$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: +S1S19SFNigNZIvb4gtCOZ+y1GpZdbWwa/MXkA7z1d8= Subject key identifier: A1:1F:9F:E8:44:DC:09:DC:85:F0:10:75:41:D1:62:6D:3C:DB:34:C8 Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 019DCB987A4B79CC431F72B5807EF2A7D236 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 156E Signing time: Sun 26 Apr 2026 21:01:00 +0000 Manifest this update: Sun 26 Apr 2026 21:01:00 +0000 Manifest next update: Mon 27 Apr 2026 21:01:00 +0000 Files and hashes: 1: 76SUa31tX84MMYV-5pJtl_RzfBs.roa (hash: VLwC/xTHEJsdM4oEbJXYgc2X6KgnqYrx1To2cyFfsks=) 2: EQyiKX_7-Wpxq09KJocOiD7iVtg.roa (hash: xSHc+sset4mHHx5Au4SFQGD7gPC3y5Gef/MK9s8Iy4Y=) 3: IqvcRngzlVCtX_OA-70dAZLFdA8.roa (hash: aY3f5nvXyrfMF4R4lR/AbKv7PaJsmbQ5UoA1+i35Mzo=) 4: J6RUNAmoogv7zgMLcCOwk_cTSbw.roa (hash: g+8OdmE2eYFbsqzauS740Ewhw4IU7T/U1OEITUeBDc4=) 5: JYSE_79beIVH7AyGREwVYhRCyTY.roa (hash: l3baob39qaOOP1HD2nUjVfG8gYEyw7b1MgZubnhYeyE=) 6: LlTZm9TRn88VWou6DKeJrZdQgvU.roa (hash: GTQExs7+EOPrcDE70ZQ1HXMC0yUw4J5W6WVSW6HNDyE=) 7: O-CoG-YF7L6hwLeg3uly4Kp8B_8.roa (hash: 5oJU3WpHWPREk+VpJtji8wlNog6GMZ8hQeRSHT6lLd0=) 8: U2Yc5skQvePijZYsWlFophc_BK4.roa (hash: gMfZmKyaceaZgToU/WPMcQ0QQiGVzdWPQc5qXxtNrpw=) 9: WMiYfXfaecilSx0Cw11AX6GHoD0.roa (hash: tfANuqYEsqBC9djOQlOpVgZbpkAcWNv/SHctNZh0ths=) 10: YLu7TqT2RSl1_BNUUxUt12edQaA.roa (hash: paF/KBHEk0JOZSKhbJ4oeNoOGAfMADsXOpIZVHL7RNY=) 11: aQ88EoiiajhYjpR8X9YSC2Itufk.roa (hash: 6ocE7SCCa9OYWlhJzkmE5ODfDYPaMsMSbmqpzzbM+qk=) 12: bKeksz2w4uplaCPFhGd2ZRXJ3L4.roa (hash: V3eyRTLr62Od4hxpOj09Jq4Nekd36hyzHMFde1nQKHM=) 13: cNrzpnZVR-vdGnfMmjiDxUQw38w.roa (hash: jDSBudPBssvuTBaPnXNJhRgSYVM03+9BoPvraHbjsUs=) 14: hOWBX1aqOOkBBDPmSf04HK0FDdQ.roa (hash: TNZ6xI5xHtE38+sW0p4MVYqN1AjK+nGsdspXM65hmqg=) 15: hpQK8Ct69QedB3MH-Zduh7fwfI0.roa (hash: tMKgnvO9EBwmVGsim8vR529voYsTaPvcU9t25lxh9c8=) 16: lE9bYROvMOgfAcJMOq1buSFu5Oc.roa (hash: uM/UbNoBafoN3u4NQaCJ1CV+W48Aj8GUgTcEvh/o4kw=) 17: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: KNqmdjBb6REF7Phep4bAP4Pn3AETx1fSZ10o2JP/EBY=) 18: sp2MMK9YRqm89c-c8Nk0zqZ0hl0.roa (hash: 4AR1dpezwOfRG52yq/YaU//Ei5bTQmeOkpGOb7/yTjo=) 19: xSn7ixxST4P6sLWhFGPF1kgNAlE.roa (hash: 6Zt2rctbn7D8+hho9smzj15xitIYg/ED9s7TTA4i/jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 14:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cb:98:7a:4b:79:cc:43:1f:72:b5:80:7e:f2:a7:d2:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Apr 26 21:01:00 2026 GMT Not After : Apr 27 21:01:00 2026 GMT Subject: CN=a11f9fe844dc09dc85f0107541d1626d3cdb34c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:03:76:6c:4c:74:0d:6d:da:6f:99:c5:c2: 68:d0:53:7c:9e:65:a2:68:96:cd:12:e2:85:5e:c5: 90:7c:ef:e7:8a:64:51:d1:55:f3:1f:48:59:ac:03: ce:cb:82:44:87:d8:67:3a:56:72:8b:47:63:22:81: 