$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft File: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json) Hash identifier: qyiTdqAwCkG2P1a++FJRx5XhzYAO/HuO8O/HLLeH/W8= Subject key identifier: E6:F0:ED:F4:20:C3:4F:C5:01:B4:B7:B3:FC:C9:6B:74:78:F1:E4:2D Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 01A1347ECCB14ED979D893DA1A2BDBE1DDF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft Manifest number: 1AE4 Signing time: Tue 13 Oct 2026 09:01:27 +0000 Manifest this update: Tue 13 Oct 2026 09:01:27 +0000 Manifest next update: Wed 14 Oct 2026 09:01:27 +0000 Files and hashes: 1: 17xPyZlJEOUx5zEX8ZO8erx4H74.roa (hash: o78ZIjezoB+5hFnpSV2hhbyqsGtrTAReQHzLkPsSMs8=) 2: 1HSk7ol-NPF4p9rYRcl-Q6JPZDo.roa (hash: +FiTw/39WUh9LOAGYF5ppee39UlTfw1pjYmCcmzZE8I=) 3: 1wsMVCeL93UzN5b0Yvsk2yYuWLA.roa (hash: 99X69fNFzFuCPq29Xhv4yLun4KnsOh44dtaBCjapBbQ=) 4: 2RHKEFUbX-V0Mf6y31Iq5dGlemY.roa (hash: 22aNA0RqHM/lo1ZuXKI24lPSyNZYgt9FvnHMilKuHJY=) 5: 2q-y1nHjenu9twtcEVm8uPj-ddE.roa (hash: kKq4uoPjr9yzILuLqmWkg6QD55vf8pDPM+f+YLfRhpg=) 6: C58HKVenwwmbh1jkwoeqIUWdglo.roa (hash: dbM/VaOE1y6PqBg/KjdbXvgt9ovsuviuBnEC3nra0Jo=) 7: Ebg0ux5rcibv_t_FMLVeGO1p-6s.roa (hash: /4FrUXbz6Hz/uPMenmCysdLSPs/BOSlhWYQVSb8RAn0=) 8: GEKxvGic2KzXVJsj3dcok72CGco.roa (hash: aFBfIqFU6Ts846KW9SXo+ReP3IL9/U988JwYsIxQACw=) 9: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: jhrc2Jj/i+/S5rCOCXySm7jrd6KdNvQksX+jdIjqNN4=) 10: TN_g4sfmmPrHK_oZ30J7gNWtpIY.roa (hash: m5dgi6YlmiEMbhGuQK1tT2ie/bg//bcOLn6xqpAH6Zs=) 11: U_DCEtPw_hUMwrzj8r6wUIXBPig.roa (hash: zOV0/cSp312KHscfdmAUHtLOyMQW+m7fH0EzuAciKbU=) 12: WPjlp9q2_irNOFHbvH1KxHiPhtg.roa (hash: nGNubH07FwuuTBRkZu6sDa2SbPeua6Dt0ORJDlPOSMk=) 13: XVl9Jn76mWQ8ncaJ_wDuumCSFsA.roa (hash: Hs6XsuXHPXeVRFbGDUcPFLc6y5U4gwmlkZ/AR7/NeXE=) 14: h-WKTlUMQLOqlyLFoGBOWfk4OrY.roa (hash: ieHJu/E+ae+fHEeWcEYzkuUUaqlobiXz9aHuLMbuIyg=) 15: hscVJa1zcFdyUccI8x5yH0qcNiw.roa (hash: uNP1bqmcK4itRcnCcHmI+yjjtNKZn/HDFyPe+Myxey8=) 16: js8xc1HEU1XUI0sBZfF0bl5Ntsc.roa (hash: AdO5qS0u+S/3mUbxDukdjf7Jfxyoy7D8xgFedRy81VA=) 17: k_MSpCKVnChWzSccoFJBjl40Vo8.roa (hash: VdSgjLWna9h9svrbMMSXJmkEe/+wqNq0RNqZ0DwPUZc=) 18: xyAifHL4yJafsXbZXrkrgodDKkI.roa (hash: 5dlJ/03oKMrYHI2ijFPlXqVyiklmxqeJzGBSWajGiKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Oct 2026 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:34:7e:cc:b1:4e:d9:79:d8:93:da:1a:2b:db:e1:dd:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Oct 13 09:01:27 2026 GMT Not After : Oct 14 09:01:27 2026 GMT Subject: CN=e6f0edf420c34fc501b4b7b3fcc96b7478f1e42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:58:d8:82:d0:61:01:ab:89:6c:fa:55:2c:2c: 95:da:20:36:c7:ce:e4:aa:9d:af:48:e4:75:ca:5b: 66:f2:61:00:89:52:38:df:9b:5c:20:bf:6f:58:6f: 10:7a:19:79:a1:ab:2f:b3:f2:aa:89:c6:66:bf:17: 