$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: puxkYyYVXPk5gR6v/6ctRe6C4ggLRNDXmPoFxwQeZJY= Subject key identifier: 16:8A:84:35:A4:88:F5:1A:FB:B6:61:04:61:15:33:B8:37:94:E1:B2 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019836F17D01D44CFEF7958263C88E422F78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 1690 Signing time: Wed 23 Jul 2025 11:00:52 +0000 Manifest this update: Wed 23 Jul 2025 11:00:52 +0000 Manifest next update: Thu 24 Jul 2025 11:00:52 +0000 Files and hashes: 1: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: 1fErlL+dUEhoUHk4O4u1K4ryy1l+DsaSQj+wYwXf4xU=) 2: 60GYLWZuelZJPcs-Od7RQGAXj3g.roa (hash: 2q8gncUUX9jhYk28efDWHIDbDdTxjp4jU70rmf0dQuY=) 3: 97T1FKP4AB1wFygDf_IjY6gh_W0.roa (hash: b+uL1I+CF8JWEeaj5CSinTGLvmB9uwh7dpcntKLQtgU=) 4: BGLkzv5zmcmyNePUFl35bYyaZBg.roa (hash: Rxm9thzilr67738h2nk4GCB7hCDrlSDQC9OhJBucGVw=) 5: DF88ZnxNDnDdL7m_tpQtBOrCA5c.roa (hash: i5iFKm2PhqfkKwRSQfA3liCU+8QARl8+rKyoXe3x8yQ=) 6: Ddl8T6zKwE4Fn8xyNZ8UvYvouME.roa (hash: 71TNe7QPRLX6HAwyqO9qFdluNXuBU2iKPpD6+Xde1FA=) 7: HoplqEj-n_AFspE4Wkk6llxhUjs.roa (hash: XwYiYjxVBKz7NNA9iHsZMV69zxlIHiKWQZD6RKH52y0=) 8: KB-h8Fkel5XMX-o95HwHpLCnxAc.roa (hash: A5pXsjdEHFyVrWzWIHIaJ7+R2DSLK1pRV3wNGnMYcuw=) 9: Njfyl2KPR3xOc19I21BmKveiq_g.roa (hash: Jv/2a5qxJQXPdUJfbdhH4moM57s4biyJMjIwHU+DbKo=) 10: Q8GhfkJiK1i0aNFsl1zpqBN38ok.roa (hash: zSrNTOjH2jHkfF8npGjnRGpLF3j5CwGhLlQ8eGbMR74=) 11: SYjATDQ1I6kN9eqCLTNcZMWeeh0.roa (hash: Njd04jRClV/GG253dPwIxhrsePepY7gbrmA3HPI3sFU=) 12: WL0U37rtoMnf9rEUXD_6ssGaivA.roa (hash: LZX1y/DWyL3Za7uA7BHBrGus17Rh9zUmNUrw7i+k7xU=) 13: WSCQA0Y3pCUJ_5bceNuC3gEIEPE.roa (hash: it6NFAfi4cSW7ITlNEmWjq4Jy+DwQESxb3017kQ8n2o=) 14: ZKbkSQj9ABDJZJMWl4IxrOWcPxA.roa (hash: 9EYoRPbXeI5KZEyuKHPU2hG7mXm4GwRA7A0jztMuEv0=) 15: dMoy1ocOmEzk4dYBdRWtDeFZXh0.roa (hash: VXtb1jeW1jL5ZIe+3y/JZP2SrUZOEss2tqQVUdmb0N4=) 16: eIIy3gr4iW31K7Z0TDyYfiPIC20.roa (hash: 1OhLz2GkEhqW74cgO0W31kCn0nMoyh5rygPNaedp7uk=) 17: hQhs5l9hDP1_zmNckKA9u_WQ4CU.roa (hash: C8YDrKff0YMeob1oWr+bor5KU46B8sgXJ3+9ifdCEfI=) 18: i0EkDiLWxZt-jEsL0cMNpe5XN_g.roa (hash: G7FDEuJ7pS++rTMrLx6g2e+BM36bD3Jhu4w4OIPcRCo=) 19: jREcC-UhWXUSzApEIajwAOrnPds.roa (hash: oDuVDFJg2IBsGrgjsTg4xM1gEZyvXvszObYC5lZZqSw=) 20: rW5_HGw5v2cDyoyeL7-59Gw3Uhk.roa (hash: Z3MvnOKrCY40P32y++b8YK3o1R/6gmeTCaIxhOMoGCk=) 21: tq7CQBp7Hq4xNJlzwyH-4Sc1LDc.roa (hash: ERiDa3qSUTy4z76OEMu4pDL44NVgIEtbghpVZdjpp9k=) 22: ubCtS1VfMlpqc29JR5yJamthyao.roa (hash: UKhp7stItN8bt5SS2ldJQEedsCZck6Jd4Nur78oK3eA=) 23: y74zxfc3T7TxFAzKOoJ3K2ImCgQ.roa (hash: 9cXqO6+RkqL3vFTAJ96TMt5j8uyMT6hOmvxxHIxVvmk=) 24: yYg3T8Ah1yuxHz6D5ehi7z823QI.roa (hash: BG6boV1lZkhAvIrJNBVNIFX81voSjiHSdy+yfJw4k5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:36:f1:7d:01:d4:4c:fe:f7:95:82:63:c8:8e:42:2f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Jul 23 11:00:52 2025 GMT Not After : Jul 24 11:00:52 2025 GMT Subject: CN=168a8435a488f51afbb66104611533b83794e1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:da:f9:55:4a:e3:11:07:f5:2a:77:4f:38:46: