$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: YicoMuUgmYgOW309Eo83QJlY5D0f0EdMgyHzRBdpTKY= Subject key identifier: B9:8A:E8:D5:B6:1D:C1:01:2B:73:8C:31:3B:37:10:5E:D3:F0:E9:FE Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 019E1EA3158AA223500B6665409A35685BEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 1599 Signing time: Wed 13 May 2026 00:01:04 +0000 Manifest this update: Wed 13 May 2026 00:01:04 +0000 Manifest next update: Thu 14 May 2026 00:01:04 +0000 Files and hashes: 1: 76SUa31tX84MMYV-5pJtl_RzfBs.roa (hash: VLwC/xTHEJsdM4oEbJXYgc2X6KgnqYrx1To2cyFfsks=) 2: EQyiKX_7-Wpxq09KJocOiD7iVtg.roa (hash: xSHc+sset4mHHx5Au4SFQGD7gPC3y5Gef/MK9s8Iy4Y=) 3: IqvcRngzlVCtX_OA-70dAZLFdA8.roa (hash: aY3f5nvXyrfMF4R4lR/AbKv7PaJsmbQ5UoA1+i35Mzo=) 4: J6RUNAmoogv7zgMLcCOwk_cTSbw.roa (hash: g+8OdmE2eYFbsqzauS740Ewhw4IU7T/U1OEITUeBDc4=) 5: JYSE_79beIVH7AyGREwVYhRCyTY.roa (hash: l3baob39qaOOP1HD2nUjVfG8gYEyw7b1MgZubnhYeyE=) 6: LlTZm9TRn88VWou6DKeJrZdQgvU.roa (hash: GTQExs7+EOPrcDE70ZQ1HXMC0yUw4J5W6WVSW6HNDyE=) 7: O-CoG-YF7L6hwLeg3uly4Kp8B_8.roa (hash: 5oJU3WpHWPREk+VpJtji8wlNog6GMZ8hQeRSHT6lLd0=) 8: U2Yc5skQvePijZYsWlFophc_BK4.roa (hash: gMfZmKyaceaZgToU/WPMcQ0QQiGVzdWPQc5qXxtNrpw=) 9: WMiYfXfaecilSx0Cw11AX6GHoD0.roa (hash: tfANuqYEsqBC9djOQlOpVgZbpkAcWNv/SHctNZh0ths=) 10: YLu7TqT2RSl1_BNUUxUt12edQaA.roa (hash: paF/KBHEk0JOZSKhbJ4oeNoOGAfMADsXOpIZVHL7RNY=) 11: aQ88EoiiajhYjpR8X9YSC2Itufk.roa (hash: 6ocE7SCCa9OYWlhJzkmE5ODfDYPaMsMSbmqpzzbM+qk=) 12: bKeksz2w4uplaCPFhGd2ZRXJ3L4.roa (hash: V3eyRTLr62Od4hxpOj09Jq4Nekd36hyzHMFde1nQKHM=) 13: cNrzpnZVR-vdGnfMmjiDxUQw38w.roa (hash: jDSBudPBssvuTBaPnXNJhRgSYVM03+9BoPvraHbjsUs=) 14: hOWBX1aqOOkBBDPmSf04HK0FDdQ.roa (hash: TNZ6xI5xHtE38+sW0p4MVYqN1AjK+nGsdspXM65hmqg=) 15: hpQK8Ct69QedB3MH-Zduh7fwfI0.roa (hash: tMKgnvO9EBwmVGsim8vR529voYsTaPvcU9t25lxh9c8=) 16: lE9bYROvMOgfAcJMOq1buSFu5Oc.roa (hash: uM/UbNoBafoN3u4NQaCJ1CV+W48Aj8GUgTcEvh/o4kw=) 17: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: J+AO73DuHT8RswbV+2dNy0+QTBG7GZAotLHRrUdBZ5s=) 18: sp2MMK9YRqm89c-c8Nk0zqZ0hl0.roa (hash: 4AR1dpezwOfRG52yq/YaU//Ei5bTQmeOkpGOb7/yTjo=) 19: xSn7ixxST4P6sLWhFGPF1kgNAlE.roa (hash: 6Zt2rctbn7D8+hho9smzj15xitIYg/ED9s7TTA4i/jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:a3:15:8a:a2:23:50:0b:66:65:40:9a:35:68:5b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: May 13 00:01:04 2026 GMT Not After : May 14 00:01:04 2026 GMT Subject: CN=b98ae8d5b61dc1012b738c313b37105ed3f0e9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f7:63:4d:ca:a7:36:bc:e8:9d:0f:7e:c7:72: c4:32:91:64:0f:8f:61:61:f4:89:60:39:82:36:ac: 1c:90:3f:f1:3b:49:64:01:61:2a:67:60:b2:d5:02: 89:bd:40:fb:0a:2b:42:88:1c:db:2c:7d:58:a4:8a: a1:43:d8:af:94:55:28:5d:9b:8e:86:d8:26:f1:05: 0d:2a:71:9f:a2:0d:d4:1d:4e:4b:d0:e8:e3:63:b5: 96:61:40:93:98:54:80:d3:5e:4f:76:67:b8:7c:95: c4:51:80:68:ca:c6:8d:4b:e5:e6:ee:3d:a3:4c:c5: c3:f9:da:6b:da:90:d9:0f:0a:e7:be:9e:38:40:62: 86:23:f7:00:f1:63:3d:17:0a:92:25:c3:5e:7c:55: 4e:68:44:9a:9b:2c:ca:5b:15:fd:e8:40:ad:8d:80: dd:ee:2e:6b:22:09:87:b7:9e:d5:4e:80:bc:3f:9c: 37:0f:dd:24:45:73:4c:bf:3a:88:8f:bf:c6:63:23: 33:1a:2b:6c:a7:ab:27:f5:10:da:f0:d4:45:aa:e6: db:d3:7e:6f:33:d9:9a:20:3e:3a:82:3a:3d:b9:83: a9:a1:38:02:95:0a:da:d2:c9:a0:f5:3c:f7:4f:0b: ce:b0:cc:08:ee:64:10:cb:29:a6:76:ce:ea:82:aa: 1f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8A:E8:D5:B6:1D:C1:01:2B:73:8C:31:3B:37:10:5E:D3:F0:E9:FE X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b3:30:0e:05:72:86:bc:9c:09:09:66:44:44:58:47:a0:40: 82:c4:8a:7b:08:7c:fe:ef:ec:86:52:45:40:4e:4e:40:97:7c: 2a:90:85:1f:b7:57:97:33:59:1f:9e:be:d8:49:7b:05:51:7e: 1d:f1:d3:8a:fd:ab:74:e0:e4:7e:1b:34:0a:3b:6b:6a:02:cb: f4:7a:34:15:d9:06:66:f1:34:cb:65:49:30:48:6d:1a:87:9e: 9c:da:01:71:c2:6f:b3:39:a1:53:4a:1b:10:fd:8a:3f:9e:4d: 1c:4d:59:02:c1:23:f8:d1:d4:53:30:52:76:52:dc:ab:1d:8d: 0a:e9:a4:9b:9e:5d:d1:f0:a1:6c:93:b8:5a:a8:f5:8f:8f:33: 75:53:ea:29:d2:1a:4f:3a:cd:82:a8:1b:be:d1:1c:11:54:e4: a3:ee:46:46:e6:aa:b8:99:b1:6b:b9:ab:97:40:ae:6d:b9:5c: ba:08:a8:35:96:a7:28:17:51:15:7a:03:3f:e5:7e:0b:49:48: 39:d5:e5:38:bd:49:f4:b6:f6:be:71:03:2c:9b:ab:0f:75:ea: 7f:a2:87:8b:05:6d:bd:51:07:40:7e:24:41:7a:cd:a5:6a:5f: 5f:cc:b4:c2:50:74:ba:e3:2f:26:9c:a0:6f:82:d8:bf:64:37: 9a:eb:9f:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eoxWKoiNQC2ZlQJo1aFvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjYwNTEzMDAwMTA0WhcNMjYwNTE0MDAwMTA0WjAzMTEwLwYDVQQD EyhiOThhZThkNWI2MWRjMTAxMmI3MzhjMzEzYjM3MTA1ZWQzZjBlOWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPdjTcqnNrzonQ9+x3LEMpFkD49h YfSJYDmCNqwckD/xO0lkAWEqZ2Cy1QKJvUD7CitCiBzbLH1YpIqhQ9ivlFUoXZuO htgm8QUNKnGfog3UHU5L0OjjY7WWYUCTmFSA015Pdme4fJXEUYBoysaNS+Xm7j2j TMXD+dpr2pDZDwrnvp44QGKGI/cA8WM9FwqSJcNefFVOaESamyzKWxX96ECtjYDd 7i5rIgmHt57VToC8P5w3D90kRXNMvzqIj7/GYyMzGitsp6sn9RDa8NRFqubb035v M9maID46gjo9uYOpoTgClQra0smg9Tz3TwvOsMwI7mQQyymmds7qgqof+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmK6NW2HcEBK3OMMTs3EF7T8On+MB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrMwDgVy hrycCQlmRERYR6BAgsSKewh8/u/shlJFQE5OQJd8KpCFH7dXlzNZH56+2El7BVF+ HfHTiv2rdODkfhs0CjtragLL9Ho0FdkGZvE0y2VJMEhtGoeenNoBccJvszmhU0ob EP2KP55NHE1ZAsEj+NHUUzBSdlLcqx2NCumkm55d0fChbJO4Wqj1j48zdVPqKdIa TzrNgqgbvtEcEVTko+5GRuaquJmxa7mrl0CubblcugioNZanKBdRFXoDP+V+C0lI OdXlOL1J9Lb2vnEDLJurD3Xqf6KHiwVtvVEHQH4kQXrNpWpfX8y0wlB0uuMvJpyg b4LYv2Q3muufHg== -----END CERTIFICATE-----Generated at Wed May 13 03:44:12 2026 by rpki-client