$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft File: JxlBKRimYn-ZzOVcesoTkFe4V04.mft (raw, json) Hash identifier: TMO8owXN36L6Vnan+ukDi6Tx7S5+hdUBYLwD4tWWtK0= Subject key identifier: 59:2E:6B:2D:91:AD:3F:B0:0A:27:2B:33:EA:1A:F1:77:11:63:08:25 Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e Certificate serial: 019A03A412483D90702826669D687439E8B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft Manifest number: 0A36 Signing time: Mon 20 Oct 2025 22:01:15 +0000 Manifest this update: Mon 20 Oct 2025 22:01:15 +0000 Manifest next update: Tue 21 Oct 2025 22:01:15 +0000 Files and hashes: 1: 0egOCEDjjfjwdPmizCh3Cu6NbrQ.roa (hash: RjxfFq3fmsFbepGKowirBDzmyu+RZ3fSC5NUINYgMYU=) 2: 7W85Tt0gwzhkJWxBWSICyLMHvBg.roa (hash: JppPMnJbiXzbpD/Pc6qWhNpXFo8/+nx6fCwzyRamuQY=) 3: 8-PSvB9rLper4H4Z6i2q7Nh0gdw.roa (hash: 2qr0DY7SshfmBWBMPElwvi/+AJH/67rJ01N4KKU7q1A=) 4: BRryBhcZ86QRcNyyWRQXIrGL940.roa (hash: TpVPlst5x/81i653yEbzbStWflfy2GReIp1Tn60B8L0=) 5: C2IF6LAMNn3fJJb2qYaEnTh4WI4.roa (hash: KoYq60161i4xpC6NqHZA/Q8w9Njte/PcskDc5lUbshM=) 6: EJQRhvTA9imPwclwVgQbFkh0JFE.roa (hash: wCSwu07TXrbn08zc7CmiqRRyHHovVOMjCdUBle99/a8=) 7: JxlBKRimYn-ZzOVcesoTkFe4V04.crl (hash: Ly68ltigk/1ofltsUgCabneyabMHJkX3JQ7m6yPOrGo=) 8: XP9c9FnVM83t2BcVhUGYjki34JA.roa (hash: 9MjxmhRyp3W6rmd2o7KozYAfmVW00slDjc1CHV4YtKA=) 9: ZvwtxuslzfQmqhln4NrT0EB6by0.roa (hash: /zi0GX6AY/hjXoyJfHeafiIns7K/28qT/TjfHjhKvFY=) 10: i6AMMlCBL4mI8fXSClWLBTgrr2w.roa (hash: ibC1icVFA9nVxcZkqXGl9glghEao/S766jYYimUgQ+I=) 11: noewYl5P0rkhAPD3Zn8s9bc2_qs.roa (hash: h2zqiA+vL/GF8rvskPe0YPXeCInpKFuXr/zZvqUEJgg=) 12: xdpBEJQBaSWnLzQMJf9F6VWUv60.roa (hash: rjp7KwUwTuEzo3eXkAycybNSdAwl1wu4fvs5dmuagvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 22:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:03:a4:12:48:3d:90:70:28:26:66:9d:68:74:39:e8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e Validity Not Before: Oct 20 22:01:15 2025 GMT Not After : Oct 21 22:01:15 2025 GMT Subject: CN=592e6b2d91ad3fb00a272b33ea1af17711630825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f2:f1:94:4f:b5:c6:8c:17:fd:4b:f9:53:10: 5a:cc:f3:25:2a:ba:62:2f:92:e8:e9:12:36:e3:ad: 99:1d:b2:0f:c6:5d:6a:2c:d0:e7:79:10:82:43:10: dc:33:78:c3:ae:05:44:f1:9f:cd:0b:26:e1:e5:78: 63:0b:8a:89:d5:2e:13:1c:a0:bb:b6:3f:80:dd:a5: 4e:9a:da:5c:b3:49:56:56:58:5f:e9:8b:33:66:39: 9f:f7:c9:cf:93:82:db:e4:5c:f3:b0:ed:e5:0f:e6: f2:1f:67:4d:fd:b5:0b:6d:ad:42:40:3f:87:9b:44: e8:88:5f:02:e6:d5:87:57:d0:77:d7:96:a4:41:d6: 44:06:ad:72:36:86:f6:a6:20:ad:59:3c:6f:ff:32: 83:a5:8a:ad:5f:ea:f4:21:60:f4:49:07:c7:15:72: 6e:56:77:fd:a7:70:55:74:d1:dd:ee:0e:9c:db:2e: 