$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft File: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json) Hash identifier: l99M3qbEEDpcvIz8AP4SFlhhXwccLI2sazAnPmhJ/WA= Subject key identifier: 33:A9:46:61:E9:66:F1:69:7D:A3:E4:2E:61:DC:00:01:63:8E:DA:EC Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 019CACB51B42CEB0EE76E51A1D7968E1C755 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft Manifest number: 1881 Signing time: Mon 02 Mar 2026 04:01:15 +0000 Manifest this update: Mon 02 Mar 2026 04:01:15 +0000 Manifest next update: Tue 03 Mar 2026 04:01:15 +0000 Files and hashes: 1: 17xPyZlJEOUx5zEX8ZO8erx4H74.roa (hash: o78ZIjezoB+5hFnpSV2hhbyqsGtrTAReQHzLkPsSMs8=) 2: 1wsMVCeL93UzN5b0Yvsk2yYuWLA.roa (hash: 99X69fNFzFuCPq29Xhv4yLun4KnsOh44dtaBCjapBbQ=) 3: 2RHKEFUbX-V0Mf6y31Iq5dGlemY.roa (hash: 22aNA0RqHM/lo1ZuXKI24lPSyNZYgt9FvnHMilKuHJY=) 4: 2q-y1nHjenu9twtcEVm8uPj-ddE.roa (hash: kKq4uoPjr9yzILuLqmWkg6QD55vf8pDPM+f+YLfRhpg=) 5: C58HKVenwwmbh1jkwoeqIUWdglo.roa (hash: dbM/VaOE1y6PqBg/KjdbXvgt9ovsuviuBnEC3nra0Jo=) 6: GEKxvGic2KzXVJsj3dcok72CGco.roa (hash: aFBfIqFU6Ts846KW9SXo+ReP3IL9/U988JwYsIxQACw=) 7: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: x/F8zLeUsax88PZuXAp4WUEEKOOjgAtardx0Ywdl4jU=) 8: S4ZdWdrpb3qYx-e6gRNqyxS9XXU.roa (hash: HWieGKn5oMIm/cd+NltvfFL1DEkHDM7h4JKc/BDbryw=) 9: TN_g4sfmmPrHK_oZ30J7gNWtpIY.roa (hash: m5dgi6YlmiEMbhGuQK1tT2ie/bg//bcOLn6xqpAH6Zs=) 10: WPjlp9q2_irNOFHbvH1KxHiPhtg.roa (hash: nGNubH07FwuuTBRkZu6sDa2SbPeua6Dt0ORJDlPOSMk=) 11: XVl9Jn76mWQ8ncaJ_wDuumCSFsA.roa (hash: Hs6XsuXHPXeVRFbGDUcPFLc6y5U4gwmlkZ/AR7/NeXE=) 12: XuBKY0oAARsXVXjq7u8JeDvNOcU.roa (hash: vlWZjrm0v836+Ch01+GkfQiIKmv/HzSaOumEGtSwczo=) 13: js8xc1HEU1XUI0sBZfF0bl5Ntsc.roa (hash: AdO5qS0u+S/3mUbxDukdjf7Jfxyoy7D8xgFedRy81VA=) 14: nkcD404rwM-bjy3W1eqAGIf4-jM.roa (hash: c+Jt4XtXipvJeR1ev/pkQCOQCvUzFmWnznkD8NrTMoI=) 15: nwdisTGCO1HdotM4w00vTV5nTWw.roa (hash: KEQcv5DEoUNOudiFBJJ9GLGu+X9chyb1tuUa5pQKKuI=) 16: pWHrs5rw_KgbSRJAL6KONruKqFc.roa (hash: AB3huwEj/N+euzlEzjByisO3oP/M0v+P+iouNnZD7xs=) 17: unZltpWjHIJfFpLIwg4b58uUsuU.roa (hash: hb7AVSL7Cg4MYbwSNaPjN4NWBI4LlWAD7QoGarhaIFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:b5:1b:42:ce:b0:ee:76:e5:1a:1d:79:68:e1:c7:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Mar 2 04:01:15 2026 GMT Not After : Mar 3 04:01:15 2026 GMT Subject: CN=33a94661e966f1697da3e42e61dc0001638edaec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b5:db:59:68:de:6f:3c:d2:e2:23:22:22:7c: dc:81:2c:ba:8e:df:63:f4:b5:37:00:4d:9d:61:f4: e2:c9:cf:96:cd:67:b8:1b:82:a3:4d:f9:c0:78:bb: 8f:9b:a9:8c:e9:00:5f:07:3c:5a:3c:fa:9d:c1:c6: f9:d8:85:73:b0:2d:38:1f:47:bd:85:29:11:df:a5: 