$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: iAxaD7/w65djRJr0PBhHksdhkbJozkOFfZ5b3jlLd9g= Subject key identifier: DD:60:E4:FA:27:2C:5F:31:A0:11:17:3A:81:45:9A:27:1A:CC:67:22 Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 0197B7EA32CCB7A15B81FFB12B5739A3DCE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 1247 Signing time: Sat 28 Jun 2025 19:01:08 +0000 Manifest this update: Sat 28 Jun 2025 19:01:08 +0000 Manifest next update: Sun 29 Jun 2025 19:01:08 +0000 Files and hashes: 1: 5sGdFc_1Zid-hBM7mInO1hEaSqE.roa (hash: 7bwxpMhgqxIjIH4tFXJcxeBHbkei+D+EpzaJzJaJhv4=) 2: 6Fi2x6-MOtr7a_1fOFW30-_zrig.roa (hash: 2IN+YE3CMZAPD+uK8qRy2OV0W4x3OCpS/TO8CF/76aw=) 3: 9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa (hash: 3TIv5c08KCsDbJFNq+WTb4IZP4ym0IZZX1CdjQGX0PE=) 4: AX86DsLSoXFRNkCv2pCL1_EPY5g.roa (hash: GQZE5H1ow5zCrtLramjrChLPwPl7V1YC5vmeyk2QXn0=) 5: GNoD4VldON0fRQOsfwgnZbDlm30.roa (hash: blIx8D3DZyU+DHXOsnwJBmGsut7rhQArkG8R7KyjOw4=) 6: HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa (hash: oR/Hq9WxPGajOgdVUFWze40RSUPdBlPl+1xVQoSJxOo=) 7: MJg7tjZ2YS5zYW2u8iw1g2oqMU0.roa (hash: X+QXFsSzhee86ausU4aiKnbqtRl/bpo3u3VYz3YOas0=) 8: Vfz_XI34h0n1ABRWW0I8TbCl2Ks.roa (hash: 5McLJpTXPeaX6NxvYmzQe8oLwKFov9vgW9zM/HLDWFk=) 9: Wa5j5jUmUSd1vG30ktnaqL3uHDI.roa (hash: MKz77Ewok0vz5vQRzaJNzC9kTJYYYuPm776x717x2z4=) 10: d7zRd6MptHTWJQgyfw6tgdDV_9A.roa (hash: oELlLX+h376OqFFHKdf5s0R3SvC5xRLsvCJ5JL8+PK4=) 11: eaT289O4FWfLSNPSCfCVS50JLdA.roa (hash: 6Ydw1aV3kTAxyagbcZrClYDAIJBPqjkvUlwgRk8W+YE=) 12: nZaqbX4b0xd3UwU7l5sM7yoGBBo.roa (hash: OWNumqHHHp/8gdqH67NYyJSDu9rO3vPuBbgXU7s9BgM=) 13: oZv7gBkqKHSk-77MXrW1ab6ETYI.roa (hash: +B5mLIxH7s3pabVcCwGAo38v71wCcUaCQewhunxJ/mg=) 14: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: t4NFD02dsZC6YCCwKC7BKDNj9MdXP3x9Ie2bnEvVZoQ=) 15: r4c3fyT5mEicBTcplHGkCHGu1DU.roa (hash: TN1KtYP5BnSUVtiFLbJe3+UWbigxirFk6LMWIHk9G6A=) 16: vsZmI73j1l0F5LUFB41ZYaQs_Cs.roa (hash: nZ33GCfbpIYKPXjqivfkgFha5BmKCs/riEjE4yHbJng=) 17: w6--t_5wz0JDy2YG6__bLL736lk.roa (hash: kokGrC/YWrlNHabiNp1qc8zjZ2tpu6Xwv3gwVAl+cdY=) 18: xaaOuiTsUCwOo5hhwkfZiBvLcJ8.roa (hash: Iz6qbI3mhpm0/uLd5TTzINoKeImEElZtBrUi0Q8Z2Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:ea:32:cc:b7:a1:5b:81:ff:b1:2b:57:39:a3:dc:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Jun 28 19:01:08 2025 GMT Not After : Jun 29 19:01:08 2025 GMT Subject: CN=dd60e4fa272c5f31a011173a81459a271acc6722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:54:13:96:94:d6:14:9e:24:01:c5:e9:45: 5b:3c:69:66:56:56:c2:9f:ca:f6:34:e0:cd:74:81: 3d:13:51:45:bc:3c:a8:bd:aa:b0:80:d1:f5:26:40: 37:f4:9c:a3:6a:e9:a8:a2:07:c3:15:2f:c0:f2:26: c3:9e:89:cb:52:57:42:9e:b3:c4:fc:d9:f7:6b:98: 