$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: bKwGWnpcms+wmjugyx+eFv/YbiX97ompYWobupVAYZ4= Subject key identifier: E0:CC:5F:9A:FE:52:ED:5C:14:EA:20:04:73:25:F1:95:77:FF:98:23 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 01A1754BD875D2B9E7610033FED593924741 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0CF8 Signing time: Sun 25 Oct 2026 23:01:07 +0000 Manifest this update: Sun 25 Oct 2026 23:01:07 +0000 Manifest next update: Mon 26 Oct 2026 23:01:07 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: uoeZeIWLkWw3RIla7YkWBoeP6Oc91b9Zw1l4Iyg3HRY=) 2: 8SFZw8BMAj1xVhdMMCCs15uYf7Q.roa (hash: 9ezJKc1nhlgcq48JgfbfaaUeNcn0fAJH9w4Rv8ctllY=) 3: 9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa (hash: xNWcTes1rfng2Xoo1q/dVG7NMZ8Ww7cO2s1+2Z0yWlA=) 4: DxhjENvG5OYUJvVZsM8qLwRgMX8.roa (hash: AXiwp6mvVukrTKFIByO8+UyYRveHX4/Xn2+jsMwO1nY=) 5: E9APco7X5s-y_ndtROFoXtIewVo.roa (hash: ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=) 6: Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa (hash: MmpGqyxYpKQIYnf6OI/K/GvwLTjCCsiguVNJ0TpVI8A=) 7: MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa (hash: KbrH7LcYaa394FA8k0S5gWJFBJdKc28amMjP1aLjN/M=) 8: PEzreo_YaPTvZmeHLlLFR5kVjWY.roa (hash: eXeiZ79p8Uap0Wt90BnDGjxDFdIM/UYDOLfaEdoVu7k=) 9: SAA7qyjcW84McQBC6YBfHzblJfA.roa (hash: dbjWwV6RFntCa8n+N5y1CE7UmL5X6zdxSBIazMuF9gY=) 10: SAOjAfmVta9T_Ls7ykRFr8U5SYI.roa (hash: r10sWadtpWdod9WG4HGHqPD7qRwz46PwcZV2+I/tlNM=) 11: WVRWTHu2jYG5NGmFC6GaDzPuyf0.roa (hash: ddR/0J3WSYMueqGWA4Jv4FzRBLir7poFgFFMNLJDNtY=) 12: YsTwicH1tOydKXwijh3NKIAFLS0.roa (hash: a4Esas1VFYhKGMF7C/m0rI+wkbXft/Q6b4xO9aKQj64=) 13: eExRkfPu0Gwge_hF5bZ87TMqJSc.roa (hash: GbCahJADgly+/ikqsEm4KY5sCrzG5FQDBoPzkX+HqA0=) 14: gkcGn3ENPLtTEnDqjUqXbmSRgng.roa (hash: U6oenFeqTjFDCfsFo9/G7/iGAGLsgJkrsjxoMp46oSE=) 15: k9h8QS5gEzXpkcVVNe-dAvt8_v8.roa (hash: zBG+kHBGYstuoXqKiYKOkY+fZi1x5xlU5harwXVVNII=) 16: opSIGkOnBkZvoVUAlYliwMWRtHM.roa (hash: UhK9HvzCWGQjnjOj5kqLjjS4yrTQ8KUq4l/hKCCuZEE=) 17: py8kH9n_2-OnxW6spEMi6oEGK_w.roa (hash: GsXp7eLTo1qCtBBCoDFQgU12gK3EvVtwUdWIN2dH9CY=) 18: rhGX_5s3UmZjlpks20dW8Uwf5xY.roa (hash: JBHH+NoWY0D+hMChID36tmQIbWsMkAg53XmNFpTIjc4=) 19: rw4pdFSTNcqR4HSLH99TYBGU5M8.roa (hash: ArUMSjBrgFsVWtaXlYqazL0AVRoBUJiJ/pOtvA7ObNw=) 20: wzGdB7WyZzZ6EYWjM0LsTtHFOyA.roa (hash: R2aU4t1tU/m6DkxfmQI29qUNeaAWLXLodLY1Ury0RAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 17:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:75:4b:d8:75:d2:b9:e7:61:00:33:fe:d5:93:92:47:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Oct 25 23:01:07 2026 GMT Not After : Oct 26 23:01:07 2026 GMT Subject: CN=e0cc5f9afe52ed5c14ea20047325f19577ff9823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c8:44:24:21:2a:a6:e4:8e:04:7d:12:a0:25: 29:12:d0:50:34:02:81:ad:c8:83:5c:51:18:0a:2f: 