$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: biyigzk0a4m/ejNb6I88XFfr/6mqdxEuzbcJVjUSdRU= Subject key identifier: 9F:59:03:6E:42:15:70:2B:5F:05:88:2B:3E:5E:97:C7:5E:53:30:0A Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 01992CA2AF2584A380F50D96F65A3220EF8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 1308 Signing time: Tue 09 Sep 2025 04:01:23 +0000 Manifest this update: Tue 09 Sep 2025 04:01:23 +0000 Manifest next update: Wed 10 Sep 2025 04:01:23 +0000 Files and hashes: 1: 5sGdFc_1Zid-hBM7mInO1hEaSqE.roa (hash: 7bwxpMhgqxIjIH4tFXJcxeBHbkei+D+EpzaJzJaJhv4=) 2: 6Fi2x6-MOtr7a_1fOFW30-_zrig.roa (hash: 2IN+YE3CMZAPD+uK8qRy2OV0W4x3OCpS/TO8CF/76aw=) 3: 9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa (hash: 3TIv5c08KCsDbJFNq+WTb4IZP4ym0IZZX1CdjQGX0PE=) 4: AX86DsLSoXFRNkCv2pCL1_EPY5g.roa (hash: GQZE5H1ow5zCrtLramjrChLPwPl7V1YC5vmeyk2QXn0=) 5: GNoD4VldON0fRQOsfwgnZbDlm30.roa (hash: blIx8D3DZyU+DHXOsnwJBmGsut7rhQArkG8R7KyjOw4=) 6: HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa (hash: oR/Hq9WxPGajOgdVUFWze40RSUPdBlPl+1xVQoSJxOo=) 7: MJg7tjZ2YS5zYW2u8iw1g2oqMU0.roa (hash: X+QXFsSzhee86ausU4aiKnbqtRl/bpo3u3VYz3YOas0=) 8: Vfz_XI34h0n1ABRWW0I8TbCl2Ks.roa (hash: 5McLJpTXPeaX6NxvYmzQe8oLwKFov9vgW9zM/HLDWFk=) 9: Wa5j5jUmUSd1vG30ktnaqL3uHDI.roa (hash: MKz77Ewok0vz5vQRzaJNzC9kTJYYYuPm776x717x2z4=) 10: d7zRd6MptHTWJQgyfw6tgdDV_9A.roa (hash: oELlLX+h376OqFFHKdf5s0R3SvC5xRLsvCJ5JL8+PK4=) 11: eaT289O4FWfLSNPSCfCVS50JLdA.roa (hash: 6Ydw1aV3kTAxyagbcZrClYDAIJBPqjkvUlwgRk8W+YE=) 12: nZaqbX4b0xd3UwU7l5sM7yoGBBo.roa (hash: OWNumqHHHp/8gdqH67NYyJSDu9rO3vPuBbgXU7s9BgM=) 13: oZv7gBkqKHSk-77MXrW1ab6ETYI.roa (hash: +B5mLIxH7s3pabVcCwGAo38v71wCcUaCQewhunxJ/mg=) 14: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: znune4lX+uW1x4yFfQzbfaE8K4GHMF5ynFPyPFzUER0=) 15: r4c3fyT5mEicBTcplHGkCHGu1DU.roa (hash: TN1KtYP5BnSUVtiFLbJe3+UWbigxirFk6LMWIHk9G6A=) 16: vsZmI73j1l0F5LUFB41ZYaQs_Cs.roa (hash: nZ33GCfbpIYKPXjqivfkgFha5BmKCs/riEjE4yHbJng=) 17: w6--t_5wz0JDy2YG6__bLL736lk.roa (hash: kokGrC/YWrlNHabiNp1qc8zjZ2tpu6Xwv3gwVAl+cdY=) 18: xaaOuiTsUCwOo5hhwkfZiBvLcJ8.roa (hash: Iz6qbI3mhpm0/uLd5TTzINoKeImEElZtBrUi0Q8Z2Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2c:a2:af:25:84:a3:80:f5:0d:96:f6:5a:32:20:ef:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Sep 9 04:01:23 2025 GMT Not After : Sep 10 04:01:23 2025 GMT Subject: CN=9f59036e4215702b5f05882b3e5e97c75e53300a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:40:fc:66:a8:a2:14:12:08:65:0e:a8:d8:75: dd:6d:7b:d5:ef:d7:05:68:4e:df:d5:cb:c1:35:83: f5:de:a0:73:4d:70:f8:d9:c2:ab:74:53:8c:a9:62: 31:6d:85:f1:cb:e8:e1:a3:06:51:93:b7:1e:08:cf: 41:8b:cd:aa:11:f7:bd:9b:4c:d1:45:bd:4e:2f:ed: 