$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: FmvzfWjxuF1Mc+aytjkF2q34VKpuXmZlpTqV7pHzQhY= Subject key identifier: 2D:0D:FE:08:2F:AD:80:0D:B9:B3:91:9F:D0:66:76:A1:85:4D:98:C7 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 01991F1DE1ED96D4E9351C6FB9549044467A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 1713 Signing time: Sat 06 Sep 2025 13:01:15 +0000 Manifest this update: Sat 06 Sep 2025 13:01:15 +0000 Manifest next update: Sun 07 Sep 2025 13:01:15 +0000 Files and hashes: 1: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: RH3Jk3Yrr2zvSDTPm8wzLGmpxXtmtCODFIwsQT+0E4M=) 2: 1x058ndDZHjc4S074b7C6G2o0KQ.roa (hash: 6NqrEtmwZV1lsLbsJ/bQBPnqsNTZmovuYZMqK+3nGes=) 3: 2e0lc1JzQ87yGAowww8kgZqV7YY.roa (hash: gNVpmyo9CJXnk0pgBpahH9O86M9z121dgiIEC4Sk0fY=) 4: B6xVH4DF7LwRis5lo72xslLrmPw.roa (hash: dw28/skPjpFpXBid1J9TkAszysG4LWrojBJebFMRKDA=) 5: BGLkzv5zmcmyNePUFl35bYyaZBg.roa (hash: Rxm9thzilr67738h2nk4GCB7hCDrlSDQC9OhJBucGVw=) 6: DF88ZnxNDnDdL7m_tpQtBOrCA5c.roa (hash: i5iFKm2PhqfkKwRSQfA3liCU+8QARl8+rKyoXe3x8yQ=) 7: Ddl8T6zKwE4Fn8xyNZ8UvYvouME.roa (hash: 71TNe7QPRLX6HAwyqO9qFdluNXuBU2iKPpD6+Xde1FA=) 8: HoplqEj-n_AFspE4Wkk6llxhUjs.roa (hash: XwYiYjxVBKz7NNA9iHsZMV69zxlIHiKWQZD6RKH52y0=) 9: I6I4t2Fx9_LhItPMPfe0gZVqU9k.roa (hash: KB3ZOA0hvdhs9tj0uTvpdbjx0Su8Obdov0IGyunBEu0=) 10: KB-h8Fkel5XMX-o95HwHpLCnxAc.roa (hash: A5pXsjdEHFyVrWzWIHIaJ7+R2DSLK1pRV3wNGnMYcuw=) 11: Kqlp59cNQIWxbpMlG7rfsIQdWaY.roa (hash: KPymKzBlwUfLVUe90vHDX9VxjZVIfwPy3XALAmoYOtE=) 12: Q8GhfkJiK1i0aNFsl1zpqBN38ok.roa (hash: zSrNTOjH2jHkfF8npGjnRGpLF3j5CwGhLlQ8eGbMR74=) 13: SYjATDQ1I6kN9eqCLTNcZMWeeh0.roa (hash: Njd04jRClV/GG253dPwIxhrsePepY7gbrmA3HPI3sFU=) 14: WL0U37rtoMnf9rEUXD_6ssGaivA.roa (hash: LZX1y/DWyL3Za7uA7BHBrGus17Rh9zUmNUrw7i+k7xU=) 15: WSCQA0Y3pCUJ_5bceNuC3gEIEPE.roa (hash: it6NFAfi4cSW7ITlNEmWjq4Jy+DwQESxb3017kQ8n2o=) 16: Xr0ZSod23fylkrRzbeS-fhErWd4.roa (hash: rKrgCaOetMEeYY+fP2Z9bckxvl6AI5JdlBaScg8ywa4=) 17: YaXF2_UOTL0a5rPBedbLeK27FfI.roa (hash: cO7ZZuKJbU9lC+DFXgCl+Dg10QqzkTTDSRwwBODyAvU=) 18: dMoy1ocOmEzk4dYBdRWtDeFZXh0.roa (hash: