$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json) Hash identifier: PIllQVMSiC3ohGjLsGVfI82dAMHhHqjpcU9JFUPqyqI= Subject key identifier: 41:49:69:3B:50:B4:AF:4F:60:61:2C:E0:08:39:4C:D5:54:A0:05:3B Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 019A4DAAC242517BD4AA427D6B425C631F85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft Manifest number: 1302 Signing time: Tue 04 Nov 2025 07:00:27 +0000 Manifest this update: Tue 04 Nov 2025 07:00:27 +0000 Manifest next update: Wed 05 Nov 2025 07:00:27 +0000 Files and hashes: 1: 3_HM3LXI2dI7yCUkbwsS0LVmtPQ.roa (hash: dlvoBhBeGam9xbjGOiUpXKoso+XH3qNTVfnBCvdbd3Q=) 2: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: n/5/SzG+k30QpANfO2xDnThwzPdmE7AfuO5LQdpZq8E=) 3: E_7EA8UJkxlGETtzRt_qHmFJYsI.roa (hash: 407g7UlI6CqSY6AOA+kHrysQofaOwh0+lRwTxsDvEPM=) 4: EgzHUocwnSDaTR0mcH1N2AahbPA.roa (hash: qnns/hwFAonNH2cGnXK7MoaWY9Y+ZF5REF6qTFex00M=) 5: LBBRl1_5PTCAndMsefaH2qIgsWI.roa (hash: P4yu/hSYw0dip59FJgO1wKqB51hJxMddEa7BdAJON18=) 6: SFJQLYtyuvLa-Z-_p6GETmClzzQ.roa (hash: TpY/D4v+35T3Gg8FMD0C6YxKf8fx/yuDpF1EWp6QNws=) 7: SW2UHW6XXrCRSFkNV0CVmfSilT8.roa (hash: OU29d/hqTbWW7Cob/3TqpwPxH+8rWvDwLVXV+Khg58o=) 8: gLpL93_717seB53wtn-PIYRSJpQ.roa (hash: BEBryS8Pk5M96RkjmV9ApUKiEfxXTgBuMMQoR0rPtvE=) 9: lLTt27CvKVrZ46MtIxZb-bD0JJg.roa (hash: r41CVNzvdr3xjDNcNmmOPnidy7vQT3DjIW3YSNMbicI=) 10: sl5VJ3i7CbF6mq-XTH5pxWMmK5o.roa (hash: 4bfJxuYHYnVskQrhNVV+ZwN1afVTdgzyH0yWLAaqMRM=) 11: ve4kS1FSpKOZDfPOmvEJot6T9gc.roa (hash: /8G7vYP5BGzfa/caGIr/zNwzv8N1oQfYQzWhKIYfL+g=) 12: yiW-kmeX6T3jx-yL7EZZYoVvwps.roa (hash: QstF1sZuORe/6EM2aW5TGBrHuj8rjUHPJQAAamVQG0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 07:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:aa:c2:42:51:7b:d4:aa:42:7d:6b:42:5c:63:1f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Nov 4 07:00:27 2025 GMT Not After : Nov 5 07:00:27 2025 GMT Subject: CN=4149693b50b4af4f60612ce008394cd554a0053b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:03:e6:d6:33:ac:78:40:cd:ab:a9:ef:c6:fa: dd:63:aa:58:58:42:8a:9d:df:bb:f7:f4:3e:8c:ce: b7:12:9b:7b:de:12:aa:64:07:25:fe:88:26:fd:44: b0:57:bf:78:43:4e:81:fd:62:e4:35:8c:59:a9:de: a8:5a:9a:7c:29:36:22:2c:82:4b:14:d7:55:f3:f6: e3:7c:23:34:5f:58:15:f4:a3:79:97:96:2a:5d:42: da:b2:25:2b:0c:a0:ec:e6:27:6a:ae:42:93:71:6b: 20:bb:77:06:34:32:d9:90:45:14:18:bf:50:26:4f: 2c:29:99:b4:1d:f0:28:7e:7f:ba:e1:07:e5:59:59: 1b:a5:54:7a:7b:9f:92:57:ec:bd:49:3e:33:81:e9: 