$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: ha2HpzpisAeKD9xm3mfNkGgcM8b5VCNKehe1hj/tZ3k= Subject key identifier: F8:73:5C:98:CC:21:DA:C1:B4:F9:44:C7:AF:38:2F:60:09:88:D5:FB Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019A507496A8AF8E27531F3DCB11F0505780 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 140A Signing time: Tue 04 Nov 2025 20:00:09 +0000 Manifest this update: Tue 04 Nov 2025 20:00:09 +0000 Manifest next update: Wed 05 Nov 2025 20:00:09 +0000 Files and hashes: 1: 1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa (hash: qQM4l/X3SkEZ4h6aGb2fizqmObGG55sXX+NpcuuHKmE=) 2: 5DRGkm67v3ztNtkmGE9CjHe6qkM.roa (hash: c8V8b8nhOphSZmzRUJQWFcuzVB0h+VPYqSuF8VwM49s=) 3: 7yxzEpwrPvkVtysBCZ9w3NvniME.roa (hash: myjWs4rYeOG9qs0FigCiX4CRWLx91cNiLYd0bOOlv14=) 4: 92YX8_mKsRYRDoG9l3vH6epU_24.roa (hash: R3F3U2oxwWbOLay+ACJCalTUQG9HKAHuMPfnBBPm6HM=) 5: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: TMWpiss+4A28Cail9IunS6h0PN47vLt/jheuQz4+3tI=) 6: KFrQOrOGrx778yQcymTgUx9hD68.roa (hash: cTtECuElVvdbMAGilPAdoZX/Qe3XcmxVm71uJTnN4+A=) 7: KO2tMW1du9dekDI4Y-9_plcBYSk.roa (hash: L0Z21UNOLLnga8zui/KqFlS4YtgeuRJ/OBRssHd9hXE=) 8: MNDWfcZ7THpd1V-JitlFbJJvT2k.roa (hash: 8342ttspxabX1GCBeEK5LbRuFU+2GSg8qKL1eSDng9w=) 9: XST97aNGZZRqCU4Q2norfi4ndhI.roa (hash: Ej7Bdzjuir9bzqXEX3Za6erR0SRowgGxNRVnC/R3Coo=) 10: dDuXmy2-kOiyveIRPNO2zv9O6K4.roa (hash: dIZYpEJfOlH3jzzYUHlsUhacisdYiaRu3PDoh93lXCs=) 11: f-WBLlvCqU3gT2U4k2jp9nRYULc.roa (hash: SbHCNZepVf+SJT1VG5+nfS1tN9EtzQEtvMS4oCBecRI=) 12: fUyauZFzWLubSyadnmzbsZyl6iM.roa (hash: ZXpfbo2eejrS0yFMBL0ES1gh6HanTDFLIm85aYT7+bA=) 13: iGMhmXXBNt2s7l-0mx0YRvUMWSo.roa (hash: McOC3wl39qVTP2IvApkUHWGgt9CHnxQ9E9acv2S4LQA=) 14: jiF9vHMkWKJpjP76Gux54TKpnzc.roa (hash: CCXc0iW9MVKVYNnO0rxCM2yL2mQD+I1ttQ+9hGTDpvQ=) 15: jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa (hash: d6CrkQWol3xr2PKuUL7zdsYsRYcblyvcCYZMvOC8fx8=) 16: w1UWJINQiqIyHaTTFS0euILJR58.roa (hash: jXqC61xJbm2P2p00w1kBmanAbpZq6zjGJCspuExiIe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:74:96:a8:af:8e:27:53:1f:3d:cb:11:f0:50:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Nov 4 20:00:09 2025 GMT Not After : Nov 5 20:00:09 2025 GMT Subject: CN=f8735c98cc21dac1b4f944c7af382f600988d5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6f:72:2c:cd:20:32:40:d2:89:9b:2b:86:64: 0c:33:b4:db:6a:92:d0:d9:af:ea:21:1d:9d:0c:a1: f0:02:ce:16:73:81:cf:9c:65:3c:15:53:bd:f2:7f: 10:27:3f:4a:19:c5:44:45:3a:e8:6e:fb:de:40:19: 64:0e:d0:ca:39:4d:42:ba:e4:74:3e:39:38:ee:64: 25:eb:68:cb:45:bd:52:d8:76:ff:80:cf:0d:41:b9: 77:8d:1b:e9:c1:5c:e8:45:dc:3c:70:1e:69:c2:61: 