$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: 5fnejdV+cmYJucfU72JSKptz4kFIoTTqalba9lG7ly0= Subject key identifier: 4F:C4:D7:3B:7A:60:FB:57:20:59:53:EC:46:63:4E:F7:16:D9:70:A3 Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 019CABA22568B90945632DDB08EBF413F59F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 14D8 Signing time: Sun 01 Mar 2026 23:00:56 +0000 Manifest this update: Sun 01 Mar 2026 23:00:56 +0000 Manifest next update: Mon 02 Mar 2026 23:00:56 +0000 Files and hashes: 1: 76SUa31tX84MMYV-5pJtl_RzfBs.roa (hash: VLwC/xTHEJsdM4oEbJXYgc2X6KgnqYrx1To2cyFfsks=) 2: EQyiKX_7-Wpxq09KJocOiD7iVtg.roa (hash: xSHc+sset4mHHx5Au4SFQGD7gPC3y5Gef/MK9s8Iy4Y=) 3: IqvcRngzlVCtX_OA-70dAZLFdA8.roa (hash: aY3f5nvXyrfMF4R4lR/AbKv7PaJsmbQ5UoA1+i35Mzo=) 4: J6RUNAmoogv7zgMLcCOwk_cTSbw.roa (hash: g+8OdmE2eYFbsqzauS740Ewhw4IU7T/U1OEITUeBDc4=) 5: JYSE_79beIVH7AyGREwVYhRCyTY.roa (hash: l3baob39qaOOP1HD2nUjVfG8gYEyw7b1MgZubnhYeyE=) 6: LlTZm9TRn88VWou6DKeJrZdQgvU.roa (hash: GTQExs7+EOPrcDE70ZQ1HXMC0yUw4J5W6WVSW6HNDyE=) 7: O-CoG-YF7L6hwLeg3uly4Kp8B_8.roa (hash: 5oJU3WpHWPREk+VpJtji8wlNog6GMZ8hQeRSHT6lLd0=) 8: U2Yc5skQvePijZYsWlFophc_BK4.roa (hash: gMfZmKyaceaZgToU/WPMcQ0QQiGVzdWPQc5qXxtNrpw=) 9: WMiYfXfaecilSx0Cw11AX6GHoD0.roa (hash: tfANuqYEsqBC9djOQlOpVgZbpkAcWNv/SHctNZh0ths=) 10: YLu7TqT2RSl1_BNUUxUt12edQaA.roa (hash: paF/KBHEk0JOZSKhbJ4oeNoOGAfMADsXOpIZVHL7RNY=) 11: aQ88EoiiajhYjpR8X9YSC2Itufk.roa (hash: 6ocE7SCCa9OYWlhJzkmE5ODfDYPaMsMSbmqpzzbM+qk=) 12: bKeksz2w4uplaCPFhGd2ZRXJ3L4.roa (hash: V3eyRTLr62Od4hxpOj09Jq4Nekd36hyzHMFde1nQKHM=) 13: cNrzpnZVR-vdGnfMmjiDxUQw38w.roa (hash: jDSBudPBssvuTBaPnXNJhRgSYVM03+9BoPvraHbjsUs=) 14: hOWBX1aqOOkBBDPmSf04HK0FDdQ.roa (hash: TNZ6xI5xHtE38+sW0p4MVYqN1AjK+nGsdspXM65hmqg=) 15: hpQK8Ct69QedB3MH-Zduh7fwfI0.roa (hash: tMKgnvO9EBwmVGsim8vR529voYsTaPvcU9t25lxh9c8=) 16: lE9bYROvMOgfAcJMOq1buSFu5Oc.roa (hash: uM/UbNoBafoN3u4NQaCJ1CV+W48Aj8GUgTcEvh/o4kw=) 17: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: 2CpnDzlMc1fvJ3WF8ejpwamCs3lxHhvK3Hr3XJ+QfIs=) 18: sp2MMK9YRqm89c-c8Nk0zqZ0hl0.roa (hash: 4AR1dpezwOfRG52yq/YaU//Ei5bTQmeOkpGOb7/yTjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:a2:25:68:b9:09:45:63:2d:db:08:eb:f4:13:f5:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Mar 1 23:00:56 2026 GMT Not After : Mar 2 23:00:56 2026 GMT Subject: CN=4fc4d73b7a60fb57205953ec46634ef716d970a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:10:e6:34:e4:8e:dc:9a:8f:0f:80:f2:eb:a1: 88:26:77:d3:0c:37:08:b4:c2:75:53:ec:e7:6b:9e: f0:2b:ea:bd:da:67:69:a1:eb:33:ba:e6:d0:ee:4d: c9:95:ec:f3:e3:d1:73:20:4c:24:55:47:63:8c:a8: 36:9c:fc:70:32:da:b6:39:be:da:2e:2c:4c:12:d8: 