$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft File: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json) Hash identifier: xolXzqCu6+rdd6FZw9oI1hxw1ucSexScO+99Co2o+7w= Subject key identifier: 0D:81:40:26:F1:54:67:2C:CB:12:1D:0A:8E:55:BB:D8:29:7C:2A:52 Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 01A06D959BBF25C2D2B066E68823769958B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft Manifest number: 1A7D Signing time: Fri 04 Sep 2026 18:01:56 +0000 Manifest this update: Fri 04 Sep 2026 18:01:56 +0000 Manifest next update: Sat 05 Sep 2026 18:01:56 +0000 Files and hashes: 1: 17xPyZlJEOUx5zEX8ZO8erx4H74.roa (hash: o78ZIjezoB+5hFnpSV2hhbyqsGtrTAReQHzLkPsSMs8=) 2: 1HSk7ol-NPF4p9rYRcl-Q6JPZDo.roa (hash: +FiTw/39WUh9LOAGYF5ppee39UlTfw1pjYmCcmzZE8I=) 3: 1wsMVCeL93UzN5b0Yvsk2yYuWLA.roa (hash: 99X69fNFzFuCPq29Xhv4yLun4KnsOh44dtaBCjapBbQ=) 4: 2RHKEFUbX-V0Mf6y31Iq5dGlemY.roa (hash: 22aNA0RqHM/lo1ZuXKI24lPSyNZYgt9FvnHMilKuHJY=) 5: 2q-y1nHjenu9twtcEVm8uPj-ddE.roa (hash: kKq4uoPjr9yzILuLqmWkg6QD55vf8pDPM+f+YLfRhpg=) 6: C58HKVenwwmbh1jkwoeqIUWdglo.roa (hash: dbM/VaOE1y6PqBg/KjdbXvgt9ovsuviuBnEC3nra0Jo=) 7: Ebg0ux5rcibv_t_FMLVeGO1p-6s.roa (hash: /4FrUXbz6Hz/uPMenmCysdLSPs/BOSlhWYQVSb8RAn0=) 8: GEKxvGic2KzXVJsj3dcok72CGco.roa (hash: aFBfIqFU6Ts846KW9SXo+ReP3IL9/U988JwYsIxQACw=) 9: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: zFYJZKeO2GO8jT4tsJghEVVb/pU0dA8Z6HXa7ucN7ZA=) 10: TN_g4sfmmPrHK_oZ30J7gNWtpIY.roa (hash: m5dgi6YlmiEMbhGuQK1tT2ie/bg//bcOLn6xqpAH6Zs=) 11: U_DCEtPw_hUMwrzj8r6wUIXBPig.roa (hash: zOV0/cSp312KHscfdmAUHtLOyMQW+m7fH0EzuAciKbU=) 12: WPjlp9q2_irNOFHbvH1KxHiPhtg.roa (hash: nGNubH07FwuuTBRkZu6sDa2SbPeua6Dt0ORJDlPOSMk=) 13: XVl9Jn76mWQ8ncaJ_wDuumCSFsA.roa (hash: Hs6XsuXHPXeVRFbGDUcPFLc6y5U4gwmlkZ/AR7/NeXE=) 14: h-WKTlUMQLOqlyLFoGBOWfk4OrY.roa (hash: ieHJu/E+ae+fHEeWcEYzkuUUaqlobiXz9aHuLMbuIyg=) 15: hscVJa1zcFdyUccI8x5yH0qcNiw.roa (hash: uNP1bqmcK4itRcnCcHmI+yjjtNKZn/HDFyPe+Myxey8=) 16: js8xc1HEU1XUI0sBZfF0bl5Ntsc.roa (hash: AdO5qS0u+S/3mUbxDukdjf7Jfxyoy7D8xgFedRy81VA=) 17: k_MSpCKVnChWzSccoFJBjl40Vo8.roa (hash: VdSgjLWna9h9svrbMMSXJmkEe/+wqNq0RNqZ0DwPUZc=) 18: xyAifHL4yJafsXbZXrkrgodDKkI.roa (hash: 5dlJ/03oKMrYHI2ijFPlXqVyiklmxqeJzGBSWajGiKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 18:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6d:95:9b:bf:25:c2:d2:b0:66:e6:88:23:76:99:58:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Sep 4 18:01:56 2026 GMT Not After : Sep 5 18:01:56 2026 GMT Subject: CN=0d814026f154672ccb121d0a8e55bbd8297c2a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4b:7a:7d:56:32:dd:69:ae:f1:7f:98:7b:d5: 5b:cf:fe:d3:40:09:56:22:f6:4d:2e:91:6f:ef:ff: 36:ee:af:be:e9:c6:43:7b:20:ac:16:20:49:4b:cc: b6:26:f6:67:01:b6:d5:e9:38:00:30:56:0e:24:00: e1:87:0b:28:86:74:a0:77:22:8f:40:5d:7e:b2:d4: 62:89:f3:3c:3a:2a:c5:72:d2:bf:8c:00:9a:20:54: 54:f4:fb:79:c2:48:c1:9f:76:c7:c1:e8:74:7a:b2: 1d:50:45:97:af:d0:6c:71:2b:a5:5f:fe:df:ac:2e: 5c:86:d1:79:90:22:37:04:19:e7:23:b8:36:12:00: ef:36:6b:70:1d:0a:c5:24:00:f8:6b:e0:12:a7:4c: 60:36:eb:94:7c:03:60:e1:3c:b8:46:3a:a7:f8:ac: e0:cc:54:ba:a7:7b:65:2f:06:b7:d9:2e:d4:05:73: 83:25:e9:15:c5:93:ed:d3:06:43:a3:04:fe:b7:9e: d4:49:24:f4:61:86:8d:4f:04:6b:5e:82:9e:2c:33: 99:9f:e5:9f:4b:6f:00:27:a0:7f:2f:3e:00:d5:58: a6:ff:ee:d8:f2:77:8b:b1:6b:7d:54:51:9e:25:84: 15:28:43:7c:ca:e2:3f:c8:6d:f3:fa:c3:9b:60:b2: a5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:81:40:26:F1:54:67:2C:CB:12:1D:0A:8E:55:BB:D8:29:7C:2A:52 X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ce:25:bd:4a:a7:31:93:42:67:b7:f8:f8:05:e1:5b:37:5f: 6a:55:68:39:5d:10:6a:07:05:1d:b2:99:84:bc:25:7b:6f:7c: db:d1:50:8b:28:73:8e:cd:24:39:84:7f:50:65:ad:bd:57:57: 61:23:78:06:41:2e:07:be:67:a3:2e:ed:ec:06:a8:82:91:20: b4:ce:b7:cf:e2:33:dd:9c:d2:d5:81:a5:a0:6a:89:b7:fa:2a: c9:be:34:b4:a7:26:e9:7a:00:f3:ce:ec:67:0a:fc:8d:ae:5a: d5:59:13:eb:d1:dd:de:67:a5:83:81:a1:50:3e:ef:5b:8d:92: 65:34:ec:a2:bb:e6:97:0b:6d:6a:b3:12:5f:e6:d4:d3:81:7e: c8:d8:bd:57:b0:5d:71:3c:c7:78:92:07:89:f0:52:a6:f2:28: bd:9b:2e:d3:2c:2d:cb:d0:f3:d5:4c:b5:95:f9:fc:50:f8:9c: c9:1f:29:00:4d:20:65:ea:6e:4e:87:ab:8c:fc:a2:a9:07:60: 72:40:98:52:ea:ab:bf:d7:14:b6:7e:f1:16:6a:7f:69:62:c2: 05:bf:39:11:9f:b3:30:76:88:c3:5c:04:c4:8c:22:be:df:d1: db:d4:09:1c:99:70:28:ee:79:e7:4f:c3:74:d9:e1:54:82:39: 4d:4b:c9:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBtlZu/JcLSsGbmiCN2mVi4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjYwOTA0MTgwMTU2WhcNMjYwOTA1MTgwMTU2WjAzMTEwLwYDVQQD EygwZDgxNDAyNmYxNTQ2NzJjY2IxMjFkMGE4ZTU1YmJkODI5N2MyYTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0t6fVYy3Wmu8X+Ye9Vbz/7TQAlW IvZNLpFv7/827q++6cZDeyCsFiBJS8y2JvZnAbbV6TgAMFYOJADhhwsohnSgdyKP QF1+stRiifM8OirFctK/jACaIFRU9Pt5wkjBn3bHweh0erIdUEWXr9BscSulX/7f rC5chtF5kCI3BBnnI7g2EgDvNmtwHQrFJAD4a+ASp0xgNuuUfANg4Ty4Rjqn+Kzg zFS6p3tlLwa32S7UBXODJekVxZPt0wZDowT+t57USST0YYaNTwRrXoKeLDOZn+Wf S28AJ6B/Lz4A1Vim/+7Y8neLsWt9VFGeJYQVKEN8yuI/yG3z+sObYLKlNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2BQCbxVGcsyxIdCo5Vu9gpfCpSMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAos4lvUqn MZNCZ7f4+AXhWzdfalVoOV0QagcFHbKZhLwle29829FQiyhzjs0kOYR/UGWtvVdX YSN4BkEuB75noy7t7AaogpEgtM63z+Iz3ZzS1YGloGqJt/oqyb40tKcm6XoA887s Zwr8ja5a1VkT69Hd3melg4GhUD7vW42SZTTsorvmlwttarMSX+bU04F+yNi9V7Bd cTzHeJIHifBSpvIovZsu0ywty9Dz1Uy1lfn8UPicyR8pAE0gZepuToerjPyiqQdg ckCYUuqrv9cUtn7xFmp/aWLCBb85EZ+zMHaIw1wExIwivt/R29QJHJlwKO5550/D dNnhVII5TUvJmA== -----END CERTIFICATE-----Generated at Sat Sep 5 04:48:09 2026 by rpki-client