$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: JF2tgNZeaARihU7LbY5zo97Bt999Dyo02pbmFLNxUjU= Subject key identifier: D4:5C:46:DA:1D:73:A1:29:EC:64:51:F3:D0:07:5B:F7:E7:90:48:6C Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 01974A0CAD8C8B8BB085EA4C0381C60FB32D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 1277 Signing time: Sat 07 Jun 2025 11:00:34 +0000 Manifest this update: Sat 07 Jun 2025 11:00:34 +0000 Manifest next update: Sun 08 Jun 2025 11:00:34 +0000 Files and hashes: 1: 1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa (hash: qQM4l/X3SkEZ4h6aGb2fizqmObGG55sXX+NpcuuHKmE=) 2: 5DRGkm67v3ztNtkmGE9CjHe6qkM.roa (hash: c8V8b8nhOphSZmzRUJQWFcuzVB0h+VPYqSuF8VwM49s=) 3: 7yxzEpwrPvkVtysBCZ9w3NvniME.roa (hash: myjWs4rYeOG9qs0FigCiX4CRWLx91cNiLYd0bOOlv14=) 4: 92YX8_mKsRYRDoG9l3vH6epU_24.roa (hash: R3F3U2oxwWbOLay+ACJCalTUQG9HKAHuMPfnBBPm6HM=) 5: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: 8gMCqwZ9g2PO24W9MaEfYsxMRWf2dmKSAvPBDlW6ze0=) 6: KO2tMW1du9dekDI4Y-9_plcBYSk.roa (hash: L0Z21UNOLLnga8zui/KqFlS4YtgeuRJ/OBRssHd9hXE=) 7: MNDWfcZ7THpd1V-JitlFbJJvT2k.roa (hash: 8342ttspxabX1GCBeEK5LbRuFU+2GSg8qKL1eSDng9w=) 8: XST97aNGZZRqCU4Q2norfi4ndhI.roa (hash: Ej7Bdzjuir9bzqXEX3Za6erR0SRowgGxNRVnC/R3Coo=) 9: dDuXmy2-kOiyveIRPNO2zv9O6K4.roa (hash: dIZYpEJfOlH3jzzYUHlsUhacisdYiaRu3PDoh93lXCs=) 10: f-WBLlvCqU3gT2U4k2jp9nRYULc.roa (hash: SbHCNZepVf+SJT1VG5+nfS1tN9EtzQEtvMS4oCBecRI=) 11: fUyauZFzWLubSyadnmzbsZyl6iM.roa (hash: ZXpfbo2eejrS0yFMBL0ES1gh6HanTDFLIm85aYT7+bA=) 12: iGMhmXXBNt2s7l-0mx0YRvUMWSo.roa (hash: McOC3wl39qVTP2IvApkUHWGgt9CHnxQ9E9acv2S4LQA=) 13: jiF9vHMkWKJpjP76Gux54TKpnzc.roa (hash: CCXc0iW9MVKVYNnO0rxCM2yL2mQD+I1ttQ+9hGTDpvQ=) 14: jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa (hash: d6CrkQWol3xr2PKuUL7zdsYsRYcblyvcCYZMvOC8fx8=) 15: nuAp8jQeL57cxcv-qMziP5TUwtY.roa (hash: vb4FRcaEF1fztUtawfL6ZNK658gxKBaRE6cvTVdZv2U=) 16: w1UWJINQiqIyHaTTFS0euILJR58.roa (hash: jXqC61xJbm2P2p00w1kBmanAbpZq6zjGJCspuExiIe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4a:0c:ad:8c:8b:8b:b0:85:ea:4c:03:81:c6:0f:b3:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Jun 7 11:00:34 2025 GMT Not After : Jun 8 11:00:34 2025 GMT Subject: CN=d45c46da1d73a129ec6451f3d0075bf7e790486c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f1:de:fc:aa:5c:a6:20:c5:fc:5c:55:3e:ca: 3b:03:10:80:02:88:f3:4b:42:c5:3e:82:15:81:88: e5:26:8f:0f:a4:1d:3d:3c:a7:c3:7a:ff:7a:24:fd: e5:62:cc:78:50:f7:72:0e:f6:f5:e0:e6:93:9a:a4: 82:52:30:2a:9f:a5:b5:6c:65:b2:5b:be:7c:47:9c: b8:85:6e:d8:63:b8:90:22:d9:8a:b0:81:5a:a3:87: 08:e4:e2:7d:03:8b:d5:68:78:d5:91:5a:53:53:b9: cf:b6:00:07:4c:6d:d9:d5:38:4e:4a:0c:5b:6c:a5: 28:3d:95:29:5f:e2:de:28:2c:7f:5a:a1:c2:0f:b9: 85:4f:b3:93:4e:cd:26:fd:80:5f:de:8c:74:9d:90: da:df:5e:37:c6:ff:34:d0:a8:43:fc:f1:aa:8e:13: 0b:a3:02:fe:72:8b:4f:ef:4e:40:82:34:3a:94:6d: 8d:9c:87:fb:67:08:37:82:8a:5f:cc:d4:73:dd:7b: ea:03:89:39:d2:6e:0d:3e:b2:3a:78:69:68:1e:ed: 57:0e:fe:0e:20:be:83:46:8e:a3:d7:db:a1:db:fd: 8e:3f:8f:99:0d:e7:24:0f:ab:a1:2a:81:42:cf:56: 2a:db:b8:62:33:c6:26:5f:58:f4:c1:da:3d:e7:52: af:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5C:46:DA:1D:73:A1:29:EC:64:51:F3:D0:07:5B:F7:E7:90:48:6C X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:8c:74:5d:c0:9c:a5:c4:0e:47:e7:09:21:78:7b:ae:67:02: 41:4d:4a:20:90:96:60:8a:49:99:a6:68:d2:df:15:fa:7a:49: 52:31:33:c7:00:d1:09:59:59:10:f3:e9:90:8e:5b:19:62:ce: cf:0b:f0:96:29:0e:1e:9f:48:4e:09:30:0f:5f:63:d7:04:49: 06:02:c9:92:25:b6:4f:ca:82:0b:8b:e5:72:57:29:0b:5b:30: b1:78:c3:74:78:7f:2e:95:08:94:03:e9:8f:8e:c3:a7:9b:02: e0:39:b7:0e:c1:a3:49:c4:86:bb:45:72:d2:74:7e:94:cc:a4: 45:03:1d:21:bf:18:ea:6c:34:66:20:a0:80:90:2c:a1:67:cc: 3f:27:1d:a4:f3:2b:7a:e0:8c:7e:b7:52:51:82:d4:88:f7:e5: 33:c9:9e:2d:62:5b:93:07:b5:74:46:7a:be:30:1f:5a:c9:d5: c3:2d:21:ce:7c:8f:81:b7:2b:29:26:f3:d6:75:f3:93:57:bc: dd:be:0a:0b:f7:86:31:11:6d:27:c9:5b:12:8b:fe:95:b1:a3: bb:bc:24:02:d2:cb:46:b7:81:a3:7d:71:4a:b2:67:ee:03:77: 13:ed:7c:1d:1c:81:3f:b0:b7:ce:99:b1:85:c8:25:cb:fb:f6: 09:eb:eb:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdKDK2Mi4uwhepMA4HGD7MtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjUwNjA3MTEwMDM0WhcNMjUwNjA4MTEwMDM0WjAzMTEwLwYDVQQD EyhkNDVjNDZkYTFkNzNhMTI5ZWM2NDUxZjNkMDA3NWJmN2U3OTA0ODZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/He/KpcpiDF/FxVPso7AxCAAojz S0LFPoIVgYjlJo8PpB09PKfDev96JP3lYsx4UPdyDvb14OaTmqSCUjAqn6W1bGWy W758R5y4hW7YY7iQItmKsIFao4cI5OJ9A4vVaHjVkVpTU7nPtgAHTG3Z1ThOSgxb bKUoPZUpX+LeKCx/WqHCD7mFT7OTTs0m/YBf3ox0nZDa3143xv800KhD/PGqjhML owL+cotP705AgjQ6lG2NnIf7Zwg3gopfzNRz3XvqA4k50m4NPrI6eGloHu1XDv4O IL6DRo6j19uh2/2OP4+ZDeckD6uhKoFCz1Yq27hiM8YmX1j0wdo951KvJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRcRtodc6Ep7GRR89AHW/fnkEhsMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4x0XcCc pcQOR+cJIXh7rmcCQU1KIJCWYIpJmaZo0t8V+npJUjEzxwDRCVlZEPPpkI5bGWLO zwvwlikOHp9ITgkwD19j1wRJBgLJkiW2T8qCC4vlclcpC1swsXjDdHh/LpUIlAPp j47Dp5sC4Dm3DsGjScSGu0Vy0nR+lMykRQMdIb8Y6mw0ZiCggJAsoWfMPycdpPMr euCMfrdSUYLUiPflM8meLWJbkwe1dEZ6vjAfWsnVwy0hznyPgbcrKSbz1nXzk1e8 3b4KC/eGMRFtJ8lbEov+lbGju7wkAtLLRreBo31xSrJn7gN3E+18HRyBP7C3zpmx hcgly/v2Cevrrw== -----END CERTIFICATE-----Generated at Sat Jun 7 17:33:46 2025 by rpki-client