$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json) Hash identifier: cgiHV5g/y//e68OBCDrk1qHtxT07eudIejApVgLWsWU= Subject key identifier: DB:4D:9C:E1:34:85:2C:BA:95:AD:8B:EE:41:37:F8:1B:F0:AF:76:8E Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 019A4E19130C1238536EEAADCA4FE0813FC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft Manifest number: 03E2 Signing time: Tue 04 Nov 2025 09:00:57 +0000 Manifest this update: Tue 04 Nov 2025 09:00:57 +0000 Manifest next update: Wed 05 Nov 2025 09:00:57 +0000 Files and hashes: 1: 8g-49_qQ3fcAAr8ogKNyJYRIsqM.roa (hash: YUM8nQydrUaGiZYWfH9e5CkG/0ZnMAVKiwEv7wrrmyU=) 2: HL_391YyhybjwJ74kNKee4Xme30.roa (hash: SKqvmhnXy6lVHKlIjthvO2Ffcm5YC3y5BAN0frkvak8=) 3: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: KVCUiSyU/KIGboVbmAA/zN2InSaKDhWA4+b+ZdYrefY=) 4: UFzq6HTzLsKXQDiIwbMVwsSvCKE.roa (hash: SkcdE34ZRnlvciguMZx89azOscHKjWKi4kmUM6ce2ek=) 5: Vf3C3nEL83KU-t7pLCkbgpiASsA.roa (hash: 6SosAmZB67F6Q5qUy5fWvfEJcjGr5qv93jKtlhRr2es=) 6: b37yA0vBw9z9NXOjP3ngOC-nsdQ.roa (hash: xnMkc8ma8YV2ulWTsjtILbYV33NvcPwQMYE2M0mdniE=) 7: evsBxqfpyH3zHvt0KdEDbPjJt40.roa (hash: vsA8eWY0hm6KpE4+4Kq5HkaUgEZIYMzjLRq48DP4yG4=) 8: hp0pLX_QGiWhiOhgc-g-g3McIzI.roa (hash: iRmxgVLqjy7bOiMWp10+U3a2wekQwe0YpGsmUpp/wOw=) 9: lwlNrqm3r8NOZc8muUo80fFlOeY.roa (hash: FfJzjpvXZQfdbT9Lc8mjBM1Q8TX5WkjUXsorwJal9Zo=) 10: pu4GRTEZI-DDS8alCpZhtqjD728.roa (hash: 4gymL9RPKKRX/UazcJNoKfCcQGjN640R8KkZ8YDasZ0=) 11: r6VOlpU6VgL1WVlEQKIIOdFJ6jc.roa (hash: qZ5211k3RJOzvqXcolh5rN4QAkWpCPQgoaSC1kNOR9w=) 12: zB7jZpVQ6_QohXb9Ts1uTCDa9vc.roa (hash: G92uGtD4p7P9jynyu17jJLaD0YzUsjPpS9i4T5WM4LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:19:13:0c:12:38:53:6e:ea:ad:ca:4f:e0:81:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Nov 4 09:00:57 2025 GMT Not After : Nov 5 09:00:57 2025 GMT Subject: CN=db4d9ce134852cba95ad8bee4137f81bf0af768e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:08:f3:40:32:05:14:fb:67:f9:c7:59:62:a3: c4:c0:7d:e3:3e:4c:30:f4:af:07:43:ec:b2:04:50: 81:01:df:4f:ed:bb:df:13:36:fd:93:40:8d:f8:71: 34:ad:10:f8:39:2f:65:22:53:8e:a6:7d:71:ed:01: 39:82:9b:73:49:0e:c4:71:4d:ee:d9:57:ae:08:95: 7e:54:30:b7:08:03:bf:b5:23:cc:63:4e:19:04:ac: 5b:61:70:c3:c1:53:44:2a:7e:b7:fa:32:1f:fc:69: be:33:aa:df:ff:ae:e3:ab:57:e1:eb:d3:25:ef:c0: 0f:c2:57:b9:74:1c:ab:1e:9b:a1:7d:dc:16:59:44: 3c:d1:c1:66:d0:6d:51:6c:c8:90:e8:f2:2c:44:c2: de:ae:05:d9:70:f8:57:9d:9f:51:5d:73:06:09:2d: 