$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json) Hash identifier: Uwj650vFYUtpD9aCuXvRJtXxUSCykYCF72LPHBLzvgA= Subject key identifier: 8B:71:66:9F:3A:97:85:A4:CA:DF:0A:D7:97:BB:36:3A:87:DA:DD:D8 Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 01A184BF2EE8DAE9EB48A5EA2AB92FBD850F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft Manifest number: 07A2 Signing time: Wed 28 Oct 2026 23:01:24 +0000 Manifest this update: Wed 28 Oct 2026 23:01:24 +0000 Manifest next update: Thu 29 Oct 2026 23:01:24 +0000 Files and hashes: 1: 3ni1lXz0xo-b4HoXI3wRu6vJL-c.roa (hash: 7b3P7fNZC5J3JcfQvJqiC/2neHH6f8kadDw6/l3P8/Y=) 2: AmdO1jA2vkBtxkn2vv7Y1wu4dFM.roa (hash: wY1LZtovvbzyHM2W8YhMwLuam5z9V3nwmwDqM8gEEF4=) 3: BYtnuImtTGdi14Pvw9xlRKAL65k.roa (hash: hUoeJXbJ5fZg7WKvqap5HxU1pLmROBa7LXCxisf4SP4=) 4: CNFp8fRkRFtEQks7R0O2wgi6-xA.roa (hash: bXlKDyyKKGdmKBfoGxYPygp5JG45Ozo2FLYDRNT3VpM=) 5: HrFuB2F4P326FdIKDHmR_z_oGqs.roa (hash: d1+J0bs8Jd4Tmg8E7c67C6CZ18CYNi+0jZ3ouxTsd3M=) 6: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: I9o7miB2dbtl99eqpN9WnJwoABouw35ULPkTg3Dk7jY=) 7: Qw57jboYzWi7eNVtR4XFL50skyQ.asa (hash: gZacbBLwQEXYgJXLBy71iNIoJF93UncqIKQilDhd0Ik=) 8: YlYX0-EwdZ0RjwlcesbIkWVsVTo.roa (hash: 12tzR601qVt1Vj7EME9V9wBl6cqsNdP8VmiHIJgAu5Q=) 9: cNqycsZxVsHcATCP8JWqqaoM9SI.roa (hash: CX+xOUuMFEXPOxevDnRNct6cRUm/jc1q9b58M6PTWZo=) 10: gE3k0i8jHZvr5aE-wjNKPwzJxvE.roa (hash: CuCVWX3Bl6EYyE6nnbYJN+zyPfahHe62RUo//GoIy9o=) 11: lBlo6PUCc6IqER-nFwmpK7D7yqo.roa (hash: Z5uCFtdD3Jko3O/Znx9FA924V5ua0wn5UjLkJKE8KyE=) 12: qbksFEEwSTb2bBOnvyMaaJhR7Ss.roa (hash: qH3mt9TzRYD5CJqPjTYWZEejOSD69A/a1ZIdDauUkQo=) 13: urqr3QuscnM9Gexd4HqCzda04Hs.roa (hash: +eFtvrmvtLAGjqTjuO2JbNNCYDwjSBJV6qDXXX+HoPY=) 14: vK-KaBqhr8V_hwKd5waBGW1KRWw.roa (hash: oQWH0/V6kKajlzjedYwpIuxuJVBUj9/lA3fmpgeVLpQ=) 15: vsRZs78l22h0vnp-DI6scU3LKUA.roa (hash: 4WpHfFl6tIuHybFbUi60kzMtYBl55u5TXUCckR5iGfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 22:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:84:bf:2e:e8:da:e9:eb:48:a5:ea:2a:b9:2f:bd:85:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Oct 28 23:01:24 2026 GMT Not After : Oct 29 23:01:24 2026 GMT Subject: CN=8b71669f3a9785a4cadf0ad797bb363a87daddd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ea:fd:41:20:d7:65:bd:2a:61:e5:a9:2b:ab: 28:d5:00:7c:73:95:f8:c8:9f:10:54:c7:74:e2:f3: d1:b0:8e:d8:27:72:5e:e2:05:3b:3c:e6:d9:27:d2: 5d:fd:8b:42:92:0f:4e:6d:b2:cf:88:84:b1:84:c4: 8d:46:79:ac:11:6d:f0:bf:c4:92:59:ba:c6:a1:ee: 12:f3:95:d8:5d:0c:c2:2b:8e:bd:03:8a:25:4a:9a: b6:7c:55:a6:44:8e:4b:d8:95:22:e3:52:ed:a7:ee: 