$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: ViVnorXFju2tny0//izRke3uFgFw9+GrgnsW6Mo4OEQ= Subject key identifier: B4:13:56:DE:22:3B:0D:69:00:9B:BF:0E:BE:E1:14:70:52:7E:82:6B Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 0198D5BBE7F635781A8C78F3876DE1AD34CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 12DB Signing time: Sat 23 Aug 2025 07:01:58 +0000 Manifest this update: Sat 23 Aug 2025 07:01:58 +0000 Manifest next update: Sun 24 Aug 2025 07:01:58 +0000 Files and hashes: 1: 5sGdFc_1Zid-hBM7mInO1hEaSqE.roa (hash: 7bwxpMhgqxIjIH4tFXJcxeBHbkei+D+EpzaJzJaJhv4=) 2: 6Fi2x6-MOtr7a_1fOFW30-_zrig.roa (hash: 2IN+YE3CMZAPD+uK8qRy2OV0W4x3OCpS/TO8CF/76aw=) 3: 9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa (hash: 3TIv5c08KCsDbJFNq+WTb4IZP4ym0IZZX1CdjQGX0PE=) 4: AX86DsLSoXFRNkCv2pCL1_EPY5g.roa (hash: GQZE5H1ow5zCrtLramjrChLPwPl7V1YC5vmeyk2QXn0=) 5: GNoD4VldON0fRQOsfwgnZbDlm30.roa (hash: blIx8D3DZyU+DHXOsnwJBmGsut7rhQArkG8R7KyjOw4=) 6: HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa (hash: oR/Hq9WxPGajOgdVUFWze40RSUPdBlPl+1xVQoSJxOo=) 7: MJg7tjZ2YS5zYW2u8iw1g2oqMU0.roa (hash: X+QXFsSzhee86ausU4aiKnbqtRl/bpo3u3VYz3YOas0=) 8: Vfz_XI34h0n1ABRWW0I8TbCl2Ks.roa (hash: 5McLJpTXPeaX6NxvYmzQe8oLwKFov9vgW9zM/HLDWFk=) 9: Wa5j5jUmUSd1vG30ktnaqL3uHDI.roa (hash: MKz77Ewok0vz5vQRzaJNzC9kTJYYYuPm776x717x2z4=) 10: d7zRd6MptHTWJQgyfw6tgdDV_9A.roa (hash: oELlLX+h376OqFFHKdf5s0R3SvC5xRLsvCJ5JL8+PK4=) 11: eaT289O4FWfLSNPSCfCVS50JLdA.roa (hash: 6Ydw1aV3kTAxyagbcZrClYDAIJBPqjkvUlwgRk8W+YE=) 12: nZaqbX4b0xd3UwU7l5sM7yoGBBo.roa (hash: OWNumqHHHp/8gdqH67NYyJSDu9rO3vPuBbgXU7s9BgM=) 13: oZv7gBkqKHSk-77MXrW1ab6ETYI.roa (hash: +B5mLIxH7s3pabVcCwGAo38v71wCcUaCQewhunxJ/mg=) 14: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: 3jffA5bAJ/Uq9B+RbGw7ya60xbVctYzsaOFkjaLyw+Y=) 15: r4c3fyT5mEicBTcplHGkCHGu1DU.roa (hash: TN1KtYP5BnSUVtiFLbJe3+UWbigxirFk6LMWIHk9G6A=) 16: vsZmI73j1l0F5LUFB41ZYaQs_Cs.roa (hash: nZ33GCfbpIYKPXjqivfkgFha5BmKCs/riEjE4yHbJng=) 17: w6--t_5wz0JDy2YG6__bLL736lk.roa (hash: kokGrC/YWrlNHabiNp1qc8zjZ2tpu6Xwv3gwVAl+cdY=) 18: xaaOuiTsUCwOo5hhwkfZiBvLcJ8.roa (hash: Iz6qbI3mhpm0/uLd5TTzINoKeImEElZtBrUi0Q8Z2Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:e7:f6:35:78:1a:8c:78:f3:87:6d:e1:ad:34:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Aug 23 07:01:58 2025 GMT Not After : Aug 24 07:01:58 2025 GMT Subject: CN=b41356de223b0d69009bbf0ebee11470527e826b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:60:08:0f:06:5d:19:0d:1d:b5:a8:11:89: 88:53:29:6a:19:72:94:d0:44:53:6a:e4:b2:f2:ce: b8:bb:27:2c:44:16:86:c0:76:19:0c:d5:f4:10:65: e0:3a:fa:0b:f7:18:15:b9:0a:a4:47:6d:39:a4:db: 60:9c:78:4f:c0:d5:ce:3f:48:47:66:0a:f3:89:15: 