$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft File: JxlBKRimYn-ZzOVcesoTkFe4V04.mft (raw, json) Hash identifier: coIZFWrDx34qCJ555oiY2R2F1kPcmsQKm0X6TwvEkfY= Subject key identifier: 78:57:62:6E:EB:F0:B3:3B:67:04:A4:DE:4D:1E:65:33:50:69:4E:B8 Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e Certificate serial: 019A4EF43813B1D91347D79917CF94972B93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft Manifest number: 0A5D Signing time: Tue 04 Nov 2025 13:00:19 +0000 Manifest this update: Tue 04 Nov 2025 13:00:19 +0000 Manifest next update: Wed 05 Nov 2025 13:00:19 +0000 Files and hashes: 1: 0egOCEDjjfjwdPmizCh3Cu6NbrQ.roa (hash: RjxfFq3fmsFbepGKowirBDzmyu+RZ3fSC5NUINYgMYU=) 2: 7W85Tt0gwzhkJWxBWSICyLMHvBg.roa (hash: JppPMnJbiXzbpD/Pc6qWhNpXFo8/+nx6fCwzyRamuQY=) 3: 8-PSvB9rLper4H4Z6i2q7Nh0gdw.roa (hash: 2qr0DY7SshfmBWBMPElwvi/+AJH/67rJ01N4KKU7q1A=) 4: BRryBhcZ86QRcNyyWRQXIrGL940.roa (hash: TpVPlst5x/81i653yEbzbStWflfy2GReIp1Tn60B8L0=) 5: C2IF6LAMNn3fJJb2qYaEnTh4WI4.roa (hash: KoYq60161i4xpC6NqHZA/Q8w9Njte/PcskDc5lUbshM=) 6: EJQRhvTA9imPwclwVgQbFkh0JFE.roa (hash: wCSwu07TXrbn08zc7CmiqRRyHHovVOMjCdUBle99/a8=) 7: JxlBKRimYn-ZzOVcesoTkFe4V04.crl (hash: w9DLPUbTEb3SGcRY8QqhmTynMvXR/YrZyqXG0sJPXh4=) 8: XP9c9FnVM83t2BcVhUGYjki34JA.roa (hash: 9MjxmhRyp3W6rmd2o7KozYAfmVW00slDjc1CHV4YtKA=) 9: ZvwtxuslzfQmqhln4NrT0EB6by0.roa (hash: /zi0GX6AY/hjXoyJfHeafiIns7K/28qT/TjfHjhKvFY=) 10: i6AMMlCBL4mI8fXSClWLBTgrr2w.roa (hash: ibC1icVFA9nVxcZkqXGl9glghEao/S766jYYimUgQ+I=) 11: noewYl5P0rkhAPD3Zn8s9bc2_qs.roa (hash: h2zqiA+vL/GF8rvskPe0YPXeCInpKFuXr/zZvqUEJgg=) 12: xdpBEJQBaSWnLzQMJf9F6VWUv60.roa (hash: rjp7KwUwTuEzo3eXkAycybNSdAwl1wu4fvs5dmuagvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f4:38:13:b1:d9:13:47:d7:99:17:cf:94:97:2b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e Validity Not Before: Nov 4 13:00:19 2025 GMT Not After : Nov 5 13:00:19 2025 GMT Subject: CN=7857626eebf0b33b6704a4de4d1e653350694eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:80:5b:24:a1:1d:18:e6:e8:cb:1c:5b:3d:a0: 57:c6:d2:9c:f8:2d:b0:1b:72:0a:88:13:50:1f:f6: 4b:c2:c6:c8:a5:d2:48:1e:c1:06:1d:e3:da:ba:07: 11:d3:11:8e:08:b4:58:da:b0:76:1c:e7:ef:ad:fa: 47:10:9c:de:ef:4f:58:0a:bf:5f:42:b4:36:14:c2: 1b:8d:6f:12:4d:fc:2a:60:6c:f4:6e:10:c8:d0:ea: 4d:ab:26:a9:16:a8:7c:57:32:99:c5:71:60:d5:bc: 29:76:89:c4:8e:19:1e:d7:b1:37:95:a3:c1:36:fd: e3:d3:30:b9:19:3a:86:eb:09:2a:f0:6f:60:7f:17: 43:37:a0:43:8b:7f:dc:8c:a2:11:ba:5c:5a:4c:13: a9:9e:15:36:81:0a:3d:72:22:8c:18:cd:78:d3:35: 43:e4:4e:9f:0f:1b:bf:88:f2:20:c4:1e:d3:3b:2b: cf:bf:c6:5e:e4:9b:7b:03:98:87:94:20:d1:07:32: 