$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft File: JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json) Hash identifier: WrGVyOB44N4Twncka8xKYz71HFljlCwNx3uata3B+jA= Subject key identifier: A2:EE:61:E7:C2:D8:36:52:9D:FE:BF:B2:79:0C:27:70:A7:AB:F0:D4 Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 01976D0698D6C650589B1F9E624EB230AC14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft Manifest number: 12CA Signing time: Sat 14 Jun 2025 06:00:38 +0000 Manifest this update: Sat 14 Jun 2025 06:00:38 +0000 Manifest next update: Sun 15 Jun 2025 06:00:38 +0000 Files and hashes: 1: 1GXRp3uT7hSMRzWjOxU0QktVRiY.roa (hash: aqIqmb81zi2cD6sMblBWQoAdH8B6EoMHMa2iFTOnb0c=) 2: 7w1YPyzlBEZNMOyEUCFkNc0ECPQ.roa (hash: 0dazsLMYx/MeDO19uGuuYzM5rCd3NgH7NYuHWn+o7Y8=) 3: 8TY-Hfd5q5Rj4MUhE7CmY31LHyc.roa (hash: vPKsfH2lh7SZOShxHi9r8ed3IerCum4ryQQ50mXWvmI=) 4: 9S6VN8W0AB42Tjfsy_52eVj_HF8.roa (hash: U/0clwp2HZIEVyJ8jDxjulKSBf1aha8MkLQgHpOloog=) 5: ASXdDgGnh8Klj0fzlnnnOhv5loU.roa (hash: wWWbyDkcRSYhjOCMVp5ySQLPVFoGVo9Lc8yvPSW0eIM=) 6: FCh0pju_b1XDjIA8N5RktFi16SI.roa (hash: nzz37F+/F7FQRtoCdt1NMVOBQ7kMdP9rhDen0hB2f8U=) 7: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: ITzwtY+opn8uh4U4J92dPePSI3l4j1ipWqjyn9Rew0Q=) 8: KKECh8K7hNffHVDT8ywINErgd1U.roa (hash: jFVe6x1L0XuZf3m6Z9ZwhiY43bHKM8ZXgM5AwxJ+SJ4=) 9: Neg-GaKgdY6gnpXCEHzkL9JlhS0.roa (hash: YgY5UaAq6hQXGaoygI0YizLwZ/ppqq3rjPmBhu92jjc=) 10: QBe6vAE6rYSA8KCQoO7i8f2keWY.roa (hash: /ZgtoN8+dacZMoQUvXB0j9wPVe+O1WRxUSH58QMyIv8=) 11: VuBKMZZHrZ1QSjnK1f8rGYyQD34.roa (hash: Yy9aJSbZa8jisjdlzD3JGDY9sTvRVpXk74KknU+efOI=) 12: XkXy4rFVu6JKAbUcEbjCs_ol8Mc.roa (hash: KEboU/fmZ1raaMqRFHeXS/DA8vof1Lf7hts2MdqUMFk=) 13: ZMDHfiorAQeHiAr2VSo31IrsX9Y.roa (hash: 2rW77gP54+olCRPQkqdpt6U7rC4Eivix0JgQsNBRA0A=) 14: b9LZtPjPcGkqch-QIMPmNiY1GfY.roa (hash: wVwwQPvK556ifQMFCqlsaWU8LCMEwKfjuZYfw4kZ7Ug=) 15: eq_1NPXQGhoWTMBNC9PaXKKEltM.roa (hash: Hq4HlvjEPgU16G6jBR0u/BxOO81trhl4PXHhgLXPBd4=) 16: u1jdAQ2eshDqHXq4UFjEjcuXmsI.roa (hash: 7O01VUQlx2/5mCx+t4SgO9Lggi1VIhx12oZO6kEvwsM=) 17: vhjrtMMdROIFj167BFR3pGrdrb8.roa (hash: mHe16RuP6X+5Fin2ZffJO/Ym51XZo7pnKG1BIGBPcUQ=) 18: vtNeTxZnHuMsF3rl3ZSPlMog7F0.roa (hash: FfGF+21HwGvE0iZhE2YJptjryuHFZ0BNSqu9xGqCr6Q=) 19: xtI4FxymYzhmmmKad9ZOkzTos1E.roa (hash: Xd4WHKpPZgsYedQWZYH07M7z75l0J2MM4sU9jDdQuXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6d:06:98:d6:c6:50:58:9b:1f:9e:62:4e:b2:30:ac:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Jun 14 06:00:38 2025 GMT Not After : Jun 15 06:00:38 2025 GMT Subject: CN=a2ee61e7c2d836529dfebfb2790c2770a7abf0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:6d:4f:64:11:ee:0f:52:c7:41:31:98:27: 1f:bb:4d:2e:c2:ab:5d:80:b7:d0:13:58:6d:02:21: 9c:a9:8b:5b:0f:b8:10:97:c1:ff:80:18:1c:6d:e8: b4:4a:7b:76:ff:ea:19:2d:5e:f7:39:3a:0f:6a:ab: 0f:9c:5f:03:ee:fa:f2:60:7e:30:83:cd:04:32:98: 0f:3f:de:36:a3:2a:fe:fe:d5:2a:5e:98:f2:74:40: 2f:51:22:c9:04:85:3d:4e:d0:52:e7:85:27:6f:b6: 03:d3:70:1f:ed:8b:6e:86:d5:94:65:99:55:45:e0: aa:d8:fc:d8:7b:a7:3b:ee:1a:ab:bb:36:2a:be:c5: 40:55:9f:8c:f8:0b:ef:c8:ab:ad:63:d2:d1:fb:b8: 60:e9:92:51:83:9e:d6:07:af:e4:cc:0c:f7:4b:53: 01:f5:24:02:71:24:87:36:08:29:63:21:63:af:2d: 56:44:11:8a:f1:22:4a:ae:08:99:dc:aa:fa:5f:53: b6:aa:65:9f:ed:5c:c9:b9:3f:66:b7:52:f7:34:fa: b3:9a:38:46:f5:7b:10:b2:1f:bf:9e:a6:6c:a1:02: f8:97:04:f6:d4:9e:95:59:69:57:a3:1a:ff:03:7c: 40:68:34:b3:50:64:e6:0d:3e:63:26:63:18:74:6e: 78:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EE:61:E7:C2:D8:36:52:9D:FE:BF:B2:79:0C:27:70:A7:AB:F0:D4 X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:9d:71:7d:80:a0:78:e6:ab:fe:68:05:23:6a:62:64:14:15: 61:4f:17:d3:ff:32:de:4e:7a:6c:28:a4:14:c0:96:fd:3b:9d: 13:79:75:e0:8c:ae:73:59:2f:20:84:ce:c6:5e:f8:c8:fe:eb: 4a:85:23:81:8b:03:74:1f:24:95:1f:6e:8b:e3:27:d9:a2:c0: 24:71:c4:13:87:aa:57:02:ee:39:df:af:1c:cc:8c:5a:73:7c: c9:a6:7b:48:8b:7c:cf:0a:25:4b:6d:ee:e5:37:1c:fc:84:96: 4e:be:08:0c:f3:e2:a0:63:92:66:5b:cf:b2:26:cd:c9:b8:ed: 4b:bc:74:79:7b:33:1f:11:d5:b5:d0:ab:07:14:a2:93:ef:4a: f8:4b:66:32:dc:ac:5a:c9:94:b1:e9:4b:bf:a6:d1:e2:26:e7: ca:29:a6:c6:4e:77:96:e8:ce:5f:f2:f1:d7:d6:bc:20:d7:24: a8:82:7b:4d:48:5f:99:3c:7c:bd:55:18:2a:c8:3e:f3:b6:1f: e5:e1:93:4e:3d:d7:e9:3d:30:89:ed:97:14:f5:2a:f5:99:5c: c3:8b:ea:5a:e2:c3:48:db:71:76:b5:1f:de:ba:49:90:f5:14: 06:24:ef:05:16:5c:ac:2b:98:86:3e:26:3d:b9:84:63:be:d9: a6:e6:52:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdtBpjWxlBYmx+eYk6yMKwUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjUwNjE0MDYwMDM4WhcNMjUwNjE1MDYwMDM4WjAzMTEwLwYDVQQD EyhhMmVlNjFlN2MyZDgzNjUyOWRmZWJmYjI3OTBjMjc3MGE3YWJmMGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF1tT2QR7g9Sx0ExmCcfu00uwqtd gLfQE1htAiGcqYtbD7gQl8H/gBgcbei0Snt2/+oZLV73OToPaqsPnF8D7vryYH4w g80EMpgPP942oyr+/tUqXpjydEAvUSLJBIU9TtBS54Unb7YD03Af7YtuhtWUZZlV ReCq2PzYe6c77hqruzYqvsVAVZ+M+AvvyKutY9LR+7hg6ZJRg57WB6/kzAz3S1MB 9SQCcSSHNggpYyFjry1WRBGK8SJKrgiZ3Kr6X1O2qmWf7VzJuT9mt1L3NPqzmjhG 9XsQsh+/nqZsoQL4lwT21J6VWWlXoxr/A3xAaDSzUGTmDT5jJmMYdG542QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLuYefC2DZSnf6/snkMJ3Cnq/DUMB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcp1xfYCg eOar/mgFI2piZBQVYU8X0/8y3k56bCikFMCW/TudE3l14Iyuc1kvIITOxl74yP7r SoUjgYsDdB8klR9ui+Mn2aLAJHHEE4eqVwLuOd+vHMyMWnN8yaZ7SIt8zwolS23u 5Tcc/ISWTr4IDPPioGOSZlvPsibNybjtS7x0eXszHxHVtdCrBxSik+9K+EtmMtys WsmUselLv6bR4ibnyimmxk53lujOX/Lx19a8INckqIJ7TUhfmTx8vVUYKsg+87Yf 5eGTTj3X6T0wie2XFPUq9Zlcw4vqWuLDSNtxdrUf3rpJkPUUBiTvBRZcrCuYhj4m PbmEY77ZpuZSgA== -----END CERTIFICATE-----Generated at Sat Jun 14 10:15:34 2025 by rpki-client