$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft File: JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json) Hash identifier: LwcuRnGC2ixJotEk2HfCKRrm+Ip9R2d9UJ3XC8Bgfao= Subject key identifier: F0:9B:DD:39:2D:F6:AD:6F:50:FF:DC:F1:F7:E1:6C:7D:6C:E1:F9:EE Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019D98863E61E497B3B5B05C821B6AB7C544 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft Manifest number: 1616 Signing time: Thu 16 Apr 2026 23:00:27 +0000 Manifest this update: Thu 16 Apr 2026 23:00:27 +0000 Manifest next update: Fri 17 Apr 2026 23:00:27 +0000 Files and hashes: 1: AYBhm-n2DtjBD2-_VERC8enxMWk.roa (hash: iqyny5FgxwGBplZSuXLriIUaCy7cAoMGn0iYdefGN7Q=) 2: FXvxd8iSb5UOqnUQemVQoiPFHr0.roa (hash: xAaj8WYWxsUYDp5IjPLpIHhUT6JTzTLFtyE0B9OOTCo=) 3: Hhk99kTP4LCptCcuzr46HrrOd-M.roa (hash: KKoc5a/NPGDFa/jCr9dayn05xHXif4MHgG7H+qe8WPY=) 4: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: NIaCVTOP8NI4rVj1o4IfmO1EtnJiZU9aXN3DII5H2zg=) 5: OCOSxMuOE7etqm6ym3cnIhKe0pw.roa (hash: PN3RvFQgu5pZxlCTS4LWpAyJgk2AnIZ4RZiwMhHQpjM=) 6: QAlAc_HBKVW9DIWsgBjzQBqlU_E.roa (hash: 01SGs9bF17s9PyhMPPV7iXjRmYd6onnnyv/wBFXQkVo=) 7: aFDzVrUv1Lh1tFcqGx2iUSN6t2Q.roa (hash: R1nEMHyCK4EFeYy8SvPh7cZUDUUFnN2AYX39p24Ukns=) 8: cH5zbNz1Wh4pKh9CZsUewwJjPYc.roa (hash: o7xAeOganmOKEfHkamPKsHaW6ANhyRw4vYPfGEPHmXY=) 9: ekIg_EozOl2eKAl7YxwTNudO2Ck.roa (hash: H4suzunJCL6M7y1bzbaVMfsdpvdTVp5XzrKgoj5v1bk=) 10: kJQG6geGOu2RAJRA_7GzYnIhBYQ.roa (hash: XUqqP9TjiZCkPcmNHG3SdvuU3ttO6pgsFTxEU7wHJZE=) 11: mw4aax5neyyO7biCg_R2Z4yrLVY.roa (hash: kswP+nDZIDDBYumEaipi/RTPJYiM8dVDU96MMsZcT28=) 12: nmDQzXrowDtDsmaT7IpPejjRWG0.roa (hash: GXfSa12Z+HzkUJgQU3oz+bpDRacv3sjfzvlZHnK3Bnk=) 13: rlGWAgfAA94vdNw8Yce_2JC5ZQ0.roa (hash: mDS85C7fKFjtrZ9jEwtQ1X6vTpwU05nL4sqzCM649dA=) 14: x0Q_UA5bt6672Dm9-Yp-CrnW3nQ.roa (hash: ITlCsYh8cqhggq4VF3aslLQZ6vv7ci4qGlAuU+En704=) 15: ySuM-WxG5dbfi2CFirvx8xCRfuA.roa (hash: 1e/p6LGwMmHWJEevpgoA3E6bMz9Y+YCCH+tqNadZtdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:86:3e:61:e4:97:b3:b5:b0:5c:82:1b:6a:b7:c5:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Apr 16 23:00:27 2026 GMT Not After : Apr 17 23:00:27 2026 GMT Subject: CN=f09bdd392df6ad6f50ffdcf1f7e16c7d6ce1f9ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:59:ff:3d:c5:a7:ea:33:ec:d8:fc:58:73:e0: 95:a9:90:bd:52:a2:8d:89:76:17:89:ce:9c:13:96: c0:2a:67:f2:99:28:0d:fe:10:6b:aa:c3:74:a3:95: 19:17:87:12:be:2e:88:28:bd:96:da:a5:c9:93:7f: e3:64:ce:09:c1:3c:fc:5c:d8:84:5d:6f:b9:fc:e7: c7:9d:c9:c4:ec:af:d9:29:67:0d:9f:14:09:99:f1: 7d:9e:db:f6:0f:b6:64:49:78:e0:6c:70:2f:3d:7d: 