81:45:57:4a:58:42:d1:84:67:fe:b5:b8:53:df:31: 45:63:a9:6f:de:21:e2:51:19:43:f1:88:73:f4:2d: a1:da:ef:83:a0:d5:07:96:7f:85:2d:a7:c0:3a:45: ae:14:7d:c4:8f:a0:16:c1:bf:85:bd:76:20:94:34: ec:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:57:62:6E:EB:F0:B3:3B:67:04:A4:DE:4D:1E:65:33:50:69:4E:B8 X509v3 Authority Key Identifier: keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:8d:d1:32:a1:1d:18:84:1d:a9:84:de:b7:55:da:00:af:88: e5:d4:63:5a:ae:82:49:5e:54:32:77:ca:5a:95:63:dc:c0:ad: a4:c1:dc:a8:e8:4c:ed:70:10:3d:e1:92:a1:64:56:75:0c:48: cc:0b:fd:86:0d:e1:02:4e:50:24:a4:19:c2:a8:3e:c8:fe:14: f5:1a:64:97:a0:3e:f1:72:5a:3c:86:e3:18:91:73:a0:4f:cc: 7c:c6:c0:e7:a0:41:2f:2b:6d:38:4f:90:72:97:68:8f:4d:7b: 76:bc:44:47:9a:e9:f8:71:d3:8b:25:07:89:25:51:3b:c6:8a: 2c:95:48:04:bb:79:0a:3b:48:32:3a:5a:7c:ee:60:03:6e:29: 52:a8:bd:11:16:6e:04:f6:16:2a:75:70:79:bf:15:3c:fb:54: a6:5b:11:88:f8:7d:26:13:79:cc:a5:fc:e5:e7:e6:d7:9b:c3: 60:19:1d:d9:89:ad:a7:ff:82:cd:9d:95:24:ef:2e:40:59:91: 1f:d2:f6:84:21:f6:64:8e:dd:b1:4c:df:36:13:a3:e9:85:ba: 5b:50:29:47:7e:dc:1f:25:33:a7:c4:23:ae:d8:14:ee:40:77: 0c:c7:36:d2:e0:1c:98:be:08:d7:45:ec:d5:c2:f9:a1:a3:6a: 39:4f:06:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO9DgTsdkTR9eZF8+UlyuTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MTk0MTI5MThhNjYyN2Y5OWNjZTU1YzdhY2ExMzkwNTdi ODU3NGUwHhcNMjUxMTA0MTMwMDE5WhcNMjUxMTA1MTMwMDE5WjAzMTEwLwYDVQQD Eyg3ODU3NjI2ZWViZjBiMzNiNjcwNGE0ZGU0ZDFlNjUzMzUwNjk0ZWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YBbJKEdGOboyxxbPaBXxtKc+C2w G3IKiBNQH/ZLwsbIpdJIHsEGHePaugcR0xGOCLRY2rB2HOfvrfpHEJze709YCr9f QrQ2FMIbjW8STfwqYGz0bhDI0OpNqyapFqh8VzKZxXFg1bwpdonEjhke17E3laPB Nv3j0zC5GTqG6wkq8G9gfxdDN6BDi3/cjKIRulxaTBOpnhU2gQo9ciKMGM140zVD 5E6fDxu/iPIgxB7TOyvPv8Ze5Jt7A5iHlCDRBzKBRVdKWELRhGf+tbhT3zFFY6lv 3iHiURlD8Yhz9C2h2u+DoNUHln+FLafAOkWuFH3Ej6AWwb+FvXYglDTsCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhXYm7r8LM7ZwSk3k0eZTNQaU64MB8GA1UdIwQY MBaAFCcZQSkYpmJ/mczlXHrKE5BXuFdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYt NGUyMjM5MTdiODYwLzEvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYtNGUyMjM5MTdiODYw LzEvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs43RMqEd GIQdqYTet1XaAK+I5dRjWq6CSV5UMnfKWpVj3MCtpMHcqOhM7XAQPeGSoWRWdQxI zAv9hg3hAk5QJKQZwqg+yP4U9Rpkl6A+8XJaPIbjGJFzoE/MfMbA56BBLyttOE+Q cpdoj017drxER5rp+HHTiyUHiSVRO8aKLJVIBLt5CjtIMjpafO5gA24pUqi9ERZu BPYWKnVweb8VPPtUplsRiPh9JhN5zKX85efm15vDYBkd2Ymtp/+CzZ2VJO8uQFmR H9L2hCH2ZI7dsUzfNhOj6YW6W1ApR37cHyUzp8QjrtgU7kB3DMc20uAcmL4I10Xs 1cL5oaNqOU8GVQ== -----END CERTIFICATE-----Generated at Tue Nov 4 17:36:33 2025 by rpki-client