$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft File: JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json) Hash identifier: F+N76oMRos5anVNNR4qvPqbPOYzQPI4aoOrvuCpdMC0= Subject key identifier: 43:C6:43:DD:DA:BE:D2:7C:2E:84:91:29:1C:AE:00:0D:37:04:78:16 Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019FA93E7BDB0B2637D41CDC210BD4EBBFC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft Manifest number: 172A Signing time: Tue 28 Jul 2026 15:01:11 +0000 Manifest this update: Tue 28 Jul 2026 15:01:11 +0000 Manifest next update: Wed 29 Jul 2026 15:01:11 +0000 Files and hashes: 1: 1-J4PSDEl9d0llDjfWsIWQxWc6_I.roa (hash: ypQcjGIhT4f6yMw/Eo/q0CXm3np4TkiH1MrKx8KGA8U=) 2: FXvxd8iSb5UOqnUQemVQoiPFHr0.roa (hash: xAaj8WYWxsUYDp5IjPLpIHhUT6JTzTLFtyE0B9OOTCo=) 3: Hhk99kTP4LCptCcuzr46HrrOd-M.roa (hash: KKoc5a/NPGDFa/jCr9dayn05xHXif4MHgG7H+qe8WPY=) 4: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: xGZwCXRRSrFhmhV3j4YrWhp78B5/u/hMP1+0xvMNlp8=) 5: OCOSxMuOE7etqm6ym3cnIhKe0pw.roa (hash: PN3RvFQgu5pZxlCTS4LWpAyJgk2AnIZ4RZiwMhHQpjM=) 6: QAlAc_HBKVW9DIWsgBjzQBqlU_E.roa (hash: 01SGs9bF17s9PyhMPPV7iXjRmYd6onnnyv/wBFXQkVo=) 7: aFDzVrUv1Lh1tFcqGx2iUSN6t2Q.roa (hash: R1nEMHyCK4EFeYy8SvPh7cZUDUUFnN2AYX39p24Ukns=) 8: cH5zbNz1Wh4pKh9CZsUewwJjPYc.roa (hash: o7xAeOganmOKEfHkamPKsHaW6ANhyRw4vYPfGEPHmXY=) 9: eVqy0YQ7fL6ZmZ3Ii8D0s-jZG9U.roa (hash: O6uAjr20YNEq9FDlWQolrNL9lhiTBSVc+YvX41XqvEc=) 10: ekIg_EozOl2eKAl7YxwTNudO2Ck.roa (hash: H4suzunJCL6M7y1bzbaVMfsdpvdTVp5XzrKgoj5v1bk=) 11: kJQG6geGOu2RAJRA_7GzYnIhBYQ.roa (hash: XUqqP9TjiZCkPcmNHG3SdvuU3ttO6pgsFTxEU7wHJZE=) 12: mw4aax5neyyO7biCg_R2Z4yrLVY.roa (hash: kswP+nDZIDDBYumEaipi/RTPJYiM8dVDU96MMsZcT28=) 13: nmDQzXrowDtDsmaT7IpPejjRWG0.roa (hash: GXfSa12Z+HzkUJgQU3oz+bpDRacv3sjfzvlZHnK3Bnk=) 14: rlGWAgfAA94vdNw8Yce_2JC5ZQ0.roa (hash: mDS85C7fKFjtrZ9jEwtQ1X6vTpwU05nL4sqzCM649dA=) 15: x0Q_UA5bt6672Dm9-Yp-CrnW3nQ.roa (hash: ITlCsYh8cqhggq4VF3aslLQZ6vv7ci4qGlAuU+En704=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 15:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:3e:7b:db:0b:26:37:d4:1c:dc:21:0b:d4:eb:bf:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Jul 28 15:01:11 2026 GMT Not After : Jul 29 15:01:11 2026 GMT Subject: CN=43c643dddabed27c2e8491291cae000d37047816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6c:c4:a8:d4:0c:93:23:03:28:15:f8:aa:75: d2:08:75:c2:b1:86:ba:95:9b:0a:25:5a:5b:45:15: 46:2c:fa:2e:57:f0:b1:7c:3c:be:e7:8f:5d:d3:b0: cd:28:e6:9c:f1:8a:cd:a6:45:10:83:82:7c:5c:52: 92:43:28:6e:30:32:5c:98:76:28:17:31:1f:8e:65: ed:30:03:0e:d1:7c:fe:7a:ca:57:79:ad:15:fc:af: b0:d3:23:2b:58:56:bf:3d:d5:a0:51:e2:3e:cd:50: 