1b:ad:12:46:87:60:10:84:ab:76:5a:7f:06:60:ea: 8b:90:a8:41:04:9e:b6:78:5e:f1:db:ae:ec:9f:18: db:30:71:1f:12:d5:02:63:d3:da:e8:8a:22:a3:09: 4d:0e:d5:3a:6f:4d:ef:66:f2:9f:90:6d:dc:bb:03: 2c:6e:f8:fe:cd:fb:c4:ad:36:c6:1f:39:76:b1:1c: 74:b3:31:95:44:7e:bf:25:a0:1a:81:a3:c8:de:28: ba:cd:c4:39:50:d4:e1:16:76:61:fe:8e:14:65:a1: bd:f9:5d:a5:3c:c5:a5:2a:d8:20:c3:53:fe:b0:85: 07:69:31:64:0d:93:ba:c1:a5:02:12:40:47:a0:01: df:9e:d3:bf:0a:61:cf:5d:95:0a:27:ec:0b:13:49: 50:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9B:DD:39:2D:F6:AD:6F:50:FF:DC:F1:F7:E1:6C:7D:6C:E1:F9:EE X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:fa:57:a0:29:5e:87:22:d5:07:b1:e5:dc:56:0e:0b:2c:fe: 99:79:c5:c6:60:a1:e9:12:38:5e:b2:0f:b2:93:d7:3b:4a:12: f4:09:14:16:e9:1d:e0:39:a8:3b:75:72:83:b5:de:24:8f:36: 33:b6:6b:2c:92:0b:56:ed:9c:e4:d0:44:08:23:64:49:0d:d4: 65:29:44:7d:2d:da:70:95:dd:d4:a2:ec:52:be:84:96:4e:44: 07:c3:27:d9:95:8f:c4:58:ac:94:67:6e:6c:b6:0d:f7:71:14: 1d:7f:e2:51:db:c1:2f:d2:03:ca:e3:3a:74:ec:02:09:e9:f9: 68:3b:3d:19:7a:94:5d:ad:9b:4d:fb:1d:e9:61:c0:c8:5a:6c: a0:bc:e5:27:1e:e8:18:a2:0a:2e:96:99:e1:ce:c7:8a:bb:86: 09:2c:f6:52:16:36:c6:c4:7e:bb:30:e2:78:e9:14:ea:28:bb: 34:b5:d2:d9:13:f5:93:87:3f:f2:15:3b:cf:38:c9:4a:a9:e3: 29:e9:34:56:48:8a:84:62:bf:67:fc:88:b1:cf:dc:e2:d8:f6: 2b:59:cd:47:b7:78:26:55:95:92:7f:90:b5:54:34:aa:49:22: 94:ea:da:1a:59:56:47:f1:5f:29:12:0e:71:f3:9a:4c:11:b7: 4e:94:a2:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Yhj5h5JeztbBcghtqt8VEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjYwNDE2MjMwMDI3WhcNMjYwNDE3MjMwMDI3WjAzMTEwLwYDVQQD EyhmMDliZGQzOTJkZjZhZDZmNTBmZmRjZjFmN2UxNmM3ZDZjZTFmOWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFn/PcWn6jPs2PxYc+CVqZC9UqKN iXYXic6cE5bAKmfymSgN/hBrqsN0o5UZF4cSvi6IKL2W2qXJk3/jZM4JwTz8XNiE XW+5/OfHncnE7K/ZKWcNnxQJmfF9ntv2D7ZkSXjgbHAvPX0brRJGh2AQhKt2Wn8G YOqLkKhBBJ62eF7x267snxjbMHEfEtUCY9Pa6IoiowlNDtU6b03vZvKfkG3cuwMs bvj+zfvErTbGHzl2sRx0szGVRH6/JaAagaPI3ii6zcQ5UNThFnZh/o4UZaG9+V2l PMWlKtggw1P+sIUHaTFkDZO6waUCEkBHoAHfntO/CmHPXZUKJ+wLE0lQWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCb3Tkt9q1vUP/c8ffhbH1s4fnuMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfpXoCle hyLVB7Hl3FYOCyz+mXnFxmCh6RI4XrIPspPXO0oS9AkUFukd4DmoO3Vyg7XeJI82 M7ZrLJILVu2c5NBECCNkSQ3UZSlEfS3acJXd1KLsUr6Elk5EB8Mn2ZWPxFislGdu bLYN93EUHX/iUdvBL9IDyuM6dOwCCen5aDs9GXqUXa2bTfsd6WHAyFpsoLzlJx7o GKIKLpaZ4c7HiruGCSz2UhY2xsR+uzDieOkU6ii7NLXS2RP1k4c/8hU7zzjJSqnj Kek0VkiKhGK/Z/yIsc/c4tj2K1nNR7d4JlWVkn+QtVQ0qkkilOraGllWR/FfKRIO cfOaTBG3TpSiLQ== -----END CERTIFICATE-----Generated at Fri Apr 17 06:43:38 2026 by rpki-client