9b:b5:42:9f:dd:8d:55:f0:96:c8:6c:ba:dc:1f:03: 0e:1c:9b:b7:cf:c2:2e:c9:82:40:1d:d5:67:99:1b: ce:10:e1:6d:19:af:2e:53:f9:93:e6:19:e8:dd:6e: 92:00:19:bd:4a:27:62:e8:d9:16:39:18:2d:64:f9: a4:34:b4:f6:c7:aa:59:fe:2e:e0:e3:4b:d4:b5:3e: b1:7d:6a:eb:ef:89:55:46:7a:ec:64:f3:64:d2:a5: e4:83:21:e4:20:47:eb:7c:e6:ca:d2:c9:20:31:82: b0:ba:71:c5:0a:9d:03:e2:c7:74:c0:5c:68:2b:07: 69:11:da:96:6b:d3:40:aa:16:ed:c8:de:66:10:b7: 9b:9b:a0:00:1b:a5:f1:74:ac:44:f7:8f:2d:7d:c4: 83:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:71:66:9F:3A:97:85:A4:CA:DF:0A:D7:97:BB:36:3A:87:DA:DD:D8 X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c2:52:ef:a4:4a:e4:d6:f4:4f:ed:57:70:46:e3:6d:b6:5e: 24:4e:ac:35:1c:a5:8e:6d:fc:93:2e:be:30:08:21:7f:0a:f9: a7:2e:0d:01:09:c6:d7:d8:2c:16:2d:1e:ab:e3:1b:d6:f7:8f: 52:40:b1:40:7a:4a:9c:3c:fd:a5:3e:83:d3:7e:62:94:7c:01: 73:ae:9e:75:91:ad:ef:af:1b:c6:77:0f:f9:25:82:ec:f3:8b: 3d:e0:75:02:a4:0f:da:d2:87:e2:c6:19:21:ae:4d:40:c9:65: 82:fa:b6:4c:d1:13:33:46:dd:b5:15:68:3b:e4:a2:c9:be:3a: 53:a1:96:74:1a:92:9b:65:25:75:58:03:06:49:2c:96:ef:01: 5a:c7:75:f8:9f:97:1f:8b:c8:32:3b:a0:10:ac:7b:cd:b7:1a: 60:1b:c6:6f:90:46:45:82:90:0b:7d:0f:5b:b7:5b:71:fe:01: b3:fd:38:17:b1:68:b0:0c:c7:31:62:14:f6:37:73:92:dd:dc: b5:34:0d:ac:7e:12:d1:a0:3f:4d:b9:1b:37:8d:92:0a:c8:af: 83:cb:3e:be:d1:3d:bb:f9:25:bc:d1:f8:d5:0d:45:59:6a:0a: 05:16:6e:bb:60:0d:7c:be:08:ee:a5:de:a7:d6:8a:31:30:7a: a6:d4:0f:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGEvy7o2unrSKXqKrkvvYUPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjYxMDI4MjMwMTI0WhcNMjYxMDI5MjMwMTI0WjAzMTEwLwYDVQQD Eyg4YjcxNjY5ZjNhOTc4NWE0Y2FkZjBhZDc5N2JiMzYzYTg3ZGFkZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuur9QSDXZb0qYeWpK6so1QB8c5X4 yJ8QVMd04vPRsI7YJ3Je4gU7PObZJ9Jd/YtCkg9ObbLPiISxhMSNRnmsEW3wv8SS WbrGoe4S85XYXQzCK469A4olSpq2fFWmRI5L2JUi41Ltp+6btUKf3Y1V8JbIbLrc HwMOHJu3z8IuyYJAHdVnmRvOEOFtGa8uU/mT5hno3W6SABm9Sidi6NkWORgtZPmk NLT2x6pZ/i7g40vUtT6xfWrr74lVRnrsZPNk0qXkgyHkIEfrfObK0skgMYKwunHF Cp0D4sd0wFxoKwdpEdqWa9NAqhbtyN5mELebm6AAG6XxdKxE948tfcSDEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItxZp86l4Wkyt8K15e7NjqH2t3YMB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncJS76RK 5Nb0T+1XcEbjbbZeJE6sNRyljm38ky6+MAghfwr5py4NAQnG19gsFi0eq+Mb1veP UkCxQHpKnDz9pT6D035ilHwBc66edZGt768bxncP+SWC7POLPeB1AqQP2tKH4sYZ Ia5NQMllgvq2TNETM0bdtRVoO+Siyb46U6GWdBqSm2UldVgDBkkslu8BWsd1+J+X H4vIMjugEKx7zbcaYBvGb5BGRYKQC30PW7dbcf4Bs/04F7FosAzHMWIU9jdzkt3c tTQNrH4S0aA/TbkbN42SCsivg8s+vtE9u/klvNH41Q1FWWoKBRZuu2ANfL4I7qXe p9aKMTB6ptQPYw== -----END CERTIFICATE-----Generated at Thu Oct 29 01:52:18 2026 by rpki-client