$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft File: JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json) Hash identifier: m20JeQ7OBuoMsdz6Kf4hpuYbMRPXHUzfJRVAjTZQIoM= Subject key identifier: A8:ED:08:76:90:8E:E7:98:01:AE:20:A3:DF:D1:C3:B5:26:B9:55:B2 Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 019EC0DB3F149FC06FDDC1878D1F6116D8B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft Manifest number: 1698 Signing time: Sat 13 Jun 2026 12:00:54 +0000 Manifest this update: Sat 13 Jun 2026 12:00:54 +0000 Manifest next update: Sun 14 Jun 2026 12:00:54 +0000 Files and hashes: 1: CkpruVXBRC35FNzBxsHtHzElTcQ.roa (hash: M8G0Fw/AyLb57D4pQj+p7wHrZ6ZAg2uq5cvqL/37hsU=) 2: DASfpt6NusBMafxKXMbsXkknaLs.roa (hash: 7Q1f4G/K2mV4OPswZej+EeWKFQMe4TLAgeu5GM1kraI=) 3: ESMuZH3p8eZcfxjSdFlU49_G9BY.roa (hash: eU/RIl1p7nycsadiq5D1MCtC0gJOFnvD+JDmCJY+OA8=) 4: H4PmoPs09fxsoMyeNbvcLTDl7tg.roa (hash: g6se6YwWnPf1EHgnkVuLefIVI+viGWgQPBM+Zec15uI=) 5: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: NT4qvBZwrqHbBMTkFzlxa2RP3YvQHEad0WsuqqRzKlA=) 6: VHgUN5juRzMz3CUHZPoEHnzr2z0.roa (hash: VXSqzrkX+ABn4jZnd4wHdBjnPgDeVeSEP9mmDyjcGMQ=) 7: WuM6D54bD9ZW12al4cadO05OlhA.roa (hash: KSoGE/L4hSg6At0Y5RkAFE3o/b5P/zSmERN2VFp1fMQ=) 8: Y-rwo6ja1_SXsDsjjZenySjEjo8.roa (hash: ZsKC9kHfKh+n+8/Xir5wlK+HjS6IcJLLArYCrxMRmAk=) 9: fRUNIQ1_jYWQdZrSZ4luryAQJDQ.roa (hash: ty6oOnSu+ZODj+9+2x+cpkE7v0JL9rnydZY11LzAwgQ=) 10: jTbrb1TbwgaHuVljIE6syUVcGbE.roa (hash: 1xz+1g5hD0xQyll98W3vSqycYShnYZQgn+0XxOIFh6g=) 11: lNSsiMsgFC3PSDwg_wipOCI36Sc.roa (hash: T+M2rwciKN++pJU4zsuNLc+4agGsiYLXoX3H/Bds62g=) 12: nMpaMbGEzj2Jpg2_GxE2xYc0pUI.roa (hash: Fv1RC7bFvxKYKp89cN52GIHsD0MHml/fLyyWKSWO5/k=) 13: rjPbS80wLPhwF4ETCKbrHWAdxvw.roa (hash: 0e9ndNtpFQMzhAU9T854jFmEVmFNvWMXh2KdMpHi8jk=) 14: sIpLAsGB9mg0zFG4d5238KgCd4k.roa (hash: eXcSiBlROOdcbS6oOwKQciaqtXn9irVYQuDWrvrFA6s=) 15: shMgILdrcRQ_LG-B1Njv0tFtwKY.roa (hash: VrnYEoqsCXqMeGOK7nN9tJcwMBHTSx98wiR1emp3pqQ=) 16: spxPuR8xyj72SKO00nWmxiu9tv8.roa (hash: j68QBUE3gzuvtf320646B+hARt3MiGgu/5WZ8oVBSpA=) 17: ufjaDLPum5mRkBKXDuMb146baHg.roa (hash: oNF4RqIC9pQOPmU+xyL4C1SBlQau5hDsBq8wufytphI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c0:db:3f:14:9f:c0:6f:dd:c1:87:8d:1f:61:16:d8:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Jun 13 12:00:54 2026 GMT Not After : Jun 14 12:00:54 2026 GMT Subject: CN=a8ed0876908ee79801ae20a3dfd1c3b526b955b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:51:ee:fb:cf:ac:e0:37:85:70:25:c3:6b:51: 7f:06:35:d2:92:68:3b:fa:8f:34:72:c3:a1:26:a5: 9e:d7:63:12:23:c2:cc:7a:32:eb:1f:55:3d:d0:c8: 5e:5f:55:c8:6f:85:86:7f:6a:06:cc:c1:85:7a:96: 32:11:1d:b1:e4:d7:10:00:28:d3:e0:d3:27:69:ba: 