$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json) Hash identifier: jOb2UviX2ycaBuUSH151mGMJO3nZdzo8VathOO1Bg/w= Subject key identifier: 52:42:82:6C:86:1F:82:C1:F7:04:11:BA:DC:32:ED:CA:9A:DB:D2:77 Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 019A06368C0849A604F2C629B151AA5E81A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft Manifest number: 12DD Signing time: Tue 21 Oct 2025 10:00:29 +0000 Manifest this update: Tue 21 Oct 2025 10:00:29 +0000 Manifest next update: Wed 22 Oct 2025 10:00:29 +0000 Files and hashes: 1: 3_HM3LXI2dI7yCUkbwsS0LVmtPQ.roa (hash: dlvoBhBeGam9xbjGOiUpXKoso+XH3qNTVfnBCvdbd3Q=) 2: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: 4PjegLkaH6NM7bF/tpjzsishV89gb/SpeRL0L8cQ9Zg=) 3: E_7EA8UJkxlGETtzRt_qHmFJYsI.roa (hash: 407g7UlI6CqSY6AOA+kHrysQofaOwh0+lRwTxsDvEPM=) 4: EgzHUocwnSDaTR0mcH1N2AahbPA.roa (hash: qnns/hwFAonNH2cGnXK7MoaWY9Y+ZF5REF6qTFex00M=) 5: LBBRl1_5PTCAndMsefaH2qIgsWI.roa (hash: P4yu/hSYw0dip59FJgO1wKqB51hJxMddEa7BdAJON18=) 6: SFJQLYtyuvLa-Z-_p6GETmClzzQ.roa (hash: TpY/D4v+35T3Gg8FMD0C6YxKf8fx/yuDpF1EWp6QNws=) 7: SW2UHW6XXrCRSFkNV0CVmfSilT8.roa (hash: OU29d/hqTbWW7Cob/3TqpwPxH+8rWvDwLVXV+Khg58o=) 8: gLpL93_717seB53wtn-PIYRSJpQ.roa (hash: BEBryS8Pk5M96RkjmV9ApUKiEfxXTgBuMMQoR0rPtvE=) 9: lLTt27CvKVrZ46MtIxZb-bD0JJg.roa (hash: r41CVNzvdr3xjDNcNmmOPnidy7vQT3DjIW3YSNMbicI=) 10: sl5VJ3i7CbF6mq-XTH5pxWMmK5o.roa (hash: 4bfJxuYHYnVskQrhNVV+ZwN1afVTdgzyH0yWLAaqMRM=) 11: ve4kS1FSpKOZDfPOmvEJot6T9gc.roa (hash: /8G7vYP5BGzfa/caGIr/zNwzv8N1oQfYQzWhKIYfL+g=) 12: yiW-kmeX6T3jx-yL7EZZYoVvwps.roa (hash: QstF1sZuORe/6EM2aW5TGBrHuj8rjUHPJQAAamVQG0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:06:36:8c:08:49:a6:04:f2:c6:29:b1:51:aa:5e:81:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Oct 21 10:00:29 2025 GMT Not After : Oct 22 10:00:29 2025 GMT Subject: CN=5242826c861f82c1f70411badc32edca9adbd277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2e:c9:1e:68:d4:e2:0a:52:b0:37:dd:91:87: 4a:91:dd:74:b9:82:39:80:a4:f1:f5:9d:3b:91:2b: e0:1d:28:97:51:f0:c5:b7:8c:f1:1b:da:e4:f4:26: e9:1c:5f:19:77:00:8f:43:0f:18:60:a6:93:fc:3f: 0a:fd:f7:ac:37:04:d8:9e:0a:97:c7:6d:6f:77:11: 66:60:b1:b9:ee:d9:81:a6:53:36:7e:0d:dd:53:b8: e8:6e:61:87:7b:74:64:3a:00:2b:61:86:b6:11:4b: 95:fd:d6:83:44:1a:b1:d1:31:d0:b4:94:bc:63:d2: c5:3b:a4:54:36:fd:e9:b7:49:83:92:68:e9:c3:35: c0:e1:66:3c:43:ba:33:b1:2d:c4:00:09:2f:07:3a: 6f:d9:16:7d:58:da:f4:1d:91:7c:a1:9c:99:2c:61: 