$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: q9/wsj9wfmjn8sk/m0uS6sjbFZIXAjNWNHyjMxYut7s= Subject key identifier: 25:75:F5:B8:91:CB:4E:8E:80:97:66:18:42:9C:8D:A7:A8:1E:7A:7C Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 0196B5227B99549D61EE36B516664D5CA53A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 11C0 Signing time: Fri 09 May 2025 13:00:57 +0000 Manifest this update: Fri 09 May 2025 13:00:57 +0000 Manifest next update: Sat 10 May 2025 13:00:57 +0000 Files and hashes: 1: 6Fi2x6-MOtr7a_1fOFW30-_zrig.roa (hash: 2IN+YE3CMZAPD+uK8qRy2OV0W4x3OCpS/TO8CF/76aw=) 2: 9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa (hash: 3TIv5c08KCsDbJFNq+WTb4IZP4ym0IZZX1CdjQGX0PE=) 3: AX86DsLSoXFRNkCv2pCL1_EPY5g.roa (hash: GQZE5H1ow5zCrtLramjrChLPwPl7V1YC5vmeyk2QXn0=) 4: GNoD4VldON0fRQOsfwgnZbDlm30.roa (hash: blIx8D3DZyU+DHXOsnwJBmGsut7rhQArkG8R7KyjOw4=) 5: HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa (hash: oR/Hq9WxPGajOgdVUFWze40RSUPdBlPl+1xVQoSJxOo=) 6: MJg7tjZ2YS5zYW2u8iw1g2oqMU0.roa (hash: X+QXFsSzhee86ausU4aiKnbqtRl/bpo3u3VYz3YOas0=) 7: Vfz_XI34h0n1ABRWW0I8TbCl2Ks.roa (hash: 5McLJpTXPeaX6NxvYmzQe8oLwKFov9vgW9zM/HLDWFk=) 8: Wa5j5jUmUSd1vG30ktnaqL3uHDI.roa (hash: MKz77Ewok0vz5vQRzaJNzC9kTJYYYuPm776x717x2z4=) 9: d7zRd6MptHTWJQgyfw6tgdDV_9A.roa (hash: oELlLX+h376OqFFHKdf5s0R3SvC5xRLsvCJ5JL8+PK4=) 10: eaT289O4FWfLSNPSCfCVS50JLdA.roa (hash: 6Ydw1aV3kTAxyagbcZrClYDAIJBPqjkvUlwgRk8W+YE=) 11: nZaqbX4b0xd3UwU7l5sM7yoGBBo.roa (hash: OWNumqHHHp/8gdqH67NYyJSDu9rO3vPuBbgXU7s9BgM=) 12: oZv7gBkqKHSk-77MXrW1ab6ETYI.roa (hash: +B5mLIxH7s3pabVcCwGAo38v71wCcUaCQewhunxJ/mg=) 13: qmwOcaFnk8hvjikjG2nZoBfPZlE.roa (hash: x0fSVCqcFPtWRIm16w0UZsIJ/36VDiSkIR5lVr0ml4o=) 14: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: /MiB/mEYwaPWRP7nJWxYMr6YevOKIt/HbKKwOc+t2Nk=) 15: r4c3fyT5mEicBTcplHGkCHGu1DU.roa (hash: TN1KtYP5BnSUVtiFLbJe3+UWbigxirFk6LMWIHk9G6A=) 16: vsZmI73j1l0F5LUFB41ZYaQs_Cs.roa (hash: nZ33GCfbpIYKPXjqivfkgFha5BmKCs/riEjE4yHbJng=) 17: w6--t_5wz0JDy2YG6__bLL736lk.roa (hash: kokGrC/YWrlNHabiNp1qc8zjZ2tpu6Xwv3gwVAl+cdY=) 18: xaaOuiTsUCwOo5hhwkfZiBvLcJ8.roa (hash: Iz6qbI3mhpm0/uLd5TTzINoKeImEElZtBrUi0Q8Z2Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b5:22:7b:99:54:9d:61:ee:36:b5:16:66:4d:5c:a5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: May 9 13:00:57 2025 GMT Not After : May 10 13:00:57 2025 GMT Subject: CN=2575f5b891cb4e8e80976618429c8da7a81e7a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d8:f9:1b:ca:94:82:d2:ef:6e:37:8d:20:87: 1e:8c:41:7d:07:3c:62:82:f5:ae:d7:31:66:b5:d7: bf:a4:75:3c:49:6a:7f:20:e3:0a:f7:62:c7:fb:6a: a0:73:21:ff:79:2c:88:58:17:22:0b:ea:1a:3b:79: 6c:90:4f:87:1b:3e:50:e2:4b:9e:9d:f4:83:4a:2d: