$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: tbgNkpETxFqL2mB1Df70L2a1i1xHd4GS1zME5dpgusI= Subject key identifier: 90:1D:4A:ED:41:39:DB:EC:89:9E:C5:E5:66:85:11:74:16:7A:9D:4A Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019A5308114E42EB27701EFD3F8F59121984 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 17C1 Signing time: Wed 05 Nov 2025 08:00:28 +0000 Manifest this update: Wed 05 Nov 2025 08:00:28 +0000 Manifest next update: Thu 06 Nov 2025 08:00:28 +0000 Files and hashes: 1: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: b9LOcEQaE5A1plAPpGI9Ae41HxEPkEFMLJyqB4aDySc=) 2: 1x058ndDZHjc4S074b7C6G2o0KQ.roa (hash: 6NqrEtmwZV1lsLbsJ/bQBPnqsNTZmovuYZMqK+3nGes=) 3: 2e0lc1JzQ87yGAowww8kgZqV7YY.roa (hash: gNVpmyo9CJXnk0pgBpahH9O86M9z121dgiIEC4Sk0fY=) 4: 6eBmTb7oTFjvB-t6q34h4uDQFck.roa (hash: YpMUNodMXgyKm77uqfvoskg+Hsw/cdeBYzj75L2nGxI=) 5: DF88ZnxNDnDdL7m_tpQtBOrCA5c.roa (hash: i5iFKm2PhqfkKwRSQfA3liCU+8QARl8+rKyoXe3x8yQ=) 6: HoplqEj-n_AFspE4Wkk6llxhUjs.roa (hash: XwYiYjxVBKz7NNA9iHsZMV69zxlIHiKWQZD6RKH52y0=) 7: LTUhQjilzFX-k7Bgy9ysyxEOPb4.roa (hash: e1xccoiOvs2L5dWiIhyAcjjVHRB1nFtrLWnpfffBP84=) 8: RBnwpqzlc9TBDZASvVPEAjuX7Rw.roa (hash: 9Xw6rUQ+UEHileke6uv0nhej/HOGc+mY9NGx2oOIPgw=) 9: SYjATDQ1I6kN9eqCLTNcZMWeeh0.roa (hash: Njd04jRClV/GG253dPwIxhrsePepY7gbrmA3HPI3sFU=) 10: VzLJPBrd7heSEcMsdzzKNKX-FYk.roa (hash: oDPSIRQ1GTVS07X70gSYgWfqQz6MI5Mo+WgxhZbNFpQ=) 11: YaXF2_UOTL0a5rPBedbLeK27FfI.roa (hash: cO7ZZuKJbU9lC+DFXgCl+Dg10QqzkTTDSRwwBODyAvU=) 12: dMoy1ocOmEzk4dYBdRWtDeFZXh0.roa (hash: VXtb1jeW1jL5ZIe+3y/JZP2SrUZOEss2tqQVUdmb0N4=) 13: eIIy3gr4iW31K7Z0TDyYfiPIC20.roa (hash: 1OhLz2GkEhqW74cgO0W31kCn0nMoyh5rygPNaedp7uk=) 14: gd55pLmOb1Wil-qky_OOdiELmEA.roa (hash: GbACKgJ2xs44p2VoolUC2+M6SLVINeea4pjzBz0Rhss=) 15: hQhs5l9hDP1_zmNckKA9u_WQ4CU.roa (hash: C8YDrKff0YMeob1oWr+bor5KU46B8sgXJ3+9ifdCEfI=) 16: m7QQoFX-u7UYoA41yiP24F7uP9s.roa (hash: +WD8froPo/LUjMw2nwzZtOdRqdsnPQ5Rv0Au1qYv4lg=) 17: sKDcgqrzTnILG4Tq477BccwF4pQ.roa (hash: 6+GFy/dNFKXyiBMKcgcLHz5mt8j4SOz5xQ+ZuaGLdHU=) 18: sXhE1KTUjQ-ED3LpqJzwavjBI9Y.roa (hash: WK3O+EZzoyvM8XTb1CwEVR4cw4uky79iFx7BHuNocio=) 19: ubCtS1VfMlpqc29JR5yJamthyao.roa (hash: UKhp7stItN8bt5SS2ldJQEedsCZck6Jd4Nur78oK3eA=) 20: wfIDRd7xb3P5SZH_IEgOrtFY1hc.roa (hash: /mg550jB5d24PmQoRPxF43TICtEYxMhbi51eASSfWBM=) 21: y74zxfc3T7TxFAzKOoJ3K2ImCgQ.roa (hash: 9cXqO6+RkqL3vFTAJ96TMt5j8uyMT6hOmvxxHIxVvmk=) 22: yYg3T8Ah1yuxHz6D5ehi7z823QI.roa (hash: BG6boV1lZkhAvIrJNBVNIFX81voSjiHSdy+yfJw4k5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:08:11:4e:42:eb:27:70:1e:fd:3f:8f:59:12:19:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Nov 5 08:00:28 2025 GMT Not After : Nov 6 08:00:28 2025 GMT Subject: CN=901d4aed4139dbec899ec5e566851174167a9d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:60:fd:65:58:a6:a9:b9:54:c3:1c:7c:93:6d: 91:0a:38:94:e4:da:24:be:9a:32:c7:d1:15:1e:38: 