40:fb:15:81:86:de:af:d7:04:c9:27:3e:ec:7d:b6: 38:64:49:20:12:ab:a3:69:85:51:5a:b5:a2:9f:1c: da:40:b3:12:fa:87:cc:ae:af:7f:78:0f:cf:f9:16: 90:94:5e:63:63:b7:24:7e:4b:a5:ef:61:a1:e5:c1: e8:53:65:91:d7:96:9f:b4:95:57:ca:f7:e1:26:a1: 13:c7:1b:ac:27:6e:ab:c2:e3:04:59:9c:01:08:35: 96:2d:4e:f8:3f:53:1a:6f:de:80:10:ed:9f:f4:5f: 04:8b:8d:8c:02:83:f5:27:64:29:06:11:ff:25:cc: 38:e7:c1:e7:d5:ab:a0:a5:3b:8d:8c:96:3a:2b:80: 50:62:d8:29:17:89:dd:85:b1:ea:4c:36:f5:e8:99: ec:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:73:5C:98:CC:21:DA:C1:B4:F9:44:C7:AF:38:2F:60:09:88:D5:FB X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:57:ce:65:76:4f:40:07:03:4a:39:7e:40:ea:b5:43:e1:d6: 3b:8e:90:da:c7:fd:4b:19:b1:f0:1d:b1:a5:37:a6:57:98:51: 55:dc:fa:63:8f:04:14:80:39:f1:75:b6:f3:1f:ef:13:a3:ed: f9:6a:b4:e8:e0:df:5f:59:5e:86:c9:43:de:57:6d:35:80:12: c1:34:60:df:6f:2f:fc:e2:0a:c4:b3:1f:c4:34:5a:97:8e:fe: 9c:59:da:80:7e:74:10:a2:3a:8c:8d:8a:d3:e4:53:56:b5:b6: eb:a1:c2:36:6e:7e:1e:00:85:ab:0c:d9:34:76:dd:1a:57:26: 82:5a:fd:24:e4:14:d2:23:69:41:2e:c7:29:b3:09:9e:17:ba: 1b:20:82:fa:5f:69:c2:4f:8e:81:46:1c:5d:6c:b2:89:03:08: 9d:2e:8c:fd:5a:08:35:9e:16:5d:c9:e7:85:ce:a2:d3:95:98: 79:1b:51:d7:44:82:b5:89:31:d0:e6:05:9c:d5:62:22:dd:17: b0:48:da:d0:36:30:e1:1f:3c:74:8a:f0:e5:e4:94:a6:3d:ad: a7:8c:ec:7c:36:38:44:ab:37:40:d5:dc:2f:3a:79:16:78:af: e9:c8:71:a7:b8:50:59:b0:68:16:c9:f3:5a:a9:99:ff:ab:90: a3:20:08:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQdJaor44nUx89yxHwUFeAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjUxMTA0MjAwMDA5WhcNMjUxMTA1MjAwMDA5WjAzMTEwLwYDVQQD EyhmODczNWM5OGNjMjFkYWMxYjRmOTQ0YzdhZjM4MmY2MDA5ODhkNWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA129yLM0gMkDSiZsrhmQMM7TbapLQ 2a/qIR2dDKHwAs4Wc4HPnGU8FVO98n8QJz9KGcVERTrobvveQBlkDtDKOU1CuuR0 Pjk47mQl62jLRb1S2Hb/gM8NQbl3jRvpwVzoRdw8cB5pwmFA+xWBht6v1wTJJz7s fbY4ZEkgEqujaYVRWrWinxzaQLMS+ofMrq9/eA/P+RaQlF5jY7ckfkul72Gh5cHo U2WR15aftJVXyvfhJqETxxusJ26rwuMEWZwBCDWWLU74P1Mab96AEO2f9F8Ei42M AoP1J2QpBhH/Jcw458Hn1augpTuNjJY6K4BQYtgpF4ndhbHqTDb16JnsZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhzXJjMIdrBtPlEx684L2AJiNX7MB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFfOZXZP QAcDSjl+QOq1Q+HWO46Q2sf9Sxmx8B2xpTemV5hRVdz6Y48EFIA58XW28x/vE6Pt +Wq06ODfX1lehslD3ldtNYASwTRg328v/OIKxLMfxDRal47+nFnagH50EKI6jI2K 0+RTVrW266HCNm5+HgCFqwzZNHbdGlcmglr9JOQU0iNpQS7HKbMJnhe6GyCC+l9p wk+OgUYcXWyyiQMInS6M/VoINZ4WXcnnhc6i05WYeRtR10SCtYkx0OYFnNViIt0X sEja0DYw4R88dIrw5eSUpj2tp4zsfDY4RKs3QNXcLzp5Fniv6chxp7hQWbBoFsnz WqmZ/6uQoyAI4w== -----END CERTIFICATE-----Generated at Tue Nov 4 23:56:06 2025 by rpki-client