$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: qKj0QOZoClQLWq10RU0JrlB87td5NbERjYwFXdlIQ/E= Subject key identifier: 6A:57:F0:B2:0C:2E:C9:8D:B4:91:3C:C6:36:B7:07:8D:28:AA:81:BC Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019A18E174161DDF4B178D8BECB325E488CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 091F Signing time: Sat 25 Oct 2025 01:00:19 +0000 Manifest this update: Sat 25 Oct 2025 01:00:19 +0000 Manifest next update: Sun 26 Oct 2025 01:00:19 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: 2p2i5pzd/udTzM7EIzsDYrlqFklD22ho5E0MyVlrzDE=) 2: 5osuIpQEXkmgGGfabxgkobMCOqo.roa (hash: ar+Luee3A/qxuqFBW+KjI5NWMnxgfB2LrCoUMGMm2y0=) 3: BY0ulxbKjju4vLrdhG3t1EWUsfc.roa (hash: K5zGur7lx+aV24qdxwKfnGw/Mm79v7yGfl4MiAhAsZQ=) 4: EYqz9-lWcT6mAZDYhv76ihfxRKA.roa (hash: 2kj2lpyBuoRk5Uqc6kG2vMBRCERsonaSDs/n/J78Nlc=) 5: IOUjT-w4NntQ6mLe1xzxWKGa6vY.roa (hash: /ne3uHIaKrP56Ewsozlm4hMMf/E0GgsFtxRU9KESn98=) 6: LB0RhZaeHc4lFeLZglNMj0M0iuc.roa (hash: pKzr9fhEjb+2hcFnGRNZ9yDdUriurScTg3ZqXErO5Fk=) 7: LebN_fB1s6ScKeJ5c8zfxUklaIc.roa (hash: ugIRy/GdUvkC8oivMaAEQB7yPRimuew/T3ig9FaE2mE=) 8: Pm3ij8drL7WRD0R4R54qP4eC7Q0.roa (hash: hzWkutnsJx/Qg99NS0sDlr/7EdarXvXso1X585eWACI=) 9: TEJEbJfLCSRRss_K_5H5CYFaiCg.roa (hash: M75oi001sE7d1H5/CUbAVgDs1DNoW5yTIFB3xJzgE24=) 10: TWprmIRYABwJKC3e_3_5wzunOVk.roa (hash: ax2e42jwFW+IhzbsKHYLodyYVLy/wsVmS87dwyQkShM=) 11: XQHVRGTqM3fRB_j_ijhUwjJs9Ug.roa (hash: fKPNzBl0e4tcVAHFnpIZK59mBTOB3H7FeF+MB2XfaW0=) 12: e50PKaKFcaW3uGMNUchzpEB18-M.roa (hash: c0PkOWIaLZSS8TffWgd4kYVYWuDWquopKeKw112DVMI=) 13: ecLZxlk5uOKtie8YZypau_dP7Nk.roa (hash: qDzztQzT4j41tAiYOJhicLZgVePR5Gy6YYwn9Gm7Kj0=) 14: eeYpshaoc5go--DBuuRmLZpBsio.roa (hash: 9Ypg180659MtxxUjCyOwRub9c14vNLr84izZxblP7gQ=) 15: giUGr98XTvMTapx-HcfkJZUS_QQ.roa (hash: t3Dcx8q3eGk8zI/z9A/Ebz1Oh7dW30YVpRQVHDQqIlA=) 16: nNGX_OCe8X9nXrEP34vII8SEf10.roa (hash: n1Og0cpU00h6IhKyI+ECnhLWs0U3hRjPdAcqH8CABIM=) 17: vIo5JZEbJy_j1F7Gy0x0-4XTOm4.roa (hash: aqC1tIrcI2MF2zcWVNBFSrIprB6SpbD2HGFhZaRj/MQ=) 18: wQyg8eA6lRREzJ9taIK7-ABN-Vk.roa (hash: 56Z2ikBVQqPH0LfM7ywhy1//SerrhxAPBdjzeQApODo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:18:e1:74:16:1d:df:4b:17:8d:8b:ec:b3:25:e4:88:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Oct 25 01:00:19 2025 GMT Not After : Oct 26 01:00:19 2025 GMT Subject: CN=6a57f0b20c2ec98db4913cc636b7078d28aa81bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:34:00:b2:bb:b6:a1:4d:9c:59:10:cf:3e:e0: 6f:9b:7b:72:31:5b:72:e2:93:cb:24:2e:58:2a:1f: f6:6f:b2:98:25:e4:6c:62:09:b6:65:0e:06:3c:83: 1b:f8:0e:24:b9:e6:13:df:f6:4a:54:1d:ab:d0:72: fe:ac:23:d7:31:ea:77:10:cb:53:ba:e5:4d:28:5a: 3e:1a:d8:de:3a:a2:d2:c7:21:03:60:cb:d0:8b:9f: 