$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: ZIlwQb0jF6Xf1qL0G4Cr1GuXHCj12iE6Hz5vkKOBLgE= Subject key identifier: 8D:04:F5:89:D8:F8:C0:AF:16:CF:BA:6A:A2:6B:D6:C7:1B:28:D8:C5 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 01987DF85A7240D7331940D6274507A1C24F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 16B7 Signing time: Wed 06 Aug 2025 06:01:24 +0000 Manifest this update: Wed 06 Aug 2025 06:01:24 +0000 Manifest next update: Thu 07 Aug 2025 06:01:24 +0000 Files and hashes: 1: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: EFDBy9xdNKmeOj86OZfRp9agSCWGpsGaKDJVhjUgX4E=) 2: 97T1FKP4AB1wFygDf_IjY6gh_W0.roa (hash: b+uL1I+CF8JWEeaj5CSinTGLvmB9uwh7dpcntKLQtgU=) 3: BGLkzv5zmcmyNePUFl35bYyaZBg.roa (hash: Rxm9thzilr67738h2nk4GCB7hCDrlSDQC9OhJBucGVw=) 4: DF88ZnxNDnDdL7m_tpQtBOrCA5c.roa (hash: i5iFKm2PhqfkKwRSQfA3liCU+8QARl8+rKyoXe3x8yQ=) 5: Ddl8T6zKwE4Fn8xyNZ8UvYvouME.roa (hash: 71TNe7QPRLX6HAwyqO9qFdluNXuBU2iKPpD6+Xde1FA=) 6: HoplqEj-n_AFspE4Wkk6llxhUjs.roa (hash: XwYiYjxVBKz7NNA9iHsZMV69zxlIHiKWQZD6RKH52y0=) 7: I6I4t2Fx9_LhItPMPfe0gZVqU9k.roa (hash: KB3ZOA0hvdhs9tj0uTvpdbjx0Su8Obdov0IGyunBEu0=) 8: IhgmMXkohjSQGNi-FluDnNiX1yE.roa (hash: enXCL1nnyoZP3p3QFY4PWbAm+jf1sDR/et981D6sBLY=) 9: KB-h8Fkel5XMX-o95HwHpLCnxAc.roa (hash: A5pXsjdEHFyVrWzWIHIaJ7+R2DSLK1pRV3wNGnMYcuw=) 10: Q8GhfkJiK1i0aNFsl1zpqBN38ok.roa (hash: zSrNTOjH2jHkfF8npGjnRGpLF3j5CwGhLlQ8eGbMR74=) 11: SYjATDQ1I6kN9eqCLTNcZMWeeh0.roa (hash: Njd04jRClV/GG253dPwIxhrsePepY7gbrmA3HPI3sFU=) 12: WL0U37rtoMnf9rEUXD_6ssGaivA.roa (hash: LZX1y/DWyL3Za7uA7BHBrGus17Rh9zUmNUrw7i+k7xU=) 13: WSCQA0Y3pCUJ_5bceNuC3gEIEPE.roa (hash: it6NFAfi4cSW7ITlNEmWjq4Jy+DwQESxb3017kQ8n2o=) 14: dMoy1ocOmEzk4dYBdRWtDeFZXh0.roa (hash: VXtb1jeW1jL5ZIe+3y/JZP2SrUZOEss2tqQVUdmb0N4=) 15: eIIy3gr4iW31K7Z0TDyYfiPIC20.roa (hash: 1OhLz2GkEhqW74cgO0W31kCn0nMoyh5rygPNaedp7uk=) 16: gY9IWzADSyT7lNkrIarlDvX2S_o.roa (hash: w8bQ41WhVjEG8YkAZ+pTSGzOoaebm2sLr/elW4aizbw=) 17: hQhs5l9hDP1_zmNckKA9u_WQ4CU.roa (hash: C8YDrKff0YMeob1oWr+bor5KU46B8sgXJ3+9ifdCEfI=) 18: i0EkDiLWxZt-jEsL0cMNpe5XN_g.roa (hash: G7FDEuJ7pS++rTMrLx6g2e+BM36bD3Jhu4w4OIPcRCo=) 19: jREcC-UhWXUSzApEIajwAOrnPds.roa (hash: oDuVDFJg2IBsGrgjsTg4xM1gEZyvXvszObYC5lZZqSw=) 20: tq7CQBp7Hq4xNJlzwyH-4Sc1LDc.roa (hash: ERiDa3qSUTy4z76OEMu4pDL44NVgIEtbghpVZdjpp9k=) 21: twXbw9V-mlVQToWNCJXr3_iluuQ.roa (hash: Bi2jEoYlsmKWeWWHEHMyUVPPeY0Z/PyYpTDcRdEeS4M=) 22: ubCtS1VfMlpqc29JR5yJamthyao.roa (hash: UKhp7stItN8bt5SS2ldJQEedsCZck6Jd4Nur78oK3eA=) 23: y74zxfc3T7TxFAzKOoJ3K2ImCgQ.roa (hash: 9cXqO6+RkqL3vFTAJ96TMt5j8uyMT6hOmvxxHIxVvmk=) 24: yYg3T8Ah1yuxHz6D5ehi7z823QI.roa (hash: BG6boV1lZkhAvIrJNBVNIFX81voSjiHSdy+yfJw4k5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 06:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7d:f8:5a:72:40:d7:33:19:40:d6:27:45:07:a1:c2:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Aug 6 06:01:24 2025 GMT Not After : Aug 7 06:01:24 2025 GMT Subject: