$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft File: JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json) Hash identifier: hxvViI7TJnmn6ZvkA2x+Xh/7Yc7hY/P+1hkitcWYp5U= Subject key identifier: 6B:9E:0D:AB:16:33:8F:9A:F3:E4:75:A8:83:1F:F3:53:F1:1B:F0:C3 Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019FAB2C936D337B612118DBDBE48549C273 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft Manifest number: 172B Signing time: Wed 29 Jul 2026 00:00:53 +0000 Manifest this update: Wed 29 Jul 2026 00:00:53 +0000 Manifest next update: Thu 30 Jul 2026 00:00:53 +0000 Files and hashes: 1: 1-J4PSDEl9d0llDjfWsIWQxWc6_I.roa (hash: ypQcjGIhT4f6yMw/Eo/q0CXm3np4TkiH1MrKx8KGA8U=) 2: FXvxd8iSb5UOqnUQemVQoiPFHr0.roa (hash: xAaj8WYWxsUYDp5IjPLpIHhUT6JTzTLFtyE0B9OOTCo=) 3: Hhk99kTP4LCptCcuzr46HrrOd-M.roa (hash: KKoc5a/NPGDFa/jCr9dayn05xHXif4MHgG7H+qe8WPY=) 4: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: 1LsKrXArYlMgQ1gWpNlu1cZTWXRuvOpOopuuek1dfRA=) 5: OCOSxMuOE7etqm6ym3cnIhKe0pw.roa (hash: PN3RvFQgu5pZxlCTS4LWpAyJgk2AnIZ4RZiwMhHQpjM=) 6: QAlAc_HBKVW9DIWsgBjzQBqlU_E.roa (hash: 01SGs9bF17s9PyhMPPV7iXjRmYd6onnnyv/wBFXQkVo=) 7: aFDzVrUv1Lh1tFcqGx2iUSN6t2Q.roa (hash: R1nEMHyCK4EFeYy8SvPh7cZUDUUFnN2AYX39p24Ukns=) 8: cH5zbNz1Wh4pKh9CZsUewwJjPYc.roa (hash: o7xAeOganmOKEfHkamPKsHaW6ANhyRw4vYPfGEPHmXY=) 9: eVqy0YQ7fL6ZmZ3Ii8D0s-jZG9U.roa (hash: O6uAjr20YNEq9FDlWQolrNL9lhiTBSVc+YvX41XqvEc=) 10: ekIg_EozOl2eKAl7YxwTNudO2Ck.roa (hash: H4suzunJCL6M7y1bzbaVMfsdpvdTVp5XzrKgoj5v1bk=) 11: kJQG6geGOu2RAJRA_7GzYnIhBYQ.roa (hash: XUqqP9TjiZCkPcmNHG3SdvuU3ttO6pgsFTxEU7wHJZE=) 12: mw4aax5neyyO7biCg_R2Z4yrLVY.roa (hash: kswP+nDZIDDBYumEaipi/RTPJYiM8dVDU96MMsZcT28=) 13: nmDQzXrowDtDsmaT7IpPejjRWG0.roa (hash: GXfSa12Z+HzkUJgQU3oz+bpDRacv3sjfzvlZHnK3Bnk=) 14: rlGWAgfAA94vdNw8Yce_2JC5ZQ0.roa (hash: mDS85C7fKFjtrZ9jEwtQ1X6vTpwU05nL4sqzCM649dA=) 15: x0Q_UA5bt6672Dm9-Yp-CrnW3nQ.roa (hash: ITlCsYh8cqhggq4VF3aslLQZ6vv7ci4qGlAuU+En704=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:2c:93:6d:33:7b:61:21:18:db:db:e4:85:49:c2:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Jul 29 00:00:53 2026 GMT Not After : Jul 30 00:00:53 2026 GMT Subject: CN=6b9e0dab16338f9af3e475a8831ff353f11bf0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b7:17:cf:53:d4:39:8a:5f:4c:3a:05:22:95: eb:30:7f:5b:e4:2e:b7:d6:bc:59:cc:5e:b7:ba:f1: cd:fc:29:31:54:78:e4:22:fa:9b:40:1a:d1:26:aa: 70:17:95:46:d5:cc:3e:0f:bf:7b:39:2a:b9:fb:2b: 69:37:c9:08:2c:2a:81:a0:78:5c:69:0b:16:37:ae: e7:17:2c:e3:6a:9f:84:bb:33:2d:25:4f:63:75:30: 2b:ff:b0:5d:cf:b1:32:9b:39:18:a9:df:01:0b:4b: 