$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft File: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json) Hash identifier: lw06ik+q1gbFqYZoiXJePAH1NztxNlLgSnzYHaVkfI8= Subject key identifier: 11:01:2F:D2:15:5A:F7:95:B9:8D:4B:06:A2:8B:95:57:4C:2E:29:EF Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 019A4EBD3EBA78AE1F04DC6B7FE0B290A047 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft Manifest number: 1746 Signing time: Tue 04 Nov 2025 12:00:16 +0000 Manifest this update: Tue 04 Nov 2025 12:00:16 +0000 Manifest next update: Wed 05 Nov 2025 12:00:16 +0000 Files and hashes: 1: 05T5QjbJNc87hT4My9l-JdCX1h4.roa (hash: iWvw7hOFWKPo65JahFO85oDHfJOnZV1Mm2k2unmLhhE=) 2: 1RAZSq7_BCIXMPLmCNYBwnRPVeM.roa (hash: iP8JwzeV1htPI5dhx1UE8Z1vTHtvlA2uWPOR/wMsfgs=) 3: 5m85a6z_82pxvCFTAubCZE3IDRY.roa (hash: yTwyQOsGZdUMHgKCUc+pKc+Yl8K88OgV6IbbvGfhyYk=) 4: CmOI9SR69ovMKrxlDxbUWh5QUU0.roa (hash: ebd4rV/RF1OTbOXyyPqPuU0N5clQOOerkc0GReb1J2w=) 5: Cw3KSb4w5fVGO1h3Oj_H-hpchVg.roa (hash: uQeSPU2EF8IdzkDhENLmsFnhh9oxYjUNdNs+h74gmgY=) 6: JAH3IXMvbG6Ys2dPmwodnWJGeoI.roa (hash: Gw60ldKvXUBK2ktt+kjbpS50udL3AC6hPM4eFLUJXXw=) 7: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: KIDzKaGdmXDTsRTfAZ1d5DhVJ8DG5np+QHDOncTIQuw=) 8: OX7N03gSPb4sMX_V-5X6zyQ6WaA.roa (hash: BlJco9f8HDqfOjHCtNduALgKgBNAz1Kj7Oy3Vc4sp3s=) 9: WMM-Jj0p6VWzGlo6msh5tpjK74c.roa (hash: /4WO/iijr2ysoJfrqLnn3dB9+scGttOptVRk8eNo8H4=) 10: g4rTsZZ6qTMpSVPR-7TASI0eYf8.roa (hash: H0dCl0trInj59i3ls7vMuF/05FWvOMm7A3kIRBvL3Rw=) 11: h7K92qiMiWFLtkqLXfWLx7T3RS0.roa (hash: SXAVcoWGoZlytOpyw4bPPikyafW7og6IlMVyTr7sX3s=) 12: kojEemV1y3p1Ig0PF0Qwwmhe1Bs.roa (hash: Oye8rISWv3W8lfSMiPLOOdMEyDfiF8khVTUsBLT1Pro=) 13: oWWO6Pva3OKGYV4SbuU_A-N5y1U.roa (hash: wiPRw1JJ6JQ3Y/GXPGUGO3wdWm/JMB2trum1N3IbVAQ=) 14: pPQq_lolA8g8QxXqDDucDfwuETo.roa (hash: L1m+KNUP0y0o8T6Tj0pDmrtwsUBi0b51YKd4t4w0w/g=) 15: qhjSfnViRtAuJX9-HloVGl6e8yQ.roa (hash: 0c4CC/UoASiPziDV/ISjZ0Wa5pg6sbXo1QCcNSiEk04=) 16: sgjR_TQoyxizIzgpiP-8OxPCBvo.roa (hash: iPQU3YE5gJm0+Jc6VvldyH+AsK4ZTxvbcSdICCWexFM=) 17: wEmUsp4YHWLJBUqUou-fXnddnNI.roa (hash: mZCp4WYgBJMwxzFtP8EVDxeoQ9DuWh60+a4TXLeKQbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 12:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:bd:3e:ba:78:ae:1f:04:dc:6b:7f:e0:b2:90:a0:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Nov 4 12:00:16 2025 GMT Not After : Nov 5 12:00:16 2025 GMT Subject: CN=11012fd2155af795b98d4b06a28b95574c2e29ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:69:44:9a:5d:2e:b1:e5:f4:a3:e4:94:c6:0d: 5a:56:9e:ae:1a:94:7c:e4:17:25:a6:1f:e9:9c:8b: a6:a0:ad:f5:01:6a:bd:a2:95:25:f0:4e:3e:54:8e: 36:af:f4:85:8c:09:c1:35:44:18:be:fe:98:a3:c9: 53:fd:54:79:8e:66:b2:aa:e9:68:4c:c5:e3:a0:e1: 