CN=8d04f589d8f8c0af16cfba6aa26bd6c71b28d8c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a2:22:eb:8d:c3:48:0c:e2:c3:41:d9:ab:f6: 06:2d:9a:c6:a1:27:47:6a:7f:5e:9b:b1:05:0b:1b: 4b:75:07:54:34:88:92:b9:f4:35:62:7a:b8:1e:6f: 58:5d:9f:74:bb:5b:06:50:7a:21:31:d6:b8:b3:02: 95:49:d8:f8:fe:76:5a:f8:f0:70:bb:ec:cd:e0:f9: 78:7a:84:45:f5:50:10:ca:4d:6e:0c:4d:9b:1c:c8: 65:6d:35:8b:ab:af:12:b5:32:b7:60:bd:ed:fd:78: 5d:c3:6f:17:b5:f5:2a:98:24:c9:12:81:9c:5b:83: 7b:5e:52:f9:27:3b:43:65:af:5e:e2:64:3c:26:f2: 18:96:5c:6b:da:af:41:37:f0:18:5c:ce:a3:4c:e1: 6a:9b:a7:d3:6a:ec:fb:b0:4c:51:37:c4:5b:20:31: 40:c2:6c:47:dc:bf:5c:bb:08:db:f7:00:a5:18:26: bb:49:4f:6e:e1:be:b5:3b:54:fa:f7:c0:97:36:54: 4e:ef:91:c5:4d:78:48:53:24:9b:0b:b6:3f:9c:c2: 29:be:51:3d:6d:75:54:ba:02:24:2f:d7:80:df:f9: f9:5e:e2:b5:bf:eb:88:49:cf:9b:34:48:a6:2c:e0: 70:1a:d8:b8:f9:0f:71:67:42:13:d6:36:56:0e:5b: 7e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:04:F5:89:D8:F8:C0:AF:16:CF:BA:6A:A2:6B:D6:C7:1B:28:D8:C5 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:02:6f:82:5f:21:55:cb:17:e0:25:9c:85:34:91:de:9e:36: 61:dc:9b:74:34:5a:6e:10:54:8f:52:4e:4b:1e:b9:50:f2:49: 5c:b4:67:dc:4b:8c:da:99:99:57:f4:38:d5:3a:a6:54:e0:13: 8e:bd:dd:ef:a4:9e:c7:15:2c:e0:24:c2:9c:04:fe:c0:69:e4: 1c:84:98:39:37:93:88:2e:54:2c:ea:9f:6d:57:1d:41:5d:88: c5:b1:fe:45:77:51:92:10:51:7e:3a:bd:c8:c2:43:e5:b2:57: 42:73:97:eb:03:9a:85:f4:8e:9c:b3:5a:36:0c:94:46:ac:b0: 01:d0:de:ad:35:a8:83:90:3b:38:48:ca:e5:4b:90:f7:17:8c: a5:2c:15:2e:26:06:eb:6e:fc:ba:63:75:14:a8:b8:d0:c3:a9: 08:31:23:e6:8c:f7:af:9a:be:eb:37:cf:83:96:e7:04:01:cb: 1a:52:9b:5b:3a:d0:e5:29:a9:67:cf:bd:f6:4e:39:23:5d:e3: f9:fa:f8:80:85:d3:82:cc:bc:a4:c5:75:33:20:34:31:c6:f1: 4a:5c:6e:c4:48:60:7b:a0:6b:18:91:b5:21:e2:4c:7a:a4:21: 9a:d5:8c:53:79:41:f0:70:99:bb:d1:07:b4:1b:0e:93:4c:51: 53:6b:09:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh9+FpyQNczGUDWJ0UHocJPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjUwODA2MDYwMTI0WhcNMjUwODA3MDYwMTI0WjAzMTEwLwYDVQQD Eyg4ZDA0ZjU4OWQ4ZjhjMGFmMTZjZmJhNmFhMjZiZDZjNzFiMjhkOGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaIi643DSAziw0HZq/YGLZrGoSdH an9em7EFCxtLdQdUNIiSufQ1Ynq4Hm9YXZ90u1sGUHohMda4swKVSdj4/nZa+PBw u+zN4Pl4eoRF9VAQyk1uDE2bHMhlbTWLq68StTK3YL3t/Xhdw28XtfUqmCTJEoGc W4N7XlL5JztDZa9e4mQ8JvIYllxr2q9BN/AYXM6jTOFqm6fTauz7sExRN8RbIDFA wmxH3L9cuwjb9wClGCa7SU9u4b61O1T698CXNlRO75HFTXhIUySbC7Y/nMIpvlE9 bXVUugIkL9eA3/n5XuK1v+uISc+bNEimLOBwGti4+Q9xZ0IT1jZWDlt+owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0E9YnY+MCvFs+6aqJr1scbKNjFMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwJvgl8h VcsX4CWchTSR3p42YdybdDRabhBUj1JOSx65UPJJXLRn3EuM2pmZV/Q41TqmVOAT jr3d76SexxUs4CTCnAT+wGnkHISYOTeTiC5ULOqfbVcdQV2IxbH+RXdRkhBRfjq9 yMJD5bJXQnOX6wOahfSOnLNaNgyURqywAdDerTWog5A7OEjK5UuQ9xeMpSwVLiYG 6278umN1FKi40MOpCDEj5oz3r5q+6zfPg5bnBAHLGlKbWzrQ5SmpZ8+99k45I13j +fr4gIXTgsy8pMV1MyA0McbxSlxuxEhge6BrGJG1IeJMeqQhmtWMU3lB8HCZu9EH tBsOk0xRU2sJ/w== -----END CERTIFICATE-----Generated at Wed Aug 6 10:21:47 2025 by rpki-client