$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: g7T1I0MeTZU0kBBIfBPWxD9jfVIT72x/Mgs8FoYE0Bo= Subject key identifier: 38:33:8E:75:B7:72:73:B0:C2:35:CA:E1:72:DA:52:B2:96:F8:8F:B7 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019A0748EE9133D773F4F01034254BDB7077 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 1791 Signing time: Tue 21 Oct 2025 15:00:11 +0000 Manifest this update: Tue 21 Oct 2025 15:00:11 +0000 Manifest next update: Wed 22 Oct 2025 15:00:11 +0000 Files and hashes: 1: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: AGp+Ag9oqgXP9D8bOsUCBgvggI9NM1JgHQsqZt5mV3A=) 2: 1x058ndDZHjc4S074b7C6G2o0KQ.roa (hash: 6NqrEtmwZV1lsLbsJ/bQBPnqsNTZmovuYZMqK+3nGes=) 3: 2e0lc1JzQ87yGAowww8kgZqV7YY.roa (hash: gNVpmyo9CJXnk0pgBpahH9O86M9z121dgiIEC4Sk0fY=) 4: 6eBmTb7oTFjvB-t6q34h4uDQFck.roa (hash: YpMUNodMXgyKm77uqfvoskg+Hsw/cdeBYzj75L2nGxI=) 5: DF88ZnxNDnDdL7m_tpQtBOrCA5c.roa (hash: i5iFKm2PhqfkKwRSQfA3liCU+8QARl8+rKyoXe3x8yQ=) 6: HoplqEj-n_AFspE4Wkk6llxhUjs.roa (hash: XwYiYjxVBKz7NNA9iHsZMV69zxlIHiKWQZD6RKH52y0=) 7: LTUhQjilzFX-k7Bgy9ysyxEOPb4.roa (hash: e1xccoiOvs2L5dWiIhyAcjjVHRB1nFtrLWnpfffBP84=) 8: Oz1W0gA_gp2o0ksJWMkSuPbI3kg.roa (hash: LL/ivhxpLxJhJ9AWIntZGeKRbSlrt1Vlzwu4w7/JynA=) 9: P1AouXfemIWVVfo5TEibTocze1c.roa (hash: wHpE6e7xo4f0TlJdJmgZHfCjcbJSNy3kZ6obH44Jzik=) 10: Q8GhfkJiK1i0aNFsl1zpqBN38ok.roa (hash: zSrNTOjH2jHkfF8npGjnRGpLF3j5CwGhLlQ8eGbMR74=) 11: RBnwpqzlc9TBDZASvVPEAjuX7Rw.roa (hash: 9Xw6rUQ+UEHileke6uv0nhej/HOGc+mY9NGx2oOIPgw=) 12: SYjATDQ1I6kN9eqCLTNcZMWeeh0.roa (hash: Njd04jRClV/GG253dPwIxhrsePepY7gbrmA3HPI3sFU=) 13: WL0U37rtoMnf9rEUXD_6ssGaivA.roa (hash: LZX1y/DWyL3Za7uA7BHBrGus17Rh9zUmNUrw7i+k7xU=) 14: YXgU_rntcNw21ln86OT_hE-baC4.roa (hash: Zfz6wwu/xRjdBTBaC0Uu8DehxoVZAk/DKVlT5B4P8OY=) 15: YaXF2_UOTL0a5rPBedbLeK27FfI.roa (hash: cO7ZZuKJbU9lC+DFXgCl+Dg10QqzkTTDSRwwBODyAvU=) 16: ZYDhKr44GWTgEYGd8eG37WPsh2Q.roa (hash: uwfjzikgAFKzWJv9BNoB9JKx/LJZPhS6gL+6tEOAI2U=) 17: dMoy1ocOmEzk4dYBdRWtDeFZXh0.roa (hash: VXtb1jeW1jL5ZIe+3y/JZP2SrUZOEss2tqQVUdmb0N4=) 18: eIIy3gr4iW31K7Z0TDyYfiPIC20.roa (hash: 1OhLz2GkEhqW74cgO0W31kCn0nMoyh5rygPNaedp7uk=) 19: hQhs5l9hDP1_zmNckKA9u_WQ4CU.roa (hash: C8YDrKff0YMeob1oWr+bor5KU46B8sgXJ3+9ifdCEfI=) 20: m7QQoFX-u7UYoA41yiP24F7uP9s.roa (hash: +WD8froPo/LUjMw2nwzZtOdRqdsnPQ5Rv0Au1qYv4lg=) 21: tq7CQBp7Hq4xNJlzwyH-4Sc1LDc.roa (hash: ERiDa3qSUTy4z76OEMu4pDL44NVgIEtbghpVZdjpp9k=) 22: ubCtS1VfMlpqc29JR5yJamthyao.roa (hash: UKhp7stItN8bt5SS2ldJQEedsCZck6Jd4Nur78oK3eA=) 23: y74zxfc3T7TxFAzKOoJ3K2ImCgQ.roa (hash: 9cXqO6+RkqL3vFTAJ96TMt5j8uyMT6hOmvxxHIxVvmk=) 24: yYg3T8Ah1yuxHz6D5ehi7z823QI.roa (hash: BG6boV1lZkhAvIrJNBVNIFX81voSjiHSdy+yfJw4k5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 14:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:07:48:ee:91:33:d7:73:f4:f0:10:34:25:4b:db:70:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Oct 21 15:00:11 2025 GMT Not After : Oct 22 15:00:11 2025 GMT Subject: