$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft File: JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json) Hash identifier: yNxgO/0Fmwft8ZYZ8FqKsfwPfDirK7KhyJTbAF9oZao= Subject key identifier: 76:7B:00:52:1D:D7:DF:A7:F5:53:0F:5A:B5:24:CD:69:D8:A7:67:48 Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 019D9B50B8D3C34D955301DCE724B0241978 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft Manifest number: 1600 Signing time: Fri 17 Apr 2026 12:00:51 +0000 Manifest this update: Fri 17 Apr 2026 12:00:51 +0000 Manifest next update: Sat 18 Apr 2026 12:00:51 +0000 Files and hashes: 1: CkpruVXBRC35FNzBxsHtHzElTcQ.roa (hash: M8G0Fw/AyLb57D4pQj+p7wHrZ6ZAg2uq5cvqL/37hsU=) 2: DASfpt6NusBMafxKXMbsXkknaLs.roa (hash: 7Q1f4G/K2mV4OPswZej+EeWKFQMe4TLAgeu5GM1kraI=) 3: ESMuZH3p8eZcfxjSdFlU49_G9BY.roa (hash: eU/RIl1p7nycsadiq5D1MCtC0gJOFnvD+JDmCJY+OA8=) 4: H4PmoPs09fxsoMyeNbvcLTDl7tg.roa (hash: g6se6YwWnPf1EHgnkVuLefIVI+viGWgQPBM+Zec15uI=) 5: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: W1vPvevUuFxNQ95SWPoWA2PPxAe3ZUJUmDfiJ1DzHH0=) 6: VHgUN5juRzMz3CUHZPoEHnzr2z0.roa (hash: VXSqzrkX+ABn4jZnd4wHdBjnPgDeVeSEP9mmDyjcGMQ=) 7: WuM6D54bD9ZW12al4cadO05OlhA.roa (hash: KSoGE/L4hSg6At0Y5RkAFE3o/b5P/zSmERN2VFp1fMQ=) 8: Y-rwo6ja1_SXsDsjjZenySjEjo8.roa (hash: ZsKC9kHfKh+n+8/Xir5wlK+HjS6IcJLLArYCrxMRmAk=) 9: fRUNIQ1_jYWQdZrSZ4luryAQJDQ.roa (hash: ty6oOnSu+ZODj+9+2x+cpkE7v0JL9rnydZY11LzAwgQ=) 10: jTbrb1TbwgaHuVljIE6syUVcGbE.roa (hash: 1xz+1g5hD0xQyll98W3vSqycYShnYZQgn+0XxOIFh6g=) 11: lNSsiMsgFC3PSDwg_wipOCI36Sc.roa (hash: T+M2rwciKN++pJU4zsuNLc+4agGsiYLXoX3H/Bds62g=) 12: nMpaMbGEzj2Jpg2_GxE2xYc0pUI.roa (hash: Fv1RC7bFvxKYKp89cN52GIHsD0MHml/fLyyWKSWO5/k=) 13: rjPbS80wLPhwF4ETCKbrHWAdxvw.roa (hash: 0e9ndNtpFQMzhAU9T854jFmEVmFNvWMXh2KdMpHi8jk=) 14: sIpLAsGB9mg0zFG4d5238KgCd4k.roa (hash: eXcSiBlROOdcbS6oOwKQciaqtXn9irVYQuDWrvrFA6s=) 15: shMgILdrcRQ_LG-B1Njv0tFtwKY.roa (hash: VrnYEoqsCXqMeGOK7nN9tJcwMBHTSx98wiR1emp3pqQ=) 16: spxPuR8xyj72SKO00nWmxiu9tv8.roa (hash: j68QBUE3gzuvtf320646B+hARt3MiGgu/5WZ8oVBSpA=) 17: ufjaDLPum5mRkBKXDuMb146baHg.roa (hash: oNF4RqIC9pQOPmU+xyL4C1SBlQau5hDsBq8wufytphI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:50:b8:d3:c3:4d:95:53:01:dc:e7:24:b0:24:19:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Apr 17 12:00:51 2026 GMT Not After : Apr 18 12:00:51 2026 GMT Subject: CN=767b00521dd7dfa7f5530f5ab524cd69d8a76748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:5d:f9:c0:2e:de:06:45:35:bd:a3:ef:da: e6:73:1c:02:d8:9c:56:b8:23:75:0a:c5:10:25:ca: 12:e3:00:a0:ec:2b:c7:75:0a:e6:cd:af:f9:77:1f: a8:a4:26:14:86:13:1d:e6:ee:27:b4:b8:8e:5d:60: 65:57:c1:97:5c:4a:8f:19:bf:01:ea:af:b3:90:16: 