$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft File: JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json) Hash identifier: xc717+OEUUYIOLMkzJoEO1uPQBYUtieHB1DIq3mFMWk= Subject key identifier: BA:5A:93:C8:FC:CC:6E:D0:45:97:0B:FA:85:0A:C1:25:AB:0E:74:27 Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019CAB3493E3F51B10B11999E6956478CAD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft Manifest number: 1597 Signing time: Sun 01 Mar 2026 21:01:15 +0000 Manifest this update: Sun 01 Mar 2026 21:01:15 +0000 Manifest next update: Mon 02 Mar 2026 21:01:15 +0000 Files and hashes: 1: Hhk99kTP4LCptCcuzr46HrrOd-M.roa (hash: KKoc5a/NPGDFa/jCr9dayn05xHXif4MHgG7H+qe8WPY=) 2: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: vGQZfMWT4/ImU4I2elKLdjUbmW6H7AWYWevBFLEJra8=) 3: OCOSxMuOE7etqm6ym3cnIhKe0pw.roa (hash: PN3RvFQgu5pZxlCTS4LWpAyJgk2AnIZ4RZiwMhHQpjM=) 4: QAlAc_HBKVW9DIWsgBjzQBqlU_E.roa (hash: 01SGs9bF17s9PyhMPPV7iXjRmYd6onnnyv/wBFXQkVo=) 5: V31h9beA1NjOun41S2jwpOz78Is.roa (hash: GlMTMFuGGPPKj686KygzUnOcrCykbZKdt6LpxxyxucY=) 6: aFDzVrUv1Lh1tFcqGx2iUSN6t2Q.roa (hash: R1nEMHyCK4EFeYy8SvPh7cZUDUUFnN2AYX39p24Ukns=) 7: kJQG6geGOu2RAJRA_7GzYnIhBYQ.roa (hash: XUqqP9TjiZCkPcmNHG3SdvuU3ttO6pgsFTxEU7wHJZE=) 8: mw4aax5neyyO7biCg_R2Z4yrLVY.roa (hash: kswP+nDZIDDBYumEaipi/RTPJYiM8dVDU96MMsZcT28=) 9: mzgOVcQFb5T9zgivAQDtStbnug0.roa (hash: yWUsi1DIu7DGLTRazzHtfk6HfxxO2sQtyKnrpOc0niM=) 10: nmDQzXrowDtDsmaT7IpPejjRWG0.roa (hash: GXfSa12Z+HzkUJgQU3oz+bpDRacv3sjfzvlZHnK3Bnk=) 11: npjtoW8dwDiUTx3uKE2aUXQhgU8.roa (hash: yJBiEf3/qysjdVXL8zVW+gEIWnThC6nOvYOa+8TSI5Q=) 12: rlGWAgfAA94vdNw8Yce_2JC5ZQ0.roa (hash: mDS85C7fKFjtrZ9jEwtQ1X6vTpwU05nL4sqzCM649dA=) 13: x0Q_UA5bt6672Dm9-Yp-CrnW3nQ.roa (hash: ITlCsYh8cqhggq4VF3aslLQZ6vv7ci4qGlAuU+En704=) 14: ySuM-WxG5dbfi2CFirvx8xCRfuA.roa (hash: 1e/p6LGwMmHWJEevpgoA3E6bMz9Y+YCCH+tqNadZtdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:34:93:e3:f5:1b:10:b1:19:99:e6:95:64:78:ca:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Mar 1 21:01:15 2026 GMT Not After : Mar 2 21:01:15 2026 GMT Subject: CN=ba5a93c8fccc6ed045970bfa850ac125ab0e7427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:51:73:94:66:74:c6:04:70:09:93:54:7d:3b: 20:9e:15:c2:d9:09:9e:b9:47:3e:b3:2a:2c:95:4c: de:aa:0c:99:93:86:22:ac:ad:e4:1d:3a:0a:a8:e2: 1d:1d:93:5b:73:80:98:82:1f:f1:47:fa:6b:e9:89: 07:17:65:c8:94:ea:0d:cf:c8:b5:d3:59:23:ec:6a: 61:52:22:22:81:ae:0c:a9:46:2e:e3:e2:9d:90:e7: 95:b1:c5:81:e5:cb:c4:88:ca:48:5f:57:75:72:8f: aa:39:b0:b9:30:51:19:da:9d:87:1c:d4:1d:54:9a: 