49:2c:f4:6a:d7:fa:31:44:2f:53:46:a5:37:06:bd: ac:28:e6:f7:76:7a:d8:be:14:9e:45:72:1b:07:22: 80:05:bf:02:27:55:86:0e:7d:6b:0c:b7:76:75:6b: 22:50:da:b1:2c:65:d9:71:b3:22:55:9b:47:8d:3b: 85:7d:83:c1:d1:c5:fa:68:99:07:a5:1a:28:ae:1d: 8a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2E:6B:2D:91:AD:3F:B0:0A:27:2B:33:EA:1A:F1:77:11:63:08:25 X509v3 Authority Key Identifier: keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:6b:0d:38:58:94:29:67:66:f5:3a:e2:ce:f7:2f:08:b2:30: dd:14:e6:4c:3b:16:14:66:45:d5:bf:3e:a8:e2:6f:01:7b:cb: 00:ce:79:50:ad:45:3f:43:b0:06:94:4f:b0:33:cf:b9:09:e6: 21:96:cb:6e:2c:20:be:7d:01:08:5c:31:3e:e8:b6:79:22:00: 97:74:2a:d7:69:01:89:bf:cf:4b:e0:ab:e0:ee:ca:be:39:a4: 73:40:a1:ca:83:1c:74:9e:d5:b2:61:4a:57:e8:e9:66:db:64: e9:3b:b5:92:e6:cb:35:c4:1f:74:2e:f4:27:ec:99:24:84:7e: c0:f8:54:38:6f:a4:82:56:42:67:05:44:c2:e8:c8:74:b1:34: 72:d9:f0:43:bc:52:ae:a0:ae:32:0e:e4:47:17:fc:77:da:b6: a9:64:9e:28:4a:5a:a3:ca:e9:9c:e6:fe:9c:26:7c:e0:1f:d7: 0c:f3:f5:84:bc:38:20:ba:c0:60:b6:34:ca:0c:13:66:d2:a8: 6e:13:bc:3b:4b:de:f9:05:87:b5:95:c2:f6:fb:6b:d9:9f:0c: f2:38:34:ca:12:30:7e:2c:47:1e:fa:3d:cc:0d:aa:93:5d:29: 27:39:87:2f:65:e8:b5:7f:21:b6:5f:0c:8f:bf:94:42:b7:88: 8c:02:15:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoDpBJIPZBwKCZmnWh0OeizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MTk0MTI5MThhNjYyN2Y5OWNjZTU1YzdhY2ExMzkwNTdi ODU3NGUwHhcNMjUxMDIwMjIwMTE1WhcNMjUxMDIxMjIwMTE1WjAzMTEwLwYDVQQD Eyg1OTJlNmIyZDkxYWQzZmIwMGEyNzJiMzNlYTFhZjE3NzExNjMwODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPLxlE+1xowX/Uv5UxBazPMlKrpi L5Lo6RI2462ZHbIPxl1qLNDneRCCQxDcM3jDrgVE8Z/NCybh5XhjC4qJ1S4THKC7 tj+A3aVOmtpcs0lWVlhf6YszZjmf98nPk4Lb5FzzsO3lD+byH2dN/bULba1CQD+H m0ToiF8C5tWHV9B315akQdZEBq1yNob2piCtWTxv/zKDpYqtX+r0IWD0SQfHFXJu Vnf9p3BVdNHd7g6c2y5JLPRq1/oxRC9TRqU3Br2sKOb3dnrYvhSeRXIbByKABb8C J1WGDn1rDLd2dWsiUNqxLGXZcbMiVZtHjTuFfYPB0cX6aJkHpRoorh2KlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkuay2RrT+wCicrM+oa8XcRYwglMB8GA1UdIwQY MBaAFCcZQSkYpmJ/mczlXHrKE5BXuFdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYt NGUyMjM5MTdiODYwLzEvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYtNGUyMjM5MTdiODYw LzEvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmsNOFiU KWdm9TrizvcvCLIw3RTmTDsWFGZF1b8+qOJvAXvLAM55UK1FP0OwBpRPsDPPuQnm IZbLbiwgvn0BCFwxPui2eSIAl3Qq12kBib/PS+Cr4O7Kvjmkc0ChyoMcdJ7VsmFK V+jpZttk6Tu1kubLNcQfdC70J+yZJIR+wPhUOG+kglZCZwVEwujIdLE0ctnwQ7xS rqCuMg7kRxf8d9q2qWSeKEpao8rpnOb+nCZ84B/XDPP1hLw4ILrAYLY0ygwTZtKo bhO8O0ve+QWHtZXC9vtr2Z8M8jg0yhIwfixHHvo9zA2qk10pJzmHL2XotX8htl8M j7+UQreIjAIVoA== -----END CERTIFICATE-----Generated at Tue Oct 21 06:19:22 2025 by rpki-client