$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json) Hash identifier: pWM+e5SK2qrla9vFlq7G/meSfP92r3kyWbDd/5T0+fc= Subject key identifier: 2E:A0:97:08:D4:04:57:21:FD:A9:B7:35:28:F9:A5:68:53:B1:A1:7B Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 01A089B0A475251F825132F5FF3E6EF78416 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft Manifest number: 071F Signing time: Thu 10 Sep 2026 05:00:50 +0000 Manifest this update: Thu 10 Sep 2026 05:00:50 +0000 Manifest next update: Fri 11 Sep 2026 05:00:50 +0000 Files and hashes: 1: 3ni1lXz0xo-b4HoXI3wRu6vJL-c.roa (hash: 7b3P7fNZC5J3JcfQvJqiC/2neHH6f8kadDw6/l3P8/Y=) 2: AmdO1jA2vkBtxkn2vv7Y1wu4dFM.roa (hash: wY1LZtovvbzyHM2W8YhMwLuam5z9V3nwmwDqM8gEEF4=) 3: BYtnuImtTGdi14Pvw9xlRKAL65k.roa (hash: hUoeJXbJ5fZg7WKvqap5HxU1pLmROBa7LXCxisf4SP4=) 4: CNFp8fRkRFtEQks7R0O2wgi6-xA.roa (hash: bXlKDyyKKGdmKBfoGxYPygp5JG45Ozo2FLYDRNT3VpM=) 5: HrFuB2F4P326FdIKDHmR_z_oGqs.roa (hash: d1+J0bs8Jd4Tmg8E7c67C6CZ18CYNi+0jZ3ouxTsd3M=) 6: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: Fk+meTfnue8dFZgmEsBZsKLZFhAm89P6yjuL+w6XD8Q=) 7: Qw57jboYzWi7eNVtR4XFL50skyQ.asa (hash: gZacbBLwQEXYgJXLBy71iNIoJF93UncqIKQilDhd0Ik=) 8: YlYX0-EwdZ0RjwlcesbIkWVsVTo.roa (hash: 12tzR601qVt1Vj7EME9V9wBl6cqsNdP8VmiHIJgAu5Q=) 9: cNqycsZxVsHcATCP8JWqqaoM9SI.roa (hash: CX+xOUuMFEXPOxevDnRNct6cRUm/jc1q9b58M6PTWZo=) 10: gE3k0i8jHZvr5aE-wjNKPwzJxvE.roa (hash: CuCVWX3Bl6EYyE6nnbYJN+zyPfahHe62RUo//GoIy9o=) 11: lBlo6PUCc6IqER-nFwmpK7D7yqo.roa (hash: Z5uCFtdD3Jko3O/Znx9FA924V5ua0wn5UjLkJKE8KyE=) 12: qbksFEEwSTb2bBOnvyMaaJhR7Ss.roa (hash: qH3mt9TzRYD5CJqPjTYWZEejOSD69A/a1ZIdDauUkQo=) 13: urqr3QuscnM9Gexd4HqCzda04Hs.roa (hash: +eFtvrmvtLAGjqTjuO2JbNNCYDwjSBJV6qDXXX+HoPY=) 14: vsRZs78l22h0vnp-DI6scU3LKUA.roa (hash: 4WpHfFl6tIuHybFbUi60kzMtYBl55u5TXUCckR5iGfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:89:b0:a4:75:25:1f:82:51:32:f5:ff:3e:6e:f7:84:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Sep 10 05:00:50 2026 GMT Not After : Sep 11 05:00:50 2026 GMT Subject: CN=2ea09708d4045721fda9b73528f9a56853b1a17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bd:76:92:b3:11:2e:6e:e9:46:e0:02:02:72: 32:4b:53:b8:ed:72:09:e2:fc:24:b2:20:77:84:b4: 37:a5:b7:b2:06:20:a1:a2:64:7b:40:cf:b7:32:44: f3:f2:5a:f2:57:4a:59:7b:f2:5d:ed:ea:94:e0:4d: 4d:9c:ef:d0:d2:83:ba:bd:d6:aa:50:71:2b:c8:13: 13:65:fe:e5:b9:e4:65:55:04:b2:2c:50:96:a5:41: 2b:10:18:07:5a:3d:49:29:40:1f:35:d2:88:33:26: 6a:7b:35:95:30:26:9c:d2:1d:48:e2:39:f9:4f:78: 7d:91:8f:15:20:38:fe:01:27:4d:08:61:22:79:af: 