$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: y7YETo0GDywqSByw29pPKjN8flZgA+MilTueAL4ys10= Subject key identifier: E0:FA:9C:0F:7D:6E:6D:89:F6:09:91:DE:E3:5E:32:08:F5:7D:50:F8 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 01974A7B63157531FBD6A917B28094B0DC6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 079F Signing time: Sat 07 Jun 2025 13:01:29 +0000 Manifest this update: Sat 07 Jun 2025 13:01:29 +0000 Manifest next update: Sun 08 Jun 2025 13:01:29 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: LSc6zlOS+vGScgTe6MyHzvS+PrcwGHNVQwFDepWi8+4=) 2: 5osuIpQEXkmgGGfabxgkobMCOqo.roa (hash: ar+Luee3A/qxuqFBW+KjI5NWMnxgfB2LrCoUMGMm2y0=) 3: CdQL_rNfT4mruJeuRhVd0hpPdps.roa (hash: Z/uUo7J+RuPWC8u1ha2F9ldd1L0f2IgJnPvQNnlMC1w=) 4: EYqz9-lWcT6mAZDYhv76ihfxRKA.roa (hash: 2kj2lpyBuoRk5Uqc6kG2vMBRCERsonaSDs/n/J78Nlc=) 5: IZB5fE3vCYPzm412fZZk7uYbwgE.roa (hash: cWCrnSM11F8k4l8vziWTFuB3S6ERgGRGnqCvZnuNDXk=) 6: LB0RhZaeHc4lFeLZglNMj0M0iuc.roa (hash: pKzr9fhEjb+2hcFnGRNZ9yDdUriurScTg3ZqXErO5Fk=) 7: LebN_fB1s6ScKeJ5c8zfxUklaIc.roa (hash: ugIRy/GdUvkC8oivMaAEQB7yPRimuew/T3ig9FaE2mE=) 8: TWprmIRYABwJKC3e_3_5wzunOVk.roa (hash: ax2e42jwFW+IhzbsKHYLodyYVLy/wsVmS87dwyQkShM=) 9: XQHVRGTqM3fRB_j_ijhUwjJs9Ug.roa (hash: fKPNzBl0e4tcVAHFnpIZK59mBTOB3H7FeF+MB2XfaW0=) 10: e50PKaKFcaW3uGMNUchzpEB18-M.roa (hash: c0PkOWIaLZSS8TffWgd4kYVYWuDWquopKeKw112DVMI=) 11: ecLZxlk5uOKtie8YZypau_dP7Nk.roa (hash: qDzztQzT4j41tAiYOJhicLZgVePR5Gy6YYwn9Gm7Kj0=) 12: eeYpshaoc5go--DBuuRmLZpBsio.roa (hash: 9Ypg180659MtxxUjCyOwRub9c14vNLr84izZxblP7gQ=) 13: fp7iaq3w3IK7xxC4hTxOHXlgQdo.roa (hash: IIdoboRyB6xVt9Ub/S//LkCzsgiZ4eA93ZNjm/kWoFw=) 14: giUGr98XTvMTapx-HcfkJZUS_QQ.roa (hash: t3Dcx8q3eGk8zI/z9A/Ebz1Oh7dW30YVpRQVHDQqIlA=) 15: lSpQXF77aOd5aaWL7y9AyYlQaWs.roa (hash: k9FWEbwffQtuSyIeXa8qgZ8XemL3dT9nYO5Khh1P6zU=) 16: nNGX_OCe8X9nXrEP34vII8SEf10.roa (hash: n1Og0cpU00h6IhKyI+ECnhLWs0U3hRjPdAcqH8CABIM=) 17: tcp-Msodt7Yoyc_U-JzWb4RQflg.roa (hash: 2O16WNiH/chbI3skghuISKeRLWAnGH5be6qCPHCOEPw=) 18: vIo5JZEbJy_j1F7Gy0x0-4XTOm4.roa (hash: aqC1tIrcI2MF2zcWVNBFSrIprB6SpbD2HGFhZaRj/MQ=) 19: wQyg8eA6lRREzJ9taIK7-ABN-Vk.roa (hash: 56Z2ikBVQqPH0LfM7ywhy1//SerrhxAPBdjzeQApODo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 11:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4a:7b:63:15:75:31:fb:d6:a9:17:b2:80:94:b0:dc:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Jun 7 13:01:29 2025 GMT Not After : Jun 8 13:01:29 2025 GMT Subject: CN=e0fa9c0f7d6e6d89f60991dee35e3208f57d50f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8b:a0:0c:93:86:43:96:0b:09:1d:6e:6d:3b: 27:26:60:29:26:76:89:5c:3c:e8:3b:52:9a:ce:3a: 5c:62:7e:3e:c9:24:f7:2f:be:cf:e6:6e:47:a2:02: 99:85:90:6b:f4:e2:cf:72:fa:9e:61:09:c4:2a:9a: 