$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft File: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json) Hash identifier: GXnMDGIX4cL84LPxdTB0ewrrfT9GehjRJ9TS2vc3nOA= Subject key identifier: CA:D2:C5:0F:83:6A:45:FF:F1:FA:89:C2:73:0F:8E:30:BB:1B:07:B2 Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 01A1705D1554D56719BD61A363CC6E839F52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft Manifest number: 1B03 Signing time: Sun 25 Oct 2026 00:01:50 +0000 Manifest this update: Sun 25 Oct 2026 00:01:50 +0000 Manifest next update: Mon 26 Oct 2026 00:01:50 +0000 Files and hashes: 1: 17xPyZlJEOUx5zEX8ZO8erx4H74.roa (hash: o78ZIjezoB+5hFnpSV2hhbyqsGtrTAReQHzLkPsSMs8=) 2: 1HSk7ol-NPF4p9rYRcl-Q6JPZDo.roa (hash: +FiTw/39WUh9LOAGYF5ppee39UlTfw1pjYmCcmzZE8I=) 3: 1wsMVCeL93UzN5b0Yvsk2yYuWLA.roa (hash: 99X69fNFzFuCPq29Xhv4yLun4KnsOh44dtaBCjapBbQ=) 4: 2RHKEFUbX-V0Mf6y31Iq5dGlemY.roa (hash: 22aNA0RqHM/lo1ZuXKI24lPSyNZYgt9FvnHMilKuHJY=) 5: 2q-y1nHjenu9twtcEVm8uPj-ddE.roa (hash: kKq4uoPjr9yzILuLqmWkg6QD55vf8pDPM+f+YLfRhpg=) 6: C58HKVenwwmbh1jkwoeqIUWdglo.roa (hash: dbM/VaOE1y6PqBg/KjdbXvgt9ovsuviuBnEC3nra0Jo=) 7: Ebg0ux5rcibv_t_FMLVeGO1p-6s.roa (hash: /4FrUXbz6Hz/uPMenmCysdLSPs/BOSlhWYQVSb8RAn0=) 8: GEKxvGic2KzXVJsj3dcok72CGco.roa (hash: aFBfIqFU6Ts846KW9SXo+ReP3IL9/U988JwYsIxQACw=) 9: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: vi4v/f+5hxrTLUbhv5Eq60TTrcZ49Uv/o6l+pxrgh3Y=) 10: TN_g4sfmmPrHK_oZ30J7gNWtpIY.roa (hash: m5dgi6YlmiEMbhGuQK1tT2ie/bg//bcOLn6xqpAH6Zs=) 11: U_DCEtPw_hUMwrzj8r6wUIXBPig.roa (hash: zOV0/cSp312KHscfdmAUHtLOyMQW+m7fH0EzuAciKbU=) 12: WPjlp9q2_irNOFHbvH1KxHiPhtg.roa (hash: nGNubH07FwuuTBRkZu6sDa2SbPeua6Dt0ORJDlPOSMk=) 13: XVl9Jn76mWQ8ncaJ_wDuumCSFsA.roa (hash: Hs6XsuXHPXeVRFbGDUcPFLc6y5U4gwmlkZ/AR7/NeXE=) 14: h-WKTlUMQLOqlyLFoGBOWfk4OrY.roa (hash: ieHJu/E+ae+fHEeWcEYzkuUUaqlobiXz9aHuLMbuIyg=) 15: hscVJa1zcFdyUccI8x5yH0qcNiw.roa (hash: uNP1bqmcK4itRcnCcHmI+yjjtNKZn/HDFyPe+Myxey8=) 16: js8xc1HEU1XUI0sBZfF0bl5Ntsc.roa (hash: AdO5qS0u+S/3mUbxDukdjf7Jfxyoy7D8xgFedRy81VA=) 17: k_MSpCKVnChWzSccoFJBjl40Vo8.roa (hash: VdSgjLWna9h9svrbMMSXJmkEe/+wqNq0RNqZ0DwPUZc=) 18: xyAifHL4yJafsXbZXrkrgodDKkI.roa (hash: 5dlJ/03oKMrYHI2ijFPlXqVyiklmxqeJzGBSWajGiKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 23:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:70:5d:15:54:d5:67:19:bd:61:a3:63:cc:6e:83:9f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Oct 25 00:01:50 2026 GMT Not After : Oct 26 00:01:50 2026 GMT Subject: CN=cad2c50f836a45fff1fa89c2730f8e30bb1b07b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0f:98:1b:3a:a7:88:58:21:05:17:14:e8:a6: 50:47:64:3c:b4:5c:55:65:d9:7e:6a:4d:82:01:03: 75:71:69:ac:23:d6:16:c6:b3:4d:f8:c7:d9:fc:f8: fd:1b:c7:9e:a4:2d:8a:26:5b:74:66:02:ec:f4:b8: