$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: zpw2kF7AqDICZQNfoXUe5PMLRISUQ5e5JpCufhZJ+q8= Subject key identifier: 31:E7:51:20:28:95:54:58:0B:EB:0C:F8:A4:D2:A6:F8:2A:A3:D0:51 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 01983570ACAE59B6AD04308DA103201E22D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0819 Signing time: Wed 23 Jul 2025 04:00:33 +0000 Manifest this update: Wed 23 Jul 2025 04:00:33 +0000 Manifest next update: Thu 24 Jul 2025 04:00:33 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: tXfrsOODcT/B+aax07T4qkvelJIBU3nEk23IvIX9/pU=) 2: 5osuIpQEXkmgGGfabxgkobMCOqo.roa (hash: ar+Luee3A/qxuqFBW+KjI5NWMnxgfB2LrCoUMGMm2y0=) 3: CdQL_rNfT4mruJeuRhVd0hpPdps.roa (hash: Z/uUo7J+RuPWC8u1ha2F9ldd1L0f2IgJnPvQNnlMC1w=) 4: EYqz9-lWcT6mAZDYhv76ihfxRKA.roa (hash: 2kj2lpyBuoRk5Uqc6kG2vMBRCERsonaSDs/n/J78Nlc=) 5: IZB5fE3vCYPzm412fZZk7uYbwgE.roa (hash: cWCrnSM11F8k4l8vziWTFuB3S6ERgGRGnqCvZnuNDXk=) 6: LB0RhZaeHc4lFeLZglNMj0M0iuc.roa (hash: pKzr9fhEjb+2hcFnGRNZ9yDdUriurScTg3ZqXErO5Fk=) 7: LebN_fB1s6ScKeJ5c8zfxUklaIc.roa (hash: ugIRy/GdUvkC8oivMaAEQB7yPRimuew/T3ig9FaE2mE=) 8: NnqvQhUaUP2DJi_WZAMSKo0P-OQ.roa (hash: nk529TsYCvVQjH8mDtUSTqsATbfQa7whuncsuwTHiRc=) 9: TWprmIRYABwJKC3e_3_5wzunOVk.roa (hash: ax2e42jwFW+IhzbsKHYLodyYVLy/wsVmS87dwyQkShM=) 10: XQHVRGTqM3fRB_j_ijhUwjJs9Ug.roa (hash: fKPNzBl0e4tcVAHFnpIZK59mBTOB3H7FeF+MB2XfaW0=) 11: e50PKaKFcaW3uGMNUchzpEB18-M.roa (hash: c0PkOWIaLZSS8TffWgd4kYVYWuDWquopKeKw112DVMI=) 12: ecLZxlk5uOKtie8YZypau_dP7Nk.roa (hash: qDzztQzT4j41tAiYOJhicLZgVePR5Gy6YYwn9Gm7Kj0=) 13: eeYpshaoc5go--DBuuRmLZpBsio.roa (hash: 9Ypg180659MtxxUjCyOwRub9c14vNLr84izZxblP7gQ=) 14: fp7iaq3w3IK7xxC4hTxOHXlgQdo.roa (hash: IIdoboRyB6xVt9Ub/S//LkCzsgiZ4eA93ZNjm/kWoFw=) 15: giUGr98XTvMTapx-HcfkJZUS_QQ.roa (hash: t3Dcx8q3eGk8zI/z9A/Ebz1Oh7dW30YVpRQVHDQqIlA=) 16: nNGX_OCe8X9nXrEP34vII8SEf10.roa (hash: n1Og0cpU00h6IhKyI+ECnhLWs0U3hRjPdAcqH8CABIM=) 17: tcp-Msodt7Yoyc_U-JzWb4RQflg.roa (hash: 2O16WNiH/chbI3skghuISKeRLWAnGH5be6qCPHCOEPw=) 18: vIo5JZEbJy_j1F7Gy0x0-4XTOm4.roa (hash: aqC1tIrcI2MF2zcWVNBFSrIprB6SpbD2HGFhZaRj/MQ=) 19: wQyg8eA6lRREzJ9taIK7-ABN-Vk.roa (hash: 56Z2ikBVQqPH0LfM7ywhy1//SerrhxAPBdjzeQApODo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:35:70:ac:ae:59:b6:ad:04:30:8d:a1:03:20:1e:22:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Jul 23 04:00:33 2025 GMT Not After : Jul 24 04:00:33 2025 GMT Subject: CN=31e75120289554580beb0cf8a4d2a6f82aa3d051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c0:a4:40:a9:1f:29:db:46:94:a3:ae:a2:5f: ad:e1:11:0b:04:e0:30:a0:cc:d3:35:61:e8:bd:18: 2c:86:aa:61:c5:2f:78:41:ca:b8:3d:4b:cc:52:48: 38:17:ef:c7:1c:43:1c:f6:82:44:5c:6f:e3:b9:b2: f6:72:87:03:2e:76:c1:cb:32:85:10:c8:be:97:b7: d8:55:df:38:7b:ff:25:6c:33:16:40:bd:ef:3b:03: e7:d9:04:1e:68:f9:e2:4d:1a:59:8d:99:69:94:79: 25:d2:0c:0f:99:d4:75:c4:5e:94:47:8c:35:e0:a2: 97:a0:b4:2e:72:b1:eb:47:1c:08:90:12:3e:3a:f9: 74:e8:82:12:14:80:27:d9:f1:4c:54:9a:d7:ec:b7: 60:60:b2:f2:9e:cf:c8:b1:91:58:c7:d1:5f:4f:44: 68:2e:b3:17:c8:5c:72:95:cc:5d:82:28:99:03:8f: 55:2d:e1:d7:7a:79:7c:ca:c0:56:7c:8f:7c:32:4b: 56:12:90:42:81:86:0b:13:2a:ca:68:4f:f3:a2:37: 55:5d:8b:6e:64:a5:99:09:09:76:54:ba:9f:6f:93: f3:e2:c8:f7:2b:5e:99:d8:19:84:13:d6:56:32:8a: d3:25:d6:ff:93:cc:15:f2:75:f2:e9:93:4a:04:75: ef:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E7:51:20:28:95:54:58:0B:EB:0C:F8:A4:D2:A6:F8:2A:A3:D0:51 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:94:d9:7c:9c:5e:15:47:dd:d5:bc:a2:4d:1a:8d:99:06:ed: ef:26:7b:2a:d1:81:33:c1:60:98:20:87:c2:ea:97:35:a4:0f: cd:ba:40:de:ec:cc:1f:08:a1:7f:48:d5:f2:73:cb:37:6a:eb: dd:a9:20:a2:f0:96:41:11:83:9c:ca:6f:54:84:a9:cf:be:4d: 7c:b9:53:95:0e:3d:c9:67:e6:0e:92:56:b7:a4:f3:45:b3:8d: 5e:bb:65:62:44:ab:a7:20:18:dc:1b:f7:aa:46:64:b6:03:30: d6:94:d6:f5:18:1a:71:f0:7f:17:48:af:7b:55:98:6f:c6:53: 26:3f:0e:46:f6:d3:0a:8c:63:22:5c:c0:18:18:7e:75:30:57: 7e:2b:01:ac:e6:45:05:99:b3:b0:f4:b7:b3:d1:8a:02:88:96: 62:ae:6f:87:73:04:5a:f7:d3:da:e4:c1:42:ed:85:0d:6f:15: 90:3a:be:fa:c8:77:60:ad:c0:d6:c4:8a:89:68:ab:fc:52:40: e9:f2:01:f8:c6:8f:1b:cf:41:94:09:ff:8b:c3:8b:8a:75:a1: ae:e0:0e:39:c3:6d:7c:57:d1:85:b3:da:e6:33:3f:eb:eb:ad: f2:5a:48:9d:3c:4c:5a:2c:fe:b6:3c:8f:79:3a:91:55:9f:0a: 9f:a0:61:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg1cKyuWbatBDCNoQMgHiLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjUwNzIzMDQwMDMzWhcNMjUwNzI0MDQwMDMzWjAzMTEwLwYDVQQD EygzMWU3NTEyMDI4OTU1NDU4MGJlYjBjZjhhNGQyYTZmODJhYTNkMDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsCkQKkfKdtGlKOuol+t4RELBOAw oMzTNWHovRgshqphxS94Qcq4PUvMUkg4F+/HHEMc9oJEXG/jubL2cocDLnbByzKF EMi+l7fYVd84e/8lbDMWQL3vOwPn2QQeaPniTRpZjZlplHkl0gwPmdR1xF6UR4w1 4KKXoLQucrHrRxwIkBI+Ovl06IISFIAn2fFMVJrX7LdgYLLyns/IsZFYx9FfT0Ro LrMXyFxylcxdgiiZA49VLeHXenl8ysBWfI98MktWEpBCgYYLEyrKaE/zojdVXYtu ZKWZCQl2VLqfb5Pz4sj3K16Z2BmEE9ZWMorTJdb/k8wV8nXy6ZNKBHXvCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHnUSAolVRYC+sM+KTSpvgqo9BRMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZTZfJxe FUfd1byiTRqNmQbt7yZ7KtGBM8FgmCCHwuqXNaQPzbpA3uzMHwihf0jV8nPLN2rr 3akgovCWQRGDnMpvVISpz75NfLlTlQ49yWfmDpJWt6TzRbONXrtlYkSrpyAY3Bv3 qkZktgMw1pTW9RgacfB/F0ive1WYb8ZTJj8ORvbTCoxjIlzAGBh+dTBXfisBrOZF BZmzsPS3s9GKAoiWYq5vh3MEWvfT2uTBQu2FDW8VkDq++sh3YK3A1sSKiWir/FJA 6fIB+MaPG89BlAn/i8OLinWhruAOOcNtfFfRhbPa5jM/6+ut8lpInTxMWiz+tjyP eTqRVZ8Kn6BhcA== -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:35 2025 by rpki-client