CN=38338e75b77273b0c235cae172da52b296f88fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:d4:02:6e:65:eb:25:d1:57:c9:4b:85:16: a0:dc:e1:41:5e:7b:d9:b8:e1:01:f4:34:22:3c:28: 87:0f:75:62:7a:fd:1a:b1:c6:18:32:53:6a:c7:c9: b0:9f:cf:aa:47:ce:5e:00:7d:a4:5a:bb:ae:0e:92: 46:46:f9:ab:85:69:f1:1c:f4:e7:92:a7:83:f9:3e: a5:76:e7:ad:84:1b:4e:1a:e2:17:e5:5e:6d:f3:a8: ab:ea:cc:c1:3e:49:22:01:aa:fd:0a:83:3b:ed:65: c2:48:f3:47:2c:27:64:94:6f:22:3e:cd:0f:e3:97: 64:33:7d:d5:b8:21:fe:88:c0:09:1c:e8:9e:0f:44: 38:54:cb:b2:ea:60:d3:ef:16:1d:4c:b8:93:31:f9: 7c:49:a8:cf:d8:99:a3:f6:d3:ed:19:17:d6:27:8d: 30:13:d8:3a:a5:5f:99:48:c3:9d:81:99:11:81:4a: 73:27:49:3a:5c:9f:87:fa:29:56:1b:4e:d9:fa:eb: ae:43:14:79:af:2f:d7:71:15:60:23:51:13:b2:e0: e2:75:61:79:4e:4c:70:bd:f5:f5:49:da:4f:66:c7: 62:e3:9b:ed:59:02:70:7d:d5:49:e4:1e:65:3d:bf: a8:7f:71:a0:d2:76:f2:fb:2b:3f:b2:9f:1b:1b:a9: b1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:33:8E:75:B7:72:73:B0:C2:35:CA:E1:72:DA:52:B2:96:F8:8F:B7 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:61:f9:4b:9b:8c:1e:6c:3d:37:9e:51:40:41:29:57:94:89: 57:21:a8:ba:eb:7c:5f:9f:9b:fe:5c:2a:e9:54:6e:43:11:b4: 34:b7:16:c0:12:51:ca:28:d0:32:ce:9b:c3:8e:e0:88:b9:8f: 93:5b:8d:f7:89:56:57:c4:39:56:05:02:fb:51:a4:30:82:17: 27:6b:07:25:c4:ff:40:68:3d:db:5f:fc:a8:41:ca:b7:08:f4: 4a:08:91:14:86:db:eb:2d:35:fb:b5:b9:7e:66:e6:4d:fd:61: b3:2d:a9:6b:62:f0:cb:00:94:eb:af:8b:4b:c5:10:aa:91:cc: d0:af:d7:f3:76:fc:70:a4:42:9a:7f:3f:0a:be:28:6a:84:90: 86:b3:08:62:2b:2c:5d:8c:28:01:20:d2:b2:b9:e4:7c:32:60: 1e:c0:ae:99:48:ea:b3:70:06:29:50:03:a4:87:ce:07:fe:b2: 5f:94:02:77:65:81:36:7e:0b:6c:1f:88:a8:05:a4:14:98:6f: bb:6d:fb:90:3e:8c:b6:a8:0c:eb:d0:a4:46:19:8b:98:af:f5: 8a:57:fa:0b:f9:b4:2a:1b:4c:9f:1f:70:4f:78:37:de:af:2d: 15:f9:e5:c0:93:4e:78:18:d3:c1:f7:70:c7:07:ca:a9:ae:4d: 2d:29:dd:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoHSO6RM9dz9PAQNCVL23B3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjUxMDIxMTUwMDExWhcNMjUxMDIyMTUwMDExWjAzMTEwLwYDVQQD EygzODMzOGU3NWI3NzI3M2IwYzIzNWNhZTE3MmRhNTJiMjk2Zjg4ZmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBXUAm5l6yXRV8lLhRag3OFBXnvZ uOEB9DQiPCiHD3Viev0ascYYMlNqx8mwn8+qR85eAH2kWruuDpJGRvmrhWnxHPTn kqeD+T6lduethBtOGuIX5V5t86ir6szBPkkiAar9CoM77WXCSPNHLCdklG8iPs0P 45dkM33VuCH+iMAJHOieD0Q4VMuy6mDT7xYdTLiTMfl8SajP2Jmj9tPtGRfWJ40w E9g6pV+ZSMOdgZkRgUpzJ0k6XJ+H+ilWG07Z+uuuQxR5ry/XcRVgI1ETsuDidWF5 TkxwvfX1SdpPZsdi45vtWQJwfdVJ5B5lPb+of3Gg0nby+ys/sp8bG6mxawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgzjnW3cnOwwjXK4XLaUrKW+I+3MB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGH5S5uM Hmw9N55RQEEpV5SJVyGouut8X5+b/lwq6VRuQxG0NLcWwBJRyijQMs6bw47giLmP k1uN94lWV8Q5VgUC+1GkMIIXJ2sHJcT/QGg921/8qEHKtwj0SgiRFIbb6y01+7W5 fmbmTf1hsy2pa2LwywCU66+LS8UQqpHM0K/X83b8cKRCmn8/Cr4oaoSQhrMIYiss XYwoASDSsrnkfDJgHsCumUjqs3AGKVADpIfOB/6yX5QCd2WBNn4LbB+IqAWkFJhv u237kD6MtqgM69CkRhmLmK/1ilf6C/m0KhtMnx9wT3g33q8tFfnlwJNOeBjTwfdw xwfKqa5NLSndNg== -----END CERTIFICATE-----Generated at Tue Oct 21 23:37:56 2025 by rpki-client