$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft File: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft (raw, json) Hash identifier: Bhrbi+F1bpxVZ+RwHivv+03Jb0/UzZxVtLN3wBJsn/8= Subject key identifier: B1:1F:AE:96:89:08:CE:DA:19:0D:59:9E:05:2A:26:F9:6E:1C:21:3B Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343 Certificate serial: 019A06DB184173A18BE73B61A0D1D710268A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft Manifest number: 139B Signing time: Tue 21 Oct 2025 13:00:12 +0000 Manifest this update: Tue 21 Oct 2025 13:00:12 +0000 Manifest next update: Wed 22 Oct 2025 13:00:12 +0000 Files and hashes: 1: 3AQkVEHFaMYSacwuB_BxozwNGjQ.roa (hash: jeS6MVFt6boj/NgjPcW0szXMbQo13HV5/k7qMzzrnUk=) 2: ATnU0XW_a-fQgNgM4bksVOz5qO0.roa (hash: KvgYw2bKyUh59arBiz8XfHglyETOEd7hEYYsA1g44Qc=) 3: Cuo_4OmB5hqfWI_WnYCCpNWLrgY.roa (hash: 3ZR1eIgUuJPainUs4mhe9MePZiakCaM69xOhHdIrRiI=) 4: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl (hash: t8B7xM2mHGf3t9eJbmaYSbtrQHhEK2WinZ10ohzjxc8=) 5: LM4Pk0L89FT4bKCAnT5Pam60X3A.roa (hash: 15JH8Jc4TtNGcpNeD66bPIeSCBDAVTNv6bCkpCrYf1k=) 6: ZPRKsrk_LO1Kz1FxSXf4yoBYhVE.roa (hash: MuaQpB8L7R2Qx8jUBzVEMelRet/5/uaTnFy0z9JGEOY=) 7: exSqcqToVirE26kLGdF-HPjamps.roa (hash: HQsC+Mewyu8X71olEoQS/oWx63H6y6cZFOsC8HgKsMc=) 8: gcc-FdNN6vti97PWBSoHsMNsu34.roa (hash: CtKuHOA67XtrsqR+tr65cCG6nxTHyUOq4FA3/7KVSO4=) 9: juhHhfMZKtMv7VJHZvSyHbChAaI.roa (hash: TVL933SmsCckOHxjM78yEFmonP+viUg+iondjs0ZENY=) 10: wwkTxtvy8y_gre1LyntK82_wg2o.roa (hash: 06SNxlJKLopu/TY42bvthXJuhwNZOlr+SWZ0JQeMj5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 13:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:06:db:18:41:73:a1:8b:e7:3b:61:a0:d1:d7:10:26:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343 Validity Not Before: Oct 21 13:00:12 2025 GMT Not After : Oct 22 13:00:12 2025 GMT Subject: CN=b11fae968908ceda190d599e052a26f96e1c213b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:46:66:b3:9c:72:a5:df:9c:cd:ad:d1:60:5f: 97:40:69:63:45:74:47:d2:87:a5:76:ab:7b:74:86: ca:6c:c6:b7:f3:e9:2b:32:51:f5:a7:ea:68:04:30: 95:53:80:2d:09:a6:3c:e2:b2:d0:32:3b:82:23:09: 8d:28:4f:29:b5:df:02:e1:61:d9:59:ef:2a:fb:96: aa:25:ea:17:2b:5a:9e:98:1c:da:6f:cf:90:ee:77: 8a:dc:73:07:e3:c4:bf:9b:f6:e5:60:19:f7:26:4b: 26:d7:0f:40:8a:ff:a5:de:34:c4:3d:0e:0f:cf:9b: 05:82:1e:9e:e9:99:8c:e8:06:49:6d:0c:85:fb:58: dc:a7:a8:80:5e:95:ab:7d:6c:8b:15:b3:13:5e:91: b1:92:cc:f9:7e:c2:dc:4a:d2:a6:2d:66:34:52:47: 13:dd:df:3a:5a:60:9b:e5:4f:2b:e3:a4:fc:c0:df: 8e:f5:d9:0b:1d:64:06:6d:2e:cc:40:45:a0:93:bc: 46:16:3a:65:e3:91:50:c6:45:94:7d:13:b0:00:f7: 