2f:e0:5a:73:41:25:a4:9f:ca:b3:bd:a3:39:68:73: f6:87:40:b5:dd:39:dc:c9:33:ce:d5:5a:ba:dc:31: c8:34:c5:6c:3d:de:af:f2:7a:ea:a8:90:93:b1:a0: fa:d1:cc:af:81:6c:a9:bd:e8:92:0f:37:98:00:49: f8:29:d2:74:19:09:2a:a1:40:96:b1:26:8a:8a:bf: c6:40:e5:07:ad:52:4f:39:ef:e0:a8:65:22:7e:8a: c9:23:4d:c0:31:2f:ef:a6:00:a7:bc:92:bb:2f:a6: 99:fc:3c:cf:9d:f0:7b:72:ba:bf:b8:62:9d:a0:6a: be:87:69:87:d9:2b:fd:0f:76:88:71:37:f7:4e:a8: dc:dc:74:d4:96:b4:5b:ae:db:66:36:0f:59:87:78: 9c:8f:d6:8b:35:7f:07:66:4a:72:da:1d:37:3c:a4: de:8c:d1:45:57:f0:b6:7d:cd:2b:02:3a:c7:3e:76: 50:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7B:00:52:1D:D7:DF:A7:F5:53:0F:5A:B5:24:CD:69:D8:A7:67:48 X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f8:c0:5a:0e:9c:fb:d1:d0:ab:10:17:35:ef:02:3b:2a:a2: e3:39:30:c3:0c:a0:fb:c5:30:ae:43:81:bc:41:86:f1:94:76: 25:86:68:13:e3:83:a7:fb:f3:6b:3f:d0:4c:b1:c7:87:cb:7d: e7:41:9f:e1:3a:09:cd:1e:00:6b:1f:2e:c4:c2:b2:ec:ff:92: e8:79:f0:25:c2:65:fb:36:8a:23:d2:06:0f:31:d9:f0:03:fc: 5c:47:b8:14:d4:92:4c:e8:a1:5d:15:47:ec:e1:e5:d9:b3:40: 1b:64:97:0c:28:75:a3:f2:1c:e4:74:74:16:ff:5b:f8:0a:b4: bd:a7:57:a1:d2:25:81:16:72:61:36:74:0d:27:48:70:22:6c: 3f:3d:5c:4a:b0:e4:0c:b9:f0:38:31:73:c1:e5:bc:aa:33:cb: 21:9f:58:0d:96:ad:b3:1a:9b:a4:9e:fb:16:18:86:a5:7b:0e: e9:5b:36:52:80:65:1f:9b:48:cb:d2:b8:8f:d4:60:1f:17:6e: 6d:32:c4:3c:9f:60:56:6e:59:08:cd:8a:70:17:20:f3:87:2f: c1:36:5c:5c:87:7e:53:c2:a6:61:ff:6c:83:36:e8:16:44:94: 5c:01:bd:54:3b:f3:f3:18:c9:fb:f3:f1:fb:2e:78:fd:a9:04: 7a:36:c2:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bULjTw02VUwHc5ySwJBl4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjYwNDE3MTIwMDUxWhcNMjYwNDE4MTIwMDUxWjAzMTEwLwYDVQQD Eyg3NjdiMDA1MjFkZDdkZmE3ZjU1MzBmNWFiNTI0Y2Q2OWQ4YTc2NzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJhd+cAu3gZFNb2j79rmcxwC2JxW uCN1CsUQJcoS4wCg7CvHdQrmza/5dx+opCYUhhMd5u4ntLiOXWBlV8GXXEqPGb8B 6q+zkBYv4FpzQSWkn8qzvaM5aHP2h0C13TncyTPO1Vq63DHINMVsPd6v8nrqqJCT saD60cyvgWypveiSDzeYAEn4KdJ0GQkqoUCWsSaKir/GQOUHrVJPOe/gqGUiforJ I03AMS/vpgCnvJK7L6aZ/DzPnfB7crq/uGKdoGq+h2mH2Sv9D3aIcTf3Tqjc3HTU lrRbrttmNg9Zh3icj9aLNX8HZkpy2h03PKTejNFFV/C2fc0rAjrHPnZQnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZ7AFId19+n9VMPWrUkzWnYp2dIMB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfjAWg6c +9HQqxAXNe8COyqi4zkwwwyg+8UwrkOBvEGG8ZR2JYZoE+ODp/vzaz/QTLHHh8t9 50Gf4ToJzR4Aax8uxMKy7P+S6HnwJcJl+zaKI9IGDzHZ8AP8XEe4FNSSTOihXRVH 7OHl2bNAG2SXDCh1o/Ic5HR0Fv9b+Aq0vadXodIlgRZyYTZ0DSdIcCJsPz1cSrDk DLnwODFzweW8qjPLIZ9YDZatsxqbpJ77FhiGpXsO6Vs2UoBlH5tIy9K4j9RgHxdu bTLEPJ9gVm5ZCM2KcBcg84cvwTZcXId+U8KmYf9sgzboFkSUXAG9VDvz8xjJ+/Px +y54/akEejbCKg== -----END CERTIFICATE-----Generated at Fri Apr 17 18:25:16 2026 by rpki-client