$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft File: jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft (raw, json) Hash identifier: RkSj9uH7qyxatzgqZyUyPdTaOqm72BiIdUFkoIL2+PI= Subject key identifier: 84:72:12:FD:3A:DE:D1:78:78:6A:99:85:94:B6:78:0D:02:FA:E8:CC Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24 Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624 Certificate serial: 019776407DDB069679A713A82ADB534D45AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft Manifest number: 0E7A Signing time: Mon 16 Jun 2025 01:00:27 +0000 Manifest this update: Mon 16 Jun 2025 01:00:27 +0000 Manifest next update: Tue 17 Jun 2025 01:00:27 +0000 Files and hashes: 1: 0JcOAjVYzD7ATTRTY6zM_FW7ibk.roa (hash: ae6zh695aCdxOBAb92vW9Mqs/ewqcDH7wayEClXo5lU=) 2: 1-Y2dKMtSX_HHImXALZ9Ywq-mBt0.roa (hash: 7qyTbmtwccyXrpltxd1wqJPnd+/MFLmBgiiCsu8AQkU=) 3: 2QTRX3rMARDGeCqwmM0inJSU1I8.roa (hash: JqKkV8sJ2151XjqigefJVjz+CjQivqO6Q6p2fwfafME=) 4: 7UYDYjcK9QG1kAzAVdRISMcK0fw.roa (hash: sob5MfrYBgiKx+YfOtoKRqwcLnr1PeTeNg0kII/WuRY=) 5: 9fRtydBjgnhbFaykZOo5uuxjF38.roa (hash: RH3Om+bNuUzjZrbi9dURSTYAb514YDgcJdJj7pg2lZE=) 6: EY7ogwruZGSD63obEpUnqn0nkuo.roa (hash: eHBlu7ijObgowuU+joBjfNNXkGVZmY2eT3u/EnffphU=) 7: HJWy01pqJrtg2Vo5SudbPdEEkd4.roa (hash: Vr6k9Sg54f+U5YuclxncYArpuGy+CEnoAy/c+X99oH4=) 8: IYKB-HSEiCq4O7HvrSnxClTqE4I.roa (hash: HbfqesX7Z3CjfGeH5MdNYm5FcZQ54JXRPRk/orWo/qA=) 9: PT8j9eHtg5ttD87ZTwg2GzdumEg.roa (hash: 6rQ85ph5sdL+xNggsMfKZpzXGn+sK3MhYgm3m97nS/I=) 10: ZlUjZQcl9nR0SUVxsgzMhtk30HU.roa (hash: RueFoN4i6RiouAbfwEgZPqUPq4WVTXhPv6TjG8c7n5M=) 11: _K57y8dAfTW_4za5nQ1yw_fKnZI.roa (hash: Rymw72FXGoLgMvCj/WyEf1Es/Ms+t2XEE94XwkN2BgM=) 12: aAifBze_JXbbUHJNy418NFONnUo.roa (hash: rLLARXHfwNDLekNJ80A4f1i0LwTr3pN9Pr1HKxuL2t0=) 13: fyVTS8KnNLJLAvMPXFhguHqf8wg.roa (hash: rK8pnbIqXHxeMFgFBrhTIo/gwpafsDBMMFa/tGIcB3c=) 14: g6TYrOiqfeY_zc4wZ63S9GaTHtA.roa (hash: McFJsvyZf/CJB69UHaeJLyOzFI33CZnDxz9asvMb9+k=) 15: hiMcEIjHUWN5FsB7VlVyAr5izXE.roa (hash: 6yVp6mlnWSD0tIxqmD2GQ7svu30uQXkMfzEBlI3SWXo=) 16: jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl (hash: qp9aZNnwNGDU2qbLGJ8B0yeAFxucW+x1dMBjuHAkSg8=) 17: mXX0pAjU5w8oM8Kw23jhrgx4Wvk.roa (hash: sc8dapOFwgxs0Xrg6eWIDXxwfzY184TsGMxeq92yyGI=) 18: o0ZwaYj89qD05J13n0pZ23X4IIA.roa (hash: Y8iKBwsONnOxQpFezT8Qy8hc9RHNcwVnuvC+XOuLtNY=) 19: ySGM40xeAZyu32ERIMnkJoio4hw.roa (hash: w5mMTd2fQSF1PurNOaDTdU1aGhD+Vitko+NZO/EWYYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:76:40:7d:db:06:96:79:a7:13:a8:2a:db:53:4d:45:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624 Validity Not Before: Jun 16 01:00:27 2025 GMT Not After : Jun 17 01:00:27 2025 GMT Subject: CN=847212fd3aded178786a998594b6780d02fae8cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:ae:2d:0c:a4:19:9b:2d:1a:08:8c:e8:fb: b9:ba:76:bc:5a:12:60:fd:c9:da:0c:0f:00:b7:a5: e0:66:ad:f4:3e:69:9d:84:b8:04:bc:62:25:4f:a5: 72:f9:d4:89:cf:02:4a:8d:07:ee:17:da:88:a8:1c: 42:42:0c:53:a2:8f:94:e1:59:41:a5:70:f7:89:ed: 