$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: a3oXQ+MuNFbiEYAXA5r9d78sOuibs2FXssHylR00Gxk= Subject key identifier: 28:74:B1:D5:7E:7C:78:1A:1A:20:78:3D:98:A1:E6:08:EA:1F:D2:46 Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 01974DB26C6928524AE0289052C10C8F0062 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 1210 Signing time: Sun 08 Jun 2025 04:00:28 +0000 Manifest this update: Sun 08 Jun 2025 04:00:28 +0000 Manifest next update: Mon 09 Jun 2025 04:00:28 +0000 Files and hashes: 1: 5sGdFc_1Zid-hBM7mInO1hEaSqE.roa (hash: 7bwxpMhgqxIjIH4tFXJcxeBHbkei+D+EpzaJzJaJhv4=) 2: 6Fi2x6-MOtr7a_1fOFW30-_zrig.roa (hash: 2IN+YE3CMZAPD+uK8qRy2OV0W4x3OCpS/TO8CF/76aw=) 3: 9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa (hash: 3TIv5c08KCsDbJFNq+WTb4IZP4ym0IZZX1CdjQGX0PE=) 4: AX86DsLSoXFRNkCv2pCL1_EPY5g.roa (hash: GQZE5H1ow5zCrtLramjrChLPwPl7V1YC5vmeyk2QXn0=) 5: GNoD4VldON0fRQOsfwgnZbDlm30.roa (hash: blIx8D3DZyU+DHXOsnwJBmGsut7rhQArkG8R7KyjOw4=) 6: HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa (hash: oR/Hq9WxPGajOgdVUFWze40RSUPdBlPl+1xVQoSJxOo=) 7: MJg7tjZ2YS5zYW2u8iw1g2oqMU0.roa (hash: X+QXFsSzhee86ausU4aiKnbqtRl/bpo3u3VYz3YOas0=) 8: Vfz_XI34h0n1ABRWW0I8TbCl2Ks.roa (hash: 5McLJpTXPeaX6NxvYmzQe8oLwKFov9vgW9zM/HLDWFk=) 9: Wa5j5jUmUSd1vG30ktnaqL3uHDI.roa (hash: MKz77Ewok0vz5vQRzaJNzC9kTJYYYuPm776x717x2z4=) 10: d7zRd6MptHTWJQgyfw6tgdDV_9A.roa (hash: oELlLX+h376OqFFHKdf5s0R3SvC5xRLsvCJ5JL8+PK4=) 11: eaT289O4FWfLSNPSCfCVS50JLdA.roa (hash: 6Ydw1aV3kTAxyagbcZrClYDAIJBPqjkvUlwgRk8W+YE=) 12: nZaqbX4b0xd3UwU7l5sM7yoGBBo.roa (hash: OWNumqHHHp/8gdqH67NYyJSDu9rO3vPuBbgXU7s9BgM=) 13: oZv7gBkqKHSk-77MXrW1ab6ETYI.roa (hash: +B5mLIxH7s3pabVcCwGAo38v71wCcUaCQewhunxJ/mg=) 14: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: j68nYfSIh0RYiiyXNEsRcTpnb9jKN6kKhHdHw4TnY00=) 15: r4c3fyT5mEicBTcplHGkCHGu1DU.roa (hash: TN1KtYP5BnSUVtiFLbJe3+UWbigxirFk6LMWIHk9G6A=) 16: vsZmI73j1l0F5LUFB41ZYaQs_Cs.roa (hash: nZ33GCfbpIYKPXjqivfkgFha5BmKCs/riEjE4yHbJng=) 17: w6--t_5wz0JDy2YG6__bLL736lk.roa (hash: kokGrC/YWrlNHabiNp1qc8zjZ2tpu6Xwv3gwVAl+cdY=) 18: xaaOuiTsUCwOo5hhwkfZiBvLcJ8.roa (hash: Iz6qbI3mhpm0/uLd5TTzINoKeImEElZtBrUi0Q8Z2Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4d:b2:6c:69:28:52:4a:e0:28:90:52:c1:0c:8f:00:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Jun 8 04:00:28 2025 GMT Not After : Jun 9 04:00:28 2025 GMT Subject: CN=2874b1d57e7c781a1a20783d98a1e608ea1fd246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5d:69:b9:86:c3:65:5c:3d:36:55:c2:5b:d7: 0d:ce:57:51:59:1e:51:96:a2:61:d3:fe:68:d0:80: dd:44:7f:c7:6a:fd:cb:e6:e5:1c:c0:35:e1:1d:d8: f6:8c:cc:8d:ee:c1:70:55:58:58:58:c2:ef:ca:7b: 26:8d:1b:36:37:44:44:ab:93:22:52:d5:80:e2:65: 