74:ff:45:b6:31:2d:32:60:ea:1c:c4:63:4c:3a:0b: 47:cd:b7:f2:5e:01:6c:72:a3:da:5a:41:81:23:78: 7c:3d:a4:de:9d:e2:03:26:dd:a7:51:26:ec:01:b8: 15:50:3c:36:f4:d8:7a:7a:7f:ae:fe:88:98:df:ac: 86:0a:6a:24:9e:bf:c1:d7:84:ef:51:6c:6b:0a:c8: 55:df:8a:94:23:ed:99:2e:64:7c:91:60:44:0f:b5: d4:4e:6b:0a:45:15:99:a6:34:43:c1:10:3a:fb:4d: 46:79:a2:6a:ec:de:2c:18:c6:8c:43:6a:6d:39:34: a3:a0:a7:2f:35:99:36:fb:05:7a:28:10:cb:0c:cb: 7c:81:44:6f:8f:3a:09:e7:2e:43:54:a3:9a:31:9e: 72:c4:b4:0b:85:8e:29:e2:1e:a9:43:56:34:c6:0c: d9:e2:55:61:ea:dd:d6:c5:03:97:4d:93:1a:db:2e: f8:78:f2:c6:e3:00:93:3d:04:b5:b3:ca:c0:99:76: 36:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F0:ED:F4:20:C3:4F:C5:01:B4:B7:B3:FC:C9:6B:74:78:F1:E4:2D X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:69:17:a6:c3:96:7b:4a:c8:0e:9a:d4:37:b1:77:d4:6d:61: b6:1a:65:63:17:47:ae:a6:59:b5:01:68:b1:19:08:dd:a9:85: 98:63:52:d9:3b:0e:f8:46:61:af:a9:fa:b0:8d:5e:b9:d6:1d: f8:9f:f5:35:37:14:a2:cf:77:d7:93:92:c5:bd:66:e2:89:11: ce:c9:67:32:b0:88:bb:42:30:45:e4:d9:fb:e9:92:8d:ca:1c: 13:55:f4:a2:49:46:f3:c4:f3:16:d3:cf:ab:3d:49:c2:fd:6d: 18:40:56:53:f1:d0:6f:05:df:a9:f1:bb:40:8f:0b:10:e1:00: 65:8e:48:ee:a8:57:d3:70:3b:26:de:e2:9e:e7:a2:19:8a:d4: b8:bb:e3:04:50:8d:6e:13:2f:19:8b:fb:dc:de:80:99:0c:0d: 0f:44:22:23:01:23:93:ae:4c:55:56:0c:98:7d:7f:a9:27:24: 0c:ea:04:40:2f:c3:bf:ec:9d:6b:01:39:e8:8d:a1:e7:c4:84: 70:3f:bf:87:1e:72:b7:ca:14:ad:ae:dc:d7:3b:05:e7:27:9a: 9d:ff:d3:22:30:10:70:c0:f6:79:dc:c8:a3:9d:58:c4:67:37: af:4c:80:be:5d:3f:a4:15:d2:e6:e7:d5:8b:24:88:69:fe:1d: c7:dd:2c:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaE0fsyxTtl52JPaGivb4d3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjYxMDEzMDkwMTI3WhcNMjYxMDE0MDkwMTI3WjAzMTEwLwYDVQQD EyhlNmYwZWRmNDIwYzM0ZmM1MDFiNGI3YjNmY2M5NmI3NDc4ZjFlNDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VjYgtBhAauJbPpVLCyV2iA2x87k qp2vSOR1yltm8mEAiVI435tcIL9vWG8Qehl5oasvs/KqicZmvxd0/0W2MS0yYOoc xGNMOgtHzbfyXgFscqPaWkGBI3h8PaTeneIDJt2nUSbsAbgVUDw29Nh6en+u/oiY 36yGCmoknr/B14TvUWxrCshV34qUI+2ZLmR8kWBED7XUTmsKRRWZpjRDwRA6+01G eaJq7N4sGMaMQ2ptOTSjoKcvNZk2+wV6KBDLDMt8gURvjzoJ5y5DVKOaMZ5yxLQL hY4p4h6pQ1Y0xgzZ4lVh6t3WxQOXTZMa2y74ePLG4wCTPQS1s8rAmXY2DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObw7fQgw0/FAbS3s/zJa3R48eQtMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWkXpsOW e0rIDprUN7F31G1hthplYxdHrqZZtQFosRkI3amFmGNS2TsO+EZhr6n6sI1eudYd +J/1NTcUos9315OSxb1m4okRzslnMrCIu0IwReTZ++mSjcocE1X0oklG88TzFtPP qz1Jwv1tGEBWU/HQbwXfqfG7QI8LEOEAZY5I7qhX03A7Jt7inueiGYrUuLvjBFCN bhMvGYv73N6AmQwND0QiIwEjk65MVVYMmH1/qSckDOoEQC/Dv+ydawE56I2h58SE cD+/hx5yt8oUra7c1zsF5yeanf/TIjAQcMD2edzIo51YxGc3r0yAvl0/pBXS5ufV iySIaf4dx90slQ== -----END CERTIFICATE-----Generated at Tue Oct 13 17:25:01 2026 by rpki-client