f9:1c:cf:8e:e0:82:84:f3:2b:1f:25:39:4c:5d:60: 73:6f:4f:ed:a8:17:0b:ed:6f:34:a5:b3:d3:ce:5e: b3:ca:e0:ec:aa:e7:e4:6d:a0:e4:0b:e0:dc:b8:6f: b7:42:1a:ff:80:ff:28:57:e1:49:a9:bd:5e:1d:d0: 21:65:7c:27:98:2b:7a:1b:bf:6c:a5:91:33:ff:92: ef:06:37:7f:8c:b7:e8:12:03:b0:b5:48:ce:bb:7f: ee:6a:ea:c8:51:1c:a1:53:2d:a8:59:55:4d:85:dc: d0:09:35:60:1c:2c:7a:26:3d:77:ed:6c:e0:22:d3: 7e:27:e6:ea:e3:3e:46:51:61:64:1d:72:0c:fd:cb: 35:3b:84:0e:53:ab:98:a0:2c:0f:68:1a:a6:73:92: 12:05:36:a7:9b:cb:fb:6b:83:6d:28:72:52:1e:b0: 6f:d0:9b:f4:87:e0:85:ff:51:e0:57:2f:cd:bf:7f: 01:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:75:F5:B8:91:CB:4E:8E:80:97:66:18:42:9C:8D:A7:A8:1E:7A:7C X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:20:3c:8d:3a:db:64:5c:ac:bd:c9:a1:86:10:d8:dd:80:80: 99:80:80:a1:e5:21:c4:88:58:5b:17:4e:88:8c:5a:57:ff:e3: 6d:e4:5b:28:7c:c8:00:36:be:44:b5:bb:a4:20:40:df:3e:49: 56:3d:af:55:3e:34:58:6a:8d:49:20:f7:8b:98:92:56:17:e4: 39:36:11:7d:7c:be:28:ea:e0:c2:4d:22:21:b9:3b:86:c1:89: 7e:5b:40:2a:c3:9c:70:76:2d:1d:d1:4c:4e:6d:de:29:1f:22: ab:69:b6:0b:a1:06:6a:f6:79:2d:36:c8:c4:49:66:28:69:c9: 6a:a6:02:d4:d6:a9:8a:59:96:fc:53:c5:b0:9c:7e:f0:72:4c: 1c:5f:38:ef:14:06:d1:40:ac:73:e7:34:d7:d9:b3:60:c9:9e: 4d:3f:c1:48:e0:7a:99:26:49:bb:a6:c9:d4:ad:47:45:85:59: af:92:63:3e:27:7a:62:4d:d1:c9:ff:49:d8:e4:c3:b1:89:9b: 1f:a2:e7:8e:01:f8:74:65:83:02:60:e2:ce:08:24:3f:24:dd: bb:c1:bb:b7:37:30:a5:81:96:13:29:c9:40:62:6b:74:61:aa: f3:84:00:47:a5:c0:bb:4e:d4:2f:8b:0d:dc:75:0e:ec:db:3b: 35:78:f7:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa1InuZVJ1h7ja1FmZNXKU6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjUwNTA5MTMwMDU3WhcNMjUwNTEwMTMwMDU3WjAzMTEwLwYDVQQD EygyNTc1ZjViODkxY2I0ZThlODA5NzY2MTg0MjljOGRhN2E4MWU3YTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdj5G8qUgtLvbjeNIIcejEF9Bzxi gvWu1zFmtde/pHU8SWp/IOMK92LH+2qgcyH/eSyIWBciC+oaO3lskE+HGz5Q4kue nfSDSi35HM+O4IKE8ysfJTlMXWBzb0/tqBcL7W80pbPTzl6zyuDsqufkbaDkC+Dc uG+3Qhr/gP8oV+FJqb1eHdAhZXwnmCt6G79spZEz/5LvBjd/jLfoEgOwtUjOu3/u aurIURyhUy2oWVVNhdzQCTVgHCx6Jj137WzgItN+J+bq4z5GUWFkHXIM/cs1O4QO U6uYoCwPaBqmc5ISBTanm8v7a4NtKHJSHrBv0Jv0h+CF/1HgVy/Nv38BuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCV19biRy06OgJdmGEKcjaeoHnp8MB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCA8jTrb ZFysvcmhhhDY3YCAmYCAoeUhxIhYWxdOiIxaV//jbeRbKHzIADa+RLW7pCBA3z5J Vj2vVT40WGqNSSD3i5iSVhfkOTYRfXy+KOrgwk0iIbk7hsGJfltAKsOccHYtHdFM Tm3eKR8iq2m2C6EGavZ5LTbIxElmKGnJaqYC1NapilmW/FPFsJx+8HJMHF847xQG 0UCsc+c019mzYMmeTT/BSOB6mSZJu6bJ1K1HRYVZr5JjPid6Yk3Ryf9J2OTDsYmb H6LnjgH4dGWDAmDizggkPyTdu8G7tzcwpYGWEynJQGJrdGGq84QAR6XAu07UL4sN 3HUO7Ns7NXj3gQ== -----END CERTIFICATE-----Generated at Fri May 9 23:12:49 2025 by rpki-client