$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: KZUNe1RRvsVeubPqycY5q/6eu9Pyzrn8NM0LdRcCqkk= Subject key identifier: EE:46:48:0C:C5:9F:01:C4:AC:CE:0A:F2:E0:2F:85:3A:16:B8:57:0F Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 01A0890C595508B070685D2EDA083A82BAE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0C7D Signing time: Thu 10 Sep 2026 02:01:22 +0000 Manifest this update: Thu 10 Sep 2026 02:01:22 +0000 Manifest next update: Fri 11 Sep 2026 02:01:22 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: Xotcq7eMjBZXjP+l1uqmiah8WrhqzWxC8O033O9bzeA=) 2: 8SFZw8BMAj1xVhdMMCCs15uYf7Q.roa (hash: 9ezJKc1nhlgcq48JgfbfaaUeNcn0fAJH9w4Rv8ctllY=) 3: 9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa (hash: xNWcTes1rfng2Xoo1q/dVG7NMZ8Ww7cO2s1+2Z0yWlA=) 4: DxhjENvG5OYUJvVZsM8qLwRgMX8.roa (hash: AXiwp6mvVukrTKFIByO8+UyYRveHX4/Xn2+jsMwO1nY=) 5: E9APco7X5s-y_ndtROFoXtIewVo.roa (hash: ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=) 6: Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa (hash: MmpGqyxYpKQIYnf6OI/K/GvwLTjCCsiguVNJ0TpVI8A=) 7: GysgxckvU9w6RPGtRYGSjjzMaeI.roa (hash: jULcLoc2tnQVeXNdUpLnnHKQk5KFPYH+I0w28ILf6uo=) 8: MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa (hash: KbrH7LcYaa394FA8k0S5gWJFBJdKc28amMjP1aLjN/M=) 9: PEzreo_YaPTvZmeHLlLFR5kVjWY.roa (hash: eXeiZ79p8Uap0Wt90BnDGjxDFdIM/UYDOLfaEdoVu7k=) 10: SAA7qyjcW84McQBC6YBfHzblJfA.roa (hash: dbjWwV6RFntCa8n+N5y1CE7UmL5X6zdxSBIazMuF9gY=) 11: SAOjAfmVta9T_Ls7ykRFr8U5SYI.roa (hash: r10sWadtpWdod9WG4HGHqPD7qRwz46PwcZV2+I/tlNM=) 12: YsTwicH1tOydKXwijh3NKIAFLS0.roa (hash: a4Esas1VFYhKGMF7C/m0rI+wkbXft/Q6b4xO9aKQj64=) 13: eExRkfPu0Gwge_hF5bZ87TMqJSc.roa (hash: GbCahJADgly+/ikqsEm4KY5sCrzG5FQDBoPzkX+HqA0=) 14: gkcGn3ENPLtTEnDqjUqXbmSRgng.roa (hash: U6oenFeqTjFDCfsFo9/G7/iGAGLsgJkrsjxoMp46oSE=) 15: k9h8QS5gEzXpkcVVNe-dAvt8_v8.roa (hash: zBG+kHBGYstuoXqKiYKOkY+fZi1x5xlU5harwXVVNII=) 16: py8kH9n_2-OnxW6spEMi6oEGK_w.roa (hash: GsXp7eLTo1qCtBBCoDFQgU12gK3EvVtwUdWIN2dH9CY=) 17: rhGX_5s3UmZjlpks20dW8Uwf5xY.roa (hash: JBHH+NoWY0D+hMChID36tmQIbWsMkAg53XmNFpTIjc4=) 18: rw4pdFSTNcqR4HSLH99TYBGU5M8.roa (hash: ArUMSjBrgFsVWtaXlYqazL0AVRoBUJiJ/pOtvA7ObNw=) 19: zFqREBgVNzI2E15fdQInesLKPTw.roa (hash: NsrPAKNCirfx6K/YKvvDtbYP5Q+iM+dl/3GgSwcg4O8=) 20: zn4F63TYgWqEf5oY3C0aSoOPaXU.roa (hash: 4XzpBGSKIpqrgzYV8bDUbJCBoMSY0ytUeCyMxChhVnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:89:0c:59:55:08:b0:70:68:5d:2e:da:08:3a:82:ba:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Sep 10 02:01:22 2026 GMT Not After : Sep 11 02:01:22 2026 GMT Subject: CN=ee46480cc59f01c4acce0af2e02f853a16b8570f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ca:ab:2c:ff:d4:fe:47:82:f0:7c:34:b7:c6: f3:96:96:cf:17:7f:12:24:30:94:b7:5b:6b:74:1b: 32:49:ba:c1:cf:d7:0a:32:0d:fc:22:90:e9:6c:92: