$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: 9Tf3007IEOJI/Of8pVpnjM2KLvtVv6pCYO/pWP8rWYA= Subject key identifier: 88:6D:A5:A9:2D:A6:B2:1E:69:FE:4B:B4:F0:7D:84:3D:64:F5:02:64 Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 019A04ED20B10FBC050D9D7A89E85A8B0695 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 1686 Signing time: Tue 21 Oct 2025 04:00:40 +0000 Manifest this update: Tue 21 Oct 2025 04:00:40 +0000 Manifest next update: Wed 22 Oct 2025 04:00:40 +0000 Files and hashes: 1: A3slZgyg9eemzONzeM4ZjQZOkQA.roa (hash: X0hOJW7H3OQv8gNe/Scffw0tX7rp3lfITg3c2bDp62I=) 2: Dyi32KlOskocQHPe6FUF7ELQs5U.roa (hash: D3EF+UreJY6p0ckzuksgWXVvYetF6sITxKDGv/w2L0k=) 3: FJEFcX2c3QiytgwJXtBXdfXF7AQ.roa (hash: wDOQFjMrdpmJOwUI55qSC810FFGrsaY4QPcOoJKWykM=) 4: G_noKzntiWHLaHSdta1FputJESM.roa (hash: 76HBYH18Q5+wfRzE5ydGp21BC62rcsuS2tSvCzBrWp8=) 5: K9IKE8UzWzIlRqgdm5DBscj4DXI.roa (hash: TmNOvsKyJxclTHoJrrP+Wz2lJl3QKp06vZRtwf2Wkwo=) 6: Orf0-crrS-m0d2xw75OekVLRhcU.roa (hash: NyC6YqKt0FNmC1unp3jevt47/gr2Ss5dzqvXJGD2AjU=) 7: THZGRo10wjMlm6DbRUy7KjrwfkM.roa (hash: 9FjGohVB5WEFkwBSNZEgEcooaudVJnnxxDK2Jy9/LgI=) 8: VmEKVuU_uT-v34QUxuvTEoMoaug.roa (hash: lCfgs7Wts05rdP9N+OaYxsLVxOabAGR5SUtGArrm95M=) 9: Vxz_brs8mMP8pyfBjMG6SqLCoLA.roa (hash: InPdcQtGkZTGLva52kv6ADnfkbCulTXgK4jOcLs8G7M=) 10: Xmin5XG-kRl49Vt7ZEcTgSLDhDM.roa (hash: DHMC7YXYfDSAA2x6JnOvMwJT1zdpAymlypp6F1bKmgY=) 11: Yfzph1m23vmbClyvIoORpS1CW-E.roa (hash: SuwU2G9eYZ/n+GS6xB/GEsh3UziEYPdyi1WD5kRpjAo=) 12: _vcj5hH5PQmqE-mf4-B7kcWGpfg.roa (hash: ReLlnYnzQbiQ5Pk/0fIjBSPY1fpdoMBMJpSnkiSreWk=) 13: d-sWN4azI8sU7mlb0U-920Rsmtc.roa (hash: eiusVr40X1jFuIAj+CFi96eXy2bKXAQXnB20dKkv/70=) 14: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: AMhHyvd3dU0459rdpYqL3cIau6VDOrMP4mhsciSNuNE=) 15: mwm5rC4rfoUfkUGj1keywZQhhGw.roa (hash: dDwtNYt9WubuetSqef0LQakniH0rgBVhQK32OI1f1fU=) 16: nyxtNnWsxM3-5IIVvMZ44cQVEYU.roa (hash: ub8VtVKtgWVEPS0rlKsjT0ZjeuiFnfLTw/tC6ZpW/Vo=) 17: v5kzcztD_Zc4DwbwnN4YfKR9YoA.roa (hash: 33e8kQ++AVlCN79vtcp+1+C+oGUNBxplYHYOGaRMl58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 04:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:04:ed:20:b1:0f:bc:05:0d:9d:7a:89:e8:5a:8b:06:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Oct 21 04:00:40 2025 GMT Not After : Oct 22 04:00:40 2025 GMT Subject: CN=886da5a92da6b21e69fe4bb4f07d843d64f50264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cd:ae:66:d1:25:3d:42:a9:6e:17:46:c8:91: 1d:86:2f:51:8f:f1:ac:46:e8:11:18:0f:34:09:06: 89:75:5b:32:18:df:f2:52:a6:e7:a2:72:4b:02:45: 8e:fa:bb:cb:1c:d6:10:e0:75:cf:5a:93:bc:56:45: c3:16:c9:ba:e3:29:c8:84:4a:63:58:ea:cd:49:15: 30:69:2f:de:f7:0c:b9:76:2e:62:20:e5:08:7a:28: 