$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: MezFWmn9WcfBqcnFTPZtsPXvjakF8g+HXN6/+qy5LE4= Subject key identifier: 14:C8:71:E8:0B:46:A2:43:06:97:34:A0:D5:ED:55:70:6F:2F:E7:89 Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 019835714BC443BE7783A2503A6BDDA84A03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 1288 Signing time: Wed 23 Jul 2025 04:01:14 +0000 Manifest this update: Wed 23 Jul 2025 04:01:14 +0000 Manifest next update: Thu 24 Jul 2025 04:01:14 +0000 Files and hashes: 1: 5sGdFc_1Zid-hBM7mInO1hEaSqE.roa (hash: 7bwxpMhgqxIjIH4tFXJcxeBHbkei+D+EpzaJzJaJhv4=) 2: 6Fi2x6-MOtr7a_1fOFW30-_zrig.roa (hash: 2IN+YE3CMZAPD+uK8qRy2OV0W4x3OCpS/TO8CF/76aw=) 3: 9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa (hash: 3TIv5c08KCsDbJFNq+WTb4IZP4ym0IZZX1CdjQGX0PE=) 4: AX86DsLSoXFRNkCv2pCL1_EPY5g.roa (hash: GQZE5H1ow5zCrtLramjrChLPwPl7V1YC5vmeyk2QXn0=) 5: GNoD4VldON0fRQOsfwgnZbDlm30.roa (hash: blIx8D3DZyU+DHXOsnwJBmGsut7rhQArkG8R7KyjOw4=) 6: HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa (hash: oR/Hq9WxPGajOgdVUFWze40RSUPdBlPl+1xVQoSJxOo=) 7: MJg7tjZ2YS5zYW2u8iw1g2oqMU0.roa (hash: X+QXFsSzhee86ausU4aiKnbqtRl/bpo3u3VYz3YOas0=) 8: Vfz_XI34h0n1ABRWW0I8TbCl2Ks.roa (hash: 5McLJpTXPeaX6NxvYmzQe8oLwKFov9vgW9zM/HLDWFk=) 9: Wa5j5jUmUSd1vG30ktnaqL3uHDI.roa (hash: MKz77Ewok0vz5vQRzaJNzC9kTJYYYuPm776x717x2z4=) 10: d7zRd6MptHTWJQgyfw6tgdDV_9A.roa (hash: oELlLX+h376OqFFHKdf5s0R3SvC5xRLsvCJ5JL8+PK4=) 11: eaT289O4FWfLSNPSCfCVS50JLdA.roa (hash: 6Ydw1aV3kTAxyagbcZrClYDAIJBPqjkvUlwgRk8W+YE=) 12: nZaqbX4b0xd3UwU7l5sM7yoGBBo.roa (hash: OWNumqHHHp/8gdqH67NYyJSDu9rO3vPuBbgXU7s9BgM=) 13: oZv7gBkqKHSk-77MXrW1ab6ETYI.roa (hash: +B5mLIxH7s3pabVcCwGAo38v71wCcUaCQewhunxJ/mg=) 14: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: r4Q1V6zNecAdoSBghG4R+Vi2EXLbkqi4kKKzW1ymL58=) 15: r4c3fyT5mEicBTcplHGkCHGu1DU.roa (hash: TN1KtYP5BnSUVtiFLbJe3+UWbigxirFk6LMWIHk9G6A=) 16: vsZmI73j1l0F5LUFB41ZYaQs_Cs.roa (hash: nZ33GCfbpIYKPXjqivfkgFha5BmKCs/riEjE4yHbJng=) 17: w6--t_5wz0JDy2YG6__bLL736lk.roa (hash: kokGrC/YWrlNHabiNp1qc8zjZ2tpu6Xwv3gwVAl+cdY=) 18: xaaOuiTsUCwOo5hhwkfZiBvLcJ8.roa (hash: Iz6qbI3mhpm0/uLd5TTzINoKeImEElZtBrUi0Q8Z2Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 04:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:35:71:4b:c4:43:be:77:83:a2:50:3a:6b:dd:a8:4a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Jul 23 04:01:14 2025 GMT Not After : Jul 24 04:01:14 2025 GMT Subject: CN=14c871e80b46a243069734a0d5ed55706f2fe789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:de:a7:a8:9a:2f:08:01:4d:04:39:f6:37:dc: 32:5b:93:1b:ce:28:af:95:60:62:10:e2:64:9a:e9: 8c:32:a8:82:3f:f2:bf:89:a2:71:93:dd:f8:ea:86: 1c:29:c0:77:62:fa:68:83:7f:14:9e:5c:30:db:23: 