$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft File: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json) Hash identifier: pPhZXTbhfiXNsqjzvGjiOyfUVgVZgmK9juV7pXMAlU4= Subject key identifier: 87:51:50:48:3F:9C:8D:84:13:BC:AF:17:21:72:F4:AE:AD:8F:A3:C2 Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 01978244C86A0358A16B0800C82B8F28CBB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft Manifest number: 15D2 Signing time: Wed 18 Jun 2025 09:00:35 +0000 Manifest this update: Wed 18 Jun 2025 09:00:35 +0000 Manifest next update: Thu 19 Jun 2025 09:00:35 +0000 Files and hashes: 1: 05T5QjbJNc87hT4My9l-JdCX1h4.roa (hash: iWvw7hOFWKPo65JahFO85oDHfJOnZV1Mm2k2unmLhhE=) 2: 1RAZSq7_BCIXMPLmCNYBwnRPVeM.roa (hash: iP8JwzeV1htPI5dhx1UE8Z1vTHtvlA2uWPOR/wMsfgs=) 3: 1wyAYxpyA9FCN1lyvO-C57LVFXA.roa (hash: y/6pL2V+BG6MuxMmBUR7F2hu5ij3F/ux58ms3Mk1R0w=) 4: 5m85a6z_82pxvCFTAubCZE3IDRY.roa (hash: yTwyQOsGZdUMHgKCUc+pKc+Yl8K88OgV6IbbvGfhyYk=) 5: CmOI9SR69ovMKrxlDxbUWh5QUU0.roa (hash: ebd4rV/RF1OTbOXyyPqPuU0N5clQOOerkc0GReb1J2w=) 6: Cw3KSb4w5fVGO1h3Oj_H-hpchVg.roa (hash: uQeSPU2EF8IdzkDhENLmsFnhh9oxYjUNdNs+h74gmgY=) 7: JAH3IXMvbG6Ys2dPmwodnWJGeoI.roa (hash: Gw60ldKvXUBK2ktt+kjbpS50udL3AC6hPM4eFLUJXXw=) 8: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: RRrrM7qP7DP8T8ZOfKLmmyuDZDiUfLAPw4OAPGt3yEc=) 9: WMM-Jj0p6VWzGlo6msh5tpjK74c.roa (hash: /4WO/iijr2ysoJfrqLnn3dB9+scGttOptVRk8eNo8H4=) 10: ZKvHQby0NQ22M7VFCjQ_KqulEx8.roa (hash: ivLBRNaqrPZubBjRNX4dYKOMZvwYNsaC4yTeWqcGhaw=) 11: g4rTsZZ6qTMpSVPR-7TASI0eYf8.roa (hash: H0dCl0trInj59i3ls7vMuF/05FWvOMm7A3kIRBvL3Rw=) 12: h7K92qiMiWFLtkqLXfWLx7T3RS0.roa (hash: SXAVcoWGoZlytOpyw4bPPikyafW7og6IlMVyTr7sX3s=) 13: kojEemV1y3p1Ig0PF0Qwwmhe1Bs.roa (hash: Oye8rISWv3W8lfSMiPLOOdMEyDfiF8khVTUsBLT1Pro=) 14: oWWO6Pva3OKGYV4SbuU_A-N5y1U.roa (hash: wiPRw1JJ6JQ3Y/GXPGUGO3wdWm/JMB2trum1N3IbVAQ=) 15: pPQq_lolA8g8QxXqDDucDfwuETo.roa (hash: L1m+KNUP0y0o8T6Tj0pDmrtwsUBi0b51YKd4t4w0w/g=) 16: qhjSfnViRtAuJX9-HloVGl6e8yQ.roa (hash: 0c4CC/UoASiPziDV/ISjZ0Wa5pg6sbXo1QCcNSiEk04=) 17: rGuulbHd9kRPQ-Vjw-QiFUOKt_A.roa (hash: B7yPzOPI+uMdkQOcYQEtalAjsrTFRRTxVc7BxeoQZ2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Jun 2025 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:82:44:c8:6a:03:58:a1:6b:08:00:c8:2b:8f:28:cb:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Jun 18 09:00:35 2025 GMT Not After : Jun 19 09:00:35 2025 GMT Subject: CN=875150483f9c8d8413bcaf172172f4aead8fa3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b4:61:52:74:c9:63:93:0e:f4:df:a0:5f:2c: 01:45:1e:af:2c:7d:53:a3:7e:5f:b0:fa:7b:d3:cf: 8e:8e:77:e4:87:8c:12:04:08:c2:98:f2:38:21:5e: d0:10:34:b7:f3:9f:e2:6b:76:00:17:19:4d:38:5c: a6:be:9a:48:1c:1a:17:14:64:0b:8d:e3:bd:30:29: 