$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: GFT9mphp9qIhax0AxmrxD47+Trqtcn/GcDqC/3Uql7Y= Subject key identifier: 01:CF:22:37:FA:C9:CD:1D:DB:06:50:FE:CC:20:47:CB:18:53:D8:7A Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019A5119A7465D051E3D2CB054E0FF632ABD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 17C0 Signing time: Tue 04 Nov 2025 23:00:26 +0000 Manifest this update: Tue 04 Nov 2025 23:00:26 +0000 Manifest next update: Wed 05 Nov 2025 23:00:26 +0000 Files and hashes: 1: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: xVJ/UEwexD7IbxgrmFa1EY4C162fFdeiCcC2xbybqQg=) 2: 1x058ndDZHjc4S074b7C6G2o0KQ.roa (hash: 6NqrEtmwZV1lsLbsJ/bQBPnqsNTZmovuYZMqK+3nGes=) 3: 2e0lc1JzQ87yGAowww8kgZqV7YY.roa (hash: gNVpmyo9CJXnk0pgBpahH9O86M9z121dgiIEC4Sk0fY=) 4: 6eBmTb7oTFjvB-t6q34h4uDQFck.roa (hash: YpMUNodMXgyKm77uqfvoskg+Hsw/cdeBYzj75L2nGxI=) 5: DF88ZnxNDnDdL7m_tpQtBOrCA5c.roa (hash: i5iFKm2PhqfkKwRSQfA3liCU+8QARl8+rKyoXe3x8yQ=) 6: HoplqEj-n_AFspE4Wkk6llxhUjs.roa (hash: XwYiYjxVBKz7NNA9iHsZMV69zxlIHiKWQZD6RKH52y0=) 7: LTUhQjilzFX-k7Bgy9ysyxEOPb4.roa (hash: e1xccoiOvs2L5dWiIhyAcjjVHRB1nFtrLWnpfffBP84=) 8: RBnwpqzlc9TBDZASvVPEAjuX7Rw.roa (hash: 9Xw6rUQ+UEHileke6uv0nhej/HOGc+mY9NGx2oOIPgw=) 9: SYjATDQ1I6kN9eqCLTNcZMWeeh0.roa (hash: Njd04jRClV/GG253dPwIxhrsePepY7gbrmA3HPI3sFU=) 10: VzLJPBrd7heSEcMsdzzKNKX-FYk.roa (hash: oDPSIRQ1GTVS07X70gSYgWfqQz6MI5Mo+WgxhZbNFpQ=) 11: YaXF2_UOTL0a5rPBedbLeK27FfI.roa (hash: cO7ZZuKJbU9lC+DFXgCl+Dg10QqzkTTDSRwwBODyAvU=) 12: dMoy1ocOmEzk4dYBdRWtDeFZXh0.roa (hash: VXtb1jeW1jL5ZIe+3y/JZP2SrUZOEss2tqQVUdmb0N4=) 13: eIIy3gr4iW31K7Z0TDyYfiPIC20.roa (hash: 1OhLz2GkEhqW74cgO0W31kCn0nMoyh5rygPNaedp7uk=) 14: gd55pLmOb1Wil-qky_OOdiELmEA.roa (hash: GbACKgJ2xs44p2VoolUC2+M6SLVINeea4pjzBz0Rhss=) 15: hQhs5l9hDP1_zmNckKA9u_WQ4CU.roa (hash: C8YDrKff0YMeob1oWr+bor5KU46B8sgXJ3+9ifdCEfI=) 16: m7QQoFX-u7UYoA41yiP24F7uP9s.roa (hash: +WD8froPo/LUjMw2nwzZtOdRqdsnPQ5Rv0Au1qYv4lg=) 17: sKDcgqrzTnILG4Tq477BccwF4pQ.roa (hash: 6+GFy/dNFKXyiBMKcgcLHz5mt8j4SOz5xQ+ZuaGLdHU=) 18: sXhE1KTUjQ-ED3LpqJzwavjBI9Y.roa (hash: WK3O+EZzoyvM8XTb1CwEVR4cw4uky79iFx7BHuNocio=) 19: ubCtS1VfMlpqc29JR5yJamthyao.roa (hash: UKhp7stItN8bt5SS2ldJQEedsCZck6Jd4Nur78oK3eA=) 20: wfIDRd7xb3P5SZH_IEgOrtFY1hc.roa (hash: /mg550jB5d24PmQoRPxF43TICtEYxMhbi51eASSfWBM=) 21: y74zxfc3T7TxFAzKOoJ3K2ImCgQ.roa (hash: 9cXqO6+RkqL3vFTAJ96TMt5j8uyMT6hOmvxxHIxVvmk=) 22: yYg3T8Ah1yuxHz6D5ehi7z823QI.roa (hash: BG6boV1lZkhAvIrJNBVNIFX81voSjiHSdy+yfJw4k5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:19:a7:46:5d:05:1e:3d:2c:b0:54:e0:ff:63:2a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Nov 4 23:00:26 2025 GMT Not After : Nov 5 23:00:26 2025 GMT Subject: CN=01cf2237fac9cd1ddb0650fecc2047cb1853d87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4b:ff:44:6c:98:a2:ae:bc:27:7e:6e:70:08: 1a:0e:26:70:38:ac:c2:0c:fd:4e:08:b8:9d:76:0a: 