
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
File: jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json)
Hash identifier: 02FGivHlZk3SYHKClbQetSPykz4rrcqrrCQrVmn8v9g=
Subject key identifier: 9E:9D:A2:39:7D:92:45:4B:C9:94:52:9A:41:F1:A2:FD:1F:61:0C:37
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 019A12A8B0DB6CB2D89D3DC6AC916CC530E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
Manifest number: 1096
Signing time: Thu 23 Oct 2025 20:00:36 +0000
Manifest this update: Thu 23 Oct 2025 20:00:36 +0000
Manifest next update: Fri 24 Oct 2025 20:00:36 +0000
Files and hashes: 1: 2k7DoYw_fUEI-IRw1yMkv6L8kgY.roa (hash: CzU19QUyTNNv7cv2M1H3GPMiR5txRGI7L/Dpax8ycto=)
2: 80ZmDBZq5-PU-pOoi4cNZY-hYiM.roa (hash: HUfy0YrzHxyEQF6ktaZjTGRUd7aNFhWvpFLfpeZ7xkc=)
3: 99A4IVtXIE35BjjiP_h5rUS3ws0.roa (hash: SCifrn/pmyL7YkH7a1VgF0+SEiaOrC6qaKgWxIHoy/k=)
4: Ctee5FZut6Jw-yGrjrnTCtTO-HM.roa (hash: vhJRnVcBvTImc9Sv3yScvOufw+og96lcsubFcpiYN6Q=)
5: FXOQ9DZsOJSoLCmx0MtWYLZoLis.roa (hash: Vb1pyOLHyXJ0GmUgGbGVYVs6jxiUud7ztRRHO3n5g/A=)
6: GbfU3sLMppEtdewqDLMaWBubw0E.roa (hash: 7p63Th7UDDf6mzZdRjRGDgkafLbUbj5kgBwLK7PNoZ0=)
7: ORedMLYnb0LVXOgGX5x6fgTqghE.roa (hash: 2UNSCAjN9jMQBA4CHydqKx1nKHdJbnZ1QjDJUllLh5w=)
8: T76XHEYKPxvXgzVhYoIpXxSuwwA.roa (hash: gIybCKbgfywSTgVeKeQdR2l0hkSxZKXJNGi8hE3axtM=)
9: TvWiGITQL6TnbZlCP18LK1XHyq0.roa (hash: ECY0NKVBp1G1uivHtWe1d/7Az9PaMkOqJpUteCitqFE=)
10: WVyEjuo3Pcswg76TNVE71cRw5Qc.roa (hash: JRWUHipuHwDMuj4Bw6dq/IvRe2t2Vulvh7gOCgXk2cU=)
11: YmXp0kLagMnJFegcO08eA034lyA.roa (hash: HE2edC4wON3Wujsq1suNKRRMgCVpU6jt5hawUs/NQb0=)
12: gm4tKAhXjneey7S0f4JZDHBQxoQ.roa (hash: Ad3Dm+i+7NeJyTuFmvpaF4c2E01O5Jx7QQ62ewCSDiY=)
13: hI2E3ZjYmgtrm9OV5uV8KVFZFFc.roa (hash: tE6Wa1tgj3Aoh1FeZXyjGFAoSLL+sDQ+OfIFAkY7L40=)
14: hoJCPHI3kMFvNyJJekf8HSd0pa8.roa (hash: N89cvCwlx15A0MnySLkXdi8r2pYx7GPiu1HNTh+VXJI=)
15: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: F0DB3dCta/QD09uQQrRVLzbcsUEpfQ7vYZHvMAHQTVQ=)
16: l06Jo4wcn9UZNl3jwjiavlx-v4M.roa (hash: +evzu72ciOeStTyT4XPgCsvTMWGGffJYcUeps8zXWZk=)
17: nwzUhf9TgBuwLQrQ1UYv26CrJIA.roa (hash: elr0dQBhD70lY5vUB09Z5pfoDsLtushbNHe4ZzT4VT4=)
18: qW05wAjwRLWGqRlzcNxJTSPBRpE.roa (hash: 642SRGn6Z467IpVUdTC0I7NjDwrjuS9AcAXZkWNP6fQ=)
19: rf7jWc7ttmZWX3mJWpgkLpvcgqs.roa (hash: YZQ7aq3dLHw4G1byXvwZsPXvgsmcNqlGGiJCIat2I7w=)
20: t-rsVL4BJwEwBBoHBVhIML92hRs.roa (hash: ejUp8ew1AaALCNdiAT72D3nSXem/ndlDi+OAao2nEnA=)
21: ti-qGCmysd4PNgZOBUwDUY8Iluk.roa (hash: Fz4esdv4UKiDsnoNXnH6zVCbGFtLlWDlHFrg5xjFGG8=)