57:74:86:31:44:ef:3f:cc:87:ec:cc:6b:0a:0b:b5: 38:cc:5f:a8:eb:59:7a:f0:47:f8:57:56:51:c2:43: ba:1f:37:0a:b4:56:9d:98:3a:93:a4:11:60:c0:ce: 8b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1F:AE:96:89:08:CE:DA:19:0D:59:9E:05:2A:26:F9:6E:1C:21:3B X509v3 Authority Key Identifier: keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:a1:d2:7e:28:9e:24:06:7c:f2:43:35:99:c2:c5:9c:dd:a7: 84:48:65:ce:f4:46:f3:4e:f3:95:e0:f0:e3:0f:6d:d3:6c:3b: ff:9e:a8:d2:df:d8:a7:d1:13:31:6f:37:03:3a:22:03:43:54: 3d:e0:eb:1d:52:2d:f8:e7:65:05:b2:28:bd:e6:46:55:73:d4: 09:24:70:08:1e:1e:bb:6b:dc:84:b1:49:3d:68:51:65:b5:5e: 95:7a:22:4a:2e:97:5a:43:2a:69:88:35:2f:87:f1:66:35:3c: f0:90:80:f2:a9:d1:09:42:1e:58:89:06:10:be:5f:ea:7a:33: 10:79:6f:54:ed:c7:b1:e6:c3:36:e4:79:d6:1c:b5:88:2c:2b: 3b:7d:b7:8f:a9:38:af:0b:df:ca:2b:34:81:06:be:24:62:3a: 02:55:95:d1:37:f6:df:ed:3b:4e:d0:b6:f1:08:e9:b9:e4:49: 2f:4f:8f:df:d4:f7:9a:dd:67:92:76:1c:fb:ea:35:b0:6e:74: 15:24:f0:20:7b:3d:bf:18:e4:9a:f0:2f:b8:a9:ae:45:83:63: ea:37:94:97:4a:da:ae:fb:c1:4b:60:04:79:95:65:49:f9:98: d9:99:c2:38:da:a3:dd:76:e1:d8:7e:07:81:8b:2d:77:ab:38: db:92:1b:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoG2xhBc6GL5zthoNHXECaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YTVhYTkxOGNiZmViM2UxMjk5N2YzMzg5MGZlYjI1ODkw N2IzNDMwHhcNMjUxMDIxMTMwMDEyWhcNMjUxMDIyMTMwMDEyWjAzMTEwLwYDVQQD EyhiMTFmYWU5Njg5MDhjZWRhMTkwZDU5OWUwNTJhMjZmOTZlMWMyMTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUZms5xypd+cza3RYF+XQGljRXRH 0oeldqt7dIbKbMa38+krMlH1p+poBDCVU4AtCaY84rLQMjuCIwmNKE8ptd8C4WHZ We8q+5aqJeoXK1qemBzab8+Q7neK3HMH48S/m/blYBn3Jksm1w9Aiv+l3jTEPQ4P z5sFgh6e6ZmM6AZJbQyF+1jcp6iAXpWrfWyLFbMTXpGxksz5fsLcStKmLWY0UkcT 3d86WmCb5U8r46T8wN+O9dkLHWQGbS7MQEWgk7xGFjpl45FQxkWUfROwAPdXdIYx RO8/zIfszGsKC7U4zF+o61l68Ef4V1ZRwkO6HzcKtFadmDqTpBFgwM6LfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEfrpaJCM7aGQ1ZngUqJvluHCE7MB8GA1UdIwQY MBaAFCalqpGMv+s+Epl/M4kP6yWJB7NDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTIt Mjk3ZTI4MmQ2NmE4LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTItMjk3ZTI4MmQ2NmE4 LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaHSfiie JAZ88kM1mcLFnN2nhEhlzvRG807zleDw4w9t02w7/56o0t/Yp9ETMW83AzoiA0NU PeDrHVIt+OdlBbIoveZGVXPUCSRwCB4eu2vchLFJPWhRZbVelXoiSi6XWkMqaYg1 L4fxZjU88JCA8qnRCUIeWIkGEL5f6nozEHlvVO3HsebDNuR51hy1iCwrO323j6k4 rwvfyis0gQa+JGI6AlWV0Tf23+07TtC28QjpueRJL0+P39T3mt1nknYc++o1sG50 FSTwIHs9vxjkmvAvuKmuRYNj6jeUl0rarvvBS2AEeZVlSfmY2ZnCONqj3Xbh2H4H gYstd6s425IbpQ== -----END CERTIFICATE-----Generated at Tue Oct 21 22:45:01 2025 by rpki-client