b4:c9:42:93:ad:29:db:12:af:c1:92:1c:3c:f1:50: 72:a7:1b:7c:56:88:ad:42:09:21:fd:ae:e0:0e:52: 3c:08:fc:13:43:e9:07:55:b3:22:93:bb:a4:f9:7b: a6:85:ef:ff:44:c8:02:02:5b:4d:a8:27:ee:78:94: 49:75:1f:cc:88:eb:60:64:8a:a8:63:36:75:4d:82: 21:fe:af:df:09:3a:1a:ef:42:6b:2a:59:f6:8a:33: a3:90:dd:38:01:b1:db:f5:d1:f5:b7:8e:4b:e2:96: a7:ed:37:66:74:9a:c1:98:6f:21:2a:4b:45:3e:a2: 7b:f3:21:bc:97:f7:b0:53:73:ee:14:eb:a4:9e:26: 68:29:ba:ea:20:b4:11:dc:9a:8b:f7:06:e0:e9:f2: 95:09:59:9a:84:b3:09:c8:3b:9b:fe:03:48:4b:60: 7c:01:6a:b4:53:04:7b:4a:22:86:0f:2d:ea:de:e5: 86:b7:82:80:73:1c:aa:1b:f4:54:cd:2b:6d:1a:56: 91:ae:d8:41:4c:66:25:3e:3b:bd:2f:d9:25:87:ec: 3d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:46:48:0C:C5:9F:01:C4:AC:CE:0A:F2:E0:2F:85:3A:16:B8:57:0F X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:f4:ca:8d:7d:30:2a:58:a1:67:1b:c6:ca:1b:fa:f3:8b:4a: 4e:3b:96:23:9c:15:95:4d:75:09:52:64:ab:28:1f:13:1f:4c: 24:93:b9:4e:29:96:fa:5e:a1:29:7d:1c:e3:92:15:34:b9:a1: f2:e1:6e:e5:38:ec:60:12:2b:34:dc:34:3c:1b:3d:cd:51:4a: 50:e4:2e:88:13:5f:d1:36:db:64:0c:2f:1a:0e:1e:14:82:f0: 4f:0b:27:3f:75:85:bf:8b:6c:93:00:dd:3a:63:38:93:0e:88: 38:c7:1c:2b:60:0d:be:54:1e:ea:96:db:24:5d:a6:5c:d1:95: 62:e1:99:bf:41:28:5b:ae:07:a5:fc:65:83:23:29:98:81:c9: 54:8b:d7:fc:64:7f:fa:83:ee:4c:30:7a:9d:79:5a:95:24:bb: cb:7f:df:85:48:ed:ff:4a:26:31:0f:cb:33:26:ec:3b:57:76: 8a:a1:d0:8e:d6:62:cc:1e:59:21:06:02:ef:fd:70:e8:62:19: c8:c2:70:97:d3:83:af:4a:0f:a7:53:b0:4e:b1:23:54:97:27: f9:c0:b6:b8:5a:43:15:76:c8:e5:28:94:d3:fc:1b:69:d5:4d: 42:59:eb:d6:cb:a6:77:93:e7:b1:2b:f9:d1:3d:2f:49:03:5b: 28:9c:18:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCJDFlVCLBwaF0u2gg6grrlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwOTEwMDIwMTIyWhcNMjYwOTExMDIwMTIyWjAzMTEwLwYDVQQD EyhlZTQ2NDgwY2M1OWYwMWM0YWNjZTBhZjJlMDJmODUzYTE2Yjg1NzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcqrLP/U/keC8Hw0t8bzlpbPF38S JDCUt1trdBsySbrBz9cKMg38IpDpbJK0yUKTrSnbEq/Bkhw88VBypxt8VoitQgkh /a7gDlI8CPwTQ+kHVbMik7uk+Xumhe//RMgCAltNqCfueJRJdR/MiOtgZIqoYzZ1 TYIh/q/fCToa70JrKln2ijOjkN04AbHb9dH1t45L4pan7TdmdJrBmG8hKktFPqJ7 8yG8l/ewU3PuFOukniZoKbrqILQR3JqL9wbg6fKVCVmahLMJyDub/gNIS2B8AWq0 UwR7SiKGDy3q3uWGt4KAcxyqG/RUzSttGlaRrthBTGYlPju9L9klh+w94wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5GSAzFnwHErM4K8uAvhToWuFcPMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfTKjX0w KlihZxvGyhv684tKTjuWI5wVlU11CVJkqygfEx9MJJO5TimW+l6hKX0c45IVNLmh 8uFu5TjsYBIrNNw0PBs9zVFKUOQuiBNf0TbbZAwvGg4eFILwTwsnP3WFv4tskwDd OmM4kw6IOMccK2ANvlQe6pbbJF2mXNGVYuGZv0EoW64HpfxlgyMpmIHJVIvX/GR/ +oPuTDB6nXlalSS7y3/fhUjt/0omMQ/LMybsO1d2iqHQjtZizB5ZIQYC7/1w6GIZ yMJwl9ODr0oPp1OwTrEjVJcn+cC2uFpDFXbI5SiU0/wbadVNQlnr1sumd5PnsSv5 0T0vSQNbKJwY6w== -----END CERTIFICATE-----Generated at Thu Sep 10 07:31:56 2026 by rpki-client