10:99:7c:ac:49:7c:cd:2f:7f:bf:4a:e5:6b:c6:90: bd:63:29:bc:b6:3f:20:66:2c:57:1b:7a:a9:f8:b6: 6f:5c:6e:0a:0b:99:c8:a9:6f:8f:93:a6:96:2e:79: 74:27:9f:ad:32:13:2d:2f:37:bb:9e:06:a8:91:04: e7:3a:33:98:15:95:f6:4b:2e:a9:22:db:b3:0c:7b: e6:54:69:55:50:00:19:43:ef:56:93:ad:67:b1:e0: 32:b4:d1:f6:64:7b:12:d4:23:d6:33:33:dd:94:0a: 8b:d3:21:a3:a1:76:c3:b8:4d:73:6d:a0:a2:d2:0c: 4b:4f:50:fa:c9:5c:2e:5b:30:38:bd:82:da:b4:e9: 49:46:7f:78:2f:b9:ad:39:21:06:4a:45:4c:a7:72: be:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C6:43:DD:DA:BE:D2:7C:2E:84:91:29:1C:AE:00:0D:37:04:78:16 X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ab:e6:ff:a9:e2:47:91:b8:c2:46:41:ec:36:f7:4e:07:8f: df:e4:6f:69:6c:22:f5:c7:de:a9:e4:98:b6:51:fd:0f:83:ae: 73:a3:1d:1c:09:7f:db:fc:e3:56:51:ce:8b:e6:7e:1b:ee:65: 5b:1f:9a:5f:ec:8f:01:1c:38:eb:cc:71:98:da:14:66:de:bd: 5a:55:56:c5:b5:f1:7c:e6:92:59:ae:77:db:b3:ac:1d:06:6f: be:d9:e1:15:d2:d6:c1:aa:5b:90:77:28:2a:1b:0e:65:6e:ca: 5e:4c:8e:7e:a8:86:d4:a2:98:ed:28:3d:31:74:5c:ce:01:6a: 3d:ec:b3:11:2e:89:4b:ac:61:8c:c6:db:64:7f:77:b0:f5:cd: 14:88:0e:b8:1a:dc:b3:57:09:eb:81:66:2b:09:99:c8:85:3e: 9f:6e:88:8a:2d:0e:ab:44:d6:ad:b1:8f:bc:2d:3f:46:94:a0: a4:e5:c0:e3:b8:58:30:49:fb:46:30:5d:41:c8:c3:00:2b:0c: a1:7b:51:5a:d7:9b:66:4e:e8:5b:ca:9b:9b:ef:51:52:ad:2c: ea:76:f6:55:ca:54:a9:db:23:3a:2c:33:5b:58:10:54:23:a8: fb:93:c6:6d:04:61:2e:2d:cc:6b:f9:6f:d4:7e:87:38:a9:59: ce:8e:62:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pPnvbCyY31BzcIQvU67/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjYwNzI4MTUwMTExWhcNMjYwNzI5MTUwMTExWjAzMTEwLwYDVQQD Eyg0M2M2NDNkZGRhYmVkMjdjMmU4NDkxMjkxY2FlMDAwZDM3MDQ3ODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGzEqNQMkyMDKBX4qnXSCHXCsYa6 lZsKJVpbRRVGLPouV/CxfDy+549d07DNKOac8YrNpkUQg4J8XFKSQyhuMDJcmHYo FzEfjmXtMAMO0Xz+espXea0V/K+w0yMrWFa/PdWgUeI+zVAQmXysSXzNL3+/SuVr xpC9Yym8tj8gZixXG3qp+LZvXG4KC5nIqW+Pk6aWLnl0J5+tMhMtLze7ngaokQTn OjOYFZX2Sy6pItuzDHvmVGlVUAAZQ+9Wk61nseAytNH2ZHsS1CPWMzPdlAqL0yGj oXbDuE1zbaCi0gxLT1D6yVwuWzA4vYLatOlJRn94L7mtOSEGSkVMp3K+jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPGQ93avtJ8LoSRKRyuAA03BHgWMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6vm/6ni R5G4wkZB7Db3TgeP3+RvaWwi9cfeqeSYtlH9D4Ouc6MdHAl/2/zjVlHOi+Z+G+5l Wx+aX+yPARw468xxmNoUZt69WlVWxbXxfOaSWa5327OsHQZvvtnhFdLWwapbkHco KhsOZW7KXkyOfqiG1KKY7Sg9MXRczgFqPeyzES6JS6xhjMbbZH93sPXNFIgOuBrc s1cJ64FmKwmZyIU+n26Iii0Oq0TWrbGPvC0/RpSgpOXA47hYMEn7RjBdQcjDACsM oXtRWtebZk7oW8qbm+9RUq0s6nb2VcpUqdsjOiwzW1gQVCOo+5PGbQRhLi3Ma/lv 1H6HOKlZzo5iug== -----END CERTIFICATE-----Generated at Wed Jul 29 01:31:35 2026 by rpki-client