$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft File: JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json) Hash identifier: W7gouIudUMBf36RJ+CDNHb1xCJCtG3bv+fJSvL4wroE= Subject key identifier: 4C:38:CF:A3:60:21:ED:DA:5E:36:39:F0:06:42:DD:7A:3E:CB:94:C5 Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019A48F84BD9A5969151E8DEF6E4FCA1958F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft Manifest number: 1455 Signing time: Mon 03 Nov 2025 09:07:03 +0000 Manifest this update: Mon 03 Nov 2025 09:07:03 +0000 Manifest next update: Tue 04 Nov 2025 09:07:03 +0000 Files and hashes: 1: 3vNWcma8J3Yvm292bxcQMk9IMAg.roa (hash: 9vjWGwLIurMfDLhl3LmcOyaHZd6c7cfwMEUeIRekeL8=) 2: AIXPYVOLD4vG7-idW3xSmEYba3M.roa (hash: 0OO+kwQPJqN6G5I1BOBQWzk/kW2juMQTjTkhmJKwZ20=) 3: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: X0aJc4A6lUX7lo0ioRrwEoUtTN3xxrfU5wDU4HrpOdw=) 4: Lf6vcZM6E_1tP6o7doX949DnBIU.roa (hash: vbI3En+9WdVKNiswwjg34zuVUz/MYD/WjfUCcdABxHk=) 5: Sj-_RnC34ecuvBpc0rCzlEDa7pg.roa (hash: phaHK5TmaT8HFSOfZpT3D2+yYeLJ3Irl7+kbC/pKRPc=) 6: Um1PZhGXZ7KzU5zkJ2mBWgRYing.roa (hash: r8yw/kx6PR2QiDWv/zH9T6r2Gmbp9EAyZ7zdCGmWEQY=) 7: YhneglxU-YMRltelD3FSRlJ3Zwc.roa (hash: Ncwlfcg8RLjA+nxHVjFBtQFwEe7HoERaw1MC4MeS+rw=) 8: hkaTE_7fhGUYELRP9AaJ9bAo5bk.roa (hash: KOzsqvok3H5PfVWyF9U8nn9XFXetQgaoM4WrEbmzfjU=) 9: mUfMEaQY8q1gZSjzSxi9XIGiseQ.roa (hash: gaddKtYUZyG4gzalDVZzomDqdepgC8Jfd8AVgvRc31g=) 10: pMqUwUEJddGWKKqQVHPSNc54I3U.roa (hash: 9otKMlkOWPjl+ohEgrVjfmE34jwVivopD8ptau8msv8=) 11: sF1coaLwpjJ9ERbX0K6NN9sGsfY.roa (hash: yKfJfqMuiWBIftmEax6OGMuhlaUME2Z3bSqwXVLFaTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Nov 2025 09:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:48:f8:4b:d9:a5:96:91:51:e8:de:f6:e4:fc:a1:95:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Nov 3 09:07:03 2025 GMT Not After : Nov 4 09:07:03 2025 GMT Subject: CN=4c38cfa36021edda5e3639f00642dd7a3ecb94c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d0:0a:b6:04:24:fe:59:d9:1c:a4:dd:47:4a: a3:c5:01:84:84:57:fe:3a:04:b5:80:67:8f:c3:6d: c9:1d:79:c5:3f:be:fb:e9:35:af:61:8f:a2:3b:a2: e2:f9:c0:21:95:ea:b0:4d:a3:5c:10:ae:77:51:ab: c1:fb:65:57:8a:c6:11:75:9e:30:b1:26:bf:48:23: f0:2a:51:85:d1:5a:86:f9:15:f9:d2:9f:10:6c:d8: 87:a2:44:9c:07:f9:3a:94:46:5b:50:1e:ee:f8:e4: 57:65:09:ec:aa:b2:42:0f:c9:ee:6e:d4:4c:9f:86: 2c:f3:e5:7f:46:d8:4f:6b:2e:ad:c8:9d:3d:f7:21: c7:83:85:a5:f6:a3:36:a9:de:99:ed:f1:70:1a:d4: 