34:61:84:d5:4c:1f:a6:c0:59:0b:e1:44:61:7c:67: bd:6d:1e:47:ab:3e:33:5f:13:dd:c4:2e:89:90:5f: d7:d7:44:a1:72:0b:59:e8:3c:59:ad:ab:cf:66:17: ab:d4:21:84:39:33:b1:96:bb:06:65:02:4c:b7:5c: fa:b0:c3:b8:3a:4f:2e:ef:0e:9a:ba:7a:9b:60:4f: 9d:27:56:9e:54:c9:f0:ab:00:10:da:38:d3:05:29: 98:a9:27:b1:9a:60:c5:5d:83:1a:a8:15:d8:85:9a: 8b:38:17:ac:ed:52:37:54:b8:6d:d7:c4:12:2d:58: 14:65:2b:6e:d1:89:41:c4:15:fa:a1:9b:17:35:b0: 47:04:aa:ea:99:c2:ba:75:0a:bd:e8:97:31:26:3a: 5c:b4:ae:bb:12:1e:7b:02:c3:fe:5b:b7:c0:13:90: 66:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:57:F0:B2:0C:2E:C9:8D:B4:91:3C:C6:36:B7:07:8D:28:AA:81:BC X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:18:9e:2a:d8:07:35:ce:bb:d5:db:be:d9:2d:93:2d:f0:54: 53:05:a1:d8:56:6b:b4:01:e7:8a:74:50:40:95:42:3e:54:77: 9d:4b:38:ee:db:01:97:d3:82:bc:0f:31:77:ce:5a:a1:d7:fa: 53:55:6b:ab:54:da:a8:ba:0a:1a:77:11:cd:c1:8b:6d:61:28: 83:9e:a6:2e:cb:d1:79:9a:38:75:ed:7d:dc:f8:a7:01:5d:90: 43:89:69:9c:66:f0:7d:fb:af:51:6a:19:eb:2c:50:e3:d8:71: 94:84:28:1b:23:3c:39:cb:d6:fb:48:f2:59:b2:b0:21:ee:90: fc:10:00:cc:99:02:bf:82:4b:f9:f3:fb:2e:09:a7:a9:bd:13: cc:09:28:97:aa:7b:c2:66:47:c2:7d:50:33:48:72:78:50:35: 48:19:7d:1c:8f:93:9b:dd:68:f0:c0:f2:49:f9:94:c0:3a:78: f2:44:10:92:3b:77:67:5c:af:92:bb:97:4b:16:3a:24:b6:53: 5e:59:30:01:a8:dc:51:18:d7:f0:09:c9:0f:2f:06:44:42:d0: ca:c1:a4:06:b7:7a:a8:a8:69:7f:d8:19:a8:49:35:91:95:29: f1:75:de:61:3f:77:b6:38:3c:56:8b:a5:7d:dd:e5:e5:55:bf: 48:ef:a7:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoY4XQWHd9LF42L7LMl5IjLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjUxMDI1MDEwMDE5WhcNMjUxMDI2MDEwMDE5WjAzMTEwLwYDVQQD Eyg2YTU3ZjBiMjBjMmVjOThkYjQ5MTNjYzYzNmI3MDc4ZDI4YWE4MWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jQAsru2oU2cWRDPPuBvm3tyMVty 4pPLJC5YKh/2b7KYJeRsYgm2ZQ4GPIMb+A4kueYT3/ZKVB2r0HL+rCPXMep3EMtT uuVNKFo+GtjeOqLSxyEDYMvQi580YYTVTB+mwFkL4URhfGe9bR5Hqz4zXxPdxC6J kF/X10ShcgtZ6DxZravPZher1CGEOTOxlrsGZQJMt1z6sMO4Ok8u7w6aunqbYE+d J1aeVMnwqwAQ2jjTBSmYqSexmmDFXYMaqBXYhZqLOBes7VI3VLht18QSLVgUZStu 0YlBxBX6oZsXNbBHBKrqmcK6dQq96JcxJjpctK67Eh57AsP+W7fAE5BmvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpX8LIMLsmNtJE8xja3B40oqoG8MB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBieKtgH Nc671du+2S2TLfBUUwWh2FZrtAHninRQQJVCPlR3nUs47tsBl9OCvA8xd85aodf6 U1Vrq1TaqLoKGncRzcGLbWEog56mLsvReZo4de193PinAV2QQ4lpnGbwffuvUWoZ 6yxQ49hxlIQoGyM8OcvW+0jyWbKwIe6Q/BAAzJkCv4JL+fP7Lgmnqb0TzAkol6p7 wmZHwn1QM0hyeFA1SBl9HI+Tm91o8MDySfmUwDp48kQQkjt3Z1yvkruXSxY6JLZT XlkwAajcURjX8AnJDy8GRELQysGkBrd6qKhpf9gZqEk1kZUp8XXeYT93tjg8Voul fd3l5VW/SO+nZQ== -----END CERTIFICATE-----Generated at Sat Oct 25 09:01:11 2025 by rpki-client