2d:94:62:35:6b:c2:2e:ee:c7:8e:b3:3f:28:2a:ba: 6d:e9:25:81:f6:7a:d9:c3:bb:04:aa:19:17:17:11: 7b:e8:66:95:19:7d:4a:2d:e4:d8:6f:1c:71:c2:3a: f0:a1:ad:9a:4d:f7:72:cf:6d:2e:87:a5:bc:e8:14: c6:34:75:e7:fd:e4:30:15:57:82:6e:af:02:c9:fd: 7b:db:1b:51:98:6c:87:84:c2:e3:8c:87:ba:84:a6: 13:7b:db:cd:43:32:ac:2c:72:7f:2d:21:20:77:ea: 22:1b:95:fe:11:69:94:73:61:30:96:ba:98:28:53: 45:d7:7f:49:f2:74:48:b0:a5:9a:d2:cc:1d:03:68: 36:3e:5d:e7:2b:9f:cb:cf:ea:b9:7b:bf:21:8a:fe: 0a:a7:b6:65:70:0b:e8:2a:6e:ca:53:57:5b:0b:14: 5b:7a:ec:ed:e4:cc:4f:18:88:bd:00:0b:20:16:7e: cf:2b:c8:0a:52:13:ee:e3:8a:0e:0e:61:c2:94:e4: 02:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1F:9F:E8:44:DC:09:DC:85:F0:10:75:41:D1:62:6D:3C:DB:34:C8 X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e9:0d:01:89:a3:d8:70:54:22:39:f2:f4:ab:2c:96:33:11: 07:c3:2a:aa:34:e4:bc:ae:70:a7:ea:c4:87:33:fe:5a:b0:ba: 36:46:25:12:91:ee:5a:b7:86:5b:57:0e:3a:be:9a:9b:24:5a: cd:6f:ea:d3:8d:44:e1:5e:c6:db:60:d6:74:bb:87:c7:2b:e3: 26:9d:55:c2:c6:c6:d9:9d:a4:25:c1:a2:ea:ed:bd:9b:52:7e: bf:6d:ed:1e:f6:ec:d5:46:21:78:98:74:fa:9c:e7:5e:ca:ff: 46:f2:45:c5:cf:09:a0:a7:f5:59:19:38:aa:42:af:14:75:7b: 07:ca:c8:d8:7b:54:02:13:a8:87:6a:34:24:5f:ce:53:f1:41: a9:db:30:cd:0a:77:7e:32:d5:64:9f:c5:33:1b:e6:34:20:e0: 69:58:cc:db:d9:26:0e:46:c2:07:15:2b:87:47:ef:8d:7a:f8: 6b:dc:32:55:98:74:82:e6:02:5a:21:18:42:7f:f2:1c:74:3d: 08:e4:b5:c6:c5:98:d8:4f:f3:15:db:23:56:dd:a6:28:4b:48: 01:fc:ec:d1:27:88:8d:2a:0e:91:b2:82:1a:49:01:d1:a0:9c: 1e:28:7d:0c:52:c4:12:8f:4a:49:81:0c:de:ce:6c:6f:cd:75: 98:d0:db:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3LmHpLecxDH3K1gH7yp9I2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjYwNDI2MjEwMTAwWhcNMjYwNDI3MjEwMTAwWjAzMTEwLwYDVQQD EyhhMTFmOWZlODQ0ZGMwOWRjODVmMDEwNzU0MWQxNjI2ZDNjZGIzNGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGcDdmxMdA1t2m+ZxcJo0FN8nmWi aJbNEuKFXsWQfO/nimRR0VXzH0hZrAPOy4JEh9hnOlZyi0djIoEtlGI1a8Iu7seO sz8oKrpt6SWB9nrZw7sEqhkXFxF76GaVGX1KLeTYbxxxwjrwoa2aTfdyz20uh6W8 6BTGNHXn/eQwFVeCbq8Cyf172xtRmGyHhMLjjIe6hKYTe9vNQzKsLHJ/LSEgd+oi G5X+EWmUc2EwlrqYKFNF139J8nRIsKWa0swdA2g2Pl3nK5/Lz+q5e78hiv4Kp7Zl cAvoKm7KU1dbCxRbeuzt5MxPGIi9AAsgFn7PK8gKUhPu44oODmHClOQCjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEfn+hE3AnchfAQdUHRYm082zTIMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfekNAYmj 2HBUIjny9KssljMRB8MqqjTkvK5wp+rEhzP+WrC6NkYlEpHuWreGW1cOOr6amyRa zW/q041E4V7G22DWdLuHxyvjJp1VwsbG2Z2kJcGi6u29m1J+v23tHvbs1UYheJh0 +pznXsr/RvJFxc8JoKf1WRk4qkKvFHV7B8rI2HtUAhOoh2o0JF/OU/FBqdswzQp3 fjLVZJ/FMxvmNCDgaVjM29kmDkbCBxUrh0fvjXr4a9wyVZh0guYCWiEYQn/yHHQ9 COS1xsWY2E/zFdsjVt2mKEtIAfzs0SeIjSoOkbKCGkkB0aCcHih9DFLEEo9KSYEM 3s5sb811mNDb1w== -----END CERTIFICATE-----Generated at Mon Apr 27 00:15:05 2026 by rpki-client