$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft File: raJar-Ophw6VJK-gJlmH7VpaTaM.mft (raw, json) Hash identifier: nT7cJsp5CnQtq7ZpKYjhb8bR5AiDVWC4sHQ+Wrth3O4= Subject key identifier: EC:59:E5:1F:07:71:97:C3:6D:F7:77:63:04:0E:6D:02:89:E2:D9:34 Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3 Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3 Certificate serial: 019A12DF40EAAE121A829E85566E9072ABE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft Manifest number: 1722 Signing time: Thu 23 Oct 2025 21:00:12 +0000 Manifest this update: Thu 23 Oct 2025 21:00:12 +0000 Manifest next update: Fri 24 Oct 2025 21:00:12 +0000 Files and hashes: 1: 3cvNvdSi3XGnlgqLMUXhh7Fbsns.roa (hash: RjSiDuOGFmz06JKyEcD4gXSDvTvwzOibXX44/BaGwzM=) 2: 4qU0lYZixQn_ajK7o9tm4-h59Yc.roa (hash: rJ9oCMP6AUNUzaOpIFXW5T5zkn6qUN20PTxwfzReYSQ=) 3: CKER9wKJnd8i3s1x_cuI1c5b5Gg.roa (hash: s6MpM43dZhbOOH2ONDtptW7UmeKZDzVPrS361Wp7DlU=) 4: QqlMdh24Ws5Csf0Uuo2IJQlJoC4.roa (hash: /8SKmiBGn8KNuuR9Z6Vc2oYu9cW/r06GpbN1vuAdWAE=) 5: XG0f4whg8DTzg4ZpQd0f-UdmRXY.roa (hash: ZGcU72mX8VKGJYV72um72oY45czQYPy5f+/AekBe7rg=) 6: eTZvFVUGnDNHwq2npFaevM_pjLg.roa (hash: 18cD37AihQlqKhfJw/uFQO048dE0tdQTn3vqNmQm/DI=) 7: jOJJqoS_PgQTtahvKFyYtdpryQc.roa (hash: NLWvbfmQ0GpKEPm+5C3Z0gDnOHe3vz+adN0kchftPSM=) 8: ngVIm6V8McjWt-UsDZ8SI1OBzB8.roa (hash: TG6EiZUK8fMKZ//ITtR5n/6R2Ry6qOs7fabIjuGyGt8=) 9: owgmBs4vbkkXbw2K0OuU1ejAVjM.roa (hash: hWN+IDhiOv5MeOYFdicsOLf4isT8+TWoYgyTGhIN3B8=) 10: raJar-Ophw6VJK-gJlmH7VpaTaM.crl (hash: olRmkUth49Z+ASirf4mG+x3HFxjznO73ebKp+FL1fOw=) 11: w47kV22DUX2rmSAV17IslbqJZkE.roa (hash: jwhv3mxFNCUIHi+oaeb9HMdIuv95C0du8+Aflx3W8ng=) 12: weNgwIA48_rsRspTEOQkflneJ2o.roa (hash: baMtWqaZx8ecWxf9Y9oBJPogfPJJVeJm66CO34ozZyM=) 13: zBMwGWWflzLxBSFNPzJ2aqEBgrE.roa (hash: Frie/26MAD4moXE2hcnRczEyt7GQngLuPdcorC2uOx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 21:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:12:df:40:ea:ae:12:1a:82:9e:85:56:6e:90:72:ab:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3 Validity Not Before: Oct 23 21:00:12 2025 GMT Not After : Oct 24 21:00:12 2025 GMT Subject: CN=ec59e51f077197c36df77763040e6d0289e2d934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:b9:1c:30:36:76:df:bf:1b:b2:a6:2c:a1: 8b:55:13:6e:27:f5:8c:98:a5:eb:30:dc:16:11:4f: 17:10:14:a4:e5:16:c1:37:d6:9f:46:45:0e:fe:7b: 4d:53:8f:f4:c3:8e:40:e1:c4:3b:3f:4b:c8:f6:59: 20:2e:33:3d:f6:78:56:e4:b1:a3:f8:cb:11:8b:8c: 4d:a7:c7:0c:02:cd:b1:8d:90:fb:a5:af:c1:71:54: 0f:04:3a:f7:72:88:c1:f0:f1:ef:ff:b6:3b:f6:e8: 05:65:bd:89:15:40:93:12:0d:2b:31:3e:2f:45:7b: 25:96:4e:a1:d1:9a:14:c4:11:dd:2b:49:18:8b:b1: 22:8c:b1:3d:a9:4c:f8:42:c9:cc:5a:0c:74:ef:be: 90:6d:ac:7d:02:33:e3:7d:e1:18:46:0f:99:00:fd: cd:ab:b9:c6:39:e3:fa:0a:62:08:d9:69:b3:80:72: c4:ae:d4:b8:fc:89:7e:c8:6e:76:93:12:40:a3:28: 1c:8e:af:63:38:3f:54:cc:d2:83:ae:49:cb:3e:42: 3b:46:7b:86:95:33:be:00:b4:ff:98:00:0b:ee:83: 30:13:04:b1:b7:18:20:fa:39:2a:eb:1e:aa:95:ba: dc:0f:81:a9:df:65:34:8d:22:d2:1f:eb:6b:54:7c: c3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:59:E5:1F:07:71:97:C3:6D:F7:77:63:04:0E:6D:02:89:E2:D9:34 X509v3 Authority Key Identifier: keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d0:36:f3:49:32:00:16:62:59:d6:26:6a:54:95:41:5b:56: 5b:54:f3:93:77:58:13:a3:39:87:9d:0e:02:49:18:a3:21:a3: 24:7a:a5:d3:56:87:d1:00:04:90:f3:94:a9:3d:df:b6:96:27: b6:97:7c:65:a9:e1:9b:f8:33:ea:ee:8d:b4:cc:a7:61:6d:c5: 5f:a6:5b:16:9e:50:9a:50:d7:89:7b:0f:6a:da:62:71:92:f0: e6:e9:7f:64:f6:19:64:60:67:12:f1:e3:28:10:35:06:75:77: ff:f7:17:be:bc:a2:54:48:da:86:48:d8:b0:be:9a:4b:79:0c: ec:10:76:31:bc:1d:5c:e2:47:7a:58:5b:7b:87:4c:b9:90:8e: 49:b2:78:eb:13:73:ac:57:2c:39:35:1e:92:70:50:33:c0:8c: ac:89:dd:a4:eb:d9:8b:a2:40:29:91:f4:4e:bd:c6:d4:fc:00: 00:5b:b9:73:d0:f4:54:4b:d4:b6:22:2a:32:bf:e8:bb:a2:09: 5f:fa:01:8e:f4:e6:bb:a1:f8:8a:f2:89:7d:e2:24:84:a4:41: 32:50:fd:d3:fa:16:6b:54:75:8c:09:1e:77:b2:7e:ae:80:1f: ed:86:61:8a:f4:59:df:73:16:46:9a:88:76:0f:42:17:b3:5f: fe:59:9e:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoS30DqrhIagp6FVm6QcqvkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYTI1YWFmZTNhOTg3MGU5NTI0YWZhMDI2NTk4N2VkNWE1 YTRkYTMwHhcNMjUxMDIzMjEwMDEyWhcNMjUxMDI0MjEwMDEyWjAzMTEwLwYDVQQD EyhlYzU5ZTUxZjA3NzE5N2MzNmRmNzc3NjMwNDBlNmQwMjg5ZTJkOTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthG5HDA2dt+/G7KmLKGLVRNuJ/WM mKXrMNwWEU8XEBSk5RbBN9afRkUO/ntNU4/0w45A4cQ7P0vI9lkgLjM99nhW5LGj +MsRi4xNp8cMAs2xjZD7pa/BcVQPBDr3cojB8PHv/7Y79ugFZb2JFUCTEg0rMT4v RXsllk6h0ZoUxBHdK0kYi7EijLE9qUz4QsnMWgx0776Qbax9AjPjfeEYRg+ZAP3N q7nGOeP6CmII2WmzgHLErtS4/Il+yG52kxJAoygcjq9jOD9UzNKDrknLPkI7RnuG lTO+ALT/mAAL7oMwEwSxtxgg+jkq6x6qlbrcD4Gp32U0jSLSH+trVHzDPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxZ5R8HcZfDbfd3YwQObQKJ4tk0MB8GA1UdIwQY MBaAFK2iWq/jqYcOlSSvoCZZh+1aWk2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUt OWQ1ODc1ZDg2MzczLzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUtOWQ1ODc1ZDg2Mzcz LzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNA280ky ABZiWdYmalSVQVtWW1Tzk3dYE6M5h50OAkkYoyGjJHql01aH0QAEkPOUqT3ftpYn tpd8Zanhm/gz6u6NtMynYW3FX6ZbFp5QmlDXiXsPatpicZLw5ul/ZPYZZGBnEvHj KBA1BnV3//cXvryiVEjahkjYsL6aS3kM7BB2MbwdXOJHelhbe4dMuZCOSbJ46xNz rFcsOTUeknBQM8CMrIndpOvZi6JAKZH0Tr3G1PwAAFu5c9D0VEvUtiIqMr/ou6IJ X/oBjvTmu6H4ivKJfeIkhKRBMlD90/oWa1R1jAked7J+roAf7YZhivRZ33MWRpqI dg9CF7Nf/lmeWw== -----END CERTIFICATE-----Generated at Fri Oct 24 05:29:22 2025 by rpki-client