9e:b8:eb:9a:21:a0:e5:e1:4b:be:d9:95:66:d8:b8: 2d:0c:1f:ef:77:c7:64:ac:d4:15:e7:bf:cc:c6:f9: 61:18:18:56:0b:5a:7a:10:37:b7:32:9d:ee:08:c1: 66:b1:d2:70:ad:b7:bb:70:59:76:58:7e:d3:a7:cc: 9d:c4:d9:74:99:5b:ca:05:4a:4e:9b:96:5b:ba:9a: 47:71:11:50:e4:94:2b:71:47:20:3a:64:c4:f8:c4: 39:68:a3:52:5f:bc:5b:21:c4:08:73:30:e8:4b:ea: cd:ce:89:55:1a:21:c9:8c:db:b8:0b:e7:e4:86:b3: 5d:4f:fa:3b:09:3b:57:b8:fd:12:9c:20:77:0a:36: 4d:91:0b:70:69:4e:e3:1d:39:bf:71:d3:fb:a0:a6: 76:83:ba:63:28:2b:d5:9d:bd:d8:67:72:01:5c:a0: 76:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6D:A5:A9:2D:A6:B2:1E:69:FE:4B:B4:F0:7D:84:3D:64:F5:02:64 X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a8:cc:c3:b0:05:7a:3e:32:19:ca:cc:57:59:59:fa:0a:d1: e6:4a:e9:63:98:9f:0c:31:16:b4:9b:94:fa:ab:41:96:51:a6: f4:f1:d0:17:dc:fe:ee:64:16:57:bd:5a:4d:66:7a:9c:44:83: c3:3b:88:39:73:3b:08:30:7c:e3:2a:b9:dd:5d:cc:0f:de:e7: d2:ce:84:fa:18:e0:23:aa:0b:28:3c:13:3b:de:96:a1:2c:c1: ae:9d:54:c5:13:0b:18:e8:82:f2:b6:69:aa:c8:fc:7f:c3:99: 9d:e4:eb:54:51:c9:36:a9:03:cc:25:e0:cb:aa:a8:1c:60:53: b7:d9:9d:e8:66:81:c7:9e:18:54:53:be:63:a3:05:32:0b:bb: 5c:ef:d7:96:e4:6a:4a:dd:ad:32:e8:18:7a:dd:90:57:e4:c5: 91:1e:e9:ef:e9:64:77:74:d1:11:55:70:fb:a9:30:a2:df:2f: a4:44:a8:57:01:3c:ea:5d:48:6e:5c:65:3f:42:21:e7:d4:e5: 08:b8:33:76:15:3b:69:06:39:21:34:6e:43:86:09:f5:3d:e6: 45:f7:3e:3e:1b:07:58:b3:c0:31:1b:3f:52:bc:15:a1:01:2f: e1:4d:d6:2f:d9:2d:19:55:bb:0d:82:93:7a:54:70:21:84:5d: b9:1c:38:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoE7SCxD7wFDZ16iehaiwaVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjUxMDIxMDQwMDQwWhcNMjUxMDIyMDQwMDQwWjAzMTEwLwYDVQQD Eyg4ODZkYTVhOTJkYTZiMjFlNjlmZTRiYjRmMDdkODQzZDY0ZjUwMjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw82uZtElPUKpbhdGyJEdhi9Rj/Gs RugRGA80CQaJdVsyGN/yUqbnonJLAkWO+rvLHNYQ4HXPWpO8VkXDFsm64ynIhEpj WOrNSRUwaS/e9wy5di5iIOUIeiieuOuaIaDl4Uu+2ZVm2LgtDB/vd8dkrNQV57/M xvlhGBhWC1p6EDe3Mp3uCMFmsdJwrbe7cFl2WH7Tp8ydxNl0mVvKBUpOm5ZbuppH cRFQ5JQrcUcgOmTE+MQ5aKNSX7xbIcQIczDoS+rNzolVGiHJjNu4C+fkhrNdT/o7 CTtXuP0SnCB3CjZNkQtwaU7jHTm/cdP7oKZ2g7pjKCvVnb3YZ3IBXKB2pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhtpaktprIeaf5LtPB9hD1k9QJkMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALajMw7AF ej4yGcrMV1lZ+grR5krpY5ifDDEWtJuU+qtBllGm9PHQF9z+7mQWV71aTWZ6nESD wzuIOXM7CDB84yq53V3MD97n0s6E+hjgI6oLKDwTO96WoSzBrp1UxRMLGOiC8rZp qsj8f8OZneTrVFHJNqkDzCXgy6qoHGBTt9md6GaBx54YVFO+Y6MFMgu7XO/XluRq St2tMugYet2QV+TFkR7p7+lkd3TREVVw+6kwot8vpESoVwE86l1IblxlP0Ih59Tl CLgzdhU7aQY5ITRuQ4YJ9T3mRfc+PhsHWLPAMRs/UrwVoQEv4U3WL9ktGVW7DYKT elRwIYRduRw4dQ== -----END CERTIFICATE-----Generated at Tue Oct 21 13:53:45 2025 by rpki-client