI36Sc.roa (hash: T+M2rwciKN++pJU4zsuNLc+4agGsiYLXoX3H/Bds62g=) 12: nMpaMbGEzj2Jpg2_GxE2xYc0pUI.roa (hash: Fv1RC7bFvxKYKp89cN52GIHsD0MHml/fLyyWKSWO5/k=) 13: rjPbS80wLPhwF4ETCKbrHWAdxvw.roa (hash: 0e9ndNtpFQMzhAU9T854jFmEVmFNvWMXh2KdMpHi8jk=) 14: sIpLAsGB9mg0zFG4d5238KgCd4k.roa (hash: eXcSiBlROOdcbS6oOwKQciaqtXn9irVYQuDWrvrFA6s=) 15: shMgILdrcRQ_LG-B1Njv0tFtwKY.roa (hash: VrnYEoqsCXqMeGOK7nN9tJcwMBHTSx98wiR1emp3pqQ=) 16: spxPuR8xyj72SKO00nWmxiu9tv8.roa (hash: j68QBUE3gzuvtf320646B+hARt3MiGgu/5WZ8oVBSpA=) 17: ufjaDLPum5mRkBKXDuMb146baHg.roa (hash: oNF4RqIC9pQOPmU+xyL4C1SBlQau5hDsBq8wufytphI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Mar 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:d4:66:96:7a:cd:77:37:32:e5:f8:99:d8:29:c9:58:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Mar 9 21:00:18 2026 GMT Not After : Mar 10 21:00:18 2026 GMT Subject: CN=2f4d04b9d0a49f5dc29258f65e8ab87d3fdf4476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c0:2f:b8:e0:54:05:a7:b2:33:0a:f0:11:7d: c0:48:25:17:08:c5:26:a2:40:08:62:bf:d8:a7:db: 08:f6:1d:e0:81:36:1a:52:1e:92:09:fe:9c:7b:bb: 97:49:cb:c0:77:6c:95:1d:fa:4d:c7:3b:05:2f:78: 51:00:4e:51:a8:e1:8e:63:e5:c0:b4:39:43:e2:da: 72:a6:a8:8c:13:cb:d6:43:14:81:ac:6e:60:21:2a: 4e:e1:09:e8:e8:ae:d7:28:02:1f:10:3f:cc:d6:a7: fb:98:cf:1a:31:8f:42:2b:a9:cd:36:32:b9:e0:d7: 4e:54:5f:3e:cf:23:9b:a9:cc:b7:ad:0d:fe:4c:1a: 92:17:a0:e4:92:ca:82:c0:d0:d8:e3:97:67:82:c9: d3:59:d6:a2:7c:56:08:8c:d4:09:6f:77:e9:a0:fc: cb:8c:5b:25:3c:8a:a7:30:8b:c8:53:d7:e4:2e:8b: 77:e5:ea:fa:5c:89:99:b0:cc:29:05:6e:22:d6:3c: 80:0f:6e:03:a4:ee:73:2b:c3:11:fc:bf:e6:20:28: 08:b1:81:e2:b5:d2:24:4d:bf:da:e1:61:be:14:16: 9f:37:9e:02:48:3f:3d:46:5b:35:c1:b8:9d:d3:c1: 79:ed:c5:16:c5:71:ca:ce:cb:01:ee:f5:03:a8:e1: 28:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4D:04:B9:D0:A4:9F:5D:C2:92:58:F6:5E:8A:B8:7D:3F:DF:44:76 X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:98:3e:f3:4e:0c:d0:c6:5c:22:ee:07:8f:ca:d3:56:38:aa: e1:e9:e7:5c:44:f9:5b:8a:25:1e:bc:98:3d:dc:8c:55:15:8e: 03:1c:81:ae:06:cc:d2:f5:18:ae:93:f3:84:be:e2:c2:41:ef: eb:b1:f1:39:04:ba:29:25:2b:72:5a:42:79:18:c0:10:f1:35: d6:0b:76:e0:06:e7:53:d0:6c:0b:42:62:cb:39:52:73:10:d3: 59:99:bf:79:fd:df:06:fd:cd:f1:34:03:af:dd:a5:ce:df:34: 1a:02:9d:b1:79:0b:f9:fd:c9:bf:57:a9:b9:83:90:83:59:5c: 96:0e:64:d4:99:a4:fe:e9:28:55:bd:af:d9:2d:39:70:64:e8: 58:25:0d:bc:44:a3:c6:96:40:a7:88:9f:78:5c:e1:9f:01:b6: 5c:e2:b6:78:38:ae:81:fc:29:ed:74:5a:c1:36:e0:d2:2c:e3: c0:31:6d:71:dd:28:36:37:28:d8:41:b7:19:74:42:53:34:8f: 3d:85:48:d7:e3:89:f3:b5:a7:6a:18:f4:54:a5:04:2b:d4:15: 3a:52:8b:9a:f6:1e:a2:d9:60:3e:fc:c8:26:63:9c:af:c9:35: 6c:9b:02:ed:4b:73:96:72:a5:1b:b2:d7:14:f8:43:3e:f1:09: 89:f1:b3:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzUZpZ6zXc3MuX4mdgpyVgNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjYwMzA5MjEwMDE4WhcNMjYwMzEwMjEwMDE4WjAzMTEwLwYDVQQD EygyZjRkMDRiOWQwYTQ5ZjVkYzI5MjU4ZjY1ZThhYjg3ZDNmZGY0NDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8AvuOBUBaeyMwrwEX3ASCUXCMUm okAIYr/Yp9sI9h3ggTYaUh6SCf6ce7uXScvAd2yVHfpNxzsFL3hRAE5RqOGOY+XA tDlD4tpypqiME8vWQxSBrG5gISpO4Qno6K7XKAIfED/M1qf7mM8aMY9CK6nNNjK5 4NdOVF8+zyObqcy3rQ3+TBqSF6DkksqCwNDY45dngsnTWdaifFYIjNQJb3fpoPzL jFslPIqnMIvIU9fkLot35er6XImZsMwpBW4i1jyAD24DpO5zK8MR/L/mICgIsYHi tdIkTb/a4WG+FBafN54CSD89Rls1wbid08F57cUWxXHKzssB7vUDqOEoPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9NBLnQpJ9dwpJY9l6KuH0/30R2MB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipg+804M 0MZcIu4Hj8rTVjiq4ennXET5W4olHryYPdyMVRWOAxyBrgbM0vUYrpPzhL7iwkHv 67HxOQS6KSUrclpCeRjAEPE11gt24AbnU9BsC0JiyzlScxDTWZm/ef3fBv3N8TQD r92lzt80GgKdsXkL+f3Jv1epuYOQg1lclg5k1Jmk/ukoVb2v2S05cGToWCUNvESj xpZAp4ifeFzhnwG2XOK2eDiugfwp7XRawTbg0izjwDFtcd0oNjco2EG3GXRCUzSP PYVI1+OJ87Wnahj0VKUEK9QVOlKLmvYeotlgPvzIJmOcr8k1bJsC7UtzlnKlG7LX FPhDPvEJifGzsw== -----END CERTIFICATE-----Generated at Tue Mar 10 06:38:34 2026 by rpki-client