$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: 4dkFYK2FS7w7zbh2SBl3QW0e+m2v9ZTfNwlhsGdoAyQ= Subject key identifier: A6:D8:3D:6D:36:F2:3C:21:1A:A2:D9:CD:43:CD:A1:0B:53:5B:00:8D Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 0199240D1EEBAEE8B9B25F61584325D0C540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 136E Signing time: Sun 07 Sep 2025 12:01:03 +0000 Manifest this update: Sun 07 Sep 2025 12:01:03 +0000 Manifest next update: Mon 08 Sep 2025 12:01:03 +0000 Files and hashes: 1: 1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa (hash: qQM4l/X3SkEZ4h6aGb2fizqmObGG55sXX+NpcuuHKmE=) 2: 5DRGkm67v3ztNtkmGE9CjHe6qkM.roa (hash: c8V8b8nhOphSZmzRUJQWFcuzVB0h+VPYqSuF8VwM49s=) 3: 7yxzEpwrPvkVtysBCZ9w3NvniME.roa (hash: myjWs4rYeOG9qs0FigCiX4CRWLx91cNiLYd0bOOlv14=) 4: 92YX8_mKsRYRDoG9l3vH6epU_24.roa (hash: R3F3U2oxwWbOLay+ACJCalTUQG9HKAHuMPfnBBPm6HM=) 5: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: w3JMjuIsGZ3wRORfHe2AYGAwUoZ7S4ivEagpl9JF8DE=) 6: KO2tMW1du9dekDI4Y-9_plcBYSk.roa (hash: L0Z21UNOLLnga8zui/KqFlS4YtgeuRJ/OBRssHd9hXE=) 7: MNDWfcZ7THpd1V-JitlFbJJvT2k.roa (hash: 8342ttspxabX1GCBeEK5LbRuFU+2GSg8qKL1eSDng9w=) 8: UnvnWibayArM0rP_4GK2HPqji88.roa (hash: iHEj+BKItdDDWf+r36lrBqtGBGTAVvOycWO2mc2eMRo=) 9: XST97aNGZZRqCU4Q2norfi4ndhI.roa (hash: Ej7Bdzjuir9bzqXEX3Za6erR0SRowgGxNRVnC/R3Coo=) 10: dDuXmy2-kOiyveIRPNO2zv9O6K4.roa (hash: dIZYpEJfOlH3jzzYUHlsUhacisdYiaRu3PDoh93lXCs=) 11: f-WBLlvCqU3gT2U4k2jp9nRYULc.roa (hash: SbHCNZepVf+SJT1VG5+nfS1tN9EtzQEtvMS4oCBecRI=) 12: fUyauZFzWLubSyadnmzbsZyl6iM.roa (hash: ZXpfbo2eejrS0yFMBL0ES1gh6HanTDFLIm85aYT7+bA=) 13: iGMhmXXBNt2s7l-0mx0YRvUMWSo.roa (hash: McOC3wl39qVTP2IvApkUHWGgt9CHnxQ9E9acv2S4LQA=) 14: jiF9vHMkWKJpjP76Gux54TKpnzc.roa (hash: CCXc0iW9MVKVYNnO0rxCM2yL2mQD+I1ttQ+9hGTDpvQ=) 15: jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa (hash: d6CrkQWol3xr2PKuUL7zdsYsRYcblyvcCYZMvOC8fx8=) 16: w1UWJINQiqIyHaTTFS0euILJR58.roa (hash: jXqC61xJbm2P2p00w1kBmanAbpZq6zjGJCspuExiIe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 07:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:24:0d:1e:eb:ae:e8:b9:b2:5f:61:58:43:25:d0:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Sep 7 12:01:03 2025 GMT Not After : Sep 8 12:01:03 2025 GMT Subject: CN=a6d83d6d36f23c211aa2d9cd43cda10b535b008d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:14:7b:6b:df:39:13:fc:f1:ff:7a:0a:7f:25: cd:eb:ce:62:de:47:87:ab:24:09:5d:c8:42:aa:96: 35:92:ff:32:9d:e9:2d:e2:b7:57:f3:2a:fb:ea:05: 8f:46:cf:af:e0:c8:dd:4e:bc:ad:40:34:98:49:4a: 4b:95:c8:1d:33:76:b4:0f:33:63:58:8c:09:0d:3e: 5e:d8:f9:bf:03:62:7b:34:4b:45:bc:70:1d:3c:c6: 