$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft File: jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft (raw, json) Hash identifier: rfW01oVp/3hOlDk4Z7+mN2y50VCQZHX6YNm9LGtc3cY= Subject key identifier: 50:F6:B8:55:41:4D:9C:2B:BA:E6:0E:E3:1C:C0:57:B1:7D:1D:9C:DB Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24 Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624 Certificate serial: 01987F0A790FCF051C29C4E762A2E4474BFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft Manifest number: 0F04 Signing time: Wed 06 Aug 2025 11:00:49 +0000 Manifest this update: Wed 06 Aug 2025 11:00:49 +0000 Manifest next update: Thu 07 Aug 2025 11:00:49 +0000 Files and hashes: 1: 0JcOAjVYzD7ATTRTY6zM_FW7ibk.roa (hash: ae6zh695aCdxOBAb92vW9Mqs/ewqcDH7wayEClXo5lU=) 2: 1-Y2dKMtSX_HHImXALZ9Ywq-mBt0.roa (hash: 7qyTbmtwccyXrpltxd1wqJPnd+/MFLmBgiiCsu8AQkU=) 3: 2QTRX3rMARDGeCqwmM0inJSU1I8.roa (hash: JqKkV8sJ2151XjqigefJVjz+CjQivqO6Q6p2fwfafME=) 4: 9fRtydBjgnhbFaykZOo5uuxjF38.roa (hash: RH3Om+bNuUzjZrbi9dURSTYAb514YDgcJdJj7pg2lZE=) 5: EY7ogwruZGSD63obEpUnqn0nkuo.roa (hash: eHBlu7ijObgowuU+joBjfNNXkGVZmY2eT3u/EnffphU=) 6: HJWy01pqJrtg2Vo5SudbPdEEkd4.roa (hash: Vr6k9Sg54f+U5YuclxncYArpuGy+CEnoAy/c+X99oH4=) 7: IYKB-HSEiCq4O7HvrSnxClTqE4I.roa (hash: HbfqesX7Z3CjfGeH5MdNYm5FcZQ54JXRPRk/orWo/qA=) 8: PT8j9eHtg5ttD87ZTwg2GzdumEg.roa (hash: 6rQ85ph5sdL+xNggsMfKZpzXGn+sK3MhYgm3m97nS/I=) 9: ZlUjZQcl9nR0SUVxsgzMhtk30HU.roa (hash: RueFoN4i6RiouAbfwEgZPqUPq4WVTXhPv6TjG8c7n5M=) 10: _K57y8dAfTW_4za5nQ1yw_fKnZI.roa (hash: Rymw72FXGoLgMvCj/WyEf1Es/Ms+t2XEE94XwkN2BgM=) 11: aAifBze_JXbbUHJNy418NFONnUo.roa (hash: rLLARXHfwNDLekNJ80A4f1i0LwTr3pN9Pr1HKxuL2t0=) 12: foR2m61HjPqfHMhA9Ix6Kf8yr6M.roa (hash: maf/3FkUEYfY53s6cIQgES3ADrhkolDvLrwLZz7ie3E=) 13: hiMcEIjHUWN5FsB7VlVyAr5izXE.roa (hash: 6yVp6mlnWSD0tIxqmD2GQ7svu30uQXkMfzEBlI3SWXo=) 14: jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl (hash: 6E76ul9IcmKnnJpJxs9XYf9coIEHlW3B9k7Kvhl+sgM=) 15: mXX0pAjU5w8oM8Kw23jhrgx4Wvk.roa (hash: sc8dapOFwgxs0Xrg6eWIDXxwfzY184TsGMxeq92yyGI=) 16: n6GY6nhHcoa0i71n9z3Kf0E5GzM.roa (hash: Me/0EA7Rht6WqGCPixbImbKQNas49LNlvd3ekV4eUbM=) 17: o0ZwaYj89qD05J13n0pZ23X4IIA.roa (hash: Y8iKBwsONnOxQpFezT8Qy8hc9RHNcwVnuvC+XOuLtNY=) 18: ySGM40xeAZyu32ERIMnkJoio4hw.roa (hash: w5mMTd2fQSF1PurNOaDTdU1aGhD+Vitko+NZO/EWYYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 08:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7f:0a:79:0f:cf:05:1c:29:c4:e7:62:a2:e4:47:4b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624 Validity Not Before: Aug 6 11:00:49 2025 GMT Not After : Aug 7 11:00:49 2025 GMT Subject: CN=50f6b855414d9c2bbae60ee31cc057b17d1d9cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:01:7d:45:03:3e:27:ed:4e:92:ab:77:26:95: 0e:4d:32:df:9e:84:6e:05:3a:64:b5:01:fb:82:b4: 73:5f:6e:77:b6:29:dc:2b:f5:ca:5b:44:47:f1:d7: 28:16:92:8b:a8:8c:fc:4b:9d:32:61:78:f7:1e:25: 7a:4f:58:42:55:aa:1a:07:a6:ab:5d:77:0b:49:1d: 