$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft File: JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json) Hash identifier: pUe+/7iOTrLe0X2vCOUaZB0/TpYR69jZMO7LXG6lxms= Subject key identifier: B2:68:2A:93:2D:1B:FF:FF:5F:F4:DE:D9:7D:0A:0A:2F:7E:78:34:0C Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 019EB92164720959410B6A7A3C061C592F5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft Manifest number: 1694 Signing time: Fri 12 Jun 2026 00:00:33 +0000 Manifest this update: Fri 12 Jun 2026 00:00:33 +0000 Manifest next update: Sat 13 Jun 2026 00:00:33 +0000 Files and hashes: 1: CkpruVXBRC35FNzBxsHtHzElTcQ.roa (hash: M8G0Fw/AyLb57D4pQj+p7wHrZ6ZAg2uq5cvqL/37hsU=) 2: DASfpt6NusBMafxKXMbsXkknaLs.roa (hash: 7Q1f4G/K2mV4OPswZej+EeWKFQMe4TLAgeu5GM1kraI=) 3: ESMuZH3p8eZcfxjSdFlU49_G9BY.roa (hash: eU/RIl1p7nycsadiq5D1MCtC0gJOFnvD+JDmCJY+OA8=) 4: H4PmoPs09fxsoMyeNbvcLTDl7tg.roa (hash: g6se6YwWnPf1EHgnkVuLefIVI+viGWgQPBM+Zec15uI=) 5: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: yjCpOTNFfb7pZA09jXfJRW6cWblaZEuk4S+JaUY5LHQ=) 6: VHgUN5juRzMz3CUHZPoEHnzr2z0.roa (hash: VXSqzrkX+ABn4jZnd4wHdBjnPgDeVeSEP9mmDyjcGMQ=) 7: WuM6D54bD9ZW12al4cadO05OlhA.roa (hash: KSoGE/L4hSg6At0Y5RkAFE3o/b5P/zSmERN2VFp1fMQ=) 8: Y-rwo6ja1_SXsDsjjZenySjEjo8.roa (hash: ZsKC9kHfKh+n+8/Xir5wlK+HjS6IcJLLArYCrxMRmAk=) 9: fRUNIQ1_jYWQdZrSZ4luryAQJDQ.roa (hash: ty6oOnSu+ZODj+9+2x+cpkE7v0JL9rnydZY11LzAwgQ=) 10: jTbrb1TbwgaHuVljIE6syUVcGbE.roa (hash: 1xz+1g5hD0xQyll98W3vSqycYShnYZQgn+0XxOIFh6g=) 11: lNSsiMsgFC3PSDwg_wipOCI36Sc.roa (hash: T+M2rwciKN++pJU4zsuNLc+4agGsiYLXoX3H/Bds62g=) 12: nMpaMbGEzj2Jpg2_GxE2xYc0pUI.roa (hash: Fv1RC7bFvxKYKp89cN52GIHsD0MHml/fLyyWKSWO5/k=) 13: rjPbS80wLPhwF4ETCKbrHWAdxvw.roa (hash: 0e9ndNtpFQMzhAU9T854jFmEVmFNvWMXh2KdMpHi8jk=) 14: sIpLAsGB9mg0zFG4d5238KgCd4k.roa (hash: eXcSiBlROOdcbS6oOwKQciaqtXn9irVYQuDWrvrFA6s=) 15: shMgILdrcRQ_LG-B1Njv0tFtwKY.roa (hash: VrnYEoqsCXqMeGOK7nN9tJcwMBHTSx98wiR1emp3pqQ=) 16: spxPuR8xyj72SKO00nWmxiu9tv8.roa (hash: j68QBUE3gzuvtf320646B+hARt3MiGgu/5WZ8oVBSpA=) 17: ufjaDLPum5mRkBKXDuMb146baHg.roa (hash: oNF4RqIC9pQOPmU+xyL4C1SBlQau5hDsBq8wufytphI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 20:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b9:21:64:72:09:59:41:0b:6a:7a:3c:06:1c:59:2f:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Jun 12 00:00:33 2026 GMT Not After : Jun 13 00:00:33 2026 GMT Subject: CN=b2682a932d1bffff5ff4ded97d0a0a2f7e78340c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ec:94:82:e1:67:84:4b:c1:c6:14:1d:ff:98: a3:7d:ae:18:4e:d0:ed:d1:ed:bb:94:d9:97:32:00: 20:c7:73:68:51:8c:e8:0d:a2:34:9a:2e:3f:95:b4: 78:a8:57:94:c0:05:75:1c:a3:4a:cc:a6:45:16:0f: 77:3c:42:af:b4:5b:d7:e2:ed:24:78:fb:d9:2d:18: 