5d:12:52:87:eb:df:3e:8a:df:ba:2f:80:e7:92:20: 5a:98:01:83:45:da:23:d2:80:a5:71:d2:9a:04:8f: 1f:b9:4c:8b:d5:dc:9c:c9:b1:e4:64:c8:81:29:d7: ea:a7:db:4b:94:31:ef:3e:c9:b7:f5:ff:e9:18:e3: d6:a4:51:6f:85:70:c4:5a:56:cf:b7:b8:a4:9f:04: 71:50:f3:0e:f5:b1:10:81:98:f9:d4:d3:48:89:0b: f2:87:76:9e:55:78:d3:fa:7e:f2:10:37:e3:24:95: e2:58:df:61:22:67:2e:6b:d5:40:b8:39:ba:12:71: 5e:4b:77:76:f5:76:e6:a4:37:00:97:bc:ea:bb:60: c1:de:37:93:0c:95:f5:4c:25:48:40:11:76:b9:c0: c4:41:90:d9:e7:6c:52:c2:7b:00:55:16:2b:1a:f8: d1:fb:b0:24:e8:2f:a3:19:57:b9:ae:af:f9:16:ab: f5:ec:8d:5e:61:87:fc:e6:bf:5c:37:d0:d9:9a:7a: 1d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C8:71:E8:0B:46:A2:43:06:97:34:A0:D5:ED:55:70:6F:2F:E7:89 X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:64:d5:b2:ac:35:cd:ae:a2:98:cd:ac:36:97:6a:b0:ef:0f: 1e:a4:85:97:b9:98:39:3f:5b:5f:3f:17:2c:26:54:a9:cc:c8: 1b:34:b7:44:b5:f9:d7:04:53:a0:5c:6e:bb:8b:e0:3f:96:cb: 62:87:98:9d:75:ad:ad:fd:76:11:69:4c:73:47:e4:d5:69:9d: d7:51:0a:a9:93:21:5c:08:6c:74:35:d6:9d:32:ee:48:22:90: 63:d9:e8:48:9c:57:24:8c:06:57:62:c1:98:b3:35:45:49:10: fe:f4:05:99:b3:d0:84:f3:ba:3f:8a:11:09:98:25:a3:c4:ce: fb:f7:8c:79:d0:29:59:c6:68:ff:26:aa:b2:29:65:4f:9d:70: dc:7f:10:fb:2c:8b:bd:7f:7a:c3:09:70:bb:2f:f7:a0:04:be: 73:5e:27:ff:6a:f7:e4:20:87:2e:18:3d:54:9c:d2:b0:86:06: 1b:fd:1a:e8:0e:dc:8e:2c:1f:4d:d3:b3:d2:c2:09:43:68:00: d4:9d:f2:4f:75:c8:d6:0e:55:44:e8:90:76:12:74:c2:77:30: 58:90:58:b9:e3:32:79:97:9e:f4:57:83:70:9b:4f:c8:7f:84: 07:4b:b6:f1:80:eb:a8:38:aa:7e:e5:a9:c8:b6:a4:fa:5f:02: 40:6a:08:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg1cUvEQ753g6JQOmvdqEoDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjUwNzIzMDQwMTE0WhcNMjUwNzI0MDQwMTE0WjAzMTEwLwYDVQQD EygxNGM4NzFlODBiNDZhMjQzMDY5NzM0YTBkNWVkNTU3MDZmMmZlNzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t6nqJovCAFNBDn2N9wyW5Mbziiv lWBiEOJkmumMMqiCP/K/iaJxk9346oYcKcB3Yvpog38Unlww2yNdElKH698+it+6 L4DnkiBamAGDRdoj0oClcdKaBI8fuUyL1dycybHkZMiBKdfqp9tLlDHvPsm39f/p GOPWpFFvhXDEWlbPt7iknwRxUPMO9bEQgZj51NNIiQvyh3aeVXjT+n7yEDfjJJXi WN9hImcua9VAuDm6EnFeS3d29XbmpDcAl7zqu2DB3jeTDJX1TCVIQBF2ucDEQZDZ 52xSwnsAVRYrGvjR+7Ak6C+jGVe5rq/5Fqv17I1eYYf85r9cN9DZmnodgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTIcegLRqJDBpc0oNXtVXBvL+eJMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2TVsqw1 za6imM2sNpdqsO8PHqSFl7mYOT9bXz8XLCZUqczIGzS3RLX51wRToFxuu4vgP5bL YoeYnXWtrf12EWlMc0fk1Wmd11EKqZMhXAhsdDXWnTLuSCKQY9noSJxXJIwGV2LB mLM1RUkQ/vQFmbPQhPO6P4oRCZglo8TO+/eMedApWcZo/yaqsillT51w3H8Q+yyL vX96wwlwuy/3oAS+c14n/2r35CCHLhg9VJzSsIYGG/0a6A7cjiwfTdOz0sIJQ2gA 1J3yT3XI1g5VROiQdhJ0wncwWJBYueMyeZee9FeDcJtPyH+EB0u28YDrqDiqfuWp yLak+l8CQGoINw== -----END CERTIFICATE-----Generated at Wed Jul 23 12:12:00 2025 by rpki-client