1f:25:8f:bb:ca:f0:21:97:f0:86:fa:c0:19:7a:0f: c4:75:af:f3:0f:81:aa:f5:d9:fe:a1:80:73:4d:27: 63:98:a5:7a:0a:da:af:d7:d7:63:df:a8:c9:2b:9a: e1:f2:ae:61:b5:dc:9e:86:ec:f8:db:52:f0:1d:9c: c6:d5:24:39:dc:a3:65:5c:f8:eb:c2:a0:fa:ce:a7: 25:f0:e8:b7:bb:7d:77:52:97:7e:9c:2e:5f:55:88: d9:9c:be:39:f2:b2:ef:01:d2:a0:25:83:22:0a:ef: 33:a3:de:9f:31:8a:43:12:77:e4:22:30:4a:da:a0: 80:28:ca:27:4d:a2:18:a0:3c:2f:3d:16:05:5c:fa: 4f:1c:5d:e7:d8:e8:08:f0:ca:29:a4:c8:72:75:dc: ed:aa:24:4b:f2:e7:7e:7c:08:1b:dd:4c:af:d9:fe: 0e:16:ea:48:df:cc:14:52:15:81:3c:b2:f7:fa:9c: 25:74:c1:7b:7a:9b:83:fa:0d:0f:e4:52:a2:9a:8d: ba:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FA:9C:0F:7D:6E:6D:89:F6:09:91:DE:E3:5E:32:08:F5:7D:50:F8 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:41:e1:fd:d4:33:55:1d:e3:5e:3f:18:e6:cc:cb:68:b9:f9: 48:4e:61:52:a9:be:da:82:4d:85:b2:a1:08:31:2c:27:25:6d: db:d6:00:26:8a:67:7e:08:2f:82:2e:fb:d0:bd:dd:bd:ed:c7: 7d:bd:13:5d:1a:c6:10:0d:01:be:99:9c:56:55:b7:07:ee:ba: 6b:71:b1:42:e7:74:89:15:b7:93:11:9a:78:14:f7:58:ae:0b: eb:46:f7:ff:76:00:df:22:a7:f1:43:7c:bb:68:dc:55:2b:14: 5f:65:ac:b5:51:5f:30:0d:4e:8f:3b:be:38:6e:2f:01:ff:ae: 07:9a:b6:ca:f2:7f:7e:51:0e:bc:54:97:5a:e1:69:55:d3:01: 8f:00:50:33:2f:ee:f6:73:dd:5e:89:50:7b:bb:12:fe:6a:0a: 3f:e2:c7:7d:45:4d:12:65:e7:bc:64:76:82:fe:e9:97:1a:ff: 2b:66:11:be:69:82:b2:d2:3c:7e:0f:55:83:bb:4c:8d:39:c3: 1a:75:d7:31:b5:74:14:5a:36:11:a0:a4:30:99:8e:49:aa:23: 77:ee:17:6b:96:0f:86:08:7b:83:11:35:9c:8c:ff:d3:6f:3e: 1a:95:5f:4b:6c:8a:8a:f5:6c:43:c4:15:e6:b3:39:cf:dd:55: c6:f3:3a:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdKe2MVdTH71qkXsoCUsNxuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjUwNjA3MTMwMTI5WhcNMjUwNjA4MTMwMTI5WjAzMTEwLwYDVQQD EyhlMGZhOWMwZjdkNmU2ZDg5ZjYwOTkxZGVlMzVlMzIwOGY1N2Q1MGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyougDJOGQ5YLCR1ubTsnJmApJnaJ XDzoO1KazjpcYn4+yST3L77P5m5HogKZhZBr9OLPcvqeYQnEKpofJY+7yvAhl/CG +sAZeg/Eda/zD4Gq9dn+oYBzTSdjmKV6Ctqv19dj36jJK5rh8q5htdyehuz421Lw HZzG1SQ53KNlXPjrwqD6zqcl8Oi3u313Upd+nC5fVYjZnL458rLvAdKgJYMiCu8z o96fMYpDEnfkIjBK2qCAKMonTaIYoDwvPRYFXPpPHF3n2OgI8MoppMhyddztqiRL 8ud+fAgb3Uyv2f4OFupI38wUUhWBPLL3+pwldMF7epuD+g0P5FKimo26swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOD6nA99bm2J9gmR3uNeMgj1fVD4MB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0Hh/dQz VR3jXj8Y5szLaLn5SE5hUqm+2oJNhbKhCDEsJyVt29YAJopnfggvgi770L3dve3H fb0TXRrGEA0BvpmcVlW3B+66a3GxQud0iRW3kxGaeBT3WK4L60b3/3YA3yKn8UN8 u2jcVSsUX2WstVFfMA1Ojzu+OG4vAf+uB5q2yvJ/flEOvFSXWuFpVdMBjwBQMy/u 9nPdXolQe7sS/moKP+LHfUVNEmXnvGR2gv7plxr/K2YRvmmCstI8fg9Vg7tMjTnD GnXXMbV0FFo2EaCkMJmOSaojd+4Xa5YPhgh7gxE1nIz/028+GpVfS2yKivVsQ8QV 5rM5z91VxvM6EA== -----END CERTIFICATE-----Generated at Sat Jun 7 22:39:14 2025 by rpki-client