3c:b6:8a:51:3d:de:f2:bd:3f:08:76:96:7f:af:2d: e8:4a:65:5e:be:ec:f1:1f:b7:6f:59:14:e6:83:6a: 56:c1:d2:27:f6:52:ea:87:3a:e4:96:2a:ce:18:f4: a6:21:f2:96:f4:97:c5:ee:a0:7c:f4:09:1c:b1:89: a8:92:5e:aa:2f:80:a7:cf:d7:17:0b:87:6b:1e:c9: c7:c1:e5:a4:a9:12:cc:fa:a4:b0:2c:de:bd:8a:b5: ac:ac:cc:95:c1:1e:39:60:9b:84:8f:5a:4a:f2:d4: 0d:dd:ea:21:9c:fa:b3:b0:a2:3f:6f:f9:01:d2:92: d3:13:ee:01:ba:01:22:73:22:cb:c6:d2:ad:85:ab: 02:52:68:40:c2:26:59:8d:ab:4b:cb:5d:1f:17:14: 4b:24:7a:77:d9:2e:26:f8:af:37:be:97:6f:19:a7: 80:41:85:94:f7:98:13:20:5c:17:c9:d8:7b:d8:ea: 06:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:72:12:FD:3A:DE:D1:78:78:6A:99:85:94:B6:78:0D:02:FA:E8:CC X509v3 Authority Key Identifier: keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:3b:c1:4d:6e:27:e8:37:f2:00:16:07:7a:a7:ab:87:98:4a: 3b:79:7b:36:52:c6:a6:c8:98:c8:23:d7:09:3d:18:7e:95:31: 0a:a9:f4:95:0b:27:7f:37:e6:90:3b:2c:eb:2f:f3:54:cb:ba: 3c:e3:c5:a6:84:f5:38:9b:78:72:ed:af:38:21:a7:85:b7:26: 2f:d2:1a:e1:06:57:47:2c:64:07:83:7d:b1:32:c5:f9:a8:b5: f3:14:88:4d:17:b2:d9:ff:58:f4:cf:ed:a1:93:78:0b:85:5d: 2f:c2:99:45:a1:4c:fa:af:33:c8:eb:21:6f:ed:8f:00:03:07: b8:13:d3:a4:f3:e5:68:3f:c5:12:4d:f3:64:71:7f:99:86:7f: 72:8d:db:c7:43:2a:99:68:ef:7d:f5:ed:18:f6:1c:ce:bd:91: 0e:4c:37:1e:3a:2d:a4:61:0b:0c:b2:b2:c0:fe:49:98:fc:a4: 95:65:58:bf:14:1c:6d:3f:88:5b:34:ad:56:d0:b1:40:db:a5: 77:56:62:66:9b:07:bc:6d:ee:15:c6:f0:28:98:56:80:ef:d5: 82:b2:3c:bd:5d:e2:af:de:ad:11:aa:d3:e6:bd:49:d9:09:eb: 5d:49:3d:99:75:f0:ac:7e:45:d9:3f:96:96:3b:a8:63:05:77: f2:ca:94:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd2QH3bBpZ5pxOoKttTTUWrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjI2YzkwOWViNDk1MTE1NGJjZWU4MjIxZTQzOTUxYjQy NTc2MjQwHhcNMjUwNjE2MDEwMDI3WhcNMjUwNjE3MDEwMDI3WjAzMTEwLwYDVQQD Eyg4NDcyMTJmZDNhZGVkMTc4Nzg2YTk5ODU5NGI2NzgwZDAyZmFlOGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTauLQykGZstGgiM6Pu5una8WhJg /cnaDA8At6XgZq30PmmdhLgEvGIlT6Vy+dSJzwJKjQfuF9qIqBxCQgxToo+U4VlB pXD3ie08topRPd7yvT8IdpZ/ry3oSmVevuzxH7dvWRTmg2pWwdIn9lLqhzrklirO GPSmIfKW9JfF7qB89AkcsYmokl6qL4Cnz9cXC4drHsnHweWkqRLM+qSwLN69irWs rMyVwR45YJuEj1pK8tQN3eohnPqzsKI/b/kB0pLTE+4BugEicyLLxtKthasCUmhA wiZZjatLy10fFxRLJHp32S4m+K83vpdvGaeAQYWU95gTIFwXydh72OoG0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRyEv063tF4eGqZhZS2eA0C+ujMMB8GA1UdIwQY MBaAFI5ibJCetJURVLzugiHkOVG0JXYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAt ZTk3ZDFkMDIyMGFmLzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAtZTk3ZDFkMDIyMGFm LzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDvBTW4n 6DfyABYHeqerh5hKO3l7NlLGpsiYyCPXCT0YfpUxCqn0lQsnfzfmkDss6y/zVMu6 POPFpoT1OJt4cu2vOCGnhbcmL9Ia4QZXRyxkB4N9sTLF+ai18xSITRey2f9Y9M/t oZN4C4VdL8KZRaFM+q8zyOshb+2PAAMHuBPTpPPlaD/FEk3zZHF/mYZ/co3bx0Mq mWjvffXtGPYczr2RDkw3HjotpGELDLKywP5JmPyklWVYvxQcbT+IWzStVtCxQNul d1ZiZpsHvG3uFcbwKJhWgO/VgrI8vV3ir96tEarT5r1J2QnrXUk9mXXwrH5F2T+W ljuoYwV38sqUuw== -----END CERTIFICATE-----Generated at Mon Jun 16 09:17:45 2025 by rpki-client