$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft File: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json) Hash identifier: o3/wH8pwiZReLqofs4SRV2szsG1VUH5PD8X5WKQE3Xg= Subject key identifier: DD:F0:47:12:84:FD:10:2C:42:CA:F5:AB:61:BB:F5:30:BB:D3:60:F9 Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 019A0B25A778A83A8494B8CF3D4E7C298198 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft Manifest number: 1723 Signing time: Wed 22 Oct 2025 09:00:08 +0000 Manifest this update: Wed 22 Oct 2025 09:00:08 +0000 Manifest next update: Thu 23 Oct 2025 09:00:08 +0000 Files and hashes: 1: 05T5QjbJNc87hT4My9l-JdCX1h4.roa (hash: iWvw7hOFWKPo65JahFO85oDHfJOnZV1Mm2k2unmLhhE=) 2: 1RAZSq7_BCIXMPLmCNYBwnRPVeM.roa (hash: iP8JwzeV1htPI5dhx1UE8Z1vTHtvlA2uWPOR/wMsfgs=) 3: 5m85a6z_82pxvCFTAubCZE3IDRY.roa (hash: yTwyQOsGZdUMHgKCUc+pKc+Yl8K88OgV6IbbvGfhyYk=) 4: CmOI9SR69ovMKrxlDxbUWh5QUU0.roa (hash: ebd4rV/RF1OTbOXyyPqPuU0N5clQOOerkc0GReb1J2w=) 5: Cw3KSb4w5fVGO1h3Oj_H-hpchVg.roa (hash: uQeSPU2EF8IdzkDhENLmsFnhh9oxYjUNdNs+h74gmgY=) 6: JAH3IXMvbG6Ys2dPmwodnWJGeoI.roa (hash: Gw60ldKvXUBK2ktt+kjbpS50udL3AC6hPM4eFLUJXXw=) 7: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: DaVaYYxYFvmbQlG0JarSrqwKcY/ViMat1AOYsArrNFQ=) 8: OX7N03gSPb4sMX_V-5X6zyQ6WaA.roa (hash: BlJco9f8HDqfOjHCtNduALgKgBNAz1Kj7Oy3Vc4sp3s=) 9: WMM-Jj0p6VWzGlo6msh5tpjK74c.roa (hash: /4WO/iijr2ysoJfrqLnn3dB9+scGttOptVRk8eNo8H4=) 10: g4rTsZZ6qTMpSVPR-7TASI0eYf8.roa (hash: H0dCl0trInj59i3ls7vMuF/05FWvOMm7A3kIRBvL3Rw=) 11: h7K92qiMiWFLtkqLXfWLx7T3RS0.roa (hash: SXAVcoWGoZlytOpyw4bPPikyafW7og6IlMVyTr7sX3s=) 12: kojEemV1y3p1Ig0PF0Qwwmhe1Bs.roa (hash: Oye8rISWv3W8lfSMiPLOOdMEyDfiF8khVTUsBLT1Pro=) 13: oWWO6Pva3OKGYV4SbuU_A-N5y1U.roa (hash: wiPRw1JJ6JQ3Y/GXPGUGO3wdWm/JMB2trum1N3IbVAQ=) 14: pPQq_lolA8g8QxXqDDucDfwuETo.roa (hash: L1m+KNUP0y0o8T6Tj0pDmrtwsUBi0b51YKd4t4w0w/g=) 15: qhjSfnViRtAuJX9-HloVGl6e8yQ.roa (hash: 0c4CC/UoASiPziDV/ISjZ0Wa5pg6sbXo1QCcNSiEk04=) 16: sgjR_TQoyxizIzgpiP-8OxPCBvo.roa (hash: iPQU3YE5gJm0+Jc6VvldyH+AsK4ZTxvbcSdICCWexFM=) 17: wEmUsp4YHWLJBUqUou-fXnddnNI.roa (hash: mZCp4WYgBJMwxzFtP8EVDxeoQ9DuWh60+a4TXLeKQbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 08:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0b:25:a7:78:a8:3a:84:94:b8:cf:3d:4e:7c:29:81:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Oct 22 09:00:08 2025 GMT Not After : Oct 23 09:00:08 2025 GMT Subject: CN=ddf0471284fd102c42caf5ab61bbf530bbd360f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fe:7c:f5:b4:da:1f:8c:28:ec:ed:b6:27:2e: 96:79:1e:1d:8f:0d:7c:6a:e9:e0:02:a7:45:fd:e1: 54:be:17:65:79:ed:5d:48:f8:db:09:8e:14:b2:bb: 6a:8e:0e:58:55:4b:6d:2f:79:8f:c0:e7:b1:e8:bf: 4c:1c:52:f2:3a:65:b5:79:1d:7f:87:3d:b8:04:4e: c2:bd:e2:f3:44:11:68:b2:a1:f4:42:5a:2b:1c:67: 27:f0:7e:e1:c7:e8:65:54:fa:03:fa:38:fd:2d:fc: d5:e6:16:e7:3c:9f:c7:5f:3f:9c:08:ea:0e:61:7e: c0:8c:52:e6:ac:91:0e:28:7f:45:64:0e:63:22:05: a1:b0:2b:9a:be:36:13:29:66:b9:97:25:ea:54:bf: 1b:fb:8e:fe:88:f4:56:ce:5a:c5:c0:6e:8b:c3:c7: 3b:4e:fe:00:71:a7:bb:e9:ec:1f:4e:9c:8f:03:7f: b7:52:b9:98:f0:c4:81:81:10:58:9d:cd:83:51:fb: b1:7d:85:6e:f0:56:d8:3c:5c:92:93:4a:41:6e:e8: 29:29:38:46:5a:1a:1f:01:fa:62:d2:14:91:45:26: 07:f1:e3:53:b3:b5:18:11:85:29:bb:6d:46:a5:54: 74:1d:8a:09:71:13:1d:24:cc:9c:05:ed:2b:7f:25: 6a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F0:47:12:84:FD:10:2C:42:CA:F5:AB:61:BB:F5:30:BB:D3:60:F9 X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b8:6a:5c:2c:46:d9:e1:67:0d:75:56:35:a1:d9:a3:87:be: 06:a5:c1:ff:98:b4:42:c3:26:a7:aa:cc:bb:3f:c5:21:50:8a: 0f:7e:a3:49:de:10:59:89:98:e9:02:7d:4c:d8:14:64:6e:36: 20:57:12:aa:b3:c3:f2:4e:9e:19:8b:9f:75:f0:5c:5a:bc:93: 16:11:d0:62:05:31:93:99:1a:76:38:63:7b:3b:2b:1d:c4:a9: 96:0c:44:00:24:72:91:e3:af:59:e4:8a:ec:9c:41:60:ea:e3: 82:f1:61:e7:34:d7:7e:25:ef:cc:ca:f6:9c:e6:f4:54:54:fe: 2d:cf:cc:7f:97:35:21:b3:dd:b0:cc:64:af:17:38:06:91:d4: 96:df:6f:c9:29:3e:25:d1:c2:e1:b3:a2:76:02:c2:93:a5:40: 0e:7d:c3:f1:dd:5d:49:25:70:0d:ce:3c:3d:5f:38:f1:5e:00: 2f:40:91:37:d1:43:e8:09:8c:7b:08:1b:09:d6:82:0c:8a:68: 1a:50:1b:7b:1f:fa:e8:20:91:32:58:8a:f6:9b:63:18:d6:79: 3f:e3:dd:c1:bf:2b:99:0d:7a:af:61:5e:26:06:c0:3b:1d:b1: 6b:33:78:30:25:ee:93:64:3d:5b:57:02:7c:70:c5:38:1f:5b: 8a:b3:30:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoLJad4qDqElLjPPU58KYGYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjUxMDIyMDkwMDA4WhcNMjUxMDIzMDkwMDA4WjAzMTEwLwYDVQQD EyhkZGYwNDcxMjg0ZmQxMDJjNDJjYWY1YWI2MWJiZjUzMGJiZDM2MGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/589bTaH4wo7O22Jy6WeR4djw18 aungAqdF/eFUvhdlee1dSPjbCY4Usrtqjg5YVUttL3mPwOex6L9MHFLyOmW1eR1/ hz24BE7CveLzRBFosqH0QlorHGcn8H7hx+hlVPoD+jj9LfzV5hbnPJ/HXz+cCOoO YX7AjFLmrJEOKH9FZA5jIgWhsCuavjYTKWa5lyXqVL8b+47+iPRWzlrFwG6Lw8c7 Tv4Acae76ewfTpyPA3+3UrmY8MSBgRBYnc2DUfuxfYVu8FbYPFySk0pBbugpKThG WhofAfpi0hSRRSYH8eNTs7UYEYUpu21GpVR0HYoJcRMdJMycBe0rfyVqawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3wRxKE/RAsQsr1q2G79TC702D5MB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7hqXCxG 2eFnDXVWNaHZo4e+BqXB/5i0QsMmp6rMuz/FIVCKD36jSd4QWYmY6QJ9TNgUZG42 IFcSqrPD8k6eGYufdfBcWryTFhHQYgUxk5kadjhjezsrHcSplgxEACRykeOvWeSK 7JxBYOrjgvFh5zTXfiXvzMr2nOb0VFT+Lc/Mf5c1IbPdsMxkrxc4BpHUlt9vySk+ JdHC4bOidgLCk6VADn3D8d1dSSVwDc48PV848V4AL0CRN9FD6AmMewgbCdaCDIpo GlAbex/66CCRMliK9ptjGNZ5P+Pdwb8rmQ16r2FeJgbAOx2xazN4MCXuk2Q9W1cC fHDFOB9birMwLA== -----END CERTIFICATE-----Generated at Wed Oct 22 12:36:19 2025 by rpki-client