0e:c8:dc:6a:53:97:16:45:1a:91:8b:d3:f7:43:2d: 5b:9c:32:63:43:f2:a3:6f:3e:d7:b2:aa:c1:3a:f9: 26:02:f9:95:70:51:77:ff:b6:bd:11:e7:18:76:c8: 18:f4:85:3e:3c:b0:cc:ce:bf:fe:2f:07:4d:93:9b: d5:4a:e3:2c:e1:6c:0d:8b:6d:a3:06:20:d6:32:33: 9c:97:93:be:0d:eb:7c:ee:0d:97:7f:6c:22:c7:c0: f5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:42:82:6C:86:1F:82:C1:F7:04:11:BA:DC:32:ED:CA:9A:DB:D2:77 X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f8:7f:70:eb:df:24:65:33:c5:a8:75:6a:0b:f4:5e:f7:52: 2b:06:da:63:1e:db:92:f6:b5:88:2a:d7:24:fc:f9:2d:72:38: 4d:7d:2d:f1:5f:4c:f9:bb:00:c0:72:f9:0f:2a:30:bd:c8:b9: 9d:36:e6:4a:73:5d:42:d2:7e:e6:8b:2a:7a:62:7a:68:4a:d0: 04:76:14:f3:f0:3d:cf:27:cd:05:ce:ab:5b:a0:69:09:7e:2e: 38:1a:fe:30:a0:7a:d1:96:ba:53:f0:86:29:d2:1d:44:95:f6: f6:1e:a4:eb:69:f1:19:2d:d3:b5:51:ba:26:80:26:52:68:0b: 59:ac:d0:e1:0b:b1:60:f6:7f:a5:19:2b:b8:6a:24:f2:71:ea: a6:7c:c2:e8:3e:8c:56:51:f9:fc:0b:91:43:f0:16:18:ba:30: 4d:ee:87:50:46:d3:ad:4f:1d:17:1f:58:6d:d0:1d:9e:61:7b: a4:62:c1:61:89:fc:17:c7:ed:86:b1:39:1b:5e:49:02:28:49: 71:ea:c2:2a:24:04:3a:37:18:1d:dc:6e:8d:8f:08:39:18:3e: 87:ea:13:7b:f2:f7:2f:09:04:91:d8:7a:dc:26:74:46:e9:76: d5:44:e0:c9:8c:eb:f1:82:a7:3e:75:76:07:eb:b0:b2:63:08: f5:92:4b:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoGNowISaYE8sYpsVGqXoGlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjUxMDIxMTAwMDI5WhcNMjUxMDIyMTAwMDI5WjAzMTEwLwYDVQQD Eyg1MjQyODI2Yzg2MWY4MmMxZjcwNDExYmFkYzMyZWRjYTlhZGJkMjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi7JHmjU4gpSsDfdkYdKkd10uYI5 gKTx9Z07kSvgHSiXUfDFt4zxG9rk9CbpHF8ZdwCPQw8YYKaT/D8K/fesNwTYngqX x21vdxFmYLG57tmBplM2fg3dU7jobmGHe3RkOgArYYa2EUuV/daDRBqx0THQtJS8 Y9LFO6RUNv3pt0mDkmjpwzXA4WY8Q7ozsS3EAAkvBzpv2RZ9WNr0HZF8oZyZLGEO yNxqU5cWRRqRi9P3Qy1bnDJjQ/Kjbz7XsqrBOvkmAvmVcFF3/7a9EecYdsgY9IU+ PLDMzr/+LwdNk5vVSuMs4WwNi22jBiDWMjOcl5O+Det87g2Xf2wix8D10wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJCgmyGH4LB9wQRutwy7cqa29J3MB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/h/cOvf JGUzxah1agv0XvdSKwbaYx7bkva1iCrXJPz5LXI4TX0t8V9M+bsAwHL5Dyowvci5 nTbmSnNdQtJ+5osqemJ6aErQBHYU8/A9zyfNBc6rW6BpCX4uOBr+MKB60Za6U/CG KdIdRJX29h6k62nxGS3TtVG6JoAmUmgLWazQ4QuxYPZ/pRkruGok8nHqpnzC6D6M VlH5/AuRQ/AWGLowTe6HUEbTrU8dFx9YbdAdnmF7pGLBYYn8F8fthrE5G15JAihJ cerCKiQEOjcYHdxujY8IORg+h+oTe/L3LwkEkdh63CZ0Rul21UTgyYzr8YKnPnV2 B+uwsmMI9ZJLDQ== -----END CERTIFICATE-----Generated at Tue Oct 21 16:05:23 2025 by rpki-client