$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft File: JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json) Hash identifier: /uqBB4A/3y/x8TEuaUVaqtJIE7/c4lC/NSYiq+canwA= Subject key identifier: D3:AB:F3:28:C3:4F:EA:D5:FF:90:E6:D4:BA:B7:09:C4:AC:5A:AC:31 Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 019A0636D2338F5C994390D095A9FCF35324 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft Manifest number: 1423 Signing time: Tue 21 Oct 2025 10:00:47 +0000 Manifest this update: Tue 21 Oct 2025 10:00:47 +0000 Manifest next update: Wed 22 Oct 2025 10:00:47 +0000 Files and hashes: 1: 1GXRp3uT7hSMRzWjOxU0QktVRiY.roa (hash: aqIqmb81zi2cD6sMblBWQoAdH8B6EoMHMa2iFTOnb0c=) 2: 7w1YPyzlBEZNMOyEUCFkNc0ECPQ.roa (hash: 0dazsLMYx/MeDO19uGuuYzM5rCd3NgH7NYuHWn+o7Y8=) 3: 9S6VN8W0AB42Tjfsy_52eVj_HF8.roa (hash: U/0clwp2HZIEVyJ8jDxjulKSBf1aha8MkLQgHpOloog=) 4: ASXdDgGnh8Klj0fzlnnnOhv5loU.roa (hash: wWWbyDkcRSYhjOCMVp5ySQLPVFoGVo9Lc8yvPSW0eIM=) 5: FCh0pju_b1XDjIA8N5RktFi16SI.roa (hash: nzz37F+/F7FQRtoCdt1NMVOBQ7kMdP9rhDen0hB2f8U=) 6: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: fSDp5S/o0vx1BD/OHR+moN7wSwRgY/gnEJBMeRLSTms=) 7: KKECh8K7hNffHVDT8ywINErgd1U.roa (hash: jFVe6x1L0XuZf3m6Z9ZwhiY43bHKM8ZXgM5AwxJ+SJ4=) 8: Neg-GaKgdY6gnpXCEHzkL9JlhS0.roa (hash: YgY5UaAq6hQXGaoygI0YizLwZ/ppqq3rjPmBhu92jjc=) 9: QBe6vAE6rYSA8KCQoO7i8f2keWY.roa (hash: /ZgtoN8+dacZMoQUvXB0j9wPVe+O1WRxUSH58QMyIv8=) 10: VuBKMZZHrZ1QSjnK1f8rGYyQD34.roa (hash: Yy9aJSbZa8jisjdlzD3JGDY9sTvRVpXk74KknU+efOI=) 11: XkXy4rFVu6JKAbUcEbjCs_ol8Mc.roa (hash: KEboU/fmZ1raaMqRFHeXS/DA8vof1Lf7hts2MdqUMFk=) 12: ZMDHfiorAQeHiAr2VSo31IrsX9Y.roa (hash: 2rW77gP54+olCRPQkqdpt6U7rC4Eivix0JgQsNBRA0A=) 13: b9LZtPjPcGkqch-QIMPmNiY1GfY.roa (hash: wVwwQPvK556ifQMFCqlsaWU8LCMEwKfjuZYfw4kZ7Ug=) 14: eq_1NPXQGhoWTMBNC9PaXKKEltM.roa (hash: Hq4HlvjEPgU16G6jBR0u/BxOO81trhl4PXHhgLXPBd4=) 15: u1jdAQ2eshDqHXq4UFjEjcuXmsI.roa (hash: 7O01VUQlx2/5mCx+t4SgO9Lggi1VIhx12oZO6kEvwsM=) 16: vhjrtMMdROIFj167BFR3pGrdrb8.roa (hash: mHe16RuP6X+5Fin2ZffJO/Ym51XZo7pnKG1BIGBPcUQ=) 17: vtNeTxZnHuMsF3rl3ZSPlMog7F0.roa (hash: FfGF+21HwGvE0iZhE2YJptjryuHFZ0BNSqu9xGqCr6Q=) 18: xtI4FxymYzhmmmKad9ZOkzTos1E.roa (hash: Xd4WHKpPZgsYedQWZYH07M7z75l0J2MM4sU9jDdQuXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 10:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:06:36:d2:33:8f:5c:99:43:90:d0:95:a9:fc:f3:53:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Oct 21 10:00:47 2025 GMT Not After : Oct 22 10:00:47 2025 GMT Subject: CN=d3abf328c34fead5ff90e6d4bab709c4ac5aac31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:93:06:ad:6b:b6:cd:8a:b7:5f:01:1b:b9:e3: d7:ee:86:ff:0c:6f:a0:4f:e4:ea:bb:4a:fa:42:a6: ce:f4:1d:44:56:64:ba:4f:47:57:f3:bd:68:58:74: 19:e8:12:43:59:82:f6:4e:61:80:06:e5:f1:d9:27: 