76:ff:de:05:7a:60:3c:b9:10:f8:68:54:cf:f2:80: 80:9a:a3:dd:0f:45:12:93:27:f3:b8:2d:e0:aa:30: 5a:f1:7a:9f:d0:6b:0b:ca:97:db:e3:b8:c7:44:ec: ad:12:d0:31:8c:d4:85:4e:72:8e:a3:19:68:f7:03: 58:23:0d:ca:ec:63:f6:88:1a:59:17:6e:3f:8e:53: 50:e1:9d:4e:d8:55:6b:fe:4c:cc:d0:d4:3a:9b:db: 5b:01:4d:df:90:1f:4e:ea:3e:9e:bf:16:01:27:67: e6:33:65:06:6e:4a:1c:ae:7a:9a:46:ae:1a:4d:c5: 12:82:9a:f7:1c:bc:00:39:cd:b4:1a:27:e5:57:f5: e5:fa:9f:30:20:ad:0b:7c:6a:03:b2:ac:90:77:a9: 1f:ee:40:1d:9f:2c:79:1d:89:94:60:7c:cf:7b:e8: f1:3e:63:85:32:42:70:c1:de:e5:66:f0:61:d7:75: 99:0a:e1:3b:5c:72:f1:d6:f7:76:0c:29:05:b9:60: 14:a6:00:e5:04:b3:7c:35:ce:47:60:70:3f:15:08: dd:6e:d7:af:41:3b:bf:57:3d:c9:9d:37:ab:74:01: 00:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1D:4A:ED:41:39:DB:EC:89:9E:C5:E5:66:85:11:74:16:7A:9D:4A X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:2a:18:a9:38:f0:1c:80:20:b9:be:6e:43:c0:52:1e:8a:64: 40:7f:a7:96:46:04:f4:52:5d:ad:ed:9f:83:61:d1:ef:8d:01: 36:a1:14:6e:b3:1d:53:f1:f9:fa:c5:54:92:2c:b2:86:f1:cd: a9:4f:a9:db:69:8e:8b:b7:4b:e6:89:53:ed:7e:c2:9c:1d:4f: 04:10:de:ec:da:cc:36:6b:2c:b4:f3:87:a9:85:3c:c5:d3:0a: 10:e4:cc:75:9f:c0:5d:a8:6b:fd:19:20:11:68:94:d4:d2:4a: 05:ae:82:74:be:6a:b2:16:3e:7c:fa:39:c5:43:20:f8:b6:d7: f1:2f:fe:b5:d2:79:89:0b:d7:3e:bc:4d:5d:a4:66:4f:31:4a: 3c:65:1d:fe:84:d0:76:a4:fc:22:83:2a:1b:f5:b4:61:7a:14: 3b:1b:97:0c:da:8e:03:40:f8:53:ac:b8:5f:a3:31:46:97:a1: 86:75:7b:9f:bf:27:5d:9b:b8:64:eb:ad:a9:d3:68:cc:a8:cc: c9:37:33:89:5a:95:89:5f:83:a0:5e:b1:e6:28:18:be:99:99: e1:27:a8:e5:01:bb:40:1c:80:a2:a8:a5:69:ec:fa:ec:8e:56: 41:c9:58:41:4b:2b:32:2f:b5:fc:63:f4:04:6e:76:f5:bb:96: ce:c7:49:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpTCBFOQusncB79P49ZEhmEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjUxMTA1MDgwMDI4WhcNMjUxMTA2MDgwMDI4WjAzMTEwLwYDVQQD Eyg5MDFkNGFlZDQxMzlkYmVjODk5ZWM1ZTU2Njg1MTE3NDE2N2E5ZDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mD9ZVimqblUwxx8k22RCjiU5Nok vpoyx9EVHjh2/94FemA8uRD4aFTP8oCAmqPdD0USkyfzuC3gqjBa8Xqf0GsLypfb 47jHROytEtAxjNSFTnKOoxlo9wNYIw3K7GP2iBpZF24/jlNQ4Z1O2FVr/kzM0NQ6 m9tbAU3fkB9O6j6evxYBJ2fmM2UGbkocrnqaRq4aTcUSgpr3HLwAOc20GiflV/Xl +p8wIK0LfGoDsqyQd6kf7kAdnyx5HYmUYHzPe+jxPmOFMkJwwd7lZvBh13WZCuE7 XHLx1vd2DCkFuWAUpgDlBLN8Nc5HYHA/FQjdbtevQTu/Vz3JnTerdAEAAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAdSu1BOdvsiZ7F5WaFEXQWep1KMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCoYqTjw HIAgub5uQ8BSHopkQH+nlkYE9FJdre2fg2HR740BNqEUbrMdU/H5+sVUkiyyhvHN qU+p22mOi7dL5olT7X7CnB1PBBDe7NrMNmsstPOHqYU8xdMKEOTMdZ/AXahr/Rkg EWiU1NJKBa6CdL5qshY+fPo5xUMg+LbX8S/+tdJ5iQvXPrxNXaRmTzFKPGUd/oTQ dqT8IoMqG/W0YXoUOxuXDNqOA0D4U6y4X6MxRpehhnV7n78nXZu4ZOutqdNozKjM yTcziVqViV+DoF6x5igYvpmZ4Seo5QG7QByAoqilaez67I5WQclYQUsrMi+1/GP0 BG529buWzsdJXA== -----END CERTIFICATE-----Generated at Wed Nov 5 16:17:27 2025 by rpki-client