87:ba:45:42:7e:de:6b:d1:c4:7c:c6:c6:f7:64:5f: 75:79:75:e9:42:48:f5:6a:0b:fa:49:7a:c4:e0:35: 63:a5:0f:a2:e8:71:32:ff:c9:d0:80:61:d2:7f:d3: 2a:48:f2:05:83:e4:fc:e6:f5:b2:23:43:22:f1:62: 11:da:e1:b7:4e:9d:0f:dd:74:45:00:dc:da:8a:89: dc:84:87:dd:f6:73:9c:2e:46:b1:d6:90:91:eb:a7: c1:c3:02:72:4e:9d:08:69:ab:ac:fa:72:06:ab:d4: d6:0d:1b:92:e7:93:55:37:ee:c6:ba:c1:37:c2:52: c4:4e:f1:3b:45:c4:dd:21:8f:83:28:ce:0e:9e:56: ae:c7:65:3b:0c:8c:77:ff:9a:93:fb:a8:3c:15:2a: 6b:b4:3d:fa:0f:72:46:ed:e0:27:f5:c9:d2:bc:6c: 04:1f:b2:88:0a:0d:c0:f8:87:02:59:35:b1:38:6d: 1a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:13:56:DE:22:3B:0D:69:00:9B:BF:0E:BE:E1:14:70:52:7E:82:6B X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:54:6e:a5:eb:20:14:c9:16:7f:b5:bd:80:a7:04:6f:33:2d: 6c:2b:73:39:0b:88:40:fc:99:dc:19:e3:35:bf:c7:e0:6c:99: ad:e2:f7:5a:c5:9b:01:0b:df:17:54:cc:6b:3c:03:d4:1a:32: 8d:e9:8f:bc:1a:4b:7e:d7:e2:31:0a:37:28:c4:b0:92:76:8b: 51:e8:b6:60:89:d5:21:b6:83:75:2b:7f:a3:05:9d:04:41:1e: 55:6d:ed:fe:db:35:80:6c:28:1c:41:af:8f:e1:57:be:01:74: ed:ef:21:4d:94:8d:61:d3:bb:86:99:5b:19:36:40:30:97:7b: 84:09:b8:80:79:6e:0a:13:19:1d:34:60:af:0b:83:b7:7f:7d: 8a:44:82:1b:14:60:cb:6b:fd:6e:f7:0d:0c:ac:57:10:f1:15: 94:14:4b:13:d5:f4:2f:7c:5a:7f:73:be:ff:e0:05:7b:82:83: 5e:51:2c:f2:d8:22:61:ce:1f:16:49:4b:bb:06:f6:25:bd:e4: 10:3e:4c:05:f2:2c:84:9b:29:11:67:16:23:56:5b:80:5b:97: 85:b0:1c:3f:b9:7b:3c:68:af:81:74:63:40:c6:97:1d:a8:75: 10:c5:5c:a5:21:fa:5c:10:72:a2:8b:85:8c:28:c1:01:38:26: b8:08:a7:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu+f2NXgajHjzh23hrTTLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjUwODIzMDcwMTU4WhcNMjUwODI0MDcwMTU4WjAzMTEwLwYDVQQD EyhiNDEzNTZkZTIyM2IwZDY5MDA5YmJmMGViZWUxMTQ3MDUyN2U4MjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJVgCA8GXRkNHbWoEYmIUylqGXKU 0ERTauSy8s64uycsRBaGwHYZDNX0EGXgOvoL9xgVuQqkR205pNtgnHhPwNXOP0hH ZgrziRWHukVCft5r0cR8xsb3ZF91eXXpQkj1agv6SXrE4DVjpQ+i6HEy/8nQgGHS f9MqSPIFg+T85vWyI0Mi8WIR2uG3Tp0P3XRFANzaionchIfd9nOcLkax1pCR66fB wwJyTp0Iaaus+nIGq9TWDRuS55NVN+7GusE3wlLETvE7RcTdIY+DKM4Onlaux2U7 DIx3/5qT+6g8FSprtD36D3JG7eAn9cnSvGwEH7KICg3A+IcCWTWxOG0aAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQTVt4iOw1pAJu/Dr7hFHBSfoJrMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFRupesg FMkWf7W9gKcEbzMtbCtzOQuIQPyZ3BnjNb/H4GyZreL3WsWbAQvfF1TMazwD1Boy jemPvBpLftfiMQo3KMSwknaLUei2YInVIbaDdSt/owWdBEEeVW3t/ts1gGwoHEGv j+FXvgF07e8hTZSNYdO7hplbGTZAMJd7hAm4gHluChMZHTRgrwuDt399ikSCGxRg y2v9bvcNDKxXEPEVlBRLE9X0L3xaf3O+/+AFe4KDXlEs8tgiYc4fFklLuwb2Jb3k ED5MBfIshJspEWcWI1ZbgFuXhbAcP7l7PGivgXRjQMaXHah1EMVcpSH6XBByoouF jCjBATgmuAinmA== -----END CERTIFICATE-----Generated at Sat Aug 23 15:48:16 2025 by rpki-client