37:05:30:c0:6c:69:35:bb:b8:42:5b:9a:0e:fc:8c: 6a:0d:7c:55:ac:ba:66:69:84:5f:0b:19:db:68:4e: 0f:78:f5:eb:73:6d:41:75:db:a5:31:a2:46:4e:df: 2f:b8:aa:e9:bb:05:bc:72:f7:3c:1a:60:47:df:31: 35:7f:71:34:86:40:c4:12:8f:36:ff:f1:a2:8a:cb: fa:1a:e5:e0:17:34:d4:f5:e9:33:cb:56:bb:9d:6f: bc:c8:3a:3e:5b:75:36:62:06:7f:d9:e0:0c:3d:70: 1b:a4:a9:e2:74:09:b8:b5:10:cf:43:ff:1b:a4:4b: 6c:a2:93:18:f6:d7:ef:10:30:f4:37:31:01:67:10: 47:9f:a7:48:ec:88:bb:5a:1c:a4:97:d8:e6:36:a5: 13:80:99:17:e5:7c:31:bd:b5:c3:de:6b:aa:9c:45: e2:be:5a:0c:05:9c:93:f5:0c:88:60:6e:6b:a4:46: 14:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A9:46:61:E9:66:F1:69:7D:A3:E4:2E:61:DC:00:01:63:8E:DA:EC X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:61:5d:2e:b1:e9:22:f6:22:6a:af:2f:52:57:d2:53:03:ab: 82:0f:e1:cb:08:87:3a:17:cf:9a:4b:f5:37:37:b5:eb:75:af: 2a:ff:01:6a:00:84:ec:b1:e0:5a:1a:e1:65:03:ff:ae:d1:02: 7c:b1:24:13:81:99:5d:18:4b:2c:31:94:84:a8:7c:eb:d6:4c: 30:3a:e5:67:1a:81:11:a2:27:72:a4:cb:9d:46:4b:08:42:8d: f5:24:8e:a1:83:7e:15:9c:7e:13:8c:e3:6e:18:a1:a8:b2:69: 63:40:a7:d6:e1:41:3e:b9:b4:8d:33:f4:44:86:5f:89:76:1f: 9a:3a:79:bb:00:c5:d7:62:b5:17:ca:d5:98:d7:97:fe:13:96: 8a:48:b3:91:41:50:b0:71:8d:ac:f9:05:e1:1c:f2:66:e0:e4: 82:e0:72:8f:bc:43:0a:42:21:74:c3:ee:96:29:31:66:1a:66: 4e:5d:a4:7a:53:0a:06:e9:1f:3a:df:76:35:21:be:b7:e8:8e: 93:86:23:71:fe:05:21:af:72:83:4f:09:4c:f1:01:29:20:d0: 1e:0a:c8:2a:f7:d6:c0:15:44:19:4f:b8:d9:92:50:85:64:dd: 42:91:29:63:a8:44:6a:0c:3d:71:1e:db:c4:49:7f:e9:7b:88: 68:b0:57:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZystRtCzrDuduUaHXlo4cdVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjYwMzAyMDQwMTE1WhcNMjYwMzAzMDQwMTE1WjAzMTEwLwYDVQQD EygzM2E5NDY2MWU5NjZmMTY5N2RhM2U0MmU2MWRjMDAwMTYzOGVkYWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7XbWWjebzzS4iMiInzcgSy6jt9j 9LU3AE2dYfTiyc+WzWe4G4KjTfnAeLuPm6mM6QBfBzxaPPqdwcb52IVzsC04H0e9 hSkR36U3BTDAbGk1u7hCW5oO/IxqDXxVrLpmaYRfCxnbaE4PePXrc21BddulMaJG Tt8vuKrpuwW8cvc8GmBH3zE1f3E0hkDEEo82//Giisv6GuXgFzTU9ekzy1a7nW+8 yDo+W3U2YgZ/2eAMPXAbpKnidAm4tRDPQ/8bpEtsopMY9tfvEDD0NzEBZxBHn6dI 7Ii7Whykl9jmNqUTgJkX5XwxvbXD3muqnEXivloMBZyT9QyIYG5rpEYUmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOpRmHpZvFpfaPkLmHcAAFjjtrsMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmFdLrHp IvYiaq8vUlfSUwOrgg/hywiHOhfPmkv1Nze163WvKv8BagCE7LHgWhrhZQP/rtEC fLEkE4GZXRhLLDGUhKh869ZMMDrlZxqBEaIncqTLnUZLCEKN9SSOoYN+FZx+E4zj bhihqLJpY0Cn1uFBPrm0jTP0RIZfiXYfmjp5uwDF12K1F8rVmNeX/hOWikizkUFQ sHGNrPkF4RzyZuDkguByj7xDCkIhdMPulikxZhpmTl2kelMKBukfOt92NSG+t+iO k4Yjcf4FIa9yg08JTPEBKSDQHgrIKvfWwBVEGU+42ZJQhWTdQpEpY6hEagw9cR7b xEl/6XuIaLBXog== -----END CERTIFICATE-----Generated at Mon Mar 2 15:44:38 2026 by rpki-client