$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft File: JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json) Hash identifier: wGJQmckKZZfws8tOduYjh3saIDqQ2BwaHYCQXrX/+V0= Subject key identifier: 2B:A6:79:BC:60:DA:75:B0:D1:01:90:D2:B4:D7:A4:C1:BA:B2:B8:26 Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 019A4F99935F36E69E835E767D2EC671BA14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft Manifest number: 1449 Signing time: Tue 04 Nov 2025 16:00:56 +0000 Manifest this update: Tue 04 Nov 2025 16:00:56 +0000 Manifest next update: Wed 05 Nov 2025 16:00:56 +0000 Files and hashes: 1: 1GXRp3uT7hSMRzWjOxU0QktVRiY.roa (hash: aqIqmb81zi2cD6sMblBWQoAdH8B6EoMHMa2iFTOnb0c=) 2: 7w1YPyzlBEZNMOyEUCFkNc0ECPQ.roa (hash: 0dazsLMYx/MeDO19uGuuYzM5rCd3NgH7NYuHWn+o7Y8=) 3: 9S6VN8W0AB42Tjfsy_52eVj_HF8.roa (hash: U/0clwp2HZIEVyJ8jDxjulKSBf1aha8MkLQgHpOloog=) 4: ASXdDgGnh8Klj0fzlnnnOhv5loU.roa (hash: wWWbyDkcRSYhjOCMVp5ySQLPVFoGVo9Lc8yvPSW0eIM=) 5: FCh0pju_b1XDjIA8N5RktFi16SI.roa (hash: nzz37F+/F7FQRtoCdt1NMVOBQ7kMdP9rhDen0hB2f8U=) 6: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: XXqtDPjFzpUCJIUsyyJLJPu8Le39T3UytohT+NBFIH4=) 7: KKECh8K7hNffHVDT8ywINErgd1U.roa (hash: jFVe6x1L0XuZf3m6Z9ZwhiY43bHKM8ZXgM5AwxJ+SJ4=) 8: Neg-GaKgdY6gnpXCEHzkL9JlhS0.roa (hash: YgY5UaAq6hQXGaoygI0YizLwZ/ppqq3rjPmBhu92jjc=) 9: QBe6vAE6rYSA8KCQoO7i8f2keWY.roa (hash: /ZgtoN8+dacZMoQUvXB0j9wPVe+O1WRxUSH58QMyIv8=) 10: VuBKMZZHrZ1QSjnK1f8rGYyQD34.roa (hash: Yy9aJSbZa8jisjdlzD3JGDY9sTvRVpXk74KknU+efOI=) 11: XkXy4rFVu6JKAbUcEbjCs_ol8Mc.roa (hash: KEboU/fmZ1raaMqRFHeXS/DA8vof1Lf7hts2MdqUMFk=) 12: ZMDHfiorAQeHiAr2VSo31IrsX9Y.roa (hash: 2rW77gP54+olCRPQkqdpt6U7rC4Eivix0JgQsNBRA0A=) 13: b9LZtPjPcGkqch-QIMPmNiY1GfY.roa (hash: wVwwQPvK556ifQMFCqlsaWU8LCMEwKfjuZYfw4kZ7Ug=) 14: eq_1NPXQGhoWTMBNC9PaXKKEltM.roa (hash: Hq4HlvjEPgU16G6jBR0u/BxOO81trhl4PXHhgLXPBd4=) 15: u1jdAQ2eshDqHXq4UFjEjcuXmsI.roa (hash: 7O01VUQlx2/5mCx+t4SgO9Lggi1VIhx12oZO6kEvwsM=) 16: vhjrtMMdROIFj167BFR3pGrdrb8.roa (hash: mHe16RuP6X+5Fin2ZffJO/Ym51XZo7pnKG1BIGBPcUQ=) 17: vtNeTxZnHuMsF3rl3ZSPlMog7F0.roa (hash: FfGF+21HwGvE0iZhE2YJptjryuHFZ0BNSqu9xGqCr6Q=) 18: xtI4FxymYzhmmmKad9ZOkzTos1E.roa (hash: Xd4WHKpPZgsYedQWZYH07M7z75l0J2MM4sU9jDdQuXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:99:93:5f:36:e6:9e:83:5e:76:7d:2e:c6:71:ba:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Nov 4 16:00:56 2025 GMT Not After : Nov 5 16:00:56 2025 GMT Subject: CN=2ba679bc60da75b0d10190d2b4d7a4c1bab2b826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:8e:8b:ac:50:f6:10:d1:fc:8e:4a:ba:a6:7d: 1a:db:05:15:b5:e9:59:cc:f0:9c:bc:60:b3:94:48: 18:b5:1d:ea:d1:da:6f:de:26:ac:10:c2:24:40:91: d7:63:3f:2c:86:0e:e3:f8:28:19:33:f5:2d:57:5b: a2:4d:d1:f5:18:30:e0:3b:b9:6e:f8:3e:ed:a9:dc: 38:4a:bf:02:fb:1f:c5:ca:41:48:26:42:f8:24:67: b8:7b:19:71:e3:c8:ac:e9:89:f0:80:8f:ff:4a:d6: e4:c6:88:36:51:31:1e:a2:cd:24:24:22:7b:7d:7c: 0a:7b:6e:84:8e:aa:7a:c2:36:96:27:5f:c6:8f:5e: 98:cc:06:e7:20:79:bf:40:6a:a7:5a:1a:44:91:b2: f2:ee:d1:62:47:c2:82:71:2d:cd:86:62:bd:65:93: 3a:b2:7b:72:8e:00:62:c1:67:04:d6:71:a6:37:09: 38:7e:54:a6:c9:66:8c:f9:71:19:ff:dd:54:1b:01: 4e:49:5f:65:1c:c8:50:77:44:8a:0e:88:5e:ad:38: 15:a8:97:40:4f:c3:70:60:77:5b:aa:93:54:26:10: 2d:20:2e:14:ab:4e:8e:85:2a:f6:67:b9:92:7f:a6: 8f:65:a9:8f:ed:63:47:34:55:50:8b:bc:13:2f:75: ba:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A6:79:BC:60:DA:75:B0:D1:01:90:D2:B4:D7:A4:C1:BA:B2:B8:26 X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d2:a6:00:04:8b:96:a9:0e:55:a0:a3:6f:94:bf:6f:4d:3b: da:0e:47:ff:a4:ed:c1:5a:d4:18:ae:e1:90:bd:85:c3:d7:c6: e9:36:cf:94:ff:38:a0:e0:64:1b:6b:0f:bd:91:e2:d1:6e:c1: 49:ec:30:06:ca:ba:80:a8:13:3c:63:28:5b:d2:7d:65:72:e1: ce:ab:13:c7:98:ff:fe:cc:8d:fe:8f:2e:0a:31:a8:45:7e:db: 2e:bd:c7:0c:2c:27:e1:dd:10:bf:01:4e:32:33:eb:cd:e8:b3: 12:00:91:6d:b2:11:6d:f4:6c:e3:00:05:71:ee:19:fa:9d:8f: d5:8a:a8:cd:d8:b7:e6:fc:45:41:ef:72:b6:65:d5:9a:c8:57: 95:d6:0e:b4:d1:ef:d6:5e:d5:de:6b:87:68:fe:15:9d:b3:df: 2f:c9:58:45:eb:b9:67:f4:e4:2a:85:f7:a1:13:04:ae:5e:4c: 2c:a6:d0:95:dc:50:40:99:1f:e4:22:ea:8f:83:59:ff:67:eb: 11:a4:33:7b:19:95:4c:91:1d:aa:53:87:6c:07:19:2d:db:28: 57:91:05:00:de:32:c5:2c:30:10:05:33:ed:3b:5d:4c:7d:2a: 54:d1:69:fe:f8:22:ea:26:27:d6:da:23:16:07:51:03:6f:4b: 59:58:54:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPmZNfNuaeg152fS7GcboUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjUxMTA0MTYwMDU2WhcNMjUxMTA1MTYwMDU2WjAzMTEwLwYDVQQD EygyYmE2NzliYzYwZGE3NWIwZDEwMTkwZDJiNGQ3YTRjMWJhYjJiODI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9I6LrFD2ENH8jkq6pn0a2wUVtelZ zPCcvGCzlEgYtR3q0dpv3iasEMIkQJHXYz8shg7j+CgZM/UtV1uiTdH1GDDgO7lu +D7tqdw4Sr8C+x/FykFIJkL4JGe4exlx48is6YnwgI//Stbkxog2UTEeos0kJCJ7 fXwKe26Ejqp6wjaWJ1/Gj16YzAbnIHm/QGqnWhpEkbLy7tFiR8KCcS3NhmK9ZZM6 sntyjgBiwWcE1nGmNwk4flSmyWaM+XEZ/91UGwFOSV9lHMhQd0SKDoherTgVqJdA T8NwYHdbqpNUJhAtIC4Uq06OhSr2Z7mSf6aPZamP7WNHNFVQi7wTL3W6iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCumebxg2nWw0QGQ0rTXpMG6srgmMB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXtKmAASL lqkOVaCjb5S/b0072g5H/6TtwVrUGK7hkL2Fw9fG6TbPlP84oOBkG2sPvZHi0W7B SewwBsq6gKgTPGMoW9J9ZXLhzqsTx5j//syN/o8uCjGoRX7bLr3HDCwn4d0QvwFO MjPrzeizEgCRbbIRbfRs4wAFce4Z+p2P1Yqozdi35vxFQe9ytmXVmshXldYOtNHv 1l7V3muHaP4VnbPfL8lYReu5Z/TkKoX3oRMErl5MLKbQldxQQJkf5CLqj4NZ/2fr EaQzexmVTJEdqlOHbAcZLdsoV5EFAN4yxSwwEAUz7TtdTH0qVNFp/vgi6iYn1toj FgdRA29LWVhUlg== -----END CERTIFICATE-----Generated at Tue Nov 4 23:47:28 2025 by rpki-client