$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: 1gNV4+bqXZWe0UDj2jG7CPM6XRGGdj8XowCC/RTVf+g= Subject key identifier: E2:AD:FD:E5:F0:E6:17:56:C8:C7:DF:EB:10:9B:B2:B0:F4:7E:61:12 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019A12A83482D6C50979E120A1A985890FC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 13EA Signing time: Thu 23 Oct 2025 20:00:04 +0000 Manifest this update: Thu 23 Oct 2025 20:00:04 +0000 Manifest next update: Fri 24 Oct 2025 20:00:04 +0000 Files and hashes: 1: 1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa (hash: qQM4l/X3SkEZ4h6aGb2fizqmObGG55sXX+NpcuuHKmE=) 2: 5DRGkm67v3ztNtkmGE9CjHe6qkM.roa (hash: c8V8b8nhOphSZmzRUJQWFcuzVB0h+VPYqSuF8VwM49s=) 3: 7yxzEpwrPvkVtysBCZ9w3NvniME.roa (hash: myjWs4rYeOG9qs0FigCiX4CRWLx91cNiLYd0bOOlv14=) 4: 92YX8_mKsRYRDoG9l3vH6epU_24.roa (hash: R3F3U2oxwWbOLay+ACJCalTUQG9HKAHuMPfnBBPm6HM=) 5: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: XVOcZ/+/oiORvuJSVGNW99/jRojL7oFAtQkQ8PPocQk=) 6: KFrQOrOGrx778yQcymTgUx9hD68.roa (hash: cTtECuElVvdbMAGilPAdoZX/Qe3XcmxVm71uJTnN4+A=) 7: KO2tMW1du9dekDI4Y-9_plcBYSk.roa (hash: L0Z21UNOLLnga8zui/KqFlS4YtgeuRJ/OBRssHd9hXE=) 8: MNDWfcZ7THpd1V-JitlFbJJvT2k.roa (hash: 8342ttspxabX1GCBeEK5LbRuFU+2GSg8qKL1eSDng9w=) 9: XST97aNGZZRqCU4Q2norfi4ndhI.roa (hash: Ej7Bdzjuir9bzqXEX3Za6erR0SRowgGxNRVnC/R3Coo=) 10: dDuXmy2-kOiyveIRPNO2zv9O6K4.roa (hash: dIZYpEJfOlH3jzzYUHlsUhacisdYiaRu3PDoh93lXCs=) 11: f-WBLlvCqU3gT2U4k2jp9nRYULc.roa (hash: SbHCNZepVf+SJT1VG5+nfS1tN9EtzQEtvMS4oCBecRI=) 12: fUyauZFzWLubSyadnmzbsZyl6iM.roa (hash: ZXpfbo2eejrS0yFMBL0ES1gh6HanTDFLIm85aYT7+bA=) 13: iGMhmXXBNt2s7l-0mx0YRvUMWSo.roa (hash: McOC3wl39qVTP2IvApkUHWGgt9CHnxQ9E9acv2S4LQA=) 14: jiF9vHMkWKJpjP76Gux54TKpnzc.roa (hash: CCXc0iW9MVKVYNnO0rxCM2yL2mQD+I1ttQ+9hGTDpvQ=) 15: jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa (hash: d6CrkQWol3xr2PKuUL7zdsYsRYcblyvcCYZMvOC8fx8=) 16: w1UWJINQiqIyHaTTFS0euILJR58.roa (hash: jXqC61xJbm2P2p00w1kBmanAbpZq6zjGJCspuExiIe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 20:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:12:a8:34:82:d6:c5:09:79:e1:20:a1:a9:85:89:0f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Oct 23 20:00:04 2025 GMT Not After : Oct 24 20:00:04 2025 GMT Subject: CN=e2adfde5f0e61756c8c7dfeb109bb2b0f47e6112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9c:1b:20:6e:82:fd:16:99:dd:ed:58:5b:77: ed:aa:0b:6d:68:ed:02:83:71:3e:9b:7b:9f:ce:6b: 3b:60:17:9a:a1:7a:0e:d9:05:e2:cb:0f:d8:01:e9: ff:1f:46:0d:06:ab:6b:eb:f3:12:2a:8e:26:3b:d8: 61:38:0b:ea:e0:34:9b:f3:2b:b9:ea:4c:b0:c1:fa: 7c:d8:7a:4c:11:52:b3:ff:08:82:11:9f:9f:25:2c: d5:1a:1c:e1:83:de:09:0c:0d:58:74:24:31:ea:16: 0d:c9:d6:67:10:67:70:b7:ed:48:81:f7:d5:d8:08: 22:34:9a:35:1e:41:83:92:ce:6d:d8:94:96:cb:71: 61:02:d3:1e:e1:29:ef:3a:17:6a:52:e1:f1:a6:34: e1:87:b7:2f:f6:fd:42:97:cb:34:41:14:72:a3:55: bf:0f:af:03:79:24:cc:66:b6:53:b6:29:da:e6:54: 9b:9c:2d:f8:ce:25:5e:71:a8:11:7b:0d:1c:e4:cd: 33:f4:46:42:ee:bb:42:ba:6d:51:fd:a3:18:fe:dc: a7:63:09:bc:16:06:05:4e:1a:d6:a7:7d:61:04:a0: 3e:1f:b4:cc:f4:9a:6d:cf:bd:7f:24:e9:98:10:61: c2:68:8b:73:48:2c:8d:77:c4:f9:b5:fe:e8:2f:bc: 3a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AD:FD:E5:F0:E6:17:56:C8:C7:DF:EB:10:9B:B2:B0:F4:7E:61:12 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:3a:57:00:73:72:db:ea:54:8c:af:61:de:20:52:a3:da:ee: aa:8c:12:8c:d3:fc:db:a2:1c:48:58:05:02:40:6d:4f:16:af: 38:a4:17:c7:98:f1:0d:98:81:c9:ce:38:0c:c7:46:ff:48:58: c5:08:1d:5f:e4:72:39:c6:5c:f4:84:c2:54:cd:49:2f:29:67: 1e:ca:e1:0b:a6:68:0a:e0:a5:eb:99:42:55:91:9c:63:ce:8d: 17:7d:aa:c4:00:ec:3c:13:b5:25:56:db:b9:3e:96:6d:7a:5b: f1:25:41:22:ba:f4:71:91:d1:dd:65:c2:31:71:33:d8:f2:ee: dd:75:7e:67:b0:85:4b:a6:9d:1a:67:0a:b3:19:26:74:f3:96: f9:ca:4e:5f:11:80:4a:2a:77:ec:32:65:18:22:dc:72:bf:01: 98:bf:ba:94:1c:06:d7:ba:94:1d:ac:42:3c:e1:ab:9b:6c:86: 1d:b3:a4:52:46:df:99:5d:02:b0:fa:51:bc:df:45:03:bc:00: b3:1a:5b:78:d9:49:e2:38:d5:2e:8d:25:56:73:16:12:1a:4b: 10:14:08:a7:b3:0f:27:05:f0:01:08:8d:31:06:2f:27:5c:1f: 9b:4a:93:29:24:f9:7a:1b:09:d0:b9:f3:11:31:e7:49:30:45: 69:80:6b:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoSqDSC1sUJeeEgoamFiQ/DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjUxMDIzMjAwMDA0WhcNMjUxMDI0MjAwMDA0WjAzMTEwLwYDVQQD EyhlMmFkZmRlNWYwZTYxNzU2YzhjN2RmZWIxMDliYjJiMGY0N2U2MTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupwbIG6C/RaZ3e1YW3ftqgttaO0C g3E+m3ufzms7YBeaoXoO2QXiyw/YAen/H0YNBqtr6/MSKo4mO9hhOAvq4DSb8yu5 6kywwfp82HpMEVKz/wiCEZ+fJSzVGhzhg94JDA1YdCQx6hYNydZnEGdwt+1IgffV 2AgiNJo1HkGDks5t2JSWy3FhAtMe4SnvOhdqUuHxpjThh7cv9v1Cl8s0QRRyo1W/ D68DeSTMZrZTtina5lSbnC34ziVecagRew0c5M0z9EZC7rtCum1R/aMY/tynYwm8 FgYFThrWp31hBKA+H7TM9Jptz71/JOmYEGHCaItzSCyNd8T5tf7oL7w6kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKt/eXw5hdWyMff6xCbsrD0fmESMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzpXAHNy 2+pUjK9h3iBSo9ruqowSjNP826IcSFgFAkBtTxavOKQXx5jxDZiByc44DMdG/0hY xQgdX+RyOcZc9ITCVM1JLylnHsrhC6ZoCuCl65lCVZGcY86NF32qxADsPBO1JVbb uT6WbXpb8SVBIrr0cZHR3WXCMXEz2PLu3XV+Z7CFS6adGmcKsxkmdPOW+cpOXxGA Sip37DJlGCLccr8BmL+6lBwG17qUHaxCPOGrm2yGHbOkUkbfmV0CsPpRvN9FA7wA sxpbeNlJ4jjVLo0lVnMWEhpLEBQIp7MPJwXwAQiNMQYvJ1wfm0qTKST5ehsJ0Lnz ETHnSTBFaYBrhw== -----END CERTIFICATE-----Generated at Fri Oct 24 06:16:37 2025 by rpki-client