8e:19:09:e5:4b:1e:60:25:af:ad:9f:d1:f9:00:b9: 34:99:92:b2:b7:bf:62:6e:b9:08:96:c3:02:5c:1a: 21:e3:ff:ae:b2:71:10:e8:cd:82:84:a0:86:33:a5: 49:f6:64:2e:e6:87:aa:2d:05:48:89:d6:f0:b2:8b: 1c:b0:08:64:93:c4:95:dc:fc:ac:8a:0c:13:d5:0b: f1:c9:d8:c7:d2:61:bc:c7:e5:cb:ba:69:6c:90:a5: f4:3d:e9:36:3b:57:1b:31:6d:b3:dc:e5:35:7a:97: 4a:f7:5f:f5:7f:3a:c2:0f:ee:68:ee:0d:65:ad:50: 11:66:3b:a0:73:dd:d0:e6:b1:0f:13:ff:6f:5a:ba: 31:da:75:5b:a8:10:86:57:4d:93:62:ee:ab:01:5c: 83:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9E:0D:AB:16:33:8F:9A:F3:E4:75:A8:83:1F:F3:53:F1:1B:F0:C3 X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:34:2e:79:c0:33:71:b7:58:53:97:09:3c:d1:7f:99:7c:ab: 3b:47:eb:4c:80:6f:88:01:c7:27:23:2d:ed:02:aa:8d:b5:81: 1d:df:70:02:f7:8f:25:1f:39:79:19:12:b6:61:1d:03:09:db: aa:b2:48:bd:48:40:11:05:c5:ef:d1:fd:20:75:d1:cb:fc:91: 42:78:20:e0:de:e1:fc:34:c2:78:56:b2:8f:ad:6b:79:0b:34: a7:ce:4c:79:a2:11:12:f4:c1:1a:c7:6d:0c:cf:f4:68:fc:7d: e9:52:51:4b:d0:b2:c3:73:4d:f2:16:4c:0e:8c:2d:f7:82:a0: 10:54:3a:5f:fb:31:11:4b:76:59:47:23:f7:1a:3c:f7:60:19: 87:df:d7:9b:4f:12:39:78:2a:07:4b:cc:cb:4a:8e:8c:81:28: 11:28:5a:a1:b1:4a:67:64:98:3b:cd:e1:78:ab:9e:ec:46:77: f5:ba:45:00:ee:a1:ec:5f:70:a1:55:cb:05:58:ea:a6:76:75: 92:f1:30:0a:26:80:86:d7:8f:95:e6:bb:c9:9f:9e:03:8c:22: e9:4b:90:da:d3:6d:99:fd:7f:15:19:ae:41:b1:8f:d8:ea:5b: 9a:f8:8c:e6:a2:31:38:9a:9d:22:b2:f7:87:a4:e4:1b:5b:33: f0:ff:b3:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rLJNtM3thIRjb2+SFScJzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjYwNzI5MDAwMDUzWhcNMjYwNzMwMDAwMDUzWjAzMTEwLwYDVQQD Eyg2YjllMGRhYjE2MzM4ZjlhZjNlNDc1YTg4MzFmZjM1M2YxMWJmMGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrcXz1PUOYpfTDoFIpXrMH9b5C63 1rxZzF63uvHN/CkxVHjkIvqbQBrRJqpwF5VG1cw+D797OSq5+ytpN8kILCqBoHhc aQsWN67nFyzjap+EuzMtJU9jdTAr/7Bdz7EymzkYqd8BC0uOGQnlSx5gJa+tn9H5 ALk0mZKyt79ibrkIlsMCXBoh4/+usnEQ6M2ChKCGM6VJ9mQu5oeqLQVIidbwsosc sAhkk8SV3PysigwT1QvxydjH0mG8x+XLumlskKX0Pek2O1cbMW2z3OU1epdK91/1 fzrCD+5o7g1lrVARZjugc93Q5rEPE/9vWrox2nVbqBCGV02TYu6rAVyD9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGueDasWM4+a8+R1qIMf81PxG/DDMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDQuecAz cbdYU5cJPNF/mXyrO0frTIBviAHHJyMt7QKqjbWBHd9wAvePJR85eRkStmEdAwnb qrJIvUhAEQXF79H9IHXRy/yRQngg4N7h/DTCeFayj61reQs0p85MeaIREvTBGsdt DM/0aPx96VJRS9Cyw3NN8hZMDowt94KgEFQ6X/sxEUt2WUcj9xo892AZh9/Xm08S OXgqB0vMy0qOjIEoEShaobFKZ2SYO83heKue7EZ39bpFAO6h7F9woVXLBVjqpnZ1 kvEwCiaAhtePlea7yZ+eA4wi6UuQ2tNtmf1/FRmuQbGP2OpbmviM5qIxOJqdIrL3 h6TkG1sz8P+zeA== -----END CERTIFICATE-----Generated at Wed Jul 29 07:48:11 2026 by rpki-client