8f:35:d6:16:e9:11:50:e3:50:15:69:54:93:56:12: 6f:53:4b:2e:d4:2f:2e:e6:39:53:2c:f6:44:6f:a2: 74:f5:ca:54:d9:18:06:27:e6:83:1e:d3:df:fd:69: 4e:08:de:1b:e8:7d:52:d7:1a:a2:f7:ea:b4:87:43: be:4b:3f:f9:c0:66:06:08:0d:07:fa:f6:50:e0:15: 3c:db:3c:21:fa:a7:9e:14:9c:3f:29:3f:1a:2f:36: f6:29:33:bc:2a:fb:d2:c9:2d:07:18:6e:d9:27:0d: c6:e8:74:7d:f9:c2:1c:77:74:91:f3:57:a9:f7:23: 5d:86:a3:bd:73:99:3c:46:58:43:4e:36:a1:15:fe: ff:28:cb:e4:ac:d0:cc:6c:26:22:fb:c2:da:78:bb: ba:07:78:a5:f9:12:ca:ef:c0:86:ab:67:3e:37:45: c6:d0:8f:48:ed:6c:63:40:7c:b1:4c:ee:7d:b4:95: 7d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:01:2F:D2:15:5A:F7:95:B9:8D:4B:06:A2:8B:95:57:4C:2E:29:EF X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:97:34:56:a9:d8:2c:11:6a:36:d4:aa:97:c0:45:6c:1d:95: 38:83:e3:52:90:fa:48:1b:83:a3:ca:9a:7c:bb:ba:71:40:e1: d1:28:00:29:98:83:6f:6f:09:1e:45:38:32:fa:5e:f4:c6:70: e7:13:3c:eb:9b:44:d9:48:dc:74:6e:16:b0:47:af:51:8b:ea: a3:de:0b:91:0c:2b:cb:f9:9b:5b:c2:fd:73:6d:39:87:20:50: dd:0e:73:8c:d7:61:e0:6b:97:3d:cb:b0:63:3b:04:6a:96:c2: cf:db:90:0b:20:20:51:77:a8:59:54:4d:29:1b:b1:e3:dd:82: 4a:8a:be:9f:9c:bf:5e:ed:08:fe:55:ca:f4:95:fc:f2:3b:6d: 52:7f:68:b1:f2:ba:f8:0c:8f:2d:06:68:42:74:b9:6d:f2:25: 01:aa:51:0b:52:47:9d:78:7e:6c:92:a1:e8:21:52:de:74:ed: d8:fe:8e:ac:73:1d:c4:c3:24:72:8c:9f:24:90:2b:5a:50:e2: f6:d8:0c:e9:f6:ee:98:05:e7:f1:6e:8b:22:32:02:41:46:b0: ab:e5:20:52:52:56:b6:5f:b2:dc:89:1d:f5:3c:b0:d2:d4:87: c4:63:02:0b:8f:a3:83:90:90:fb:c4:cb:83:ba:36:0d:ae:8b: 93:67:81:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOvT66eK4fBNxrf+CykKBHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjUxMTA0MTIwMDE2WhcNMjUxMTA1MTIwMDE2WjAzMTEwLwYDVQQD EygxMTAxMmZkMjE1NWFmNzk1Yjk4ZDRiMDZhMjhiOTU1NzRjMmUyOWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGlEml0useX0o+SUxg1aVp6uGpR8 5Bclph/pnIumoK31AWq9opUl8E4+VI42r/SFjAnBNUQYvv6Yo8lT/VR5jmayqulo TMXjoOGPNdYW6RFQ41AVaVSTVhJvU0su1C8u5jlTLPZEb6J09cpU2RgGJ+aDHtPf /WlOCN4b6H1S1xqi9+q0h0O+Sz/5wGYGCA0H+vZQ4BU82zwh+qeeFJw/KT8aLzb2 KTO8KvvSyS0HGG7ZJw3G6HR9+cIcd3SR81ep9yNdhqO9c5k8RlhDTjahFf7/KMvk rNDMbCYi+8LaeLu6B3il+RLK78CGq2c+N0XG0I9I7WxjQHyxTO59tJV9LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEBL9IVWveVuY1LBqKLlVdMLinvMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5c0VqnY LBFqNtSql8BFbB2VOIPjUpD6SBuDo8qafLu6cUDh0SgAKZiDb28JHkU4Mvpe9MZw 5xM865tE2UjcdG4WsEevUYvqo94LkQwry/mbW8L9c205hyBQ3Q5zjNdh4GuXPcuw YzsEapbCz9uQCyAgUXeoWVRNKRux492CSoq+n5y/Xu0I/lXK9JX88jttUn9osfK6 +AyPLQZoQnS5bfIlAapRC1JHnXh+bJKh6CFS3nTt2P6OrHMdxMMkcoyfJJArWlDi 9tgM6fbumAXn8W6LIjICQUawq+UgUlJWtl+y3Ikd9Tyw0tSHxGMCC4+jg5CQ+8TL g7o2Da6Lk2eBSQ== -----END CERTIFICATE-----Generated at Tue Nov 4 20:22:43 2025 by rpki-client