8d:3e:fc:84:87:d9:5b:1d:6d:5f:e8:fc:5f:67:e9: 8a:7d:ad:5a:f7:85:79:01:b6:94:f3:36:6d:0f:fa: 7d:84:4f:4f:26:fe:b0:f0:e9:2c:46:ec:a7:9c:5b: fd:76:b4:f6:0b:9b:3b:4c:8f:5b:91:8e:2d:c0:e9: 9d:02:5d:24:c0:d2:c9:87:89:80:69:f1:31:45:69: d0:26:1d:36:8a:04:90:d6:5b:ec:60:a0:4f:3c:d0: 30:42:15:50:42:ce:e5:2d:2d:b4:5d:72:a9:20:bd: 00:ae:5a:c1:2b:ca:7d:5c:ae:ed:07:25:e4:c4:01: 56:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A0:97:08:D4:04:57:21:FD:A9:B7:35:28:F9:A5:68:53:B1:A1:7B X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ef:e9:97:dd:b4:32:38:4c:b2:20:44:6e:36:b7:70:26:e8: 47:80:25:d8:59:d4:36:4c:83:c5:f5:ef:2a:6c:9f:98:51:09: 42:5d:f5:d4:bd:84:cf:0d:18:6c:3d:d6:7d:27:e4:5e:6a:b2: 55:40:9c:0c:6b:11:da:db:9a:21:c7:f3:32:f4:32:9c:06:94: e9:37:c1:f5:ea:b3:f5:ba:19:6a:41:68:0f:5b:50:f2:d4:7b: e1:01:2f:54:58:c5:37:b0:06:90:86:9c:0f:29:8e:8a:54:44: 5b:fe:68:2a:15:30:43:ae:b1:d5:a0:34:87:1c:63:25:c7:b0: 5b:d1:b2:21:6f:88:8e:0b:60:68:d6:65:39:4e:db:b6:b1:67: 3b:7f:34:b9:78:09:18:f9:f5:99:c4:23:08:64:64:05:a7:b7: b2:9d:5c:25:3f:d6:67:03:33:d2:9d:0c:f0:5c:23:ac:6f:45: 10:1b:d9:57:30:32:2b:77:7b:db:fd:5a:8d:e0:27:9f:aa:18: c7:53:97:05:98:9c:e1:d0:eb:c2:48:5d:de:20:8d:5a:80:61: 3b:59:c4:7c:2c:32:83:7e:56:6c:e8:70:d3:8b:6f:87:a7:fb: bc:54:82:5a:4c:d3:98:a3:99:75:ad:e2:d3:25:71:d2:12:18: 57:d9:42:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCJsKR1JR+CUTL1/z5u94QWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjYwOTEwMDUwMDUwWhcNMjYwOTExMDUwMDUwWjAzMTEwLwYDVQQD EygyZWEwOTcwOGQ0MDQ1NzIxZmRhOWI3MzUyOGY5YTU2ODUzYjFhMTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr12krMRLm7pRuACAnIyS1O47XIJ 4vwksiB3hLQ3pbeyBiChomR7QM+3MkTz8lryV0pZe/Jd7eqU4E1NnO/Q0oO6vdaq UHEryBMTZf7lueRlVQSyLFCWpUErEBgHWj1JKUAfNdKIMyZqezWVMCac0h1I4jn5 T3h9kY8VIDj+ASdNCGEiea+NPvyEh9lbHW1f6PxfZ+mKfa1a94V5AbaU8zZtD/p9 hE9PJv6w8OksRuynnFv9drT2C5s7TI9bkY4twOmdAl0kwNLJh4mAafExRWnQJh02 igSQ1lvsYKBPPNAwQhVQQs7lLS20XXKpIL0ArlrBK8p9XK7tByXkxAFWKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6glwjUBFch/am3NSj5pWhTsaF7MB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfu/pl920 MjhMsiBEbja3cCboR4Al2FnUNkyDxfXvKmyfmFEJQl311L2Ezw0YbD3WfSfkXmqy VUCcDGsR2tuaIcfzMvQynAaU6TfB9eqz9boZakFoD1tQ8tR74QEvVFjFN7AGkIac DymOilREW/5oKhUwQ66x1aA0hxxjJcewW9GyIW+IjgtgaNZlOU7btrFnO380uXgJ GPn1mcQjCGRkBae3sp1cJT/WZwMz0p0M8FwjrG9FEBvZVzAyK3d72/1ajeAnn6oY x1OXBZic4dDrwkhd3iCNWoBhO1nEfCwyg35WbOhw04tvh6f7vFSCWkzTmKOZda3i 0yVx0hIYV9lCTw== -----END CERTIFICATE-----Generated at Thu Sep 10 10:16:45 2026 by rpki-client