VXtb1jeW1jL5ZIe+3y/JZP2SrUZOEss2tqQVUdmb0N4=) 19: eIIy3gr4iW31K7Z0TDyYfiPIC20.roa (hash: 1OhLz2GkEhqW74cgO0W31kCn0nMoyh5rygPNaedp7uk=) 20: hQhs5l9hDP1_zmNckKA9u_WQ4CU.roa (hash: C8YDrKff0YMeob1oWr+bor5KU46B8sgXJ3+9ifdCEfI=) 21: jREcC-UhWXUSzApEIajwAOrnPds.roa (hash: oDuVDFJg2IBsGrgjsTg4xM1gEZyvXvszObYC5lZZqSw=) 22: oIgTn5Wn9ig1kGT3_v5Bj22EoE0.roa (hash: 9WBkSy8UvwQp/kNgarpwp5AMLZN6BX67FCvxzXTS+zo=) 23: pR_XA8ri2dteC6nQ2RyLXH7tE2w.roa (hash: DnMiXEP8GZTyXWepthdtygEAT723jjbDWGvE97iLTIw=) 24: tq7CQBp7Hq4xNJlzwyH-4Sc1LDc.roa (hash: ERiDa3qSUTy4z76OEMu4pDL44NVgIEtbghpVZdjpp9k=) 25: ubCtS1VfMlpqc29JR5yJamthyao.roa (hash: UKhp7stItN8bt5SS2ldJQEedsCZck6Jd4Nur78oK3eA=) 26: y74zxfc3T7TxFAzKOoJ3K2ImCgQ.roa (hash: 9cXqO6+RkqL3vFTAJ96TMt5j8uyMT6hOmvxxHIxVvmk=) 27: yYg3T8Ah1yuxHz6D5ehi7z823QI.roa (hash: BG6boV1lZkhAvIrJNBVNIFX81voSjiHSdy+yfJw4k5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 11:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1f:1d:e1:ed:96:d4:e9:35:1c:6f:b9:54:90:44:46:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Sep 6 13:01:15 2025 GMT Not After : Sep 7 13:01:15 2025 GMT Subject: CN=2d0dfe082fad800db9b3919fd06676a1854d98c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:39:73:d6:03:72:8c:0a:7b:ae:90:96:2b:cb: 0c:8f:aa:cf:1c:b8:54:70:b7:8a:6e:5a:c4:b5:10: e7:1a:f0:c8:31:f7:11:8a:2c:fd:a4:55:79:b2:54: ff:72:5b:a4:08:83:1c:2d:cf:d5:f6:d5:1d:c6:43: 4c:ca:45:52:8d:cf:5d:95:76:75:08:03:1e:67:1c: 8f:67:d4:24:71:1f:86:35:81:26:51:1b:16:0e:03: b5:da:5f:31:40:eb:6a:bf:df:cf:32:30:b1:e9:2d: 04:4f:bb:9d:8e:47:51:37:92:06:9c:6b:6d:ff:12: 88:26:b1:d9:fc:2c:e4:70:89:09:c5:67:a4:6b:3b: 27:56:37:0b:dc:f0:71:cf:0b:21:31:55:f7:ce:95: 8d:23:cc:a5:e8:a7:29:79:90:52:36:95:55:3c:bc: 28:7c:53:8d:07:c6:95:d9:86:16:ef:bf:10:a1:f1: 0a:e3:8f:2d:8d:d9:25:25:d5:6f:2c:e5:6f:ce:4f: 16:12:b2:a0:c1:cf:2e:d4:6a:71:40:7b:cc:1e:62: a8:c4:8e:05:86:70:3c:69:fe:59:10:83:ef:1c:ce: e8:d8:66:a1:a2:2f:3d:73:0b:8c:dd:45:8d:a8:50: 13:4e:e3:4e:3f:be:8e:0e:60:2d:bb:fb:bb:49:fa: 03:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0D:FE:08:2F:AD:80:0D:B9:B3:91:9F:D0:66:76:A1:85:4D:98:C7 