$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: JgQvw8Cx4Vaj1FwSP6eiRc4mq8adfW+dwh++OqAWoO0= Subject key identifier: 88:4D:CA:1D:73:67:E1:34:7B:14:40:C2:6F:15:6C:EA:48:43:61:8C Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 01983684323E10614990C2DF0C346F918970 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 12F3 Signing time: Wed 23 Jul 2025 09:01:29 +0000 Manifest this update: Wed 23 Jul 2025 09:01:29 +0000 Manifest next update: Thu 24 Jul 2025 09:01:29 +0000 Files and hashes: 1: 1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa (hash: qQM4l/X3SkEZ4h6aGb2fizqmObGG55sXX+NpcuuHKmE=) 2: 5DRGkm67v3ztNtkmGE9CjHe6qkM.roa (hash: c8V8b8nhOphSZmzRUJQWFcuzVB0h+VPYqSuF8VwM49s=) 3: 7yxzEpwrPvkVtysBCZ9w3NvniME.roa (hash: myjWs4rYeOG9qs0FigCiX4CRWLx91cNiLYd0bOOlv14=) 4: 92YX8_mKsRYRDoG9l3vH6epU_24.roa (hash: R3F3U2oxwWbOLay+ACJCalTUQG9HKAHuMPfnBBPm6HM=) 5: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: 5c8z52bzRpulEiuCCMqeZQdjnl6hiR972qGnS3VGVwU=) 6: KO2tMW1du9dekDI4Y-9_plcBYSk.roa (hash: L0Z21UNOLLnga8zui/KqFlS4YtgeuRJ/OBRssHd9hXE=) 7: MNDWfcZ7THpd1V-JitlFbJJvT2k.roa (hash: 8342ttspxabX1GCBeEK5LbRuFU+2GSg8qKL1eSDng9w=) 8: UnvnWibayArM0rP_4GK2HPqji88.roa (hash: iHEj+BKItdDDWf+r36lrBqtGBGTAVvOycWO2mc2eMRo=) 9: XST97aNGZZRqCU4Q2norfi4ndhI.roa (hash: Ej7Bdzjuir9bzqXEX3Za6erR0SRowgGxNRVnC/R3Coo=) 10: dDuXmy2-kOiyveIRPNO2zv9O6K4.roa (hash: dIZYpEJfOlH3jzzYUHlsUhacisdYiaRu3PDoh93lXCs=) 11: f-WBLlvCqU3gT2U4k2jp9nRYULc.roa (hash: SbHCNZepVf+SJT1VG5+nfS1tN9EtzQEtvMS4oCBecRI=) 12: fUyauZFzWLubSyadnmzbsZyl6iM.roa (hash: ZXpfbo2eejrS0yFMBL0ES1gh6HanTDFLIm85aYT7+bA=) 13: iGMhmXXBNt2s7l-0mx0YRvUMWSo.roa (hash: McOC3wl39qVTP2IvApkUHWGgt9CHnxQ9E9acv2S4LQA=) 14: jiF9vHMkWKJpjP76Gux54TKpnzc.roa (hash: CCXc0iW9MVKVYNnO0rxCM2yL2mQD+I1ttQ+9hGTDpvQ=) 15: jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa (hash: d6CrkQWol3xr2PKuUL7zdsYsRYcblyvcCYZMvOC8fx8=) 16: w1UWJINQiqIyHaTTFS0euILJR58.roa (hash: jXqC61xJbm2P2p00w1kBmanAbpZq6zjGJCspuExiIe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 09:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:36:84:32:3e:10:61:49:90:c2:df:0c:34:6f:91:89:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Jul 23 09:01:29 2025 GMT Not After : Jul 24 09:01:29 2025 GMT Subject: CN=884dca1d7367e1347b1440c26f156cea4843618c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d3:7d:e0:cc:dd:06:06:45:0c:57:65:be:53: ac:93:18:15:a7:44:54:18:f2:c0:b3:65:91:d0:cb: 47:87:53:e5:44:ef:a9:fa:c1:a0:e8:57:eb:4c:af: f5:02:31:89:49:77:27:c4:c6:3c:5f:26:1d:06:5b: 3d:0f:a3:b1:98:62:52:92:2a:40:d3:5b:62:73:85: e2:4b:b8:4a:cf:82:98:fa:ae:98:5f:f8:61:f4:25: 