52:96:eb:c3:ba:96:fb:7f:f8:e7:f1:b1:29:2a:36: 3f:cd:55:2f:03:a4:cb:67:8d:58:6f:61:56:40:26: 45:e6:fc:2b:d9:1a:dc:4f:e8:5c:61:b8:34:2f:a1: e1:fe:f2:6c:9e:e3:f2:13:be:a1:58:79:9b:44:d6: 44:58:a6:5a:5a:ee:9a:c1:5b:ff:7e:1d:63:13:5c: 7e:e6:c5:90:5a:ee:1f:79:18:ee:4d:04:b3:3f:6c: f8:8d:7f:b0:a5:30:1c:27:b3:35:b8:67:31:2a:1e: b5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:49:69:3B:50:B4:AF:4F:60:61:2C:E0:08:39:4C:D5:54:A0:05:3B X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ee:33:c4:a4:5f:27:40:4e:49:b6:0a:19:cf:26:28:13:52: b3:a6:7c:cc:08:cf:30:58:69:ab:52:12:17:64:c8:02:1b:77: 15:1c:c5:ce:ae:76:2e:5a:1b:f5:1b:34:0e:5a:ce:ef:43:f1: b7:01:b0:46:d2:17:b4:4f:5d:88:6a:75:84:29:35:9b:fe:97: 1a:8d:9c:53:7d:3d:cf:58:66:d3:98:bb:ce:b9:d9:5e:33:2f: 2c:49:02:82:7f:27:9c:66:23:ed:66:88:5f:a6:53:bb:3d:f3: c5:fb:25:f3:38:66:45:40:33:09:89:f4:7d:9d:5f:13:ec:39: ca:f0:5f:45:51:72:c3:d6:1e:f6:b9:3b:4b:9b:01:5f:ee:f5: 45:6e:bf:0f:a0:04:8c:f5:95:d8:02:3b:32:f5:43:92:77:1b: cd:36:82:65:d3:26:65:cb:e3:65:2d:7c:6d:bf:db:bf:ea:76: fb:ff:73:37:82:a6:a5:80:83:4e:f9:8d:41:c2:42:ad:1b:af: 3e:95:22:9b:da:22:89:0e:2a:7c:6e:d9:6b:00:06:f9:ba:06: 52:b3:0a:b0:4e:b2:04:5f:12:df:d9:55:d8:39:d1:7a:1f:12: e8:b6:ff:2f:57:50:90:86:ec:7d:aa:99:a6:ed:5f:24:33:0e: 7f:58:eb:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNqsJCUXvUqkJ9a0JcYx+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjUxMTA0MDcwMDI3WhcNMjUxMTA1MDcwMDI3WjAzMTEwLwYDVQQD Eyg0MTQ5NjkzYjUwYjRhZjRmNjA2MTJjZTAwODM5NGNkNTU0YTAwNTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwPm1jOseEDNq6nvxvrdY6pYWEKK nd+79/Q+jM63Ept73hKqZAcl/ogm/USwV794Q06B/WLkNYxZqd6oWpp8KTYiLIJL FNdV8/bjfCM0X1gV9KN5l5YqXULasiUrDKDs5idqrkKTcWsgu3cGNDLZkEUUGL9Q Jk8sKZm0HfAofn+64QflWVkbpVR6e5+SV+y9ST4zgelSluvDupb7f/jn8bEpKjY/ zVUvA6TLZ41Yb2FWQCZF5vwr2RrcT+hcYbg0L6Hh/vJsnuPyE76hWHmbRNZEWKZa Wu6awVv/fh1jE1x+5sWQWu4feRjuTQSzP2z4jX+wpTAcJ7M1uGcxKh61ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFJaTtQtK9PYGEs4Ag5TNVUoAU7MB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiu4zxKRf J0BOSbYKGc8mKBNSs6Z8zAjPMFhpq1ISF2TIAht3FRzFzq52Llob9Rs0DlrO70Px twGwRtIXtE9diGp1hCk1m/6XGo2cU309z1hm05i7zrnZXjMvLEkCgn8nnGYj7WaI X6ZTuz3zxfsl8zhmRUAzCYn0fZ1fE+w5yvBfRVFyw9Ye9rk7S5sBX+71RW6/D6AE jPWV2AI7MvVDkncbzTaCZdMmZcvjZS18bb/bv+p2+/9zN4KmpYCDTvmNQcJCrRuv PpUim9oiiQ4qfG7ZawAG+boGUrMKsE6yBF8S39lV2DnReh8S6Lb/L1dQkIbsfaqZ pu1fJDMOf1jrkQ== -----END CERTIFICATE-----Generated at Tue Nov 4 16:41:27 2025 by rpki-client