4d:11:c1:d5:8e:ee:33:49:d9:8f:d2:03:72:75:fc: 05:69:03:b0:a9:63:98:98:bf:c3:57:5d:d8:d7:c1: 15:a4:70:ba:3e:b6:b9:d2:d8:a9:7d:ae:32:f0:d3: c6:e0:0b:45:c2:a4:13:98:da:e9:3d:45:03:43:af: 8f:28:ff:a3:5a:5c:78:25:c7:cb:f6:1b:4c:4b:5b: b6:26:91:71:49:c0:29:cb:12:cf:a1:bd:bf:81:a1: 29:3f:31:e4:13:bf:13:25:01:9d:19:dd:28:1b:77: e7:37:d5:7d:a3:bb:7d:3a:10:f2:d9:a7:62:b1:78: 19:35:84:d6:f8:18:16:bd:36:3c:c6:d6:22:04:0f: a6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5A:93:C8:FC:CC:6E:D0:45:97:0B:FA:85:0A:C1:25:AB:0E:74:27 X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:2c:9e:b2:42:ea:6a:b1:a4:d4:72:b0:ff:6a:e0:7b:d6:15: 63:02:2e:9d:ef:ee:1f:aa:a3:33:9f:8b:97:60:05:89:94:2e: 19:51:63:c4:e2:00:df:69:4a:71:8e:03:bf:56:89:95:07:64: 6f:98:03:a3:22:79:35:f0:8a:37:6a:80:e6:64:f8:c9:bc:5d: 8a:50:14:1c:b4:e1:d3:8c:a9:7b:aa:f7:78:e7:63:80:25:ec: c4:5a:97:d3:86:58:6f:9c:b9:01:8d:9f:39:ef:23:7a:25:41: 14:8e:23:0c:36:6d:dd:64:4d:a5:42:78:fb:51:c6:c1:dc:9f: 24:50:36:37:a1:72:05:32:3a:56:f5:bb:ca:93:7c:a3:d2:36: a9:52:c9:a8:58:59:50:a3:0f:f8:61:e8:76:e1:4c:a1:80:d2: 1c:1e:ba:4c:5b:f1:96:10:93:ca:8e:30:fc:e0:4e:87:cc:54: 39:d9:3d:83:b7:6c:0e:c9:ce:37:7e:be:df:db:79:07:42:9b: ec:e9:a3:93:5b:88:45:a4:6a:40:27:8d:e4:b8:50:84:d0:8f: d8:31:1e:b5:d1:db:b8:e7:8a:d3:4f:00:8c:ba:0f:13:35:b7: 5f:2c:9f:e0:51:ff:8e:88:86:12:79:30:90:83:5b:d3:9f:d3: d2:f5:4a:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrNJPj9RsQsRmZ5pVkeMrSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjYwMzAxMjEwMTE1WhcNMjYwMzAyMjEwMTE1WjAzMTEwLwYDVQQD EyhiYTVhOTNjOGZjY2M2ZWQwNDU5NzBiZmE4NTBhYzEyNWFiMGU3NDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lFzlGZ0xgRwCZNUfTsgnhXC2Qme uUc+syoslUzeqgyZk4YirK3kHToKqOIdHZNbc4CYgh/xR/pr6YkHF2XIlOoNz8i1 01kj7GphUiIiga4MqUYu4+KdkOeVscWB5cvEiMpIX1d1co+qObC5MFEZ2p2HHNQd VJpNEcHVju4zSdmP0gNydfwFaQOwqWOYmL/DV13Y18EVpHC6Pra50tipfa4y8NPG 4AtFwqQTmNrpPUUDQ6+PKP+jWlx4JcfL9htMS1u2JpFxScApyxLPob2/gaEpPzHk E78TJQGdGd0oG3fnN9V9o7t9OhDy2adisXgZNYTW+BgWvTY8xtYiBA+mdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpak8j8zG7QRZcL+oUKwSWrDnQnMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCyeskLq arGk1HKw/2rge9YVYwIune/uH6qjM5+Ll2AFiZQuGVFjxOIA32lKcY4Dv1aJlQdk b5gDoyJ5NfCKN2qA5mT4ybxdilAUHLTh04ype6r3eOdjgCXsxFqX04ZYb5y5AY2f Oe8jeiVBFI4jDDZt3WRNpUJ4+1HGwdyfJFA2N6FyBTI6VvW7ypN8o9I2qVLJqFhZ UKMP+GHoduFMoYDSHB66TFvxlhCTyo4w/OBOh8xUOdk9g7dsDsnON36+39t5B0Kb 7Omjk1uIRaRqQCeN5LhQhNCP2DEetdHbuOeK008AjLoPEzW3Xyyf4FH/joiGEnkw kINb05/T0vVKQQ== -----END CERTIFICATE-----Generated at Mon Mar 2 01:51:15 2026 by rpki-client