3e:fa:e1:c3:4a:28:34:b6:2f:0d:3e:6c:82:6d:ce: 21:ef:0c:1e:1c:29:88:c0:e1:c5:3e:46:e5:9c:3a: 3b:79:5f:5e:6c:0f:d9:71:fc:b4:d1:d5:47:76:0b: e8:77:11:a2:dd:f4:4a:85:fb:60:17:b7:8c:f4:5c: 38:cd:48:d8:d4:f2:be:d9:27:2b:76:0e:00:08:1f: a1:fa:2a:3d:0a:f6:f6:55:a2:46:52:f6:8e:59:ff: b9:63:06:6a:d7:f0:a3:97:e7:32:7d:1a:d9:74:cd: 39:87:e8:e3:62:52:2e:28:0e:d0:b1:b5:fb:c5:0c: db:1b:47:7e:c1:62:a3:f3:f8:fe:83:c4:f0:a1:fe: 1b:e6:cc:6d:1f:d0:3c:cf:7c:fc:f8:cb:0b:a0:e0: 4a:e0:ef:24:54:56:62:d2:c8:c9:49:79:f7:86:d7: d8:69:71:a1:1b:7f:b5:65:ec:74:a0:f0:5e:c7:b2: 6e:5a:0e:13:76:59:7e:b2:6a:a6:20:47:d1:4f:a5: b9:d6:07:72:70:5a:0b:45:c1:4d:74:d5:7c:de:50: b9:78:a4:e7:77:4e:1f:3c:10:09:69:e8:fe:97:6c: ff:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CC:5F:9A:FE:52:ED:5C:14:EA:20:04:73:25:F1:95:77:FF:98:23 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:50:ef:7e:7e:bc:8e:03:56:29:77:10:be:8e:d9:dc:10:d5: 63:f8:33:62:12:c6:a3:9b:25:d1:ab:6d:46:2b:cb:07:7a:87: 61:27:91:49:cc:09:7d:9a:0f:08:ec:a9:0a:c5:6d:52:b6:b6: 3b:4f:45:dc:b6:88:71:ed:3c:30:b4:85:48:35:b4:e1:ec:66: 22:c6:70:54:a6:07:b3:17:41:38:64:44:4f:e8:08:2a:05:a6: 83:41:04:38:82:d8:3a:fd:0f:60:e7:84:51:d6:d1:e2:23:ab: 19:10:f6:af:d8:26:b7:a8:0b:6c:b7:a7:36:59:5a:b1:91:d5: 05:e0:2a:b3:dd:5e:e9:94:5f:53:cd:4e:19:5d:24:0d:b9:57: 41:ab:88:c7:77:4e:11:3d:d7:be:54:14:19:14:12:1f:03:82: 2f:27:8b:a7:51:67:32:95:e0:80:30:d2:69:1d:4e:d6:ad:ef: a0:ca:bd:64:46:c1:b7:3d:aa:eb:18:14:83:e8:36:18:89:5e: 40:a3:63:5b:d9:04:a3:0c:40:97:84:73:24:b7:8e:75:36:0b: bc:39:d1:b8:6a:79:a8:e2:b5:d6:e2:1d:00:39:dc:c7:9b:79: ca:ce:3b:45:0a:c2:6a:79:06:f5:86:34:ea:49:91:4b:79:a9: 5c:45:59:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF1S9h10rnnYQAz/tWTkkdBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYxMDI1MjMwMTA3WhcNMjYxMDI2MjMwMTA3WjAzMTEwLwYDVQQD EyhlMGNjNWY5YWZlNTJlZDVjMTRlYTIwMDQ3MzI1ZjE5NTc3ZmY5ODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8hEJCEqpuSOBH0SoCUpEtBQNAKB rciDXFEYCi8++uHDSig0ti8NPmyCbc4h7wweHCmIwOHFPkblnDo7eV9ebA/Zcfy0 0dVHdgvodxGi3fRKhftgF7eM9Fw4zUjY1PK+2Scrdg4ACB+h+io9Cvb2VaJGUvaO Wf+5YwZq1/Cjl+cyfRrZdM05h+jjYlIuKA7QsbX7xQzbG0d+wWKj8/j+g8Twof4b 5sxtH9A8z3z8+MsLoOBK4O8kVFZi0sjJSXn3htfYaXGhG3+1Zex0oPBex7JuWg4T dll+smqmIEfRT6W51gdycFoLRcFNdNV83lC5eKTnd04fPBAJaej+l2z/0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODMX5r+Uu1cFOogBHMl8ZV3/5gjMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlDvfn68 jgNWKXcQvo7Z3BDVY/gzYhLGo5sl0attRivLB3qHYSeRScwJfZoPCOypCsVtUra2 O09F3LaIce08MLSFSDW04exmIsZwVKYHsxdBOGRET+gIKgWmg0EEOILYOv0PYOeE UdbR4iOrGRD2r9gmt6gLbLenNllasZHVBeAqs91e6ZRfU81OGV0kDblXQauIx3dO ET3XvlQUGRQSHwOCLyeLp1FnMpXggDDSaR1O1q3voMq9ZEbBtz2q6xgUg+g2GIle QKNjW9kEowxAl4RzJLeOdTYLvDnRuGp5qOK11uIdADncx5t5ys47RQrCankG9YY0 6kmRS3mpXEVZgA== -----END CERTIFICATE-----Generated at Mon Oct 26 02:21:24 2026 by rpki-client