$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: DEgfVcPTR/ivT+nc/mdTHyHzKLJY5ZGfyZcsAHFiV8k= Subject key identifier: 11:83:3A:8D:F1:A0:A5:B1:55:69:37:53:33:3D:0B:DF:C3:A6:5A:31 Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 0199FB4582D06783AFF9A0BA20749F2C59A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 1373 Signing time: Sun 19 Oct 2025 07:01:00 +0000 Manifest this update: Sun 19 Oct 2025 07:01:00 +0000 Manifest next update: Mon 20 Oct 2025 07:01:00 +0000 Files and hashes: 1: 5sGdFc_1Zid-hBM7mInO1hEaSqE.roa (hash: 7bwxpMhgqxIjIH4tFXJcxeBHbkei+D+EpzaJzJaJhv4=) 2: 6Fi2x6-MOtr7a_1fOFW30-_zrig.roa (hash: 2IN+YE3CMZAPD+uK8qRy2OV0W4x3OCpS/TO8CF/76aw=) 3: 9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa (hash: 3TIv5c08KCsDbJFNq+WTb4IZP4ym0IZZX1CdjQGX0PE=) 4: AX86DsLSoXFRNkCv2pCL1_EPY5g.roa (hash: GQZE5H1ow5zCrtLramjrChLPwPl7V1YC5vmeyk2QXn0=) 5: GNoD4VldON0fRQOsfwgnZbDlm30.roa (hash: blIx8D3DZyU+DHXOsnwJBmGsut7rhQArkG8R7KyjOw4=) 6: HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa (hash: oR/Hq9WxPGajOgdVUFWze40RSUPdBlPl+1xVQoSJxOo=) 7: MJg7tjZ2YS5zYW2u8iw1g2oqMU0.roa (hash: X+QXFsSzhee86ausU4aiKnbqtRl/bpo3u3VYz3YOas0=) 8: Vfz_XI34h0n1ABRWW0I8TbCl2Ks.roa (hash: 5McLJpTXPeaX6NxvYmzQe8oLwKFov9vgW9zM/HLDWFk=) 9: Wa5j5jUmUSd1vG30ktnaqL3uHDI.roa (hash: MKz77Ewok0vz5vQRzaJNzC9kTJYYYuPm776x717x2z4=) 10: d7zRd6MptHTWJQgyfw6tgdDV_9A.roa (hash: oELlLX+h376OqFFHKdf5s0R3SvC5xRLsvCJ5JL8+PK4=) 11: eaT289O4FWfLSNPSCfCVS50JLdA.roa (hash: 6Ydw1aV3kTAxyagbcZrClYDAIJBPqjkvUlwgRk8W+YE=) 12: nZaqbX4b0xd3UwU7l5sM7yoGBBo.roa (hash: OWNumqHHHp/8gdqH67NYyJSDu9rO3vPuBbgXU7s9BgM=) 13: oZv7gBkqKHSk-77MXrW1ab6ETYI.roa (hash: +B5mLIxH7s3pabVcCwGAo38v71wCcUaCQewhunxJ/mg=) 14: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: QalDs272G7dePY6tlA0pk6OtGP7MHCUIOQF6f98j/bU=) 15: r4c3fyT5mEicBTcplHGkCHGu1DU.roa (hash: TN1KtYP5BnSUVtiFLbJe3+UWbigxirFk6LMWIHk9G6A=) 16: vsZmI73j1l0F5LUFB41ZYaQs_Cs.roa (hash: nZ33GCfbpIYKPXjqivfkgFha5BmKCs/riEjE4yHbJng=) 17: w6--t_5wz0JDy2YG6__bLL736lk.roa (hash: kokGrC/YWrlNHabiNp1qc8zjZ2tpu6Xwv3gwVAl+cdY=) 18: xaaOuiTsUCwOo5hhwkfZiBvLcJ8.roa (hash: Iz6qbI3mhpm0/uLd5TTzINoKeImEElZtBrUi0Q8Z2Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:45:82:d0:67:83:af:f9:a0:ba:20:74:9f:2c:59:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Oct 19 07:01:00 2025 GMT Not After : Oct 20 07:01:00 2025 GMT Subject: CN=11833a8df1a0a5b155693753333d0bdfc3a65a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:f6:59:5a:03:1b:6c:88:5f:15:53:36:81: 73:0e:f3:38:e5:45:a7:20:1c:97:98:fa:87:7f:16: 8a:ae:ce:a4:8a:16:91:4d:b6:9b:e8:f0:59:43:4c: 51:c5:b9:a8:d4:83:89:e2:ef:52:3f:f5:96:3e:c4: c4:e0:3e:04:d3:a2:dd:c8:7c:7c:8e:4f:e2:e6:f6: 