$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: IasD/lMgvq4Ay3OPgKbJuEiBmMNp+re07wvPFODt49A= Subject key identifier: 38:DF:85:FD:C2:FB:2C:56:D1:5F:A9:9C:00:08:D7:94:0F:3A:5E:EA Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 01976E86E6FB301A9D969D3909743D483930 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 1221 Signing time: Sat 14 Jun 2025 13:00:24 +0000 Manifest this update: Sat 14 Jun 2025 13:00:24 +0000 Manifest next update: Sun 15 Jun 2025 13:00:24 +0000 Files and hashes: 1: 5sGdFc_1Zid-hBM7mInO1hEaSqE.roa (hash: 7bwxpMhgqxIjIH4tFXJcxeBHbkei+D+EpzaJzJaJhv4=) 2: 6Fi2x6-MOtr7a_1fOFW30-_zrig.roa (hash: 2IN+YE3CMZAPD+uK8qRy2OV0W4x3OCpS/TO8CF/76aw=) 3: 9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa (hash: 3TIv5c08KCsDbJFNq+WTb4IZP4ym0IZZX1CdjQGX0PE=) 4: AX86DsLSoXFRNkCv2pCL1_EPY5g.roa (hash: GQZE5H1ow5zCrtLramjrChLPwPl7V1YC5vmeyk2QXn0=) 5: GNoD4VldON0fRQOsfwgnZbDlm30.roa (hash: blIx8D3DZyU+DHXOsnwJBmGsut7rhQArkG8R7KyjOw4=) 6: HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa (hash: oR/Hq9WxPGajOgdVUFWze40RSUPdBlPl+1xVQoSJxOo=) 7: MJg7tjZ2YS5zYW2u8iw1g2oqMU0.roa (hash: X+QXFsSzhee86ausU4aiKnbqtRl/bpo3u3VYz3YOas0=) 8: Vfz_XI34h0n1ABRWW0I8TbCl2Ks.roa (hash: 5McLJpTXPeaX6NxvYmzQe8oLwKFov9vgW9zM/HLDWFk=) 9: Wa5j5jUmUSd1vG30ktnaqL3uHDI.roa (hash: MKz77Ewok0vz5vQRzaJNzC9kTJYYYuPm776x717x2z4=) 10: d7zRd6MptHTWJQgyfw6tgdDV_9A.roa (hash: oELlLX+h376OqFFHKdf5s0R3SvC5xRLsvCJ5JL8+PK4=) 11: eaT289O4FWfLSNPSCfCVS50JLdA.roa (hash: 6Ydw1aV3kTAxyagbcZrClYDAIJBPqjkvUlwgRk8W+YE=) 12: nZaqbX4b0xd3UwU7l5sM7yoGBBo.roa (hash: OWNumqHHHp/8gdqH67NYyJSDu9rO3vPuBbgXU7s9BgM=) 13: oZv7gBkqKHSk-77MXrW1ab6ETYI.roa (hash: +B5mLIxH7s3pabVcCwGAo38v71wCcUaCQewhunxJ/mg=) 14: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: 0PBgpZPYHsYc5T7IcAZ4MtAofcQouqosR1uuul9KWpI=) 15: r4c3fyT5mEicBTcplHGkCHGu1DU.roa (hash: TN1KtYP5BnSUVtiFLbJe3+UWbigxirFk6LMWIHk9G6A=) 16: vsZmI73j1l0F5LUFB41ZYaQs_Cs.roa (hash: nZ33GCfbpIYKPXjqivfkgFha5BmKCs/riEjE4yHbJng=) 17: w6--t_5wz0JDy2YG6__bLL736lk.roa (hash: kokGrC/YWrlNHabiNp1qc8zjZ2tpu6Xwv3gwVAl+cdY=) 18: xaaOuiTsUCwOo5hhwkfZiBvLcJ8.roa (hash: Iz6qbI3mhpm0/uLd5TTzINoKeImEElZtBrUi0Q8Z2Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6e:86:e6:fb:30:1a:9d:96:9d:39:09:74:3d:48:39:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Jun 14 13:00:24 2025 GMT Not After : Jun 15 13:00:24 2025 GMT Subject: CN=38df85fdc2fb2c56d15fa99c0008d7940f3a5eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:66:3b:22:0d:b7:58:48:92:41:f9:1a:23:a8: 3c:3a:08:1e:cd:2c:b3:f6:e5:17:5f:0c:05:c3:85: 9e:6a:47:98:11:b7:38:63:28:53:a2:23:8f:4c:35: 6c:71:59:f0:8d:24:16:fd:e9:fc:26:ea:2d:95:02: 3c:26:be:f4:2d:a8:dd:1c:9a:3f:df:fa:1e:04:35: fe:28:84:3e:91:e7:94:c5:bb:74:11:e8:97:e3:75: ee:20:76:bd:71:90:e6:eb:1e:60:aa:05:ce:4d:90: 9d:03:d2:4d:78:51:59:bb:90:ba:dc:c6:17:1e:7a: e3:b3:61:1a:11:22:3b:85:9b:d1:f7:1b:33:64:52: c2:b0:26:08:6f:8f:b7:26:66:eb:31:43:d7:17:0c: 74:8d:86:d8:5f:8a:e4:f7:f3:ae:9d:ca:d4:70:2f: ad:5a:55:47:19:2e:1d:cb:5f:f9:62:2a:b3:9e:fb: 1b:75:0a:7e:d4:91:64:c7:62:08:e3:43:68:dc:1c: e3:05:7f:51:74:0a:28:c1:12:e2:9f:57:ba:b4:12: 13:83:7b:56:0e:55:21:6f:9b:23:6e:c0:c3:b2:73: f6:f8:2e:90:14:98:8d:69:36:a6:48:11:06:fd:59: 1a:ea:8b:68:00:47:0d:15:4a:56:4f:ee:c6:62:4e: 81:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DF:85:FD:C2:FB:2C:56:D1:5F:A9:9C:00:08:D7:94:0F:3A:5E:EA X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:8c:38:ee:5c:4e:25:ea:ad:48:33:8a:59:9a:9b:46:68:8d: 0e:5c:11:a3:0e:96:bc:30:e8:09:67:12:fe:01:ad:87:b2:bf: 21:76:cb:e0:d2:a7:dd:13:6a:7f:0f:f0:bd:bf:81:60:67:6e: c2:7c:cf:df:6a:4f:f4:4d:4e:07:d3:9a:2e:4c:3b:25:9a:b8: b3:a7:44:39:50:5f:a0:25:64:c0:31:49:fc:61:4a:0a:1c:71: 24:93:43:ff:04:5c:39:ab:e5:07:51:5f:1f:97:3e:7d:df:ae: da:af:d7:8b:32:e1:c8:5c:84:cb:8a:37:af:6e:19:bd:b0:8b: 84:cf:d9:cc:6b:19:e8:ed:de:19:42:63:db:47:40:1c:b2:9c: 47:69:39:c6:ec:5a:1a:07:96:80:1d:c0:e3:4c:fe:c9:1d:90: 76:fb:77:b2:39:47:4b:f5:4f:20:04:1a:cd:00:ad:f4:7a:5d: 40:a8:5c:1e:48:93:b6:90:07:18:58:57:f5:76:19:00:1c:5f: 42:bc:3b:24:66:7f:fe:da:9a:14:ae:70:b0:cb:e2:30:09:9d: 5e:a0:5b:69:52:b7:70:ce:6e:78:a4:3c:1f:a3:e0:2b:78:d2: 67:bc:ab:21:01:6b:f6:74:98:ba:84:97:e4:89:32:63:69:e7: 45:7b:a0:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZduhub7MBqdlp05CXQ9SDkwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjUwNjE0MTMwMDI0WhcNMjUwNjE1MTMwMDI0WjAzMTEwLwYDVQQD EygzOGRmODVmZGMyZmIyYzU2ZDE1ZmE5OWMwMDA4ZDc5NDBmM2E1ZWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GY7Ig23WEiSQfkaI6g8OggezSyz 9uUXXwwFw4WeakeYEbc4YyhToiOPTDVscVnwjSQW/en8JuotlQI8Jr70LajdHJo/ 3/oeBDX+KIQ+keeUxbt0EeiX43XuIHa9cZDm6x5gqgXOTZCdA9JNeFFZu5C63MYX Hnrjs2EaESI7hZvR9xszZFLCsCYIb4+3JmbrMUPXFwx0jYbYX4rk9/OuncrUcC+t WlVHGS4dy1/5YiqznvsbdQp+1JFkx2II40No3BzjBX9RdAoowRLin1e6tBITg3tW DlUhb5sjbsDDsnP2+C6QFJiNaTamSBEG/Vka6otoAEcNFUpWT+7GYk6BJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjfhf3C+yxW0V+pnAAI15QPOl7qMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4w47lxO JeqtSDOKWZqbRmiNDlwRow6WvDDoCWcS/gGth7K/IXbL4NKn3RNqfw/wvb+BYGdu wnzP32pP9E1OB9OaLkw7JZq4s6dEOVBfoCVkwDFJ/GFKChxxJJND/wRcOavlB1Ff H5c+fd+u2q/XizLhyFyEy4o3r24ZvbCLhM/ZzGsZ6O3eGUJj20dAHLKcR2k5xuxa GgeWgB3A40z+yR2Qdvt3sjlHS/VPIAQazQCt9HpdQKhcHkiTtpAHGFhX9XYZABxf Qrw7JGZ//tqaFK5wsMviMAmdXqBbaVK3cM5ueKQ8H6PgK3jSZ7yrIQFr9nSYuoSX 5IkyY2nnRXugyA== -----END CERTIFICATE-----Generated at Sat Jun 14 22:58:55 2025 by rpki-client