$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: nT4k6V3q3+E/b3stEv6bYT7D5xleBw7W7BWg3ToJHFc= Subject key identifier: F1:B5:5A:AA:22:40:EE:DA:9C:BC:01:B6:12:95:BE:6B:C1:41:10:31 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019A4E8634BD3A015B03BAD469CA515059EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 1409 Signing time: Tue 04 Nov 2025 11:00:09 +0000 Manifest this update: Tue 04 Nov 2025 11:00:09 +0000 Manifest next update: Wed 05 Nov 2025 11:00:09 +0000 Files and hashes: 1: 1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa (hash: qQM4l/X3SkEZ4h6aGb2fizqmObGG55sXX+NpcuuHKmE=) 2: 5DRGkm67v3ztNtkmGE9CjHe6qkM.roa (hash: c8V8b8nhOphSZmzRUJQWFcuzVB0h+VPYqSuF8VwM49s=) 3: 7yxzEpwrPvkVtysBCZ9w3NvniME.roa (hash: myjWs4rYeOG9qs0FigCiX4CRWLx91cNiLYd0bOOlv14=) 4: 92YX8_mKsRYRDoG9l3vH6epU_24.roa (hash: R3F3U2oxwWbOLay+ACJCalTUQG9HKAHuMPfnBBPm6HM=) 5: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: 2H48Bz/sdUIQoRWuDE3WFHVmRcv/ttBfTEPqehRgsx0=) 6: KFrQOrOGrx778yQcymTgUx9hD68.roa (hash: cTtECuElVvdbMAGilPAdoZX/Qe3XcmxVm71uJTnN4+A=) 7: KO2tMW1du9dekDI4Y-9_plcBYSk.roa (hash: L0Z21UNOLLnga8zui/KqFlS4YtgeuRJ/OBRssHd9hXE=) 8: MNDWfcZ7THpd1V-JitlFbJJvT2k.roa (hash: 8342ttspxabX1GCBeEK5LbRuFU+2GSg8qKL1eSDng9w=) 9: XST97aNGZZRqCU4Q2norfi4ndhI.roa (hash: Ej7Bdzjuir9bzqXEX3Za6erR0SRowgGxNRVnC/R3Coo=) 10: dDuXmy2-kOiyveIRPNO2zv9O6K4.roa (hash: dIZYpEJfOlH3jzzYUHlsUhacisdYiaRu3PDoh93lXCs=) 11: f-WBLlvCqU3gT2U4k2jp9nRYULc.roa (hash: SbHCNZepVf+SJT1VG5+nfS1tN9EtzQEtvMS4oCBecRI=) 12: fUyauZFzWLubSyadnmzbsZyl6iM.roa (hash: ZXpfbo2eejrS0yFMBL0ES1gh6HanTDFLIm85aYT7+bA=) 13: iGMhmXXBNt2s7l-0mx0YRvUMWSo.roa (hash: McOC3wl39qVTP2IvApkUHWGgt9CHnxQ9E9acv2S4LQA=) 14: jiF9vHMkWKJpjP76Gux54TKpnzc.roa (hash: CCXc0iW9MVKVYNnO0rxCM2yL2mQD+I1ttQ+9hGTDpvQ=) 15: jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa (hash: d6CrkQWol3xr2PKuUL7zdsYsRYcblyvcCYZMvOC8fx8=) 16: w1UWJINQiqIyHaTTFS0euILJR58.roa (hash: jXqC61xJbm2P2p00w1kBmanAbpZq6zjGJCspuExiIe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:86:34:bd:3a:01:5b:03:ba:d4:69:ca:51:50:59:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Nov 4 11:00:09 2025 GMT Not After : Nov 5 11:00:09 2025 GMT Subject: CN=f1b55aaa2240eeda9cbc01b61295be6bc1411031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4b:ef:84:05:03:a9:96:cc:f1:2a:77:93:f2: f1:9d:d3:a0:15:54:d6:30:6b:1a:89:eb:27:2a:b4: e4:2d:b1:4f:a6:73:79:93:bd:fd:40:b6:c9:7d:c4: 65:91:cc:6f:cd:fd:eb:d4:94:d2:c1:14:a6:8d:dc: 8a:d9:55:37:1c:d9:8e:17:7b:62:4c:0d:13:90:c3: 27:10:ea:d6:d0:d9:21:fb:de:a6:eb:bb:9f:af:0b: e9:0d:fb:3d:4e:b7:cd:fe:d3:17:f6:40:8b:b5:c8: f7:b0:3d:87:bd:e6:61:3d:4b:48:f9:5a:66:82:e4: 2b:a0:ea:af:e9:a8:24:aa:b6:76:f5:fc:0b:a4:f8: 6d:fc:63:56:ce:d7:1c:2a:9f:0b:c2:80:61:5f:01: fc:1b:45:0c:dd:a6:8e:8d:db:6a:3c:35:4f:f7:c9: 0c:9b:bd:f5:d0:19:87:75:a2:20:9d:85:0b:c9:ec: 4e:8e:8b:f2:b1:e0:ed:14:0d:a5:1d:8b:2d:74:9b: f3:63:a0:e4:e4:5a:64:ba:6b:cd:01:ae:bd:ae:f1: 0e:06:12:b6:3d:6d:02:78:53:3b:98:20:20:e3:1a: 36:26:22:1d:99:2c:cc:1e:a3:d4:76:04:4f:5e:84: ea:9f:82:fa:27:ae:62:63:02:02:e4:ce:7d:6d:dd: 34:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B5:5A:AA:22:40:EE:DA:9C:BC:01:B6:12:95:BE:6B:C1:41:10:31 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:7b:aa:3f:c2:bf:e7:b9:93:e7:e4:99:53:1f:2e:59:26:8e: df:24:25:79:fa:13:1e:0e:83:87:96:3e:e2:e3:a5:44:dd:e3: 11:b6:bf:6b:8f:7d:29:95:31:bb:e4:0c:29:e6:e5:27:e0:4c: 77:4e:a2:95:17:a0:a1:d5:d0:49:31:7e:5b:52:12:fd:02:6e: c2:af:d0:34:ea:1c:ab:7c:9c:09:19:76:35:04:f3:dc:a3:6d: 3a:e5:e9:4f:c4:22:80:ed:3c:2f:5c:2b:b6:6a:af:b4:4a:b5: 45:d7:a1:2a:de:20:0e:5d:48:f8:bc:29:e9:b0:ad:db:97:dc: 50:03:de:7a:04:0c:34:42:69:04:5c:70:a2:65:01:b2:c0:8e: f2:b7:ba:a8:bd:d5:db:a6:ef:32:77:3b:98:e8:2a:fd:a0:4c: c1:52:c1:67:5c:5b:26:82:89:93:f1:3c:db:81:84:c0:1d:3f: b6:84:f7:df:ad:e6:bf:ac:e9:08:53:c8:15:88:d3:ed:56:74: 52:1e:4c:5c:f4:70:fd:48:75:b4:5b:eb:19:39:15:77:00:ed: 40:fb:8d:34:7b:f7:0a:96:34:83:f8:e9:07:2f:eb:94:b1:eb: 2f:18:b7:6f:c7:61:f5:16:c7:10:ff:4d:54:8f:a2:69:c9:78: 50:bd:2d:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOhjS9OgFbA7rUacpRUFnrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjUxMTA0MTEwMDA5WhcNMjUxMTA1MTEwMDA5WjAzMTEwLwYDVQQD EyhmMWI1NWFhYTIyNDBlZWRhOWNiYzAxYjYxMjk1YmU2YmMxNDExMDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkvvhAUDqZbM8Sp3k/LxndOgFVTW MGsaiesnKrTkLbFPpnN5k739QLbJfcRlkcxvzf3r1JTSwRSmjdyK2VU3HNmOF3ti TA0TkMMnEOrW0Nkh+96m67ufrwvpDfs9TrfN/tMX9kCLtcj3sD2HveZhPUtI+Vpm guQroOqv6agkqrZ29fwLpPht/GNWztccKp8LwoBhXwH8G0UM3aaOjdtqPDVP98kM m7310BmHdaIgnYULyexOjovyseDtFA2lHYstdJvzY6Dk5FpkumvNAa69rvEOBhK2 PW0CeFM7mCAg4xo2JiIdmSzMHqPUdgRPXoTqn4L6J65iYwIC5M59bd00vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPG1WqoiQO7anLwBthKVvmvBQRAxMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlnuqP8K/ 57mT5+SZUx8uWSaO3yQlefoTHg6Dh5Y+4uOlRN3jEba/a499KZUxu+QMKeblJ+BM d06ilRegodXQSTF+W1IS/QJuwq/QNOocq3ycCRl2NQTz3KNtOuXpT8QigO08L1wr tmqvtEq1RdehKt4gDl1I+Lwp6bCt25fcUAPeegQMNEJpBFxwomUBssCO8re6qL3V 26bvMnc7mOgq/aBMwVLBZ1xbJoKJk/E824GEwB0/toT3363mv6zpCFPIFYjT7VZ0 Uh5MXPRw/Uh1tFvrGTkVdwDtQPuNNHv3CpY0g/jpBy/rlLHrLxi3b8dh9RbHEP9N VI+iacl4UL0tdw== -----END CERTIFICATE-----Generated at Tue Nov 4 18:53:39 2025 by rpki-client