27:12:85:c5:18:dc:51:b3:de:96:c5:3f:63:51:95: 21:90:c5:6a:c9:3f:e5:9b:e2:b4:60:98:32:0c:4e: 5d:aa:53:8e:08:d2:d8:03:73:40:6a:cf:df:86:45: d7:09:95:c3:64:f2:15:95:68:ac:84:15:a0:9c:7d: 3b:0a:70:5a:80:3e:f7:0c:fe:eb:89:27:8c:3a:a1: cc:1d:2a:d7:a8:89:bc:44:b5:7c:18:b5:ca:0b:3a: e0:c7:f6:39:49:b1:57:eb:17:14:2c:27:93:e0:d6: 9d:07:65:b0:ee:81:24:a2:4b:af:a6:de:d7:20:1b: e9:8b:25:1b:fb:63:57:c4:7e:5e:fa:11:bb:f0:ee: ba:a9:44:0e:10:2c:f5:02:75:11:12:dd:3d:2d:e6: c5:d0:ad:b6:7a:94:1a:be:76:57:ec:90:7d:4e:0a: 75:cd:5a:93:7c:17:24:ba:55:71:9d:f5:36:1b:2e: 15:90:f5:fa:54:8f:8f:d5:02:95:75:98:7f:51:64: 06:d0:2d:3b:b5:31:2c:d4:29:88:57:d2:20:75:22: 2e:4f:e1:f4:14:fb:91:96:2f:03:4b:8b:09:74:1a: 21:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CF:22:37:FA:C9:CD:1D:DB:06:50:FE:CC:20:47:CB:18:53:D8:7A X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:75:c6:f0:d0:69:94:02:63:19:08:a4:42:68:0c:96:6b:c0: a9:4f:a2:d7:db:0b:75:50:e8:8f:a8:79:6f:d5:fa:21:c8:1a: 33:36:17:18:6e:8f:92:5f:39:83:da:e1:69:5d:9f:11:c8:26: d0:c4:63:ae:10:85:0c:0b:ae:50:2f:08:99:47:b3:3c:15:05: 72:17:6c:05:e0:51:01:7e:13:01:fb:6a:b2:48:c9:3d:91:b8: 77:31:c2:59:a0:20:1c:5e:c7:83:19:c2:db:b9:83:56:3f:51: a7:31:f1:70:de:3a:7e:41:49:bd:86:c1:e3:70:0f:16:34:38: 89:96:3a:a2:1f:13:0e:c2:3e:cc:99:a1:06:49:b9:9a:53:e2: 22:c2:9b:5c:f5:19:a7:c3:91:9b:60:c1:73:a0:4a:39:55:14: 42:fc:b9:db:e9:a7:ab:01:bb:fe:f1:dc:95:b9:3c:4a:9f:47: bf:f4:3b:08:a9:f3:04:a1:f1:79:9f:7a:5a:96:c0:c4:e4:d7: df:32:60:1d:1d:ad:1f:75:8f:ff:69:51:52:e4:b5:da:18:1f: 80:8a:e5:f1:c4:0c:cb:8d:df:41:df:63:ed:cb:02:97:e3:21: 5f:b6:d5:fd:e2:4a:48:5f:55:13:51:d3:dc:8e:54:c6:f1:bd: 08:fa:ce:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRGadGXQUePSywVOD/Yyq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjUxMTA0MjMwMDI2WhcNMjUxMTA1MjMwMDI2WjAzMTEwLwYDVQQD EygwMWNmMjIzN2ZhYzljZDFkZGIwNjUwZmVjYzIwNDdjYjE4NTNkODdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUv/RGyYoq68J35ucAgaDiZwOKzC DP1OCLiddgonEoXFGNxRs96WxT9jUZUhkMVqyT/lm+K0YJgyDE5dqlOOCNLYA3NA as/fhkXXCZXDZPIVlWishBWgnH07CnBagD73DP7riSeMOqHMHSrXqIm8RLV8GLXK Czrgx/Y5SbFX6xcULCeT4NadB2Ww7oEkokuvpt7XIBvpiyUb+2NXxH5e+hG78O66 qUQOECz1AnUREt09LebF0K22epQavnZX7JB9Tgp1zVqTfBckulVxnfU2Gy4VkPX6 VI+P1QKVdZh/UWQG0C07tTEs1CmIV9IgdSIuT+H0FPuRli8DS4sJdBohKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHPIjf6yc0d2wZQ/swgR8sYU9h6MB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHXG8NBp lAJjGQikQmgMlmvAqU+i19sLdVDoj6h5b9X6IcgaMzYXGG6Pkl85g9rhaV2fEcgm 0MRjrhCFDAuuUC8ImUezPBUFchdsBeBRAX4TAftqskjJPZG4dzHCWaAgHF7HgxnC 27mDVj9RpzHxcN46fkFJvYbB43APFjQ4iZY6oh8TDsI+zJmhBkm5mlPiIsKbXPUZ p8ORm2DBc6BKOVUUQvy52+mnqwG7/vHclbk8Sp9Hv/Q7CKnzBKHxeZ96WpbAxOTX 3zJgHR2tH3WP/2lRUuS12hgfgIrl8cQMy43fQd9j7csCl+MhX7bV/eJKSF9VE1HT 3I5UxvG9CPrOXA== -----END CERTIFICATE-----Generated at Wed Nov 5 01:27:14 2025 by rpki-client