7d:58:97:8f:95:75:de:c3:46:af:36:31:10:c4:c6: ea:52:26:9e:f0:9a:6e:d1:7d:84:5c:69:1b:0d:79: 02:29:d6:ae:4c:d4:04:17:42:c6:32:fe:05:5a:99: 63:9b:37:8f:7d:a2:08:0a:90:e8:54:0e:4b:27:19: 97:5c:a5:79:8c:4e:8d:69:04:f5:71:86:b8:a1:8e: 32:f0:09:b3:2d:56:24:1c:05:06:e4:d2:bc:1a:aa: f9:37:d1:79:89:19:20:f3:70:80:18:68:98:81:ef: 5f:da:a7:71:0d:95:b9:b4:99:f9:e7:f7:5a:ef:1e: b2:ac:5e:e2:e1:9a:14:2d:72:43:45:a3:f5:e9:4f: c3:61:18:e2:00:b6:00:23:56:df:6c:39:fd:19:4d: 5e:4f:4d:aa:24:9e:aa:c8:dd:e3:9d:88:b6:1e:00: 90:b3:77:97:26:c5:8d:a1:5c:64:20:63:6c:30:30: 50:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:51:50:48:3F:9C:8D:84:13:BC:AF:17:21:72:F4:AE:AD:8F:A3:C2 X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d0:7c:f9:a4:2c:0d:6f:2d:90:33:78:cb:b8:5c:41:01:1f: 05:0d:61:67:0d:49:c1:74:29:46:7e:f0:2a:e3:69:18:f2:cd: 70:ca:cb:93:39:83:d5:80:ac:09:97:26:94:e6:e0:5e:7a:f4: 45:50:22:f3:e5:11:63:4c:64:82:7d:6c:2e:66:37:21:15:e1: 66:e4:84:04:e8:1e:ca:1a:e1:7b:ce:1d:8e:c3:37:19:c1:01: 51:86:25:e2:20:25:a6:90:e3:cb:ea:96:57:e1:43:2f:df:2e: 71:d6:14:ac:0e:0d:df:fe:c9:af:ad:fb:8c:32:eb:4f:6e:17: 6a:2f:f6:84:82:62:35:85:18:01:1d:47:76:a1:4f:5e:d6:1f: 3b:5c:5e:f6:18:39:9b:46:8b:ed:da:c5:2f:11:41:01:20:35: bb:85:4b:ba:f7:78:7c:60:67:72:b5:77:03:7c:42:6f:d2:5b: 5f:c8:01:cd:31:1d:4a:66:cc:f5:f1:7b:b5:c7:2a:08:cc:2e: 54:ec:ed:37:04:13:58:28:7f:94:ab:7b:9f:8e:c7:4d:b6:88: 52:b9:68:49:5e:c8:de:01:2c:d9:8c:19:6b:b7:49:5b:2b:21: 48:2b:d1:8f:b7:07:b1:4a:c3:d9:2b:c7:83:ba:dc:9b:e3:93: 64:1b:2b:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeCRMhqA1ihawgAyCuPKMu4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjUwNjE4MDkwMDM1WhcNMjUwNjE5MDkwMDM1WjAzMTEwLwYDVQQD Eyg4NzUxNTA0ODNmOWM4ZDg0MTNiY2FmMTcyMTcyZjRhZWFkOGZhM2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLRhUnTJY5MO9N+gXywBRR6vLH1T o35fsPp708+Ojnfkh4wSBAjCmPI4IV7QEDS385/ia3YAFxlNOFymvppIHBoXFGQL jeO9MCl9WJePlXXew0avNjEQxMbqUiae8Jpu0X2EXGkbDXkCKdauTNQEF0LGMv4F WpljmzePfaIICpDoVA5LJxmXXKV5jE6NaQT1cYa4oY4y8AmzLVYkHAUG5NK8Gqr5 N9F5iRkg83CAGGiYge9f2qdxDZW5tJn55/da7x6yrF7i4ZoULXJDRaP16U/DYRji ALYAI1bfbDn9GU1eT02qJJ6qyN3jnYi2HgCQs3eXJsWNoVxkIGNsMDBQqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdRUEg/nI2EE7yvFyFy9K6tj6PCMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdB8+aQs DW8tkDN4y7hcQQEfBQ1hZw1JwXQpRn7wKuNpGPLNcMrLkzmD1YCsCZcmlObgXnr0 RVAi8+URY0xkgn1sLmY3IRXhZuSEBOgeyhrhe84djsM3GcEBUYYl4iAlppDjy+qW V+FDL98ucdYUrA4N3/7Jr637jDLrT24Xai/2hIJiNYUYAR1HdqFPXtYfO1xe9hg5 m0aL7drFLxFBASA1u4VLuvd4fGBncrV3A3xCb9JbX8gBzTEdSmbM9fF7tccqCMwu VOztNwQTWCh/lKt7n47HTbaIUrloSV7I3gEs2YwZa7dJWyshSCvRj7cHsUrD2SvH g7rcm+OTZBsrKg== -----END CERTIFICATE-----Generated at Wed Jun 18 11:23:00 2025 by rpki-client