$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft File: JBW_nGHIXbfJmsTN95JX55l6t3w.mft (raw, json) Hash identifier: D8HZxXvq1ZQL1ney6CZS7txYm9IeBkbN/LPYZACmOxM= Subject key identifier: 59:63:E1:3D:5D:49:DB:3C:C6:29:E1:EF:EA:B4:4C:28:FC:09:58:CB Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c Certificate serial: 019DF9F1D9DF993A23B6698B19CCCE271CBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft Manifest number: 0661 Signing time: Tue 05 May 2026 21:01:09 +0000 Manifest this update: Tue 05 May 2026 21:01:09 +0000 Manifest next update: Wed 06 May 2026 21:01:09 +0000 Files and hashes: 1: AhjWgQe5daBXqh1dc2blAO0Ic2w.roa (hash: a7wxAC+oIB/6gPef5eFXwJM4UM8yzMuA8+Ys7Te3ao0=) 2: GXGKIBcqqhQNGnmXFb4-jHoOCEE.roa (hash: PlvHrrR/gICbE9juRm1dMuCUlODkxhFuRDveJO5Bh7Q=) 3: JBW_nGHIXbfJmsTN95JX55l6t3w.crl (hash: M9YPOa+UOQp2mVdUoYuGVXjHqVfHz15xs8UsfzmhAx0=) 4: Q5KSfGS3tHda5rpVovsFITdTDYg.roa (hash: ICa5+GlL+U3Gm/Y9rjnti3iGdfCYMhzdaqvSwGSYDhw=) 5: WCJ9gE-e8QjNE_vVGqmE6pO_nvw.roa (hash: DeEHxD61Idh7MZyjwpXRlXo6rPbiEwB469c7Waf82Ic=) 6: XtShvNgMwZA_rgTfZdTsjFYrJj4.roa (hash: QVsItKxf/ARRX3hlHmJ5FKurvG5F+zyGh9CaElCqQS8=) 7: YYSBCusmOATTsDlexwdHCGh1TQo.roa (hash: h7RqP8GZAD05bX49zITtzPTXDfFkGa6deohAIGARxjs=) 8: au6l1R_D5TS70Po3ddjxh4jpsrw.roa (hash: nF+JU9MjISfoV5j1pWIuixKzo4d4T8t4S6fvAEqKW0w=) 9: kU0h6DQAW6ALWVeNhG0VOl8Gro8.roa (hash: DYmIhG/wRif14OJ02fuyBK+O/9TIFv1/d//lBb/p9Yw=) 10: yG4OkZWGVc801WR319uN12MQwCU.roa (hash: S1EYNeOLg4hu92HVj8eCs4hi5JNKFzGXwWgW8RpMiv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 May 2026 18:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:f9:f1:d9:df:99:3a:23:b6:69:8b:19:cc:ce:27:1c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c Validity Not Before: May 5 21:01:09 2026 GMT Not After : May 6 21:01:09 2026 GMT Subject: CN=5963e13d5d49db3cc629e1efeab44c28fc0958cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2c:36:71:2b:48:c2:75:60:9a:9c:54:3f:f1: 62:66:04:0f:c8:b5:87:79:c1:5b:9c:01:9f:23:15: 78:c1:35:4e:e7:27:00:b7:4a:ea:b7:05:e9:3d:c4: 31:88:0b:4e:21:68:29:2b:a1:a4:d8:e7:80:fa:19: dc:8c:6e:f4:9d:7c:5e:0e:ba:59:75:37:8f:24:fb: 1b:d1:20:19:19:79:0a:2f:47:44:90:a9:5a:93:43: be:53:3f:7d:e7:ba:95:91:40:51:59:42:9b:48:02: e2:1a:c8:2f:cc:ac:fc:29:cd:df:bf:e8:04:62:6f: 3a:5e:47:e7:ed:8b:d2:ae:52:de:d3:a4:66:83:e3: a2:db:a6:0b:21:b9:18:d7:0a:e4:9e:4c:d9:56:48: b5:97:cf:51:11:00:a9:76:f8:a0:06:8a:01:77:76: b6:1a:38:6d:21:13:4e:b0:ab:62:06:cf:80:d1:4c: 19:a1:74:3c:7a:6a:4f:24:60:06:de:fa:66:07:ec: 98:72:38:5d:a9:56:8a:48:19:ee:ea:d5:25:f2:d5: 95:64:34:cf:e9:49:33:d9:dd:b2:c7:59:a9:31:e4: a5:c2:98:90:79:04:dc:86:bd:77:e7:d4:4a:0a:49: 1e:3c:71:ab:d9:6b:2c:ae:d3:5e:9f:3f:05:d6:30: 51:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:63:E1:3D:5D:49:DB:3C:C6:29:E1:EF:EA:B4:4C:28:FC:09:58:CB X509v3 Authority Key Identifier: keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c3:53:67:53:c4:0a:11:03:b7:92:ea:5b:32:3d:bb:f4:54: 50:e3:61:03:c3:ba:cd:d1:ba:08:4c:ad:81:d3:ca:76:f7:e2: f1:aa:ed:5c:eb:63:5c:98:16:03:e7:0c:f9:2d:ab:ab:dc:10: 7d:1e:69:db:75:b2:81:a6:1b:63:35:42:c5:87:dc:cf:5e:f4: c5:33:5b:73:32:22:00:77:bf:d0:7c:22:ef:ce:07:5b:1a:e6: 54:06:5a:b3:3f:23:6f:2a:2e:5c:0f:15:a7:b5:16:ff:18:29: 18:d8:bf:36:29:37:b4:5d:28:50:6b:93:60:a5:f6:dd:9b:4d: aa:0c:2f:d5:65:27:6a:72:68:8e:d0:0a:69:ee:a0:28:ba:52: 35:2e:7f:f1:38:b6:05:00:f6:1a:12:95:fb:59:28:a9:f6:27: 91:9b:5c:9c:88:39:2e:0a:f1:e6:b7:24:cb:06:50:a9:6e:fa: e7:e8:c9:57:b9:13:0b:24:0e:51:b0:f7:e6:ec:c6:25:ce:fb: 32:95:61:07:2e:53:53:13:62:cd:57:7f:c0:40:40:4d:ba:46: 75:5d:34:1d:87:06:cc:ff:14:d1:03:5c:36:c5:96:0e:d5:6d: c9:c6:ca:cb:e9:ad:e5:2c:d9:a9:97:0f:a3:46:45:41:bb:2e: 19:de:72:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ358dnfmTojtmmLGczOJxy6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MTViZjljNjFjODVkYjdjOTlhYzRjZGY3OTI1N2U3OTk3 YWI3N2MwHhcNMjYwNTA1MjEwMTA5WhcNMjYwNTA2MjEwMTA5WjAzMTEwLwYDVQQD Eyg1OTYzZTEzZDVkNDlkYjNjYzYyOWUxZWZlYWI0NGMyOGZjMDk1OGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yw2cStIwnVgmpxUP/FiZgQPyLWH ecFbnAGfIxV4wTVO5ycAt0rqtwXpPcQxiAtOIWgpK6Gk2OeA+hncjG70nXxeDrpZ dTePJPsb0SAZGXkKL0dEkKlak0O+Uz9957qVkUBRWUKbSALiGsgvzKz8Kc3fv+gE Ym86Xkfn7YvSrlLe06Rmg+Oi26YLIbkY1wrknkzZVki1l89REQCpdvigBooBd3a2 GjhtIRNOsKtiBs+A0UwZoXQ8empPJGAG3vpmB+yYcjhdqVaKSBnu6tUl8tWVZDTP 6Ukz2d2yx1mpMeSlwpiQeQTchr1359RKCkkePHGr2WssrtNenz8F1jBRhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFlj4T1dSds8xinh7+q0TCj8CVjLMB8GA1UdIwQY MBaAFCQVv5xhyF23yZrEzfeSV+eZerd8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkJXX25HSElYYmZKbXNUTjk1Slg1NWw2dDN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8zMzg5ZWItMTg1Ny00OWQyLTg0MWMt NmExOGRjODgxNmRiLzEvSkJXX25HSElYYmZKbXNUTjk1Slg1NWw2dDN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8zMzg5ZWItMTg1Ny00OWQyLTg0MWMtNmExOGRjODgxNmRi LzEvSkJXX25HSElYYmZKbXNUTjk1Slg1NWw2dDN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsNTZ1PE ChEDt5LqWzI9u/RUUONhA8O6zdG6CEytgdPKdvfi8artXOtjXJgWA+cM+S2rq9wQ fR5p23WygaYbYzVCxYfcz170xTNbczIiAHe/0Hwi784HWxrmVAZasz8jbyouXA8V p7UW/xgpGNi/Nik3tF0oUGuTYKX23ZtNqgwv1WUnanJojtAKae6gKLpSNS5/8Ti2 BQD2GhKV+1koqfYnkZtcnIg5Lgrx5rckywZQqW765+jJV7kTCyQOUbD35uzGJc77 MpVhBy5TUxNizVd/wEBATbpGdV00HYcGzP8U0QNcNsWWDtVtycbKy+mt5SzZqZcP o0ZFQbsuGd5ylg== -----END CERTIFICATE-----Generated at Wed May 6 03:27:04 2026 by rpki-client