22: ucH7IeIWTX6RVcP_anDxrMhkplo.roa (hash: cBNoIGHr8LbNGj9a6kRhTTmCpwzcmwsWD4LP8P5es7w=)
23: vD4d6-Ufm0fFISjlc8rxFlQwwWc.roa (hash: Uumg8s4o+wVYm27hvDEXKDjNoX6wIGo/XZKnaH3fl/4=)
24: yMwlMMuf6AhxELQISsW6Wy_I6Vg.roa (hash: g4eIZppKVsYn9i4uTmCGcx2yG0hOtyeUq+t1P+63Lok=)
25: ylAbJ59-6F4ZAbwoLXiKbYBu2XA.roa (hash: IDkXWTS84Fvv3D5U1LadiDGtpmPn3EbQp1U5eFRNYhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:a8:b0:db:6c:b2:d8:9d:3d:c6:ac:91:6c:c5:30:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Oct 23 20:00:36 2025 GMT
Not After : Oct 24 20:00:36 2025 GMT
Subject: CN=9e9da2397d92454bc994529a41f1a2fd1f610c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:04:b1:03:a6:d8:15:76:6f:d2:bf:b9:06:
73:ab:1b:b1:4a:15:85:13:57:69:d3:e1:dd:65:27:
e5:48:39:43:fb:73:a2:59:6f:f9:87:17:ad:66:97:
87:47:3b:9e:ce:b9:30:7a:b0:52:01:15:0c:58:f2:
b2:62:61:b1:44:0f:cf:c8:5b:63:16:59:e5:1d:3a:
e8:07:ec:5d:c4:01:d4:23:36:42:59:ce:e8:bb:65:
0e:5c:4f:2c:8e:0d:e1:5e:25:fb:30:26:0d:55:6d:
a2:3f:c0:f7:8f:ff:a8:f4:83:c9:7b:93:c7:d0:c4:
e3:29:0b:1d:33:02:9f:a1:58:25:6c:e5:82:cc:1c:
c9:47:e1:ff:40:96:20:0c:08:78:4a:2d:ec:db:50:
be:a4:ff:b8:c8:4b:e8:be:f7:7f:be:5e:2f:fe:08:
d1:2e:c9:e6:b0:7e:84:86:5c:7f:55:ca:45:6c:44:
82:b7:13:62:22:73:54:09:04:91:aa:6b:49:36:32:
7a:9b:e4:67:d5:86:95:78:fd:67:21:82:fa:e9:fa:
9e:6b:48:f8:52:a5:81:d3:4d:84:e0:00:c8:b2:ce:
88:78:81:30:da:ca:df:46:aa:70:17:a5:27:d5:b7:
5c:c5:8c:d2:92:73:d4:6e:df:18:57:10:13:62:5c:
a2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9D:A2:39:7D:92:45:4B:C9:94:52:9A:41:F1:A2:FD:1F:61:0C:37
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:75:f1:83:95:cf:9c:fb:e3:79:78:ad:5a:90:d8:41:bb:cd:
0e:a3:05:8e:ce:77:62:65:ca:e6:33:57:f3:96:b2:3a:4d:52:
bf:ab:9d:6b:fd:ea:4b:2b:36:9c:c7:96:09:bc:ed:22:6e:90:
e7:79:3d:96:57:d0:5a:2e:91:a3:3e:51:ef:15:7a:b4:89:37:
0c:bf:45:1e:5e:68:de:a2:62:c6:9f:f5:10:63:c6:7c:7d:95:
6b:b6:b9:15:6d:d8:cb:45:bb:2b:db:27:f4:c4:da:86:63:58:
ec:80:5c:b4:8c:bf:08:77:19:8f:df:5a:40:a7:05:73:8f:cf:
ad:4e:20:79:6d:a6:9a:fe:40:9d:a9:db:b3:f1:ba:e2:c3:2a:
1a:ca:17:b6:74:71:79:fd:46:8d:f2:eb:20:7e:6b:e3:61:80:
00:ba:f3:26:11:23:aa:09:1e:5f:dc:c6:00:1a:36:2b:bd:be:
e6:a7:ba:4b:27:2b:4a:79:ac:b7:c8:ad:aa:c7:c5:0a:9d:11:
5e:fc:ca:43:5d:df:d0:4e:5a:dd:37:52:3a:48:f1:66:6e:58:
6d:1c:30:d0:d2:53:47:b8:3a:52:17:57:a5:8e:73:b5:a5:76:
3a:67:bb:a9:33:1b:aa:ba:70:fb:a3:04:08:3f:41:64:69:b3:
1b:21:61:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:15:07 2025 by rpki-client