$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: 1za/OFmC6+UfMKR7784XJBbfkGZDNbW86R/OSVig+Kg= Subject key identifier: 9A:40:33:29:AD:84:FC:DE:16:2E:81:A5:3D:51:62:D5:B5:BC:33:74 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019768F2EEC9A306E00EFBCBBD7C63103775 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 1287 Signing time: Fri 13 Jun 2025 11:00:40 +0000 Manifest this update: Fri 13 Jun 2025 11:00:40 +0000 Manifest next update: Sat 14 Jun 2025 11:00:40 +0000 Files and hashes: 1: 1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa (hash: qQM4l/X3SkEZ4h6aGb2fizqmObGG55sXX+NpcuuHKmE=) 2: 5DRGkm67v3ztNtkmGE9CjHe6qkM.roa (hash: c8V8b8nhOphSZmzRUJQWFcuzVB0h+VPYqSuF8VwM49s=) 3: 7yxzEpwrPvkVtysBCZ9w3NvniME.roa (hash: myjWs4rYeOG9qs0FigCiX4CRWLx91cNiLYd0bOOlv14=) 4: 92YX8_mKsRYRDoG9l3vH6epU_24.roa (hash: R3F3U2oxwWbOLay+ACJCalTUQG9HKAHuMPfnBBPm6HM=) 5: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: GPydkpMqt1SHgDIw/zz6MuOXKPGjujGOpmQbAFr16OQ=) 6: KO2tMW1du9dekDI4Y-9_plcBYSk.roa (hash: L0Z21UNOLLnga8zui/KqFlS4YtgeuRJ/OBRssHd9hXE=) 7: MNDWfcZ7THpd1V-JitlFbJJvT2k.roa (hash: 8342ttspxabX1GCBeEK5LbRuFU+2GSg8qKL1eSDng9w=) 8: XST97aNGZZRqCU4Q2norfi4ndhI.roa (hash: Ej7Bdzjuir9bzqXEX3Za6erR0SRowgGxNRVnC/R3Coo=) 9: dDuXmy2-kOiyveIRPNO2zv9O6K4.roa (hash: dIZYpEJfOlH3jzzYUHlsUhacisdYiaRu3PDoh93lXCs=) 10: f-WBLlvCqU3gT2U4k2jp9nRYULc.roa (hash: SbHCNZepVf+SJT1VG5+nfS1tN9EtzQEtvMS4oCBecRI=) 11: fUyauZFzWLubSyadnmzbsZyl6iM.roa (hash: ZXpfbo2eejrS0yFMBL0ES1gh6HanTDFLIm85aYT7+bA=) 12: iGMhmXXBNt2s7l-0mx0YRvUMWSo.roa (hash: McOC3wl39qVTP2IvApkUHWGgt9CHnxQ9E9acv2S4LQA=) 13: jiF9vHMkWKJpjP76Gux54TKpnzc.roa (hash: CCXc0iW9MVKVYNnO0rxCM2yL2mQD+I1ttQ+9hGTDpvQ=) 14: jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa (hash: d6CrkQWol3xr2PKuUL7zdsYsRYcblyvcCYZMvOC8fx8=) 15: nuAp8jQeL57cxcv-qMziP5TUwtY.roa (hash: vb4FRcaEF1fztUtawfL6ZNK658gxKBaRE6cvTVdZv2U=) 16: w1UWJINQiqIyHaTTFS0euILJR58.roa (hash: jXqC61xJbm2P2p00w1kBmanAbpZq6zjGJCspuExiIe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:68:f2:ee:c9:a3:06:e0:0e:fb:cb:bd:7c:63:10:37:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Jun 13 11:00:40 2025 GMT Not After : Jun 14 11:00:40 2025 GMT Subject: CN=9a403329ad84fcde162e81a53d5162d5b5bc3374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:be:2c:37:06:14:20:43:42:72:10:68:ca: 4a:1a:00:e4:bb:86:1c:c1:39:b9:42:19:68:f4:32: 52:74:26:a3:d6:89:75:49:c3:57:7b:76:ce:45:bb: c0:59:ed:c5:74:f1:5b:46:61:dc:82:8c:4d:eb:8a: 76:12:63:cc:0c:1d:2e:c2:7a:3f:2f:c2:f8:ce:38: d5:eb:2c:09:2f:8a:3b:d4:d0:91:cc:5b:4e:d1:07: fe:e9:c9:58:0a:b4:3d:dc:63:1e:b6:50:31:40:70: 