$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: 7wOSpe3PkCtwzhdpaml3OIS7KplJSLtJ528nXGGoiQ4= Subject key identifier: 45:D9:52:54:32:D6:CF:B1:9C:63:EE:02:F4:B2:E9:12:3E:61:E4:DB Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 01A0D7CCDAC7AB2F821060608665D7CA7B0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 1702 Signing time: Fri 25 Sep 2026 09:02:01 +0000 Manifest this update: Fri 25 Sep 2026 09:02:01 +0000 Manifest next update: Sat 26 Sep 2026 09:02:01 +0000 Files and hashes: 1: 76SUa31tX84MMYV-5pJtl_RzfBs.roa (hash: VLwC/xTHEJsdM4oEbJXYgc2X6KgnqYrx1To2cyFfsks=) 2: EQyiKX_7-Wpxq09KJocOiD7iVtg.roa (hash: xSHc+sset4mHHx5Au4SFQGD7gPC3y5Gef/MK9s8Iy4Y=) 3: IqvcRngzlVCtX_OA-70dAZLFdA8.roa (hash: aY3f5nvXyrfMF4R4lR/AbKv7PaJsmbQ5UoA1+i35Mzo=) 4: J6RUNAmoogv7zgMLcCOwk_cTSbw.roa (hash: g+8OdmE2eYFbsqzauS740Ewhw4IU7T/U1OEITUeBDc4=) 5: JYSE_79beIVH7AyGREwVYhRCyTY.roa (hash: l3baob39qaOOP1HD2nUjVfG8gYEyw7b1MgZubnhYeyE=) 6: LlTZm9TRn88VWou6DKeJrZdQgvU.roa (hash: GTQExs7+EOPrcDE70ZQ1HXMC0yUw4J5W6WVSW6HNDyE=) 7: O-CoG-YF7L6hwLeg3uly4Kp8B_8.roa (hash: 5oJU3WpHWPREk+VpJtji8wlNog6GMZ8hQeRSHT6lLd0=) 8: U2Yc5skQvePijZYsWlFophc_BK4.roa (hash: gMfZmKyaceaZgToU/WPMcQ0QQiGVzdWPQc5qXxtNrpw=) 9: WMiYfXfaecilSx0Cw11AX6GHoD0.roa (hash: tfANuqYEsqBC9djOQlOpVgZbpkAcWNv/SHctNZh0ths=) 10: YLu7TqT2RSl1_BNUUxUt12edQaA.roa (hash: paF/KBHEk0JOZSKhbJ4oeNoOGAfMADsXOpIZVHL7RNY=) 11: aQ88EoiiajhYjpR8X9YSC2Itufk.roa (hash: 6ocE7SCCa9OYWlhJzkmE5ODfDYPaMsMSbmqpzzbM+qk=) 12: bKeksz2w4uplaCPFhGd2ZRXJ3L4.roa (hash: V3eyRTLr62Od4hxpOj09Jq4Nekd36hyzHMFde1nQKHM=) 13: cNrzpnZVR-vdGnfMmjiDxUQw38w.roa (hash: jDSBudPBssvuTBaPnXNJhRgSYVM03+9BoPvraHbjsUs=) 14: hOWBX1aqOOkBBDPmSf04HK0FDdQ.roa (hash: TNZ6xI5xHtE38+sW0p4MVYqN1AjK+nGsdspXM65hmqg=) 15: hpQK8Ct69QedB3MH-Zduh7fwfI0.roa (hash: tMKgnvO9EBwmVGsim8vR529voYsTaPvcU9t25lxh9c8=) 16: lE9bYROvMOgfAcJMOq1buSFu5Oc.roa (hash: uM/UbNoBafoN3u4NQaCJ1CV+W48Aj8GUgTcEvh/o4kw=) 17: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: O7b7vzXA6KVVC1TaYbJNMtQ54xeJerp5Jsg/lZhi/HE=) 18: sp2MMK9YRqm89c-c8Nk0zqZ0hl0.roa (hash: 4AR1dpezwOfRG52yq/YaU//Ei5bTQmeOkpGOb7/yTjo=) 19: xSn7ixxST4P6sLWhFGPF1kgNAlE.roa (hash: 6Zt2rctbn7D8+hho9smzj15xitIYg/ED9s7TTA4i/jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d7:cc:da:c7:ab:2f:82:10:60:60:86:65:d7:ca:7b:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Sep 25 09:02:01 2026 GMT Not After : Sep 26 09:02:01 2026 GMT Subject: CN=45d9525432d6cfb19c63ee02f4b2e9123e61e4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:46:d6:ca:eb:fe:7b:8e:6f:2f:c4:d0:3f:a2: b3:02:a5:7d:83:8d:cb:49:50:5b:b9:06:12:6d:e9: 5f:ce:6b:6d:24:5d:a9:d3:ec:74:39:d7:66:92:da: ef:86:60:d3:43:c8:7a:31:b9:d9:21:0c:32:72:f1: c1:53:cf:14:72:d0:92:b4:86:62:8f:e1:39:66:30: 9a:09:c8:75:36:52:df:0c:d6:73:4e:5c:3e:1e:ef: c4:ff:61:a8:59:21:9e:0c:49:cd:74:5c:6b:05:62: f2:aa:d0:3f:03:9b:8d:ef:b3:43:dc:cd:46:e9:d7: b3:7b:4e:e0:8a:2f:30:52:8a:3d:3e:1f:85:9c:3e: dc:a3:be:c5:f3:ee:49:c9:34:eb:19:26:4a:44:ba: ce:eb:a3:f5:8f:30:8a:35:1f:0e:21:7b:6a:90:68: 1c:e7:76:25:66:91:0a:51:23:42:55:be:98:3d:83: 73:ed:f5:eb:47:35:8b:1f:4a:be:79:dd:7d:8b:d2: 45:4e:7a:2c:e4:d6:ad:58:2f:cc:ff:24:d7:79:ea: 22:b8:e1:21:bf:9a:fc:38:1c:f5:bb:86:65:36:07: 97:07:67:1b:e1:82:46:c1:4b:37:68:da:33:f8:86: 52:92:ef:3b:90:98:17:6d:94:31:4f:c1:3f:f6:84: 70:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D9:52:54:32:D6:CF:B1:9C:63:EE:02:F4:B2:E9:12:3E:61:E4:DB X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:f0:6e:32:13:5d:50:e9:bd:d3:8f:bd:79:5e:c7:42:dc:3f: 07:43:e8:43:be:5b:0b:b8:60:2e:af:d2:b0:d9:4d:f8:e1:09: 1a:81:26:71:ad:4a:6e:7a:6c:31:d6:04:ee:0d:89:f9:78:ed: b3:d0:47:61:8c:ca:85:19:10:3f:ad:bd:e4:14:8c:4a:e9:67: 1c:d6:8f:1e:43:22:24:b5:7b:98:4a:da:2d:00:5d:1d:c6:f2: ee:24:a6:16:02:2a:3b:55:a2:7f:17:44:1e:bd:29:b3:94:ac: 75:56:1e:f7:60:62:34:bf:63:df:65:13:64:b0:2c:b4:7b:88: 4a:a0:4a:96:02:85:62:1a:c6:78:c4:47:f0:68:06:14:a8:f0: 1a:bc:21:52:9f:c7:46:9b:c7:43:33:b2:78:c1:3a:be:ad:aa: fb:10:9b:3e:0b:d4:34:22:9c:6a:2c:65:79:26:35:4a:27:f8: 78:a8:6a:ee:78:74:ec:de:21:db:a4:f8:22:7b:db:bd:fd:b0: 3f:a5:3a:12:63:e7:e2:2f:e0:cd:b2:a8:d1:8c:03:93:df:12: b4:b0:a0:4a:b8:cf:4b:cc:84:fb:67:b1:f1:5c:0f:c5:b2:6d: d5:a1:2b:3f:1d:14:c6:5e:1e:f3:79:1a:9f:0a:6d:d1:84:6b: c0:33:7c:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDXzNrHqy+CEGBghmXXynsOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjYwOTI1MDkwMjAxWhcNMjYwOTI2MDkwMjAxWjAzMTEwLwYDVQQD Eyg0NWQ5NTI1NDMyZDZjZmIxOWM2M2VlMDJmNGIyZTkxMjNlNjFlNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0bWyuv+e45vL8TQP6KzAqV9g43L SVBbuQYSbelfzmttJF2p0+x0OddmktrvhmDTQ8h6MbnZIQwycvHBU88UctCStIZi j+E5ZjCaCch1NlLfDNZzTlw+Hu/E/2GoWSGeDEnNdFxrBWLyqtA/A5uN77ND3M1G 6deze07gii8wUoo9Ph+FnD7co77F8+5JyTTrGSZKRLrO66P1jzCKNR8OIXtqkGgc 53YlZpEKUSNCVb6YPYNz7fXrRzWLH0q+ed19i9JFTnos5NatWC/M/yTXeeoiuOEh v5r8OBz1u4ZlNgeXB2cb4YJGwUs3aNoz+IZSku87kJgXbZQxT8E/9oRwGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXZUlQy1s+xnGPuAvSy6RI+YeTbMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfBuMhNd UOm904+9eV7HQtw/B0PoQ75bC7hgLq/SsNlN+OEJGoEmca1KbnpsMdYE7g2J+Xjt s9BHYYzKhRkQP6295BSMSulnHNaPHkMiJLV7mEraLQBdHcby7iSmFgIqO1WifxdE Hr0ps5SsdVYe92BiNL9j32UTZLAstHuISqBKlgKFYhrGeMRH8GgGFKjwGrwhUp/H RpvHQzOyeME6vq2q+xCbPgvUNCKcaixleSY1Sif4eKhq7nh07N4h26T4Invbvf2w P6U6EmPn4i/gzbKo0YwDk98StLCgSrjPS8yE+2ex8VwPxbJt1aErPx0Uxl4e83ka nwpt0YRrwDN8zg== -----END CERTIFICATE-----Generated at Fri Sep 25 12:50:42 2026 by rpki-client