b3:ad:1c:f2:bb:76:a1:f0:4a:eb:04:ef:2b:16:94: 20:c2:95:e5:0c:b0:ef:4d:74:57:78:5f:37:95:8b: 9f:14:12:06:aa:ca:d7:27:22:07:8e:67:1e:e2:c9: 1f:bb:34:a8:af:6c:33:7d:83:4a:ba:fd:e9:96:e6: 87:b2:b9:f2:b5:2d:cb:61:73:4d:74:bf:65:b0:97: 97:c5:7e:4f:9a:ac:0a:4b:1c:73:48:97:54:9c:3b: 58:92:39:be:db:97:d2:bc:92:4f:9a:02:63:57:00: af:41:8f:09:e9:61:5d:de:e9:2e:e0:a6:06:9e:3b: 0e:cb:19:23:4b:61:d8:40:2c:46:b4:fe:2c:78:f4: 15:14:af:be:82:89:ca:20:9f:74:c2:6f:1e:e9:59: f5:a8:0e:bb:b9:a1:5d:c9:59:f0:f2:9a:ca:d2:1e: 15:7a:9f:f9:12:1c:ba:ea:af:ae:68:21:81:41:c6: 43:04:b9:11:c8:f0:bb:51:00:d3:83:4a:12:4e:74: cf:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D2:C5:0F:83:6A:45:FF:F1:FA:89:C2:73:0F:8E:30:BB:1B:07:B2 X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a7:d0:62:d2:d4:bb:30:8f:f8:0b:cd:f9:2c:3a:91:98:dd: c5:9a:cd:65:e7:b2:42:75:93:d2:d9:7a:48:fb:3e:2b:be:94: 38:5b:04:db:a3:4b:64:a1:ba:f0:3a:6f:06:aa:da:ca:06:d6: 63:72:7c:00:ab:1b:20:5f:f2:4a:2c:48:2d:c0:98:53:3d:2b: bb:53:3a:56:c2:a4:43:1f:32:44:17:52:a9:9b:ae:db:4c:bf: 2d:eb:e5:62:10:7d:03:89:57:f7:a1:40:9c:e6:dc:89:9b:d8: 18:a4:de:6b:cc:d4:7d:47:21:de:68:4c:43:51:3d:93:28:33: e3:41:2e:e6:20:b0:40:f5:50:e2:78:f6:d0:89:35:93:df:5e: 54:63:4a:c9:8f:8b:35:0f:12:a4:30:d2:9f:a1:14:e6:a5:e0: d6:57:37:17:39:18:16:0e:c3:eb:4e:12:73:0e:84:65:42:39: fd:2c:6d:72:da:77:0e:f5:45:bb:c6:40:42:0e:d0:63:72:08: e9:2d:5f:31:0d:52:24:9a:c2:7d:fb:49:a8:4e:b2:22:d1:e8: 86:7e:3f:bd:7b:b8:ad:39:db:c4:c4:87:bf:55:c1:b0:a2:0f: a9:0d:3a:a6:1b:de:f6:be:b8:f1:33:38:d0:3c:bc:d6:a3:40: 2f:d0:35:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFwXRVU1WcZvWGjY8xug59SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjYxMDI1MDAwMTUwWhcNMjYxMDI2MDAwMTUwWjAzMTEwLwYDVQQD EyhjYWQyYzUwZjgzNmE0NWZmZjFmYTg5YzI3MzBmOGUzMGJiMWIwN2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA+YGzqniFghBRcU6KZQR2Q8tFxV Zdl+ak2CAQN1cWmsI9YWxrNN+MfZ/Pj9G8eepC2KJlt0ZgLs9LizrRzyu3ah8Err BO8rFpQgwpXlDLDvTXRXeF83lYufFBIGqsrXJyIHjmce4skfuzSor2wzfYNKuv3p luaHsrnytS3LYXNNdL9lsJeXxX5PmqwKSxxzSJdUnDtYkjm+25fSvJJPmgJjVwCv QY8J6WFd3uku4KYGnjsOyxkjS2HYQCxGtP4sePQVFK++gonKIJ90wm8e6Vn1qA67 uaFdyVnw8prK0h4Vep/5Ehy66q+uaCGBQcZDBLkRyPC7UQDTg0oSTnTPswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrSxQ+DakX/8fqJwnMPjjC7GweyMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlafQYtLU uzCP+AvN+Sw6kZjdxZrNZeeyQnWT0tl6SPs+K76UOFsE26NLZKG68DpvBqraygbW Y3J8AKsbIF/ySixILcCYUz0ru1M6VsKkQx8yRBdSqZuu20y/LevlYhB9A4lX96FA nObciZvYGKTea8zUfUch3mhMQ1E9kygz40Eu5iCwQPVQ4nj20Ik1k99eVGNKyY+L NQ8SpDDSn6EU5qXg1lc3FzkYFg7D604Scw6EZUI5/Sxtctp3DvVFu8ZAQg7QY3II 6S1fMQ1SJJrCfftJqE6yItHohn4/vXu4rTnbxMSHv1XBsKIPqQ06phve9r648TM4 0Dy81qNAL9A12g== -----END CERTIFICATE-----Generated at Sun Oct 25 06:02:58 2026 by rpki-client