$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: SHPBiyoypV7q33lh79qR61nDQ1LqUWGLdK0LP2N/mxU= Subject key identifier: 3B:8C:C1:5C:49:98:3F:81:A7:A3:D5:41:1D:D5:E2:EA:9C:EF:76:15 Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 01987CE58D99519B087FAEC4ED69E28966F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 12AD Signing time: Wed 06 Aug 2025 01:01:15 +0000 Manifest this update: Wed 06 Aug 2025 01:01:15 +0000 Manifest next update: Thu 07 Aug 2025 01:01:15 +0000 Files and hashes: 1: 5sGdFc_1Zid-hBM7mInO1hEaSqE.roa (hash: 7bwxpMhgqxIjIH4tFXJcxeBHbkei+D+EpzaJzJaJhv4=) 2: 6Fi2x6-MOtr7a_1fOFW30-_zrig.roa (hash: 2IN+YE3CMZAPD+uK8qRy2OV0W4x3OCpS/TO8CF/76aw=) 3: 9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa (hash: 3TIv5c08KCsDbJFNq+WTb4IZP4ym0IZZX1CdjQGX0PE=) 4: AX86DsLSoXFRNkCv2pCL1_EPY5g.roa (hash: GQZE5H1ow5zCrtLramjrChLPwPl7V1YC5vmeyk2QXn0=) 5: GNoD4VldON0fRQOsfwgnZbDlm30.roa (hash: blIx8D3DZyU+DHXOsnwJBmGsut7rhQArkG8R7KyjOw4=) 6: HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa (hash: oR/Hq9WxPGajOgdVUFWze40RSUPdBlPl+1xVQoSJxOo=) 7: MJg7tjZ2YS5zYW2u8iw1g2oqMU0.roa (hash: X+QXFsSzhee86ausU4aiKnbqtRl/bpo3u3VYz3YOas0=) 8: Vfz_XI34h0n1ABRWW0I8TbCl2Ks.roa (hash: 5McLJpTXPeaX6NxvYmzQe8oLwKFov9vgW9zM/HLDWFk=) 9: Wa5j5jUmUSd1vG30ktnaqL3uHDI.roa (hash: MKz77Ewok0vz5vQRzaJNzC9kTJYYYuPm776x717x2z4=) 10: d7zRd6MptHTWJQgyfw6tgdDV_9A.roa (hash: oELlLX+h376OqFFHKdf5s0R3SvC5xRLsvCJ5JL8+PK4=) 11: eaT289O4FWfLSNPSCfCVS50JLdA.roa (hash: 6Ydw1aV3kTAxyagbcZrClYDAIJBPqjkvUlwgRk8W+YE=) 12: nZaqbX4b0xd3UwU7l5sM7yoGBBo.roa (hash: OWNumqHHHp/8gdqH67NYyJSDu9rO3vPuBbgXU7s9BgM=) 13: oZv7gBkqKHSk-77MXrW1ab6ETYI.roa (hash: +B5mLIxH7s3pabVcCwGAo38v71wCcUaCQewhunxJ/mg=) 14: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: v9D22LFcjz5jLFu/0gzIY+ZmRfSHhrI6E1ozBu3iiNI=) 15: r4c3fyT5mEicBTcplHGkCHGu1DU.roa (hash: TN1KtYP5BnSUVtiFLbJe3+UWbigxirFk6LMWIHk9G6A=) 16: vsZmI73j1l0F5LUFB41ZYaQs_Cs.roa (hash: nZ33GCfbpIYKPXjqivfkgFha5BmKCs/riEjE4yHbJng=) 17: w6--t_5wz0JDy2YG6__bLL736lk.roa (hash: kokGrC/YWrlNHabiNp1qc8zjZ2tpu6Xwv3gwVAl+cdY=) 18: xaaOuiTsUCwOo5hhwkfZiBvLcJ8.roa (hash: Iz6qbI3mhpm0/uLd5TTzINoKeImEElZtBrUi0Q8Z2Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7c:e5:8d:99:51:9b:08:7f:ae:c4:ed:69:e2:89:66:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Aug 6 01:01:15 2025 GMT Not After : Aug 7 01:01:15 2025 GMT Subject: CN=3b8cc15c49983f81a7a3d5411dd5e2ea9cef7615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f4:e4:7c:89:41:f1:3e:97:0a:aa:ef:07:4d: 00:e1:4a:0c:25:25:33:bd:6f:a2:ee:18:6c:74:14: e4:ce:24:c7:0f:fe:7a:51:2c:9d:1c:fe:7d:d2:8f: 68:ab:9e:ec:ce:b7:cc:f7:e1:1d:1b:86:08:dc:bd: c7:8f:eb:97:96:4c:8c:3c:b0:28:58:4e:f6:f3:11: be:37:3f:7d:aa:7a:6f:94:0e:39:ed:8d:50:76:c2: 97:a0:d5:de:d5:a8:bd:09:b2:24:d8:04:41:0f:7a: c6:ed:63:68:ae:ed:fb:7d:a6:a8:26:aa:53:2d:6a: 17:96:33:2f:de:4f:3a:f7:47:d3:ea:e5:0e:30:04: d4:81:7d:8d:d6:fb:3f:ac:61:8d:9d:3b:c7:33:5d: 9d:93:16:41:f8:f6:b0:31:95:19:6a:ad:c8:cd:ed: fb:43:64:8c:00:b2:9c:ca:0f:d5:2d:e4:e1:72:8e: 45:ea:a9:88:f3:8d:df:5d:53:e5:26:af:2d:e7:be: ab:17:5e:b7:0e:a1:4f:2d:72:4e:16:ab:f5:06:ea: f4:ff:58:6c:7b:09:d8:21:7a:35:f7:81:54:c5:bf: b8:0d:05:a7:3c:e9:10:d2:40:1d:e6:68:28:dd:fa: 40:75:71:cb:c2:ad:8c:9e:38:e8:2a:3d:b7:f4:11: e4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8C:C1:5C:49:98:3F:81:A7:A3:D5:41:1D:D5:E2:EA:9C:EF:76:15 X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:36:1b:24:f8:77:35:76:b4:74:06:72:61:c5:9c:21:c3:ce: 45:d1:b3:c2:0d:02:df:77:b9:73:9c:b9:c3:17:08:e9:56:90: d2:ce:01:e7:37:e3:db:cb:5e:ac:6f:4e:8b:b0:a9:47:75:23: 17:75:9b:20:1c:7e:dd:01:8b:f2:7a:b3:6e:12:cd:25:0e:1f: 25:40:0c:eb:08:dc:15:d9:12:49:18:ac:e1:0f:c9:b9:0c:9c: d2:44:1f:b5:d7:05:65:6a:52:b4:72:5d:e1:07:6b:e6:de:58: 30:23:04:4f:1d:33:48:40:ba:4b:d9:61:d3:5c:34:42:97:e0: 89:9d:0e:1d:19:09:c2:0e:93:00:aa:9f:3f:a8:26:37:0e:8a: 70:27:f1:2c:f5:9a:05:ca:06:d8:4f:9d:1f:a5:fd:78:8a:92: 83:09:b8:fa:41:23:f6:3a:29:37:63:49:f6:ab:b8:6f:86:8d: c1:83:9e:98:8b:5a:55:e9:89:3a:db:54:f4:aa:b5:72:0e:35: da:80:92:02:31:15:93:66:a7:26:a5:05:e0:b4:3f:48:9d:55: 2a:74:c9:a8:0d:b9:41:9d:80:f7:ee:1d:9f:b4:b2:6e:e7:d1: 25:ed:9f:c1:2a:c3:85:6c:84:5c:9b:75:d4:70:3f:32:66:d6: 68:64:69:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh85Y2ZUZsIf67E7WniiWb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjUwODA2MDEwMTE1WhcNMjUwODA3MDEwMTE1WjAzMTEwLwYDVQQD EygzYjhjYzE1YzQ5OTgzZjgxYTdhM2Q1NDExZGQ1ZTJlYTljZWY3NjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvTkfIlB8T6XCqrvB00A4UoMJSUz vW+i7hhsdBTkziTHD/56USydHP590o9oq57szrfM9+EdG4YI3L3Hj+uXlkyMPLAo WE728xG+Nz99qnpvlA457Y1QdsKXoNXe1ai9CbIk2ARBD3rG7WNoru37faaoJqpT LWoXljMv3k8690fT6uUOMATUgX2N1vs/rGGNnTvHM12dkxZB+PawMZUZaq3Ize37 Q2SMALKcyg/VLeThco5F6qmI843fXVPlJq8t576rF163DqFPLXJOFqv1Bur0/1hs ewnYIXo194FUxb+4DQWnPOkQ0kAd5mgo3fpAdXHLwq2MnjjoKj239BHkkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuMwVxJmD+Bp6PVQR3V4uqc73YVMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzYbJPh3 NXa0dAZyYcWcIcPORdGzwg0C33e5c5y5wxcI6VaQ0s4B5zfj28terG9Oi7CpR3Uj F3WbIBx+3QGL8nqzbhLNJQ4fJUAM6wjcFdkSSRis4Q/JuQyc0kQftdcFZWpStHJd 4Qdr5t5YMCMETx0zSEC6S9lh01w0QpfgiZ0OHRkJwg6TAKqfP6gmNw6KcCfxLPWa BcoG2E+dH6X9eIqSgwm4+kEj9jopN2NJ9qu4b4aNwYOemItaVemJOttU9Kq1cg41 2oCSAjEVk2anJqUF4LQ/SJ1VKnTJqA25QZ2A9+4dn7SybufRJe2fwSrDhWyEXJt1 1HA/MmbWaGRpdw== -----END CERTIFICATE-----Generated at Wed Aug 6 07:49:53 2025 by rpki-client