99:9c:e1:59:ed:db:c6:11:cc:43:ff:d0:92:1c:87: 4c:f2:3d:92:77:da:6b:72:62:de:ab:d2:f3:a6:e7: 92:d2:d8:f9:85:fb:21:89:96:49:00:c0:2d:a9:c3: c3:e1:96:f8:5f:e7:f9:d3:ff:84:08:1b:a0:7a:66: c9:35:de:bf:e8:a4:cc:81:07:26:c9:68:6c:58:7d: 6b:26:29:c7:32:2d:8f:98:e1:21:f2:91:b2:4c:4f: 24:01:da:da:04:cc:53:0a:bf:29:56:7e:26:6c:d4: f2:d4:bf:c4:24:e4:3c:51:76:06:e1:a9:3d:3f:12: 98:f8:e3:0c:21:29:de:fc:24:54:aa:65:eb:0f:34: 9f:64:40:41:eb:04:84:4c:6d:60:cc:b8:3b:a5:14: fe:c1:73:f3:e9:8d:4c:36:ec:54:5b:d8:6b:64:0a: 6f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4D:CA:1D:73:67:E1:34:7B:14:40:C2:6F:15:6C:EA:48:43:61:8C X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:4a:71:9b:c7:79:4f:43:74:03:3c:55:bb:c0:1b:7d:17:a1: f6:1f:d4:05:e8:e2:53:a2:ce:45:6e:63:a7:71:cb:21:44:b5: 90:08:7b:0c:4f:f7:d6:92:4f:1d:ba:d9:8e:13:1b:99:61:02: 27:f8:ff:d0:69:11:0a:92:50:4b:56:6a:12:d8:d4:fc:8f:87: 8c:c3:85:77:89:a3:02:02:83:da:4e:b8:45:3c:89:5a:e4:5e: 88:09:c8:a7:32:d3:44:90:ee:51:0e:a1:5a:22:0b:c6:63:28: e9:66:35:ad:d2:f9:33:d3:93:a7:f3:0f:89:3f:b1:aa:5c:d4: 67:c0:3f:11:0a:74:ff:14:6e:99:e2:8f:c9:a8:fd:02:2e:32: d8:0b:e4:16:e3:ba:eb:d4:83:07:a0:3f:65:57:ae:b9:4c:37: 66:14:3a:06:2f:f3:ed:99:c8:42:3a:03:c6:7a:ee:6f:22:7e: 24:97:30:d4:fb:ea:1f:2f:84:a2:da:70:ab:01:0f:85:75:4c: 9c:45:16:4d:2e:55:6f:54:bc:03:20:c1:8b:f5:26:b3:aa:b4: 8c:d2:51:50:8d:a1:b5:61:b9:1b:dd:e5:2c:ca:d2:1a:d4:be: 90:ed:6e:0c:ba:a3:a1:14:66:f7:2e:14:f3:62:1c:b0:02:4d: 2f:6d:ba:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg2hDI+EGFJkMLfDDRvkYlwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjUwNzIzMDkwMTI5WhcNMjUwNzI0MDkwMTI5WjAzMTEwLwYDVQQD Eyg4ODRkY2ExZDczNjdlMTM0N2IxNDQwYzI2ZjE1NmNlYTQ4NDM2MThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dN94MzdBgZFDFdlvlOskxgVp0RU GPLAs2WR0MtHh1PlRO+p+sGg6FfrTK/1AjGJSXcnxMY8XyYdBls9D6OxmGJSkipA 01tic4XiS7hKz4KY+q6YX/hh9CWZnOFZ7dvGEcxD/9CSHIdM8j2Sd9prcmLeq9Lz pueS0tj5hfshiZZJAMAtqcPD4Zb4X+f50/+ECBugembJNd6/6KTMgQcmyWhsWH1r JinHMi2PmOEh8pGyTE8kAdraBMxTCr8pVn4mbNTy1L/EJOQ8UXYG4ak9PxKY+OMM ISne/CRUqmXrDzSfZEBB6wSETG1gzLg7pRT+wXPz6Y1MNuxUW9hrZApvJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhNyh1zZ+E0exRAwm8VbOpIQ2GMMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0pxm8d5 T0N0AzxVu8AbfReh9h/UBejiU6LORW5jp3HLIUS1kAh7DE/31pJPHbrZjhMbmWEC J/j/0GkRCpJQS1ZqEtjU/I+HjMOFd4mjAgKD2k64RTyJWuReiAnIpzLTRJDuUQ6h WiILxmMo6WY1rdL5M9OTp/MPiT+xqlzUZ8A/EQp0/xRumeKPyaj9Ai4y2AvkFuO6 69SDB6A/ZVeuuUw3ZhQ6Bi/z7ZnIQjoDxnrubyJ+JJcw1PvqHy+EotpwqwEPhXVM nEUWTS5Vb1S8AyDBi/Ums6q0jNJRUI2htWG5G93lLMrSGtS+kO1uDLqjoRRm9y4U 82IcsAJNL226zw== -----END CERTIFICATE-----Generated at Wed Jul 23 18:19:30 2025 by rpki-client