26:82:28:dd:e1:8f:cf:c5:fc:55:49:40:c2:ed:23: 81:92:69:d9:64:7a:a3:dc:06:fb:9a:e5:ed:01:7c: 02:1e:81:a2:ca:f9:91:cf:4d:a7:7f:80:1c:0d:0a: fe:79:c8:58:06:ab:dc:ce:df:59:f8:44:85:cc:a6: 15:7a:e7:cc:72:ce:f5:87:36:52:6d:eb:21:c8:98: a9:63:8b:eb:7c:50:3a:ba:be:e1:de:60:88:c7:3d: 9a:cc:28:3e:b9:b6:85:db:e4:57:17:d5:02:d8:ab: 9f:8e:42:37:d2:88:18:22:bd:ea:94:25:bf:49:e7: 29:6b:55:78:f4:68:55:9c:7d:c5:d1:14:90:e4:cc: ff:ad:f9:95:1f:b6:cf:52:4c:4b:d3:93:80:82:c8: 57:af:91:db:c5:df:5c:13:c5:b7:90:e0:31:2a:b6: fd:88:96:3a:46:37:bb:b9:19:d1:65:ae:c0:54:e6: f9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F6:B8:55:41:4D:9C:2B:BA:E6:0E:E3:1C:C0:57:B1:7D:1D:9C:DB X509v3 Authority Key Identifier: keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c7:a9:36:43:2a:ec:89:d6:26:5b:f8:d7:23:94:e4:14:6c: a1:06:62:80:fe:cf:5c:2f:d1:0c:16:cb:4c:5c:9e:99:87:72: 61:48:83:ae:64:8a:75:65:a9:07:9d:df:9f:4e:84:0f:16:e7: 9c:a1:a4:23:5b:89:91:b0:2f:de:33:a3:be:47:50:39:17:a6: 2e:9d:29:a4:d4:0c:fe:f9:31:c1:24:0f:bb:fe:80:bc:81:1e: 28:d3:6e:2c:01:f7:ba:b8:df:0b:63:80:b5:04:5a:af:8f:d1: a8:bd:98:77:ef:b3:9f:d4:75:cc:78:93:1d:73:98:fd:46:50: a3:dd:48:9e:b7:06:f4:53:d7:59:9c:f2:e4:d9:1b:0d:d4:35: 71:9d:e6:af:f2:7a:bb:d0:b4:10:d1:d3:16:73:bb:e3:40:11: 65:9e:e8:ca:37:6a:ba:ea:9e:6e:d3:7d:12:cf:7f:60:7b:cb: 87:1f:29:41:1e:4a:a7:02:eb:c5:51:26:b2:dc:0b:53:b5:8e: f5:08:95:64:5d:f8:ab:d2:dd:7e:34:46:df:0e:33:62:e4:45: 11:f0:c6:75:d9:a9:15:cd:9c:68:2e:fa:47:64:1a:a7:22:10: 36:ad:4d:66:af:86:51:59:45:83:04:33:29:6f:30:85:ee:93: c3:12:83:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh/CnkPzwUcKcTnYqLkR0v7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjI2YzkwOWViNDk1MTE1NGJjZWU4MjIxZTQzOTUxYjQy NTc2MjQwHhcNMjUwODA2MTEwMDQ5WhcNMjUwODA3MTEwMDQ5WjAzMTEwLwYDVQQD Eyg1MGY2Yjg1NTQxNGQ5YzJiYmFlNjBlZTMxY2MwNTdiMTdkMWQ5Y2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAF9RQM+J+1Okqt3JpUOTTLfnoRu BTpktQH7grRzX253tincK/XKW0RH8dcoFpKLqIz8S50yYXj3HiV6T1hCVaoaB6ar XXcLSR0mgijd4Y/PxfxVSUDC7SOBkmnZZHqj3Ab7muXtAXwCHoGiyvmRz02nf4Ac DQr+echYBqvczt9Z+ESFzKYVeufMcs71hzZSbeshyJipY4vrfFA6ur7h3mCIxz2a zCg+ubaF2+RXF9UC2KufjkI30ogYIr3qlCW/Secpa1V49GhVnH3F0RSQ5Mz/rfmV H7bPUkxL05OAgshXr5Hbxd9cE8W3kOAxKrb9iJY6Rje7uRnRZa7AVOb5rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFD2uFVBTZwruuYO4xzAV7F9HZzbMB8GA1UdIwQY MBaAFI5ibJCetJURVLzugiHkOVG0JXYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAt ZTk3ZDFkMDIyMGFmLzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAtZTk3ZDFkMDIyMGFm LzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScepNkMq 7InWJlv41yOU5BRsoQZigP7PXC/RDBbLTFyemYdyYUiDrmSKdWWpB53fn06EDxbn nKGkI1uJkbAv3jOjvkdQORemLp0ppNQM/vkxwSQPu/6AvIEeKNNuLAH3urjfC2OA tQRar4/RqL2Yd++zn9R1zHiTHXOY/UZQo91InrcG9FPXWZzy5NkbDdQ1cZ3mr/J6 u9C0ENHTFnO740ARZZ7oyjdquuqebtN9Es9/YHvLhx8pQR5KpwLrxVEmstwLU7WO 9QiVZF34q9LdfjRG3w4zYuRFEfDGddmpFc2caC76R2QapyIQNq1NZq+GUVlFgwQz KW8whe6TwxKDTQ== -----END CERTIFICATE-----Generated at Wed Aug 6 14:19:59 2025 by rpki-client