3c:01:19:05:57:79:17:df:f2:5d:52:d1:c3:1f:ab: 3b:b6:81:66:4d:75:ec:9c:3c:e8:d5:c3:d2:39:f2: 29:33:38:2c:49:e1:ba:97:dd:1e:49:a6:69:69:8e: 8f:02:cc:38:ca:94:0e:23:39:f6:f8:c5:92:48:f7: 17:8c:bc:91:bc:53:98:85:ca:72:f3:99:d4:4a:bc: 99:53:28:8f:ea:38:24:e9:e1:7b:c6:88:a2:9f:f5: 0e:1d:c0:0c:4a:07:26:c5:e0:be:ff:ef:a6:c0:8b: c6:d7:81:8d:3a:0e:3d:b6:50:a0:4e:d7:65:63:e7: 13:e2:99:3c:39:0d:85:1a:19:8d:b5:f0:49:9b:b7: 84:7b:7b:3b:35:2b:ac:a7:13:47:d8:7b:e6:82:7d: 0b:77:7c:ed:ad:65:29:d9:de:c3:02:53:0f:e7:77: 26:44:75:16:15:d9:16:12:f7:f0:94:3a:9a:f9:41: e2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:ED:08:76:90:8E:E7:98:01:AE:20:A3:DF:D1:C3:B5:26:B9:55:B2 X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:2b:dd:d9:1c:8b:bf:c2:ed:1f:9d:17:bd:53:bc:18:a2:71: 2e:f4:d1:a7:da:5b:95:78:07:0f:c4:c9:16:42:99:82:e2:16: 89:8c:f5:58:c5:96:8c:87:c3:e3:f3:90:b4:d9:b2:08:f1:1c: 96:f0:da:2f:f4:6a:78:4d:2e:cd:1b:0a:71:c4:31:8d:a3:af: f5:29:22:67:13:31:ec:1e:d2:1c:c4:33:4c:7c:49:a8:10:79: 26:c7:a9:eb:31:23:5e:59:ca:3d:55:b4:1b:10:fb:ec:2a:06: 62:a3:da:44:53:ee:02:c8:1f:86:05:7f:8e:66:ba:9d:1f:6a: 39:c8:4b:51:01:ea:76:1a:b4:7b:ea:56:86:09:c5:18:02:0c: fc:4b:1e:e3:9f:1e:9c:7f:b0:5c:01:b5:d1:14:49:c1:b0:1e: cb:d4:f1:61:b2:34:6b:10:a8:e6:f4:15:db:00:cb:ac:8a:96: ac:3e:6d:57:d4:97:46:b2:59:a4:91:ed:fd:8a:33:bb:2e:bf: b2:f0:0a:5d:d2:de:3f:39:ce:e6:eb:51:8f:cd:8b:56:ca:de: 66:6d:46:dc:83:c1:ff:43:45:eb:18:4b:3f:ec:22:0b:eb:26: 4b:88:43:06:33:14:4e:ce:5f:97:d2:c5:44:fb:9e:06:24:db: 87:69:88:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7A2z8Un8Bv3cGHjR9hFti0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjYwNjEzMTIwMDU0WhcNMjYwNjE0MTIwMDU0WjAzMTEwLwYDVQQD EyhhOGVkMDg3NjkwOGVlNzk4MDFhZTIwYTNkZmQxYzNiNTI2Yjk1NWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFHu+8+s4DeFcCXDa1F/BjXSkmg7 +o80csOhJqWe12MSI8LMejLrH1U90MheX1XIb4WGf2oGzMGFepYyER2x5NcQACjT 4NMnabo8ARkFV3kX3/JdUtHDH6s7toFmTXXsnDzo1cPSOfIpMzgsSeG6l90eSaZp aY6PAsw4ypQOIzn2+MWSSPcXjLyRvFOYhcpy85nUSryZUyiP6jgk6eF7xoiin/UO HcAMSgcmxeC+/++mwIvG14GNOg49tlCgTtdlY+cT4pk8OQ2FGhmNtfBJm7eEe3s7 NSuspxNH2Hvmgn0Ld3ztrWUp2d7DAlMP53cmRHUWFdkWEvfwlDqa+UHiYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjtCHaQjueYAa4go9/Rw7UmuVWyMB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCvd2RyL v8LtH50XvVO8GKJxLvTRp9pblXgHD8TJFkKZguIWiYz1WMWWjIfD4/OQtNmyCPEc lvDaL/RqeE0uzRsKccQxjaOv9SkiZxMx7B7SHMQzTHxJqBB5Jsep6zEjXlnKPVW0 GxD77CoGYqPaRFPuAsgfhgV/jma6nR9qOchLUQHqdhq0e+pWhgnFGAIM/Ese458e nH+wXAG10RRJwbAey9TxYbI0axCo5vQV2wDLrIqWrD5tV9SXRrJZpJHt/Yozuy6/ svAKXdLePznO5utRj82LVsreZm1G3IPB/0NF6xhLP+wiC+smS4hDBjMUTs5fl9LF RPueBiTbh2mINA== -----END CERTIFICATE-----Generated at Sat Jun 13 19:33:21 2026 by rpki-client