17:53:ab:12:21:b9:c7:24:40:44:43:21:69:38:49: 9e:84:9e:6e:02:ea:b1:32:5b:f8:15:79:72:92:53: 34:17:c0:a7:50:59:7c:b3:65:a3:be:84:ec:03:db: 09:b6:57:b5:28:74:f7:ca:2b:93:b4:54:8a:b0:eb: b4:23:00:70:ea:35:5d:0a:0d:c3:ea:0a:a4:f4:10: ff:32:61:3c:69:d0:a5:3c:a2:cf:9d:a7:66:e5:78: a4:8d:a1:54:96:72:22:06:88:2a:cb:e6:b5:f0:5b: 2b:46:75:58:0e:62:af:40:37:a8:bb:6c:81:df:44: 2f:be:4f:f5:29:d0:1c:9d:fd:f2:c1:db:df:55:37: dc:92:97:ba:d0:7e:71:d0:07:3c:d1:12:45:cc:0c: bc:7b:42:a8:4c:1d:76:76:e6:10:c1:74:aa:67:ee: 57:c5:1e:e4:83:bd:10:02:0c:13:89:39:bf:86:8c: d0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:60:E4:FA:27:2C:5F:31:A0:11:17:3A:81:45:9A:27:1A:CC:67:22 X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:74:f5:32:c6:67:57:5f:d0:df:2e:63:25:b4:23:9a:57:86: 58:c3:1f:19:1a:37:09:fd:c6:12:5f:0f:99:d0:64:f1:f2:13: ea:f6:8f:2b:8d:30:63:3e:be:54:fa:a3:35:93:6c:ce:e2:e1: d2:bc:2b:ae:e4:b9:5e:48:4e:59:81:24:91:5e:73:ea:7f:89: 82:a3:dc:3e:55:c9:f2:7f:32:71:a3:9f:34:49:1b:91:02:3b: a4:13:12:05:44:3c:9d:94:ae:28:28:42:57:09:99:bb:37:30: ce:30:73:3c:7e:c3:83:71:b1:31:2b:1a:1f:a7:e1:b7:45:4d: 05:bb:d8:15:09:11:a4:95:0f:b3:48:6e:7a:9c:a0:25:fa:9a: 89:a2:1a:e3:71:88:59:3a:ba:ce:09:32:da:00:58:8f:cf:97: 1c:7d:d2:b8:1b:ec:50:53:10:e7:e5:bd:9b:27:1c:be:a2:e4: b4:2d:4c:94:93:43:6f:6c:5a:23:b2:7c:42:0d:03:37:63:d0: 9b:96:88:44:2b:7f:98:b5:f8:91:1b:d1:1c:9e:ea:52:ca:2e: fd:47:4a:a2:40:13:68:99:35:78:a0:79:70:7f:b8:7c:d8:0f: 0b:e0:e9:bd:51:02:6b:69:02:9b:a2:2f:cb:10:0f:d7:35:93: e2:e4:bc:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe36jLMt6Fbgf+xK1c5o9zhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjUwNjI4MTkwMTA4WhcNMjUwNjI5MTkwMTA4WjAzMTEwLwYDVQQD EyhkZDYwZTRmYTI3MmM1ZjMxYTAxMTE3M2E4MTQ1OWEyNzFhY2M2NzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+JUE5aU1hSeJAHF6UVbPGlmVlbC n8r2NODNdIE9E1FFvDyovaqwgNH1JkA39JyjaumoogfDFS/A8ibDnonLUldCnrPE /Nn3a5gXU6sSIbnHJEBEQyFpOEmehJ5uAuqxMlv4FXlyklM0F8CnUFl8s2WjvoTs A9sJtle1KHT3yiuTtFSKsOu0IwBw6jVdCg3D6gqk9BD/MmE8adClPKLPnadm5Xik jaFUlnIiBogqy+a18FsrRnVYDmKvQDeou2yB30Qvvk/1KdAcnf3ywdvfVTfckpe6 0H5x0Ac80RJFzAy8e0KoTB12duYQwXSqZ+5XxR7kg70QAgwTiTm/hozQnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1g5PonLF8xoBEXOoFFmicazGciMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3T1MsZn V1/Q3y5jJbQjmleGWMMfGRo3Cf3GEl8PmdBk8fIT6vaPK40wYz6+VPqjNZNszuLh 0rwrruS5XkhOWYEkkV5z6n+JgqPcPlXJ8n8ycaOfNEkbkQI7pBMSBUQ8nZSuKChC VwmZuzcwzjBzPH7Dg3GxMSsaH6fht0VNBbvYFQkRpJUPs0huepygJfqaiaIa43GI WTq6zgky2gBYj8+XHH3SuBvsUFMQ5+W9myccvqLktC1MlJNDb2xaI7J8Qg0DN2PQ m5aIRCt/mLX4kRvRHJ7qUsou/UdKokATaJk1eKB5cH+4fNgPC+DpvVECa2kCm6Iv yxAP1zWT4uS8IA== -----END CERTIFICATE-----Generated at Sat Jun 28 22:45:26 2025 by rpki-client