83:1f:ff:66:0d:81:92:34:a8:8d:f9:40:d9:9d:71: 59:b3:90:27:6d:20:28:20:3e:d5:f3:80:52:b3:a5: 10:f1:25:b5:85:e0:02:5d:81:d6:48:1a:1b:57:2e: 1d:2a:82:03:45:20:70:62:fb:0f:1f:5c:e9:8b:71: 19:56:39:eb:9e:15:5a:21:18:52:96:fc:93:ac:40: d5:ea:9e:ee:dd:ab:83:58:39:6a:d2:27:39:1a:da: c2:71:f8:31:c6:d5:8f:37:9e:8b:a1:d5:52:4b:26: b7:68:62:63:dc:44:22:9f:d5:e3:20:1c:a4:7c:39: da:4d:02:6b:f8:be:d9:85:30:a1:6d:3b:4c:cf:30: b6:36:42:21:6b:79:79:c5:97:f5:c8:0b:4f:6a:de: 19:24:65:8e:c6:2e:50:9a:2e:53:41:94:8b:cc:9a: 40:f8:e8:31:a5:62:20:03:46:cd:67:ef:56:4c:dd: 15:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:59:03:6E:42:15:70:2B:5F:05:88:2B:3E:5E:97:C7:5E:53:30:0A X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:cb:45:83:a5:b0:60:47:ae:29:02:c8:ea:a1:50:e6:13:e8: 74:49:fe:85:c7:97:44:13:1c:ae:00:63:37:da:54:98:38:67: 1e:df:69:12:0f:e1:8b:98:ae:d1:f0:a8:53:6d:95:b2:ee:3f: f8:38:eb:90:df:dc:59:a8:5d:82:39:2e:d7:04:25:cc:11:e9: bf:3d:b6:8e:1f:2d:67:08:7c:5c:fd:c4:ff:76:6d:ac:22:31: 0a:23:ab:dc:52:a6:ce:48:c2:4c:8d:ad:b9:86:11:db:d6:6c: 52:34:92:29:bb:f3:07:98:22:09:73:df:b2:2b:5e:97:99:87: ec:6d:db:20:ea:15:89:1c:e9:0e:38:58:f7:0d:f8:82:97:62: 61:3e:92:51:65:e8:28:38:86:6d:ae:cf:df:d0:3c:19:bb:f4: a0:04:47:b7:eb:2b:b8:1f:3f:35:4f:94:43:7d:c9:a8:aa:0c: a6:d5:33:c6:89:fc:53:5f:4c:01:91:ea:5b:22:86:3b:fc:a1: 4d:10:e7:c2:98:9e:01:96:9f:1a:1f:13:ff:75:4f:36:cd:50: 0c:04:92:70:db:e0:61:e7:f0:27:05:cd:21:12:ca:17:d8:07: 7f:9a:c9:f4:cb:53:ef:3a:63:9e:37:06:ee:3d:e0:9b:c9:60: 8d:a7:4e:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZksoq8lhKOA9Q2W9loyIO+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjUwOTA5MDQwMTIzWhcNMjUwOTEwMDQwMTIzWjAzMTEwLwYDVQQD Eyg5ZjU5MDM2ZTQyMTU3MDJiNWYwNTg4MmIzZTVlOTdjNzVlNTMzMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmED8ZqiiFBIIZQ6o2HXdbXvV79cF aE7f1cvBNYP13qBzTXD42cKrdFOMqWIxbYXxy+jhowZRk7ceCM9Bi82qEfe9m0zR Rb1OL+2DH/9mDYGSNKiN+UDZnXFZs5AnbSAoID7V84BSs6UQ8SW1heACXYHWSBob Vy4dKoIDRSBwYvsPH1zpi3EZVjnrnhVaIRhSlvyTrEDV6p7u3auDWDlq0ic5GtrC cfgxxtWPN56LodVSSya3aGJj3EQin9XjIBykfDnaTQJr+L7ZhTChbTtMzzC2NkIh a3l5xZf1yAtPat4ZJGWOxi5Qmi5TQZSLzJpA+OgxpWIgA0bNZ+9WTN0VtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9ZA25CFXArXwWIKz5el8deUzAKMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMtFg6Ww YEeuKQLI6qFQ5hPodEn+hceXRBMcrgBjN9pUmDhnHt9pEg/hi5iu0fCoU22Vsu4/ +DjrkN/cWahdgjku1wQlzBHpvz22jh8tZwh8XP3E/3ZtrCIxCiOr3FKmzkjCTI2t uYYR29ZsUjSSKbvzB5giCXPfsitel5mH7G3bIOoViRzpDjhY9w34gpdiYT6SUWXo KDiGba7P39A8Gbv0oARHt+sruB8/NU+UQ33JqKoMptUzxon8U19MAZHqWyKGO/yh TRDnwpieAZafGh8T/3VPNs1QDASScNvgYefwJwXNIRLKF9gHf5rJ9MtT7zpjnjcG 7j3gm8lgjadOeg== -----END CERTIFICATE-----Generated at Tue Sep 9 10:21:32 2025 by rpki-client