31:76:a3:a2:80:29:d5:1e:e9:cd:44:ce:c2:f8:a5: 8c:a8:60:ce:43:47:1d:ec:c1:81:3f:6c:dc:e0:b5: c9:73:ec:c9:52:9e:9a:cc:5d:65:65:ca:b2:e5:e3: d6:9e:a5:92:2f:82:2b:71:e2:7f:65:7f:1f:79:69: f4:09:ef:20:62:37:10:8b:0c:57:9a:67:b9:89:97: 7a:55:6d:c0:12:ae:f3:10:ac:3b:c2:70:3e:86:cc: 66:39:0b:f7:83:a2:94:3b:dc:50:d7:d4:16:cf:5c: a9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:38:CF:A3:60:21:ED:DA:5E:36:39:F0:06:42:DD:7A:3E:CB:94:C5 X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:44:60:fa:13:87:9a:17:9b:af:ba:c9:12:b3:20:55:be:b2: 58:10:35:31:90:80:da:b1:08:7a:14:f9:13:19:02:bc:cd:92: e8:03:0c:cf:e7:77:29:1d:bd:0e:36:83:fd:e0:ca:c3:fb:ee: 37:7a:db:87:98:15:47:15:49:08:cc:25:3e:9e:d1:e0:c9:de: d8:66:fc:14:73:e3:99:33:22:e2:0c:47:ae:81:f0:62:e0:6b: c7:64:8e:53:49:c9:5f:74:fa:fd:27:22:6b:65:72:9f:ee:b1: 5c:8d:ca:1f:a4:ba:42:04:0e:48:b3:14:68:6a:a8:ce:d5:13: f2:db:64:1e:0d:a2:6d:58:ed:d0:2a:5d:0a:0c:77:38:86:68: 27:d0:6e:92:c7:61:26:0d:d6:cb:be:fb:11:da:cb:92:21:94: c2:b7:f5:a8:60:6d:d1:6c:07:d8:db:eb:a4:21:a3:88:f1:54: aa:49:00:ab:be:8f:ba:51:9e:d6:5d:45:d0:18:b9:cf:da:a7: 02:97:1d:8a:2b:2c:b8:95:eb:0f:45:0e:b8:48:f6:ba:3a:86: 53:99:7c:14:71:6f:32:2a:74:aa:c9:94:9c:da:b9:33:2e:d3: c1:d5:03:fd:36:31:a6:7a:2d:de:db:4d:ea:df:5c:c2:d8:30: 6c:fe:b1:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpI+EvZpZaRUeje9uT8oZWPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjUxMTAzMDkwNzAzWhcNMjUxMTA0MDkwNzAzWjAzMTEwLwYDVQQD Eyg0YzM4Y2ZhMzYwMjFlZGRhNWUzNjM5ZjAwNjQyZGQ3YTNlY2I5NGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNAKtgQk/lnZHKTdR0qjxQGEhFf+ OgS1gGePw23JHXnFP7776TWvYY+iO6Li+cAhleqwTaNcEK53UavB+2VXisYRdZ4w sSa/SCPwKlGF0VqG+RX50p8QbNiHokScB/k6lEZbUB7u+ORXZQnsqrJCD8nubtRM n4Ys8+V/RthPay6tyJ099yHHg4Wl9qM2qd6Z7fFwGtQxdqOigCnVHunNRM7C+KWM qGDOQ0cd7MGBP2zc4LXJc+zJUp6azF1lZcqy5ePWnqWSL4IrceJ/ZX8feWn0Ce8g YjcQiwxXmme5iZd6VW3AEq7zEKw7wnA+hsxmOQv3g6KUO9xQ19QWz1ypuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEw4z6NgIe3aXjY58AZC3Xo+y5TFMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkRg+hOH mhebr7rJErMgVb6yWBA1MZCA2rEIehT5ExkCvM2S6AMMz+d3KR29DjaD/eDKw/vu N3rbh5gVRxVJCMwlPp7R4Mne2Gb8FHPjmTMi4gxHroHwYuBrx2SOU0nJX3T6/Sci a2Vyn+6xXI3KH6S6QgQOSLMUaGqoztUT8ttkHg2ibVjt0CpdCgx3OIZoJ9Buksdh Jg3Wy777EdrLkiGUwrf1qGBt0WwH2NvrpCGjiPFUqkkAq76PulGe1l1F0Bi5z9qn ApcdiissuJXrD0UOuEj2ujqGU5l8FHFvMip0qsmUnNq5My7TwdUD/TYxpnot3ttN 6t9cwtgwbP6xMw== -----END CERTIFICATE-----Generated at Mon Nov 3 16:11:52 2025 by rpki-client