$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: 8QzSIGCsXgCF1tlg4XgJhpAhCABoM+2IwRh26w7WPmk= Subject key identifier: BC:E7:1C:AD:A8:79:95:E6:42:0C:6E:39:D3:22:83:75:BF:C4:4D:08 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019927B2A5A2808E6A5AE90B289B72D63656 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 08A2 Signing time: Mon 08 Sep 2025 05:00:43 +0000 Manifest this update: Mon 08 Sep 2025 05:00:43 +0000 Manifest next update: Tue 09 Sep 2025 05:00:43 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: Zhf8UlUu9idg0ylX/VCd0QV++P5Y2YxDKsntAz4s7TM=) 2: 5osuIpQEXkmgGGfabxgkobMCOqo.roa (hash: ar+Luee3A/qxuqFBW+KjI5NWMnxgfB2LrCoUMGMm2y0=) 3: BY0ulxbKjju4vLrdhG3t1EWUsfc.roa (hash: K5zGur7lx+aV24qdxwKfnGw/Mm79v7yGfl4MiAhAsZQ=) 4: EYqz9-lWcT6mAZDYhv76ihfxRKA.roa (hash: 2kj2lpyBuoRk5Uqc6kG2vMBRCERsonaSDs/n/J78Nlc=) 5: IOUjT-w4NntQ6mLe1xzxWKGa6vY.roa (hash: /ne3uHIaKrP56Ewsozlm4hMMf/E0GgsFtxRU9KESn98=) 6: IZB5fE3vCYPzm412fZZk7uYbwgE.roa (hash: cWCrnSM11F8k4l8vziWTFuB3S6ERgGRGnqCvZnuNDXk=) 7: LB0RhZaeHc4lFeLZglNMj0M0iuc.roa (hash: pKzr9fhEjb+2hcFnGRNZ9yDdUriurScTg3ZqXErO5Fk=) 8: LebN_fB1s6ScKeJ5c8zfxUklaIc.roa (hash: ugIRy/GdUvkC8oivMaAEQB7yPRimuew/T3ig9FaE2mE=) 9: Pm3ij8drL7WRD0R4R54qP4eC7Q0.roa (hash: hzWkutnsJx/Qg99NS0sDlr/7EdarXvXso1X585eWACI=) 10: TWprmIRYABwJKC3e_3_5wzunOVk.roa (hash: ax2e42jwFW+IhzbsKHYLodyYVLy/wsVmS87dwyQkShM=) 11: XQHVRGTqM3fRB_j_ijhUwjJs9Ug.roa (hash: fKPNzBl0e4tcVAHFnpIZK59mBTOB3H7FeF+MB2XfaW0=) 12: e50PKaKFcaW3uGMNUchzpEB18-M.roa (hash: c0PkOWIaLZSS8TffWgd4kYVYWuDWquopKeKw112DVMI=) 13: ecLZxlk5uOKtie8YZypau_dP7Nk.roa (hash: qDzztQzT4j41tAiYOJhicLZgVePR5Gy6YYwn9Gm7Kj0=) 14: eeYpshaoc5go--DBuuRmLZpBsio.roa (hash: 9Ypg180659MtxxUjCyOwRub9c14vNLr84izZxblP7gQ=) 15: fp7iaq3w3IK7xxC4hTxOHXlgQdo.roa (hash: IIdoboRyB6xVt9Ub/S//LkCzsgiZ4eA93ZNjm/kWoFw=) 16: giUGr98XTvMTapx-HcfkJZUS_QQ.roa (hash: t3Dcx8q3eGk8zI/z9A/Ebz1Oh7dW30YVpRQVHDQqIlA=) 17: nNGX_OCe8X9nXrEP34vII8SEf10.roa (hash: n1Og0cpU00h6IhKyI+ECnhLWs0U3hRjPdAcqH8CABIM=) 18: vIo5JZEbJy_j1F7Gy0x0-4XTOm4.roa (hash: aqC1tIrcI2MF2zcWVNBFSrIprB6SpbD2HGFhZaRj/MQ=) 19: wQyg8eA6lRREzJ9taIK7-ABN-Vk.roa (hash: 56Z2ikBVQqPH0LfM7ywhy1//SerrhxAPBdjzeQApODo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:27:b2:a5:a2:80:8e:6a:5a:e9:0b:28:9b:72:d6:36:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Sep 8 05:00:43 2025 GMT Not After : Sep 9 05:00:43 2025 GMT Subject: CN=bce71cada87995e6420c6e39d3228375bfc44d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:80:f4:39:ad:0f:e9:9d:5a:22:3f:1a:1c:b2: 42:76:ce:f7:db:29:4e:4b:31:56:89:9d:1f:37:0a: 66:0e:d3:b6:b8:4a:10:fe:9b:f7:66:a6:5d:20:15: 0c:b8:1a:e4:57:ad:b4:7b:5d:91:16:1a:ea:17:36: 5d:53:18:e8:ae:78:64:99:bb:8f:5e:99:bb:2b:8f: fa:95:c4:fc:08:65:cd:b5:9a:2c:72:13:32:97:1b: 11:b5:5a:17:8e:87:63:83:62:04:54:51:0a:2c:17: 5c:98:cf:d7:fc:22:66:a3:c3:24:0b:c4:3c:e5:f5: 37:af:96:0c:f2:79:1d:e2:a1:6c:2e:12:94:5d:9f: 0a:3a:e6:29:74:31:d8:08:5d:5a:3e:1d:67:ff:bf: e9:2e:af:2c:20:d9:36:7b:5f:60:6f:e7:b4:d7:7c: 9b:45:8b:59:ce:08:7c:5f:7a:d4:0f:c7:af:46:31: 71:bb:e7:6e:27:80:a9:6b:e3:fc:11:32:21:10:0d: f2:b5:f0:78:62:79:21:0e:35:5e:04:ba:2c:7e:60: f0:af:b9:89:07:cc:82:5f:94:47:85:0c:8c:42:6a: 0e:30:5c:8e:df:d4:62:a9:66:31:a1:f8:3e:ea:32: 2c:24:7b:e0:57:0b:5a:d2:18:9d:ef:95:09:ab:ac: b1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E7:1C:AD:A8:79:95:E6:42:0C:6E:39:D3:22:83:75:BF:C4:4D:08 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:27:a8:20:c5:c2:e0:66:73:1a:16:46:75:c7:8f:29:7e:5b: 7b:e4:b8:b5:20:3e:a4:c8:01:18:8d:e0:d6:c2:6d:5f:d7:19: 2d:af:62:fe:f4:a1:2b:a6:00:bf:ab:dc:6c:e3:9d:20:7c:39: 6f:c0:eb:14:56:bd:f3:5f:de:36:db:e0:3e:00:a5:b2:22:42: db:26:38:94:3b:2b:8e:b5:b3:09:9f:36:4e:70:0a:96:3c:6c: d9:95:15:5b:42:83:6f:ed:6c:e1:84:7b:01:15:d8:b0:93:6b: ea:72:ba:b8:74:6c:a7:44:19:08:80:ea:41:8e:23:22:b9:66: 95:d6:99:17:17:04:d4:b9:26:ee:6f:38:9b:5b:78:a0:c9:f4: 32:3a:d8:77:03:3b:db:8b:2a:66:9b:f1:14:40:3e:29:3a:2a: db:f4:d7:bb:7a:51:9d:52:3c:b3:16:91:40:f1:bd:a0:76:0b: 51:d8:13:a3:b3:97:4b:7a:03:3b:f5:5a:a3:54:28:02:ba:49: f1:6c:01:43:dc:ca:82:fd:10:2e:92:f1:ab:84:94:4b:14:b2: 64:b9:ae:42:7b:38:a7:66:2f:57:0d:33:2a:57:39:1a:da:67: 12:47:09:bc:71:d6:2c:d8:77:9d:ac:ed:39:57:63:8a:fb:2a: fe:f5:47:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZknsqWigI5qWukLKJty1jZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjUwOTA4MDUwMDQzWhcNMjUwOTA5MDUwMDQzWjAzMTEwLwYDVQQD EyhiY2U3MWNhZGE4Nzk5NWU2NDIwYzZlMzlkMzIyODM3NWJmYzQ0ZDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14D0Oa0P6Z1aIj8aHLJCds732ylO SzFWiZ0fNwpmDtO2uEoQ/pv3ZqZdIBUMuBrkV620e12RFhrqFzZdUxjornhkmbuP Xpm7K4/6lcT8CGXNtZoschMylxsRtVoXjodjg2IEVFEKLBdcmM/X/CJmo8MkC8Q8 5fU3r5YM8nkd4qFsLhKUXZ8KOuYpdDHYCF1aPh1n/7/pLq8sINk2e19gb+e013yb RYtZzgh8X3rUD8evRjFxu+duJ4Cpa+P8ETIhEA3ytfB4YnkhDjVeBLosfmDwr7mJ B8yCX5RHhQyMQmoOMFyO39RiqWYxofg+6jIsJHvgVwta0hid75UJq6yxuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLznHK2oeZXmQgxuOdMig3W/xE0IMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESeoIMXC 4GZzGhZGdcePKX5be+S4tSA+pMgBGI3g1sJtX9cZLa9i/vShK6YAv6vcbOOdIHw5 b8DrFFa981/eNtvgPgClsiJC2yY4lDsrjrWzCZ82TnAKljxs2ZUVW0KDb+1s4YR7 ARXYsJNr6nK6uHRsp0QZCIDqQY4jIrlmldaZFxcE1Lkm7m84m1t4oMn0MjrYdwM7 24sqZpvxFEA+KToq2/TXu3pRnVI8sxaRQPG9oHYLUdgTo7OXS3oDO/Vao1QoArpJ 8WwBQ9zKgv0QLpLxq4SUSxSyZLmuQns4p2YvVw0zKlc5GtpnEkcJvHHWLNh3nazt OVdjivsq/vVHXg== -----END CERTIFICATE-----Generated at Mon Sep 8 08:42:42 2025 by rpki-client