$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: rR3N968OUZR3No/lRrwx/1Mc4KmCBgBRNSAgfxhPBt0= Subject key identifier: 87:D1:E9:56:26:B2:95:30:93:BE:90:09:93:C3:45:B5:10:0B:6E:4A Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 019A4E4F8ABD4780702351D0190E8DAC7700 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 139E Signing time: Tue 04 Nov 2025 10:00:26 +0000 Manifest this update: Tue 04 Nov 2025 10:00:26 +0000 Manifest next update: Wed 05 Nov 2025 10:00:26 +0000 Files and hashes: 1: 5sGdFc_1Zid-hBM7mInO1hEaSqE.roa (hash: 7bwxpMhgqxIjIH4tFXJcxeBHbkei+D+EpzaJzJaJhv4=) 2: 6Fi2x6-MOtr7a_1fOFW30-_zrig.roa (hash: 2IN+YE3CMZAPD+uK8qRy2OV0W4x3OCpS/TO8CF/76aw=) 3: 9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa (hash: 3TIv5c08KCsDbJFNq+WTb4IZP4ym0IZZX1CdjQGX0PE=) 4: AX86DsLSoXFRNkCv2pCL1_EPY5g.roa (hash: GQZE5H1ow5zCrtLramjrChLPwPl7V1YC5vmeyk2QXn0=) 5: GNoD4VldON0fRQOsfwgnZbDlm30.roa (hash: blIx8D3DZyU+DHXOsnwJBmGsut7rhQArkG8R7KyjOw4=) 6: HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa (hash: oR/Hq9WxPGajOgdVUFWze40RSUPdBlPl+1xVQoSJxOo=) 7: MJg7tjZ2YS5zYW2u8iw1g2oqMU0.roa (hash: X+QXFsSzhee86ausU4aiKnbqtRl/bpo3u3VYz3YOas0=) 8: Vfz_XI34h0n1ABRWW0I8TbCl2Ks.roa (hash: 5McLJpTXPeaX6NxvYmzQe8oLwKFov9vgW9zM/HLDWFk=) 9: Wa5j5jUmUSd1vG30ktnaqL3uHDI.roa (hash: MKz77Ewok0vz5vQRzaJNzC9kTJYYYuPm776x717x2z4=) 10: d7zRd6MptHTWJQgyfw6tgdDV_9A.roa (hash: oELlLX+h376OqFFHKdf5s0R3SvC5xRLsvCJ5JL8+PK4=) 11: eaT289O4FWfLSNPSCfCVS50JLdA.roa (hash: 6Ydw1aV3kTAxyagbcZrClYDAIJBPqjkvUlwgRk8W+YE=) 12: nZaqbX4b0xd3UwU7l5sM7yoGBBo.roa (hash: OWNumqHHHp/8gdqH67NYyJSDu9rO3vPuBbgXU7s9BgM=) 13: oZv7gBkqKHSk-77MXrW1ab6ETYI.roa (hash: +B5mLIxH7s3pabVcCwGAo38v71wCcUaCQewhunxJ/mg=) 14: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: 4JnSRJJrIEjg5HU9mypJ6AW/uUoOw696WoT0SOncbig=) 15: r4c3fyT5mEicBTcplHGkCHGu1DU.roa (hash: TN1KtYP5BnSUVtiFLbJe3+UWbigxirFk6LMWIHk9G6A=) 16: vsZmI73j1l0F5LUFB41ZYaQs_Cs.roa (hash: nZ33GCfbpIYKPXjqivfkgFha5BmKCs/riEjE4yHbJng=) 17: w6--t_5wz0JDy2YG6__bLL736lk.roa (hash: kokGrC/YWrlNHabiNp1qc8zjZ2tpu6Xwv3gwVAl+cdY=) 18: xaaOuiTsUCwOo5hhwkfZiBvLcJ8.roa (hash: Iz6qbI3mhpm0/uLd5TTzINoKeImEElZtBrUi0Q8Z2Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:8a:bd:47:80:70:23:51:d0:19:0e:8d:ac:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Nov 4 10:00:26 2025 GMT Not After : Nov 5 10:00:26 2025 GMT Subject: CN=87d1e95626b2953093be900993c345b5100b6e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7e:77:4c:eb:ef:08:19:1e:c6:4a:e8:39:03: 31:d5:02:63:af:3f:49:db:8b:e8:e7:79:a2:a8:8b: b7:79:7f:5c:2d:cf:0b:21:35:d1:82:00:33:4f:8d: 20:04:89:8f:90:55:1b:f2:c0:5b:2f:ec:72:36:ee: 2e:eb:0b:ab:49:21:1f:2a:cc:c3:d5:f5:52:61:42: 