$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft File: JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json) Hash identifier: AOa1hS47AT1NK5EmnOBtLMYVkxHQswa2a0DUL5FtAow= Subject key identifier: 8F:1A:7A:69:13:0C:43:64:58:71:BA:09:DA:C2:32:7C:95:8B:4F:06 Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019CA945E806526C857BCF9E0089C2A785B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft Manifest number: 1596 Signing time: Sun 01 Mar 2026 12:00:56 +0000 Manifest this update: Sun 01 Mar 2026 12:00:56 +0000 Manifest next update: Mon 02 Mar 2026 12:00:56 +0000 Files and hashes: 1: Hhk99kTP4LCptCcuzr46HrrOd-M.roa (hash: KKoc5a/NPGDFa/jCr9dayn05xHXif4MHgG7H+qe8WPY=) 2: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: PXgijrappdcHBM1lJeaOcuvQPCwVe5J3kZPxSUpa2v4=) 3: OCOSxMuOE7etqm6ym3cnIhKe0pw.roa (hash: PN3RvFQgu5pZxlCTS4LWpAyJgk2AnIZ4RZiwMhHQpjM=) 4: QAlAc_HBKVW9DIWsgBjzQBqlU_E.roa (hash: 01SGs9bF17s9PyhMPPV7iXjRmYd6onnnyv/wBFXQkVo=) 5: V31h9beA1NjOun41S2jwpOz78Is.roa (hash: GlMTMFuGGPPKj686KygzUnOcrCykbZKdt6LpxxyxucY=) 6: aFDzVrUv1Lh1tFcqGx2iUSN6t2Q.roa (hash: R1nEMHyCK4EFeYy8SvPh7cZUDUUFnN2AYX39p24Ukns=) 7: kJQG6geGOu2RAJRA_7GzYnIhBYQ.roa (hash: XUqqP9TjiZCkPcmNHG3SdvuU3ttO6pgsFTxEU7wHJZE=) 8: mw4aax5neyyO7biCg_R2Z4yrLVY.roa (hash: kswP+nDZIDDBYumEaipi/RTPJYiM8dVDU96MMsZcT28=) 9: mzgOVcQFb5T9zgivAQDtStbnug0.roa (hash: yWUsi1DIu7DGLTRazzHtfk6HfxxO2sQtyKnrpOc0niM=) 10: nmDQzXrowDtDsmaT7IpPejjRWG0.roa (hash: GXfSa12Z+HzkUJgQU3oz+bpDRacv3sjfzvlZHnK3Bnk=) 11: npjtoW8dwDiUTx3uKE2aUXQhgU8.roa (hash: yJBiEf3/qysjdVXL8zVW+gEIWnThC6nOvYOa+8TSI5Q=) 12: rlGWAgfAA94vdNw8Yce_2JC5ZQ0.roa (hash: mDS85C7fKFjtrZ9jEwtQ1X6vTpwU05nL4sqzCM649dA=) 13: x0Q_UA5bt6672Dm9-Yp-CrnW3nQ.roa (hash: ITlCsYh8cqhggq4VF3aslLQZ6vv7ci4qGlAuU+En704=) 14: ySuM-WxG5dbfi2CFirvx8xCRfuA.roa (hash: 1e/p6LGwMmHWJEevpgoA3E6bMz9Y+YCCH+tqNadZtdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:45:e8:06:52:6c:85:7b:cf:9e:00:89:c2:a7:85:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Mar 1 12:00:56 2026 GMT Not After : Mar 2 12:00:56 2026 GMT Subject: CN=8f1a7a69130c43645871ba09dac2327c958b4f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:00:25:95:1e:ea:b6:d4:90:b6:68:6c:e8:f3: b0:35:c3:e7:08:6d:1b:70:99:41:c2:b3:ba:40:81: 8f:dd:0d:45:30:3c:6d:56:67:81:1d:be:ad:74:39: 63:f0:fc:05:cd:79:b5:36:f5:a4:7e:30:c3:01:1e: 60:67:87:4d:24:ab:bc:79:a7:3e:c9:f8:03:53:40: ea:27:e9:37:78:b7:c7:8a:86:81:e1:d6:25:a5:4e: b8:5f:99:3c:94:a1:12:86:06:fb:4c:8f:9b:a1:2d: 23:5c:8c:31:36:9d:3b:a3:45:0b:42:60:64:9d:8b: ee:d0:d2:9f:1d:b1:03:9d:b4:6f:fb:6e:86:ea:5c: 93:0b:75:09:e2:13:d7:b4:d9:82:9a:bb:17:32:f9: be:55:f5:1f:80:af:2b:f6:1a:19:c5:67:c8:08:39: aa:5c:79:5d:a0:ea:38:af:98:02:98:3b:86:90:71: 69:4d:a9:d3:b9:0c:2f:20:d0:04:ac:eb:86:46:ba: 23:33:44:53:fa:cb:b9:42:5a:1c:6b:8f:22:91:51: f8:3b:fe:d8:1a:96:5f:30:82:6d:86:ff:f8:87:cb: ee:d2:ad:66:5b:e5:e8:28:78:a1:73:13:9a:21:8d: 2c:33:24:a1:08:ed:fa:11:6e:75:44:fc:3c:9a:5d: 4d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1A:7A:69:13:0C:43:64:58:71:BA:09:DA:C2:32:7C:95:8B:4F:06 X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:1a:1b:58:ed:17:f6:4f:1b:58:07:e9:e6:b6:cf:bc:33:7c: c0:99:5c:bb:f3:95:85:c8:30:f5:bc:31:a1:2a:d4:ba:ef:58: 8e:77:a6:9a:ee:ea:c6:50:5e:54:b0:8e:8e:aa:24:0e:b7:a9: d7:85:f6:8e:6a:10:09:c7:d9:c2:83:9a:0c:25:56:f0:ee:3d: 73:a5:58:74:03:fc:55:0c:eb:d5:6f:db:b2:a3:cb:b6:d5:af: 78:7b:48:81:91:81:cd:d7:98:7b:ef:cd:23:72:42:fe:e4:e0: 71:8c:af:0e:58:06:73:bc:b7:98:7c:38:77:d2:80:9f:07:c1: 90:00:51:17:bb:37:b4:d0:58:a9:f9:30:35:2a:7e:00:0d:d4: 92:dd:cc:d1:66:b0:95:49:ce:fa:06:5c:e7:82:32:25:0e:05: c9:64:f1:11:43:2d:cf:03:3f:af:d2:d8:b6:a0:1d:4c:b3:59: 28:d6:6b:5d:ea:03:34:b2:bd:2c:da:83:52:dd:c0:c0:82:df: 2f:a7:d9:43:cd:aa:33:86:42:a5:82:fc:90:31:ba:1f:06:21: ad:24:f0:20:00:1d:8e:6b:ca:66:0d:b6:ef:94:8e:07:60:59: d5:e0:99:e5:e4:ad:28:a0:fc:cb:41:0a:28:b2:4d:b5:2d:e6: 04:cd:3a:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypRegGUmyFe8+eAInCp4WyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjYwMzAxMTIwMDU2WhcNMjYwMzAyMTIwMDU2WjAzMTEwLwYDVQQD Eyg4ZjFhN2E2OTEzMGM0MzY0NTg3MWJhMDlkYWMyMzI3Yzk1OGI0ZjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwAllR7qttSQtmhs6POwNcPnCG0b cJlBwrO6QIGP3Q1FMDxtVmeBHb6tdDlj8PwFzXm1NvWkfjDDAR5gZ4dNJKu8eac+ yfgDU0DqJ+k3eLfHioaB4dYlpU64X5k8lKEShgb7TI+boS0jXIwxNp07o0ULQmBk nYvu0NKfHbEDnbRv+26G6lyTC3UJ4hPXtNmCmrsXMvm+VfUfgK8r9hoZxWfICDmq XHldoOo4r5gCmDuGkHFpTanTuQwvINAErOuGRrojM0RT+su5Qloca48ikVH4O/7Y GpZfMIJthv/4h8vu0q1mW+XoKHihcxOaIY0sMyShCO36EW51RPw8ml1NTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8aemkTDENkWHG6CdrCMnyVi08GMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxobWO0X 9k8bWAfp5rbPvDN8wJlcu/OVhcgw9bwxoSrUuu9Yjnemmu7qxlBeVLCOjqokDrep 14X2jmoQCcfZwoOaDCVW8O49c6VYdAP8VQzr1W/bsqPLttWveHtIgZGBzdeYe+/N I3JC/uTgcYyvDlgGc7y3mHw4d9KAnwfBkABRF7s3tNBYqfkwNSp+AA3Ukt3M0Waw lUnO+gZc54IyJQ4FyWTxEUMtzwM/r9LYtqAdTLNZKNZrXeoDNLK9LNqDUt3AwILf L6fZQ82qM4ZCpYL8kDG6HwYhrSTwIAAdjmvKZg2275SOB2BZ1eCZ5eStKKD8y0EK KLJNtS3mBM06Og== -----END CERTIFICATE-----Generated at Sun Mar 1 23:57:48 2026 by rpki-client