66:a1:3d:aa:5a:08:7d:1b:05:19:43:ab:93:ae:b7: 90:71:ec:43:95:b9:a9:9f:9b:ce:3c:7d:10:15:1e: e8:12:97:19:a1:2f:7c:4e:bd:22:51:17:7b:29:c6: e0:92:41:31:e4:96:81:de:04:de:06:30:b3:b9:86: f6:52:d1:8d:02:06:57:71:28:1a:2a:52:d6:bb:c2: e6:71:f9:09:d9:cb:dd:dc:1c:19:f5:1b:93:60:52: 0b:bc:7e:30:fb:db:f1:90:2d:b4:7e:2e:17:36:c1: 7f:5c:76:91:d9:97:c9:d9:67:2d:56:40:6f:09:89: 4d:ac:81:83:34:e5:f8:f5:29:77:85:54:76:f2:73: 49:41:db:18:69:5a:0a:83:4c:f7:f7:bb:cf:90:95: 74:4e:f8:88:24:d2:53:33:f3:c8:48:6c:4f:9d:49: 5f:66:38:4c:67:1c:e8:19:9c:51:68:29:63:bf:da: aa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C4:D7:3B:7A:60:FB:57:20:59:53:EC:46:63:4E:F7:16:D9:70:A3 X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ef:d3:d5:8e:6c:b0:b3:0f:ba:1e:e2:99:01:9d:36:eb:c9: d7:77:f7:75:19:ec:d4:59:e6:d5:c8:47:53:b4:bf:d6:2c:19: 6c:02:0f:94:bd:9a:43:63:64:8c:3a:ab:7e:05:5f:51:2d:12: be:05:08:2c:fe:05:b0:de:17:9c:e6:45:33:64:44:03:b5:d9: e1:c4:a8:5c:9b:c0:f1:bb:9d:b9:f5:9e:ba:8e:0a:e4:73:8a: 3f:41:1c:f1:b2:db:f9:75:e9:e2:bb:d0:ad:f4:05:c8:2d:dd: 50:4e:6f:d6:4a:2d:f4:23:8b:29:59:f1:7e:2b:3c:47:3f:1a: c6:1e:77:2f:d2:2e:f5:5b:8b:be:0a:b7:4d:72:57:8b:b0:df: 9c:9c:ae:6c:a6:5c:46:fa:a6:c4:c4:0a:ec:3a:bd:e5:51:54: 24:80:e3:ca:6f:6b:85:15:00:57:c2:87:d4:32:e8:4b:c4:87: 5c:6c:d5:49:9b:d7:60:6e:a7:ed:4a:8b:1b:95:9c:43:f3:6b: e5:f9:e8:b3:3b:15:78:53:af:ef:d7:6e:cc:76:13:33:d9:f3: ed:64:b4:a4:32:78:58:a4:b0:20:f4:bb:7b:d3:ee:b7:21:f4: a0:1d:4f:b0:9f:44:ee:6a:28:44:92:50:7b:87:72:8f:14:11: 59:8b:52:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyroiVouQlFYy3bCOv0E/WfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjYwMzAxMjMwMDU2WhcNMjYwMzAyMjMwMDU2WjAzMTEwLwYDVQQD Eyg0ZmM0ZDczYjdhNjBmYjU3MjA1OTUzZWM0NjYzNGVmNzE2ZDk3MGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhDmNOSO3JqPD4Dy66GIJnfTDDcI tMJ1U+zna57wK+q92mdpoeszuubQ7k3Jlezz49FzIEwkVUdjjKg2nPxwMtq2Ob7a LixMEthmoT2qWgh9GwUZQ6uTrreQcexDlbmpn5vOPH0QFR7oEpcZoS98Tr0iURd7 KcbgkkEx5JaB3gTeBjCzuYb2UtGNAgZXcSgaKlLWu8LmcfkJ2cvd3BwZ9RuTYFIL vH4w+9vxkC20fi4XNsF/XHaR2ZfJ2WctVkBvCYlNrIGDNOX49Sl3hVR28nNJQdsY aVoKg0z397vPkJV0TviIJNJTM/PISGxPnUlfZjhMZxzoGZxRaCljv9qqzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/E1zt6YPtXIFlT7EZjTvcW2XCjMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfu/T1Y5s sLMPuh7imQGdNuvJ13f3dRns1Fnm1chHU7S/1iwZbAIPlL2aQ2NkjDqrfgVfUS0S vgUILP4FsN4XnOZFM2REA7XZ4cSoXJvA8budufWeuo4K5HOKP0Ec8bLb+XXp4rvQ rfQFyC3dUE5v1kot9COLKVnxfis8Rz8axh53L9Iu9VuLvgq3TXJXi7DfnJyubKZc RvqmxMQK7Dq95VFUJIDjym9rhRUAV8KH1DLoS8SHXGzVSZvXYG6n7UqLG5WcQ/Nr 5fnoszsVeFOv79duzHYTM9nz7WS0pDJ4WKSwIPS7e9PutyH0oB1PsJ9E7mooRJJQ e4dyjxQRWYtSwA== -----END CERTIFICATE-----Generated at Mon Mar 2 06:18:04 2026 by rpki-client