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:24:db:63:13:61:d8:35:a0:a2:b8:ca:cd:76:ce:58:b2:46: 95:d1:e5:e1:dd:50:19:17:1f:27:8b:f3:80:15:4f:2c:ad:81: cf:07:de:e2:04:f0:9b:ea:6f:2d:57:d9:fa:58:6c:67:fd:d1: b4:a9:b9:a6:24:5b:6a:ba:48:02:43:0c:40:7f:4f:6b:5f:c1: 42:c5:1f:e2:75:a6:b9:5f:f5:95:90:55:d7:4d:50:40:01:29: 4b:c7:57:33:50:25:2d:01:a7:1d:9f:26:47:b1:e2:0e:a6:28: 30:31:3b:bc:1a:8b:ea:5a:d8:34:33:b7:a5:fc:03:a8:9a:56: e0:b9:88:41:cc:94:e3:05:b3:c0:63:7a:9b:7c:a6:69:81:b2: 97:ab:30:34:d7:35:0b:1b:7c:6a:bf:5d:bb:c8:bc:3c:ec:0c: 9c:b0:76:fa:2a:c0:07:b3:72:69:22:79:dc:6a:9a:b4:9b:5f: e0:96:1c:9e:37:0f:16:32:7d:f7:8f:5d:a3:c6:36:64:20:9f: 83:71:74:4f:e2:a0:69:cb:fb:e4:e3:ab:69:bd:6c:fc:68:37: 80:57:2a:cf:fb:45:13:d7:cf:7f:2e:00:0f:e5:09:8a:58:f1: 0d:9c:38:79:3f:9e:fc:94:2d:19:24:84:05:31:b2:e9:e3:33: e6:0d:a4:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkfHeHtltTpNRxvuVSQREZ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjUwOTA2MTMwMTE1WhcNMjUwOTA3MTMwMTE1WjAzMTEwLwYDVQQD EygyZDBkZmUwODJmYWQ4MDBkYjliMzkxOWZkMDY2NzZhMTg1NGQ5OGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTlz1gNyjAp7rpCWK8sMj6rPHLhU cLeKblrEtRDnGvDIMfcRiiz9pFV5slT/clukCIMcLc/V9tUdxkNMykVSjc9dlXZ1 CAMeZxyPZ9QkcR+GNYEmURsWDgO12l8xQOtqv9/PMjCx6S0ET7udjkdRN5IGnGtt /xKIJrHZ/CzkcIkJxWekazsnVjcL3PBxzwshMVX3zpWNI8yl6KcpeZBSNpVVPLwo fFONB8aV2YYW778QofEK448tjdklJdVvLOVvzk8WErKgwc8u1GpxQHvMHmKoxI4F hnA8af5ZEIPvHM7o2Gahoi89cwuM3UWNqFATTuNOP76ODmAtu/u7SfoDqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0N/ggvrYANubORn9BmdqGFTZjHMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyTbYxNh 2DWgorjKzXbOWLJGldHl4d1QGRcfJ4vzgBVPLK2Bzwfe4gTwm+pvLVfZ+lhsZ/3R tKm5piRbarpIAkMMQH9Pa1/BQsUf4nWmuV/1lZBV101QQAEpS8dXM1AlLQGnHZ8m R7HiDqYoMDE7vBqL6lrYNDO3pfwDqJpW4LmIQcyU4wWzwGN6m3ymaYGyl6swNNc1 Cxt8ar9du8i8POwMnLB2+irAB7NyaSJ53GqatJtf4JYcnjcPFjJ9949do8Y2ZCCf g3F0T+Kgacv75OOrab1s/Gg3gFcqz/tFE9fPfy4AD+UJiljxDZw4eT+e/JQtGSSE BTGy6eMz5g2kjg== -----END CERTIFICATE-----Generated at Sat Sep 6 15:35:20 2025 by rpki-client