92:f0:47:14:8b:07:3c:88:e4:49:14:5f:b4:a1:2b: 1e:45:e1:e4:e1:39:4d:66:51:45:96:77:23:4b:a8: 79:97:a2:b7:73:ea:86:1d:35:8b:b2:71:0e:56:0d: a9:5b:05:60:32:fc:9f:6a:72:17:d1:75:c3:e1:cc: c1:10:11:a3:41:3c:95:56:12:37:76:fa:08:8e:2d: e0:46:55:4e:49:2d:8a:f9:73:d2:8d:1e:1a:e7:f7: b3:81:2b:0e:df:51:4e:c6:8e:20:ee:08:e1:fb:17: 37:6e:a9:5d:7f:5b:8b:22:5e:21:97:3c:89:0c:38: 38:4f:67:31:19:5e:9e:07:99:44:d0:ea:5b:31:5d: f9:fb:1d:ce:e6:b0:34:bd:0b:d6:45:15:a0:be:ef: 43:08:51:57:73:a7:95:bc:3a:f3:85:db:37:71:55: 2d:ec:87:5f:0b:c5:15:a8:7a:8e:5d:4f:02:67:a5: 82:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:68:2A:93:2D:1B:FF:FF:5F:F4:DE:D9:7D:0A:0A:2F:7E:78:34:0C X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:2a:08:1a:f5:ac:65:f7:f6:08:1e:25:d1:a2:33:9c:3e:ef: 27:ac:8d:73:5c:5f:17:03:b3:37:99:e9:08:89:77:2f:fc:37: cd:74:82:47:6f:7d:5e:25:81:e3:c5:46:c5:a9:25:07:8b:ed: 8e:cf:f3:f2:61:d7:20:06:dd:a1:58:65:45:1c:2e:8a:36:91: 4c:9c:d1:c0:3e:ff:4a:10:40:20:aa:80:0f:14:74:7f:07:5f: e0:f3:95:41:f2:bd:78:35:3e:f5:dd:b1:86:5b:88:fa:2c:16: 6e:3c:02:21:f9:47:81:8c:29:ac:ca:3c:7a:05:63:c2:93:7a: 16:68:d2:11:70:1b:2a:b1:85:0c:61:a3:ea:a4:4c:ce:7e:f0: b1:49:5d:4f:9d:d1:40:75:44:81:65:b7:cb:9d:b7:cf:61:81: 8a:bd:8b:41:ae:e6:6e:49:99:e9:a3:3b:8e:c3:16:07:42:16: 9b:f8:da:58:cf:96:a8:a8:44:5c:9e:d5:b6:34:ac:86:e1:78: 8a:df:04:87:49:c4:b2:2c:ae:72:ea:6e:78:e6:73:48:bd:3c: 61:c2:38:38:67:fd:7f:9e:30:04:51:18:49:b2:2b:da:f9:99: 4b:70:19:73:53:77:1d:c9:c4:c1:7b:99:02:e0:6e:04:cc:b1: 19:44:7d:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ65IWRyCVlBC2p6PAYcWS9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjYwNjEyMDAwMDMzWhcNMjYwNjEzMDAwMDMzWjAzMTEwLwYDVQQD EyhiMjY4MmE5MzJkMWJmZmZmNWZmNGRlZDk3ZDBhMGEyZjdlNzgzNDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+yUguFnhEvBxhQd/5ijfa4YTtDt 0e27lNmXMgAgx3NoUYzoDaI0mi4/lbR4qFeUwAV1HKNKzKZFFg93PEKvtFvX4u0k ePvZLRiS8EcUiwc8iORJFF+0oSseReHk4TlNZlFFlncjS6h5l6K3c+qGHTWLsnEO Vg2pWwVgMvyfanIX0XXD4czBEBGjQTyVVhI3dvoIji3gRlVOSS2K+XPSjR4a5/ez gSsO31FOxo4g7gjh+xc3bqldf1uLIl4hlzyJDDg4T2cxGV6eB5lE0OpbMV35+x3O 5rA0vQvWRRWgvu9DCFFXc6eVvDrzhds3cVUt7IdfC8UVqHqOXU8CZ6WCFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJoKpMtG///X/Te2X0KCi9+eDQMMB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSoIGvWs Zff2CB4l0aIznD7vJ6yNc1xfFwOzN5npCIl3L/w3zXSCR299XiWB48VGxaklB4vt js/z8mHXIAbdoVhlRRwuijaRTJzRwD7/ShBAIKqADxR0fwdf4POVQfK9eDU+9d2x hluI+iwWbjwCIflHgYwprMo8egVjwpN6FmjSEXAbKrGFDGGj6qRMzn7wsUldT53R QHVEgWW3y523z2GBir2LQa7mbkmZ6aM7jsMWB0IWm/jaWM+WqKhEXJ7VtjSshuF4 it8Eh0nEsiyucupueOZzSL08YcI4OGf9f54wBFEYSbIr2vmZS3AZc1N3HcnEwXuZ AuBuBMyxGUR9lA== -----END CERTIFICATE-----Generated at Fri Jun 12 04:02:47 2026 by rpki-client