1c:ea:9e:dd:ad:95:48:d2:eb:43:92:3c:d8:ea:63: 38:75:4e:c2:37:92:ed:81:50:3f:0f:41:e9:ed:a6: 1d:6a:23:27:cf:6f:eb:30:84:3f:bc:64:1b:90:0a: 40:62:34:09:38:35:62:04:47:fa:50:9d:32:ce:17: 04:3d:d2:03:fa:66:4a:f1:39:88:0f:62:9e:fb:cf: 0a:1f:54:1d:58:6f:f3:a9:f7:08:04:8d:2a:95:6d: e9:68:e2:b9:dc:fb:b1:ee:1f:f7:4f:1a:ec:e4:24: 2b:1d:0e:3a:80:d8:d7:ad:1f:02:1f:a1:49:16:6e: 6e:cf:59:9c:2c:96:b0:d7:7f:48:37:5f:9c:4e:b5: 92:02:a5:2e:2a:5e:a5:68:bd:9c:bd:db:47:70:19: 5b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:40:33:29:AD:84:FC:DE:16:2E:81:A5:3D:51:62:D5:B5:BC:33:74 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:9a:b7:3e:1f:11:5c:73:67:bc:45:6d:45:cd:18:81:d3:14: 0b:f2:db:40:76:6c:dd:32:19:43:da:4c:63:cb:6e:32:c7:78: 2f:60:72:6f:85:3e:c0:48:68:44:ad:17:66:0a:1f:05:cc:d0: ab:ea:f4:24:40:ec:a7:c4:cc:24:58:be:62:ce:db:09:ce:df: 03:5d:e0:71:a6:d0:26:88:71:2d:68:de:bf:dc:b2:f8:82:41: 93:e9:a8:4e:66:a3:8d:72:d6:7f:9f:96:dc:f8:83:a7:14:15: 2f:e8:bb:33:47:b1:d7:d4:60:1e:e2:c5:28:0d:64:45:fe:83: 64:b0:6c:04:f9:a7:83:d1:8d:34:f2:a7:7b:b4:71:2c:7e:8a: 3d:fe:6b:c7:18:a0:b0:a5:a6:84:23:51:84:99:85:ed:71:aa: ba:2d:68:21:0e:99:9d:28:5b:44:e3:9a:c1:a4:a6:66:8e:22: cb:40:d9:02:0d:cd:9f:f2:2b:89:d9:a2:69:86:93:5c:53:fb: f8:fd:41:f1:8a:7f:b9:09:b0:a7:d3:0a:96:84:b0:bc:f1:32: c9:e0:2f:16:23:a9:27:92:a6:96:12:1a:5d:a2:90:23:6d:38: 63:7c:d8:69:b5:03:67:6e:ef:23:97:55:99:58:51:ca:4d:2c: 39:c1:8d:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdo8u7JowbgDvvLvXxjEDd1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjUwNjEzMTEwMDQwWhcNMjUwNjE0MTEwMDQwWjAzMTEwLwYDVQQD Eyg5YTQwMzMyOWFkODRmY2RlMTYyZTgxYTUzZDUxNjJkNWI1YmMzMzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ2+LDcGFCBDQnIQaMpKGgDku4Yc wTm5Qhlo9DJSdCaj1ol1ScNXe3bORbvAWe3FdPFbRmHcgoxN64p2EmPMDB0uwno/ L8L4zjjV6ywJL4o71NCRzFtO0Qf+6clYCrQ93GMetlAxQHAc6p7drZVI0utDkjzY 6mM4dU7CN5LtgVA/D0Hp7aYdaiMnz2/rMIQ/vGQbkApAYjQJODViBEf6UJ0yzhcE PdID+mZK8TmID2Ke+88KH1QdWG/zqfcIBI0qlW3paOK53Pux7h/3Txrs5CQrHQ46 gNjXrR8CH6FJFm5uz1mcLJaw139IN1+cTrWSAqUuKl6laL2cvdtHcBlbOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpAMymthPzeFi6BpT1RYtW1vDN0MB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJq3Ph8R XHNnvEVtRc0YgdMUC/LbQHZs3TIZQ9pMY8tuMsd4L2Byb4U+wEhoRK0XZgofBczQ q+r0JEDsp8TMJFi+Ys7bCc7fA13gcabQJohxLWjev9yy+IJBk+moTmajjXLWf5+W 3PiDpxQVL+i7M0ex19RgHuLFKA1kRf6DZLBsBPmng9GNNPKne7RxLH6KPf5rxxig sKWmhCNRhJmF7XGqui1oIQ6ZnShbROOawaSmZo4iy0DZAg3Nn/IridmiaYaTXFP7 +P1B8Yp/uQmwp9MKloSwvPEyyeAvFiOpJ5KmlhIaXaKQI204Y3zYabUDZ27vI5dV mVhRyk0sOcGN9w== -----END CERTIFICATE-----Generated at Fri Jun 13 19:33:27 2025 by rpki-client