1a:0e:93:8a:14:85:cf:b1:a5:18:1b:c3:95:6a:c7: d2:c4:13:b6:f7:8a:1b:76:89:4f:e8:d0:f6:4d:e2: ea:07:d3:f1:57:fc:d1:e7:3d:28:71:e3:fb:a2:25: 66:31:46:a4:af:62:0c:a3:60:86:75:4b:ff:17:c7: f9:fb:17:5b:4f:10:0b:ad:bd:be:7e:36:a9:81:05: 71:c1:0b:28:ab:65:eb:b4:b7:65:61:eb:84:3c:9e: 39:4e:f6:65:b7:5d:dc:38:42:63:d8:ae:90:2e:58: 3c:6a:72:8a:93:f9:39:2d:a7:8d:9d:8a:70:87:1a: 63:58:c5:79:e8:32:27:98:11:b7:ef:02:3a:d1:86: 31:ed:3d:d6:c6:f2:25:b3:93:14:60:6f:22:7c:3a: 14:d1:e4:1b:25:9c:bf:9f:a4:29:cb:c4:ad:d4:ae: 91:d0:4e:70:34:c4:2f:cd:2e:b5:dc:70:cf:b3:36: 57:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:74:B1:D5:7E:7C:78:1A:1A:20:78:3D:98:A1:E6:08:EA:1F:D2:46 X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d8:70:82:e9:8a:b6:61:a1:21:2a:44:7e:52:92:83:de:9b: 43:4e:88:55:90:3d:27:cb:31:44:37:bd:5a:23:34:5b:7c:81: b3:45:75:cc:ba:45:fe:b0:dd:18:bc:b1:3a:65:72:47:60:4b: 53:fa:cf:2e:d0:24:a0:b2:18:08:78:a9:96:6a:aa:7c:5a:d0: c5:0f:0d:20:a8:66:87:18:b3:42:d9:74:67:29:a6:62:0d:29: e4:c7:8a:3e:df:f8:20:6e:e9:c8:59:09:23:22:54:da:4b:07: 84:01:20:0f:61:00:03:cd:85:9f:b3:8b:ab:d9:15:5d:dd:d9: d3:d7:36:f1:ca:b2:80:5b:90:68:16:df:50:89:4b:7c:fd:6e: 15:75:a0:58:0d:fa:02:46:3f:d0:43:7f:f3:35:79:8b:58:35: b3:7d:eb:cd:13:79:21:ca:f3:76:4c:fc:b8:f4:b8:a9:61:27: 5b:f1:2b:96:be:18:d5:8b:cf:96:f4:e5:25:7a:23:14:8e:60: a3:88:0c:17:17:68:17:17:36:45:ac:54:90:b0:31:ab:55:a8: 26:fd:59:de:c2:13:82:ee:f5:a5:83:91:68:e2:1f:44:d5:4b: 15:3f:f9:a3:73:b1:4c:c9:43:22:e1:ee:16:46:a7:49:7a:6e: fa:5d:23:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdNsmxpKFJK4CiQUsEMjwBiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjUwNjA4MDQwMDI4WhcNMjUwNjA5MDQwMDI4WjAzMTEwLwYDVQQD EygyODc0YjFkNTdlN2M3ODFhMWEyMDc4M2Q5OGExZTYwOGVhMWZkMjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF1puYbDZVw9NlXCW9cNzldRWR5R lqJh0/5o0IDdRH/Hav3L5uUcwDXhHdj2jMyN7sFwVVhYWMLvynsmjRs2N0REq5Mi UtWA4mUaDpOKFIXPsaUYG8OVasfSxBO294obdolP6ND2TeLqB9PxV/zR5z0oceP7 oiVmMUakr2IMo2CGdUv/F8f5+xdbTxALrb2+fjapgQVxwQsoq2XrtLdlYeuEPJ45 TvZlt13cOEJj2K6QLlg8anKKk/k5LaeNnYpwhxpjWMV56DInmBG37wI60YYx7T3W xvIls5MUYG8ifDoU0eQbJZy/n6Qpy8St1K6R0E5wNMQvzS613HDPszZXDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCh0sdV+fHgaGiB4PZih5gjqH9JGMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdhwgumK tmGhISpEflKSg96bQ06IVZA9J8sxRDe9WiM0W3yBs0V1zLpF/rDdGLyxOmVyR2BL U/rPLtAkoLIYCHiplmqqfFrQxQ8NIKhmhxizQtl0ZymmYg0p5MeKPt/4IG7pyFkJ IyJU2ksHhAEgD2EAA82Fn7OLq9kVXd3Z09c28cqygFuQaBbfUIlLfP1uFXWgWA36 AkY/0EN/8zV5i1g1s33rzRN5Icrzdkz8uPS4qWEnW/Erlr4Y1YvPlvTlJXojFI5g o4gMFxdoFxc2RaxUkLAxq1WoJv1Z3sITgu71pYORaOIfRNVLFT/5o3OxTMlDIuHu FkanSXpu+l0jFQ== -----END CERTIFICATE-----Generated at Sun Jun 8 07:16:15 2025 by rpki-client