27:73:36:d9:87:85:25:12:6b:af:4b:5a:00:f3:9a: 41:48:27:4f:f1:ab:87:7a:8c:b7:fe:d5:41:a8:52: 66:56:5a:30:cb:52:0d:76:44:1b:4e:80:ce:e8:68: 57:2b:39:9d:32:6f:cb:77:31:e2:13:49:8d:d7:12: ed:1d:bc:c0:bf:49:46:11:ee:74:8f:9a:d7:4a:8e: 8e:36:b0:77:5b:2c:e2:98:3e:58:a9:5d:f9:4a:fc: 7b:dd:ee:45:76:d1:79:d2:7c:2f:1b:9b:58:0a:bc: 80:5a:45:f2:4a:cd:72:3e:88:18:7a:08:df:59:51: 14:d2:ca:80:b8:d4:85:3e:e7:f3:6e:0a:44:c5:ba: f2:37:f0:46:e7:fd:71:de:7c:ad:44:93:db:89:1b: 17:b8:2a:44:77:88:2e:4e:dd:c7:fd:6b:4e:26:ea: b0:e4:1b:74:e9:59:a5:73:ab:86:a3:79:cb:c6:0d: 40:0c:c2:9c:a5:85:85:66:42:e4:1c:7f:94:f2:40: 96:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AB:F3:28:C3:4F:EA:D5:FF:90:E6:D4:BA:B7:09:C4:AC:5A:AC:31 X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d9:b1:79:25:a5:71:ce:79:73:14:3e:c7:54:51:c9:b0:9f: 39:08:a3:8e:88:2c:24:3e:d2:99:de:f6:e1:83:df:38:ac:05: 30:57:73:10:ef:66:5f:d7:43:d9:80:50:d7:17:cf:be:19:43: b2:35:56:57:6d:d4:cf:2a:35:e3:6c:85:13:c5:59:76:7a:24: ca:e7:ef:98:3a:67:62:95:e9:0c:28:99:42:83:15:7b:72:12: b0:c0:72:6f:fe:a7:e4:b6:67:cb:1c:83:b7:63:bf:20:6d:33: 04:2f:82:89:3d:6a:74:3e:53:45:2a:0d:1c:ed:86:2d:0d:42: cd:e6:9d:0d:de:75:cf:96:bf:30:6e:97:b3:70:bb:43:2a:18: 56:ca:43:23:ed:ee:27:2d:aa:ec:a1:92:cb:39:56:e7:a8:96: a1:c0:2a:77:1e:69:51:53:eb:1b:78:c9:75:62:cd:53:e2:e2: ec:c4:6b:c5:af:64:75:da:d9:c4:3c:d6:2d:be:1f:95:dd:b5: c5:df:51:4c:9c:24:53:c2:56:0c:f0:d2:44:f5:55:b2:67:91: d0:14:79:5a:8a:3c:6b:2e:be:ce:f0:ff:57:5d:ad:e7:87:86: 56:df:a8:cc:20:4f:90:94:07:0b:00:81:1e:32:57:7f:ae:91: 63:fa:95:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoGNtIzj1yZQ5DQlan881MkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjUxMDIxMTAwMDQ3WhcNMjUxMDIyMTAwMDQ3WjAzMTEwLwYDVQQD EyhkM2FiZjMyOGMzNGZlYWQ1ZmY5MGU2ZDRiYWI3MDljNGFjNWFhYzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5MGrWu2zYq3XwEbuePX7ob/DG+g T+Tqu0r6QqbO9B1EVmS6T0dX871oWHQZ6BJDWYL2TmGABuXx2ScnczbZh4UlEmuv S1oA85pBSCdP8auHeoy3/tVBqFJmVlowy1INdkQbToDO6GhXKzmdMm/LdzHiE0mN 1xLtHbzAv0lGEe50j5rXSo6ONrB3WyzimD5YqV35Svx73e5FdtF50nwvG5tYCryA WkXySs1yPogYegjfWVEU0sqAuNSFPufzbgpExbryN/BG5/1x3nytRJPbiRsXuCpE d4guTt3H/WtOJuqw5Bt06Vmlc6uGo3nLxg1ADMKcpYWFZkLkHH+U8kCW/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOr8yjDT+rV/5Dm1Lq3CcSsWqwxMB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNmxeSWl cc55cxQ+x1RRybCfOQijjogsJD7Smd724YPfOKwFMFdzEO9mX9dD2YBQ1xfPvhlD sjVWV23Uzyo142yFE8VZdnokyufvmDpnYpXpDCiZQoMVe3ISsMByb/6n5LZnyxyD t2O/IG0zBC+CiT1qdD5TRSoNHO2GLQ1CzeadDd51z5a/MG6Xs3C7QyoYVspDI+3u Jy2q7KGSyzlW56iWocAqdx5pUVPrG3jJdWLNU+Li7MRrxa9kddrZxDzWLb4fld21 xd9RTJwkU8JWDPDSRPVVsmeR0BR5Woo8ay6+zvD/V12t54eGVt+ozCBPkJQHCwCB HjJXf66RY/qV1Q== -----END CERTIFICATE-----Generated at Tue Oct 21 16:12:24 2025 by rpki-client