45:4c:fa:76:c2:2f:b9:30:b6:06:fe:2f:92:bd:fc: 1b:40:59:9c:45:20:32:2c:49:c7:a2:9a:36:f1:0b: d1:a6:21:d0:0b:2c:1c:47:12:6c:e4:f6:19:ee:18: 45:82:0d:b3:5f:06:37:39:f5:a8:07:6c:d0:bb:c7: 2b:7d:f2:b0:41:14:fe:6d:db:13:02:7e:a9:1f:31: 6c:8f:e8:fd:a1:df:f9:b3:9e:aa:af:9a:47:21:55: 36:12:b8:42:e1:4e:c6:ec:0c:34:15:25:aa:3f:d2: 84:8f:e5:17:3c:31:7e:70:59:1d:83:3d:4d:0e:07: a3:35:0c:29:ed:6b:37:ff:a2:9b:4c:3c:48:aa:94: 9e:bc:c6:56:84:d0:b7:e0:1d:6d:75:8d:0f:6a:83: 34:3a:4e:3f:ff:5a:63:05:3b:ff:64:3a:1c:cb:77: 12:be:9a:27:07:d0:22:a3:62:15:f5:29:73:ce:5f: 16:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D1:E9:56:26:B2:95:30:93:BE:90:09:93:C3:45:B5:10:0B:6E:4A X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:15:22:70:84:94:4f:f8:04:0c:12:97:c0:03:f1:dc:4d:64: fb:36:23:ab:62:20:e7:fe:90:11:43:84:be:33:d0:88:5a:7f: 44:d8:44:26:9b:03:63:bc:db:b8:64:38:f1:d9:2d:2e:87:22: 7d:9f:01:a8:3b:65:ca:87:0d:0b:5e:6b:2d:ac:c3:dd:d3:7b: 34:f5:82:cf:4b:9e:d5:69:70:72:0f:0d:ac:2a:c4:97:89:cf: dc:2c:5e:4e:d6:a3:51:f1:9a:a3:66:d8:80:38:0e:f9:cb:11: 92:cd:5e:57:6e:99:b8:cd:3f:9b:f3:d2:fa:d2:1c:0c:0b:93: dd:3b:96:13:26:ab:02:49:67:f8:d6:12:8e:6a:34:e9:df:19: e8:bd:f7:65:65:8f:6e:64:5d:a8:f4:56:58:ca:d0:e3:10:1e: 28:6f:a8:47:c5:5e:a8:91:53:35:28:81:83:b9:3e:27:3e:46: fd:58:f4:e0:0a:b5:5b:31:89:34:8c:ad:a5:0c:75:d2:d3:36: f0:c5:02:b7:ad:cf:d3:94:fe:6f:73:d9:4a:a6:95:87:05:d3: 3b:7f:50:3d:01:81:30:34:ce:5d:1f:e0:e2:8c:82:df:7b:ec: 2c:b3:f1:38:63:46:76:b4:2e:04:a4:ba:96:b8:b9:a4:7d:3d: a8:13:9c:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT4q9R4BwI1HQGQ6NrHcAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjUxMTA0MTAwMDI2WhcNMjUxMTA1MTAwMDI2WjAzMTEwLwYDVQQD Eyg4N2QxZTk1NjI2YjI5NTMwOTNiZTkwMDk5M2MzNDViNTEwMGI2ZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X53TOvvCBkexkroOQMx1QJjrz9J 24vo53miqIu3eX9cLc8LITXRggAzT40gBImPkFUb8sBbL+xyNu4u6wurSSEfKszD 1fVSYUJFTPp2wi+5MLYG/i+SvfwbQFmcRSAyLEnHopo28QvRpiHQCywcRxJs5PYZ 7hhFgg2zXwY3OfWoB2zQu8crffKwQRT+bdsTAn6pHzFsj+j9od/5s56qr5pHIVU2 ErhC4U7G7Aw0FSWqP9KEj+UXPDF+cFkdgz1NDgejNQwp7Ws3/6KbTDxIqpSevMZW hNC34B1tdY0PaoM0Ok4//1pjBTv/ZDocy3cSvponB9Aio2IV9Slzzl8WGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfR6VYmspUwk76QCZPDRbUQC25KMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBUicISU T/gEDBKXwAPx3E1k+zYjq2Ig5/6QEUOEvjPQiFp/RNhEJpsDY7zbuGQ48dktLoci fZ8BqDtlyocNC15rLazD3dN7NPWCz0ue1Wlwcg8NrCrEl4nP3CxeTtajUfGao2bY gDgO+csRks1eV26ZuM0/m/PS+tIcDAuT3TuWEyarAkln+NYSjmo06d8Z6L33ZWWP bmRdqPRWWMrQ4xAeKG+oR8VeqJFTNSiBg7k+Jz5G/Vj04Aq1WzGJNIytpQx10tM2 8MUCt63P05T+b3PZSqaVhwXTO39QPQGBMDTOXR/g4oyC33vsLLPxOGNGdrQuBKS6 lri5pH09qBOc4A== -----END CERTIFICATE-----Generated at Tue Nov 4 18:16:31 2025 by rpki-client