f6:6d:4b:cb:1e:98:1b:7a:79:76:3f:21:bf:ca:5d: 34:4a:7b:17:12:7e:6f:1a:44:34:fc:14:dd:a1:72: e0:45:c7:b3:e4:50:c6:9b:79:e9:aa:5b:95:4b:a0: f5:2f:c0:f9:da:17:b4:36:33:55:51:d5:b1:80:68: 0e:2d:e8:e7:93:bf:1b:13:a6:72:a9:22:b6:cb:d0: a9:09:b6:7f:d9:8c:36:43:97:74:3d:9b:ee:f6:51: fa:b1:61:ab:f8:09:3f:41:b3:c4:1d:c8:0a:0f:69: 8b:30:35:26:94:73:49:e1:1d:78:3b:ef:b1:ab:b3: 20:17:a2:42:d2:42:f4:5f:58:f7:55:61:59:16:f4: 33:5f:8f:20:62:ca:a2:59:49:0a:b9:2e:b7:0f:ee: 33:a4:54:d6:b9:d1:50:98:14:64:de:eb:c3:ba:f8: 09:88:bc:ea:af:66:ff:74:a6:8f:3e:1b:27:0e:12: 6e:f7:63:9b:43:72:05:8c:71:7f:5c:9a:2e:80:5e: c3:dd:d2:d2:58:bc:82:4f:e2:87:db:21:c5:ca:67: ab:81:b0:7c:3e:5e:db:61:ff:b7:a0:be:f8:78:b9: fa:f2:89:d5:da:c8:54:ed:96:57:0c:fa:4b:7e:dc: cb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8A:84:35:A4:88:F5:1A:FB:B6:61:04:61:15:33:B8:37:94:E1:B2 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:1e:39:9d:6f:ee:a2:ef:79:26:f0:aa:41:ed:86:42:45:f6: ea:cf:86:e0:b0:75:33:ac:29:e1:78:7e:14:ca:16:d0:c2:12: 66:ad:05:ee:48:4a:6a:12:37:7d:f6:28:7d:16:6f:b0:d2:af: 65:18:19:93:a0:58:8d:f7:9d:08:31:9d:5f:d6:ab:c6:1b:b8: ae:11:ae:99:bf:de:46:6d:a2:42:92:7d:fc:8a:5c:bb:16:d2: e2:4f:39:55:e9:48:e6:54:04:76:7d:03:f3:c1:71:63:65:38: eb:c3:a4:c5:1e:29:6f:7c:72:71:ce:e7:8d:e2:c7:92:85:0d: b2:43:f2:2e:d0:d0:fc:1b:94:c7:e3:82:74:5a:80:87:7f:a9: eb:50:55:cc:48:fc:a3:ef:81:1a:75:6d:5a:3d:72:15:f2:f0: f0:46:f8:b4:d6:7a:0c:a0:cb:f3:b5:07:43:71:11:78:16:e6: 36:47:c9:47:5b:c8:1e:51:7d:52:ec:7c:3f:6e:f0:51:fe:e4: a2:ad:61:80:21:ae:23:b7:1a:8c:1d:34:47:c3:c8:c6:b4:c8: c0:43:b7:51:85:97:d7:da:d7:28:7e:42:d6:20:42:f5:c6:e8: 99:0b:7f:de:b5:0c:bb:aa:ce:4f:2d:6b:a7:a7:cf:23:06:8a: 2d:90:8a:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg28X0B1Ez+95WCY8iOQi94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjUwNzIzMTEwMDUyWhcNMjUwNzI0MTEwMDUyWjAzMTEwLwYDVQQD EygxNjhhODQzNWE0ODhmNTFhZmJiNjYxMDQ2MTE1MzNiODM3OTRlMWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Nr5VUrjEQf1KndPOEb2bUvLHpgb enl2PyG/yl00SnsXEn5vGkQ0/BTdoXLgRcez5FDGm3npqluVS6D1L8D52he0NjNV UdWxgGgOLejnk78bE6ZyqSK2y9CpCbZ/2Yw2Q5d0PZvu9lH6sWGr+Ak/QbPEHcgK D2mLMDUmlHNJ4R14O++xq7MgF6JC0kL0X1j3VWFZFvQzX48gYsqiWUkKuS63D+4z pFTWudFQmBRk3uvDuvgJiLzqr2b/dKaPPhsnDhJu92ObQ3IFjHF/XJougF7D3dLS WLyCT+KH2yHFymergbB8Pl7bYf+3oL74eLn68onV2shU7ZZXDPpLftzLPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaKhDWkiPUa+7ZhBGEVM7g3lOGyMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAex45nW/u ou95JvCqQe2GQkX26s+G4LB1M6wp4Xh+FMoW0MISZq0F7khKahI3ffYofRZvsNKv ZRgZk6BYjfedCDGdX9arxhu4rhGumb/eRm2iQpJ9/IpcuxbS4k85VelI5lQEdn0D 88FxY2U468OkxR4pb3xycc7njeLHkoUNskPyLtDQ/BuUx+OCdFqAh3+p61BVzEj8 o++BGnVtWj1yFfLw8Eb4tNZ6DKDL87UHQ3EReBbmNkfJR1vIHlF9Uux8P27wUf7k oq1hgCGuI7cajB00R8PIxrTIwEO3UYWX19rXKH5C1iBC9cbomQt/3rUMu6rOTy1r p6fPIwaKLZCKqA== -----END CERTIFICATE-----Generated at Wed Jul 23 12:59:25 2025 by rpki-client