59:44:2b:21:72:fc:15:54:8a:6f:84:6d:f7:76:55: 51:06:5e:19:f7:a2:75:82:3d:61:e9:07:d0:5d:47: 09:fa:08:e1:4d:ba:e0:b0:51:51:da:32:18:9d:9b: 3b:5a:3d:e9:0d:b4:f9:5a:08:8d:be:f9:21:e7:c9: 32:15:82:ef:4a:94:7b:82:a7:7e:ed:0c:a2:3b:21: ae:9a:8a:f5:da:7c:04:5d:28:08:0a:e1:d9:5f:98: de:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4D:9C:E1:34:85:2C:BA:95:AD:8B:EE:41:37:F8:1B:F0:AF:76:8E X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:5a:ff:c8:aa:c8:8e:73:1c:fa:ae:38:1d:04:fc:2b:41:9b: 1b:9d:14:1d:59:c4:e3:9a:77:59:f0:f8:31:3d:16:11:21:e1: 9d:fe:71:07:9c:00:15:d5:87:95:8a:2f:5f:68:f9:f8:13:58: 4a:bc:c2:8e:4b:b0:68:49:44:c4:6a:85:2b:6f:27:64:a7:22: 1a:00:79:88:27:a3:53:33:65:ee:8e:91:9a:c1:e6:d1:1b:52: 8b:39:56:b9:77:a7:aa:d4:c2:64:5f:c9:e1:f1:5c:9f:67:2a: 16:b5:f5:6f:82:4b:e6:80:9c:11:32:7e:2e:79:a6:04:64:35: b4:29:9d:52:31:89:0f:70:9a:39:7a:0f:68:e6:fe:70:ef:c6: 29:7c:32:56:ed:48:c3:4d:d0:f5:64:2d:bc:9c:d6:5d:dc:78: 23:39:f9:b7:6d:4f:11:c8:c6:e3:08:ec:bb:67:3b:dd:35:0c: 66:cc:35:5c:00:19:18:4a:a6:90:c6:71:60:c9:18:e0:40:27: 68:9b:1e:54:cc:02:62:fc:fc:27:ac:42:87:bc:da:28:c1:1e: a7:d8:66:13:21:8b:c3:8a:76:79:2e:d9:ee:03:ef:30:4a:02: f1:24:83:96:b2:b3:79:a1:e1:95:e7:d1:87:68:3a:a3:dc:d0: d2:bb:a1:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOGRMMEjhTbuqtyk/ggT/AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjUxMTA0MDkwMDU3WhcNMjUxMTA1MDkwMDU3WjAzMTEwLwYDVQQD EyhkYjRkOWNlMTM0ODUyY2JhOTVhZDhiZWU0MTM3ZjgxYmYwYWY3NjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwjzQDIFFPtn+cdZYqPEwH3jPkww 9K8HQ+yyBFCBAd9P7bvfEzb9k0CN+HE0rRD4OS9lIlOOpn1x7QE5gptzSQ7EcU3u 2VeuCJV+VDC3CAO/tSPMY04ZBKxbYXDDwVNEKn63+jIf/Gm+M6rf/67jq1fh69Ml 78APwle5dByrHpuhfdwWWUQ80cFm0G1RbMiQ6PIsRMLergXZcPhXnZ9RXXMGCS1Z RCshcvwVVIpvhG33dlVRBl4Z96J1gj1h6QfQXUcJ+gjhTbrgsFFR2jIYnZs7Wj3p DbT5WgiNvvkh58kyFYLvSpR7gqd+7QyiOyGumor12nwEXSgICuHZX5jeBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtNnOE0hSy6la2L7kE3+Bvwr3aOMB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlr/yKrI jnMc+q44HQT8K0GbG50UHVnE45p3WfD4MT0WESHhnf5xB5wAFdWHlYovX2j5+BNY SrzCjkuwaElExGqFK28nZKciGgB5iCejUzNl7o6RmsHm0RtSizlWuXenqtTCZF/J 4fFcn2cqFrX1b4JL5oCcETJ+LnmmBGQ1tCmdUjGJD3CaOXoPaOb+cO/GKXwyVu1I w03Q9WQtvJzWXdx4Izn5t21PEcjG4wjsu2c73TUMZsw1XAAZGEqmkMZxYMkY4EAn aJseVMwCYvz8J6xCh7zaKMEep9hmEyGLw4p2eS7Z7gPvMEoC8SSDlrKzeaHhlefR h2g6o9zQ0ruh3g== -----END CERTIFICATE-----Generated at Tue Nov 4 17:54:44 2025 by rpki-client