2d:e0:4e:f9:45:6b:fa:2f:2a:ce:6d:84:61:e3:49: 9b:e8:bf:c1:81:90:ba:ce:02:21:fa:a5:f8:ca:01: 65:ee:3a:76:5f:7a:9b:96:c5:5e:d7:39:5e:14:aa: ad:7e:db:0d:04:ea:e1:0e:c8:84:d5:b7:45:f4:6a: de:ec:ca:92:74:6a:0a:02:4d:61:ca:09:b6:7a:13: dd:b0:0d:3f:5b:60:71:d4:3b:36:b1:38:f6:30:52: 01:1c:61:2f:98:67:90:89:04:3b:29:d8:96:c3:95: f5:6a:b5:62:8c:cf:56:11:82:62:71:62:e6:3a:6e: 4d:e8:4b:bd:70:07:22:0b:9c:e6:77:7b:40:a9:96: 20:e0:e6:fb:a9:0a:83:92:62:bd:db:e6:fc:52:c7: fa:a9:80:10:92:8e:f1:0a:3b:53:b3:ca:91:0d:b8: f4:e9:bf:be:48:0f:0b:ce:43:6d:7e:c4:f8:f0:83: f4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:83:3A:8D:F1:A0:A5:B1:55:69:37:53:33:3D:0B:DF:C3:A6:5A:31 X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b6:ea:11:2b:42:ad:1b:98:56:4c:9d:35:0a:af:e0:3d:33: 63:ab:68:c8:11:a6:36:6c:21:88:22:ea:7a:1d:89:34:7c:6b: 45:5b:79:3e:59:57:9f:f9:5a:0b:9f:18:4e:c6:9b:cf:04:82: 5f:17:3e:4f:fe:b7:95:f0:43:61:e4:84:08:bb:fb:0a:de:5f: c1:b5:a2:5a:03:fa:04:97:89:74:b3:3e:b9:f4:a4:bc:ed:01: 47:48:fe:49:d5:e0:1e:bb:ca:19:0a:1d:ea:ca:e1:d3:b0:ee: b9:d4:8c:e9:73:9e:ea:8b:df:59:1b:9a:f4:aa:01:91:8f:ab: d3:db:42:fc:fa:6c:8e:9d:fe:a1:57:84:ec:05:a2:33:7a:f9: 86:01:a6:6c:9a:98:d8:79:d6:6f:f3:ba:8c:8c:b2:21:35:4c: 4b:0b:e1:f9:b4:9d:93:bc:f6:74:ab:5b:13:5d:03:c3:95:be: c7:32:2f:e4:31:bc:aa:2f:24:32:36:0b:0f:42:9c:1d:f4:03: 8b:d4:6d:1c:e4:70:19:7a:17:ad:3a:ac:90:45:78:e0:b8:a7: 8e:d1:b8:76:63:1f:ff:28:1e:65:45:dd:0b:d5:a7:ca:5a:8e: 03:88:15:4c:ad:16:64:57:54:da:f3:81:40:b1:26:dd:49:40: 08:da:4d:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7RYLQZ4Ov+aC6IHSfLFmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjUxMDE5MDcwMTAwWhcNMjUxMDIwMDcwMTAwWjAzMTEwLwYDVQQD EygxMTgzM2E4ZGYxYTBhNWIxNTU2OTM3NTMzMzNkMGJkZmMzYTY1YTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLn2WVoDG2yIXxVTNoFzDvM45UWn IByXmPqHfxaKrs6kihaRTbab6PBZQ0xRxbmo1IOJ4u9SP/WWPsTE4D4E06LdyHx8 jk/i5vYt4E75RWv6LyrObYRh40mb6L/BgZC6zgIh+qX4ygFl7jp2X3qblsVe1zle FKqtftsNBOrhDsiE1bdF9Gre7MqSdGoKAk1hygm2ehPdsA0/W2Bx1Ds2sTj2MFIB HGEvmGeQiQQ7KdiWw5X1arVijM9WEYJicWLmOm5N6Eu9cAciC5zmd3tAqZYg4Ob7 qQqDkmK92+b8Usf6qYAQko7xCjtTs8qRDbj06b++SA8LzkNtfsT48IP0vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGDOo3xoKWxVWk3UzM9C9/DploxMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrbqEStC rRuYVkydNQqv4D0zY6toyBGmNmwhiCLqeh2JNHxrRVt5PllXn/laC58YTsabzwSC Xxc+T/63lfBDYeSECLv7Ct5fwbWiWgP6BJeJdLM+ufSkvO0BR0j+SdXgHrvKGQod 6srh07DuudSM6XOe6ovfWRua9KoBkY+r09tC/Ppsjp3+oVeE7AWiM3r5hgGmbJqY 2HnWb/O6jIyyITVMSwvh+bSdk7z2dKtbE10Dw5W+xzIv5DG8qi8kMjYLD0KcHfQD i9RtHORwGXoXrTqskEV44LinjtG4dmMf/ygeZUXdC9WnylqOA4gVTK0WZFdU2vOB QLEm3UlACNpNJw== -----END CERTIFICATE-----Generated at Sun Oct 19 15:32:29 2025 by rpki-client