05:a4:89:03:85:bc:4a:2a:9b:df:68:45:40:57:7a: b4:85:e0:ad:ec:df:c3:ac:fc:16:87:e6:16:b0:4f: 80:11:99:93:ee:3b:02:0b:5c:a0:41:18:1e:ec:0e: 62:b0:b6:2f:6d:98:a7:26:27:32:d9:68:b9:97:02: 54:c2:13:ef:29:fb:0d:78:e6:07:52:64:09:34:78: 7f:13:91:71:5d:79:49:6e:cb:6b:21:5d:89:10:4b: 60:11:2b:3d:c8:bf:3f:0a:9f:7b:35:5a:8d:01:10: 29:6a:7c:71:40:68:e5:89:e2:32:cc:1d:23:54:d3: eb:5a:39:9b:bc:41:ee:78:38:61:b5:a3:4e:8b:ae: 73:11:5b:eb:59:01:fa:53:70:f4:01:27:e1:89:91: 37:0a:a2:9f:fd:cb:e1:80:23:45:84:d6:68:61:ea: df:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D8:3D:6D:36:F2:3C:21:1A:A2:D9:CD:43:CD:A1:0B:53:5B:00:8D X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:4c:bf:84:5c:e1:98:03:58:f4:4c:2b:e2:93:9f:e1:c1:50: 5c:9d:7f:04:cc:b2:8c:7c:7f:c8:cb:dc:23:ce:88:a0:9a:f9: 25:42:56:13:11:7d:58:eb:fc:2c:b5:47:e0:73:47:86:f6:14: 07:fc:f5:4e:4c:d1:86:36:bf:01:65:6e:50:45:9e:f0:dc:e9: 24:ac:df:1d:aa:c2:81:63:20:3f:90:07:14:9a:7b:3c:69:1d: 42:eb:4f:9c:e5:8c:33:e9:4d:9c:ef:28:b0:c3:e5:ec:82:39: 63:d0:51:b1:95:3e:82:f4:fd:5d:24:d6:db:df:8d:df:43:0a: ac:17:34:3a:35:95:e2:e7:17:0a:15:82:b7:cc:22:48:18:d3: 49:1b:d7:79:54:d6:9f:42:28:02:ad:21:11:23:a8:ce:31:f6: e8:e8:12:c6:11:13:28:73:bb:f8:d9:bc:67:20:c1:ec:c0:68: 3d:09:15:8a:53:41:fc:55:81:8c:38:86:3b:52:0b:9e:6c:66: 55:5f:00:a7:8d:11:fd:cf:8b:59:f1:1d:97:8e:a1:2a:f9:6a: 64:4a:d7:33:f3:cc:84:92:fe:11:c8:dc:c9:9c:41:dc:34:09: 5a:97:ea:fd:84:c0:0c:8e:e3:90:e0:a9:aa:78:6f:58:cf:eb: de:3d:91:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkkDR7rrui5sl9hWEMl0MVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjUwOTA3MTIwMTAzWhcNMjUwOTA4MTIwMTAzWjAzMTEwLwYDVQQD EyhhNmQ4M2Q2ZDM2ZjIzYzIxMWFhMmQ5Y2Q0M2NkYTEwYjUzNWIwMDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BR7a985E/zx/3oKfyXN685i3keH qyQJXchCqpY1kv8ynekt4rdX8yr76gWPRs+v4MjdTrytQDSYSUpLlcgdM3a0DzNj WIwJDT5e2Pm/A2J7NEtFvHAdPMYFpIkDhbxKKpvfaEVAV3q0heCt7N/DrPwWh+YW sE+AEZmT7jsCC1ygQRge7A5isLYvbZinJicy2Wi5lwJUwhPvKfsNeOYHUmQJNHh/ E5FxXXlJbstrIV2JEEtgESs9yL8/Cp97NVqNARApanxxQGjlieIyzB0jVNPrWjmb vEHueDhhtaNOi65zEVvrWQH6U3D0ASfhiZE3CqKf/cvhgCNFhNZoYerfNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbYPW028jwhGqLZzUPNoQtTWwCNMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEy/hFzh mANY9Ewr4pOf4cFQXJ1/BMyyjHx/yMvcI86IoJr5JUJWExF9WOv8LLVH4HNHhvYU B/z1TkzRhja/AWVuUEWe8NzpJKzfHarCgWMgP5AHFJp7PGkdQutPnOWMM+lNnO8o sMPl7II5Y9BRsZU+gvT9XSTW29+N30MKrBc0OjWV4ucXChWCt8wiSBjTSRvXeVTW n0IoAq0hESOozjH26OgSxhETKHO7+Nm8ZyDB7MBoPQkVilNB/FWBjDiGO1ILnmxm VV8Ap40R/c+LWfEdl46hKvlqZErXM/PMhJL+EcjcyZxB3DQJWpfq/YTADI7jkOCp qnhvWM/r3j2RTg== -----END CERTIFICATE-----Generated at Sun Sep 7 14:57:42 2025 by rpki-client