$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: CbuF9aky4/WEikmX5IJAR8ai2L4msYf/2L3dATfLoGY= Subject key identifier: FA:9A:9A:18:97:73:4E:8B:BF:EA:13:7E:1A:E2:FE:93:D3:0D:21:82 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019A4F2B3F1059C1B56F5E042E9F068DC8E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 093C Signing time: Tue 04 Nov 2025 14:00:25 +0000 Manifest this update: Tue 04 Nov 2025 14:00:25 +0000 Manifest next update: Wed 05 Nov 2025 14:00:25 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: umrdL+D41DmOWLcSz2KVpYEWCIDoh3qZ2ZwEdKGdK3g=) 2: 5osuIpQEXkmgGGfabxgkobMCOqo.roa (hash: ar+Luee3A/qxuqFBW+KjI5NWMnxgfB2LrCoUMGMm2y0=) 3: 7y0HEBKtThwqpVnMqjdVrnLEi4E.roa (hash: 6/V4tWszZ+0oUo8YJ4mg3Pxu2rzylnwMTQjo5zLhoNg=) 4: BY0ulxbKjju4vLrdhG3t1EWUsfc.roa (hash: K5zGur7lx+aV24qdxwKfnGw/Mm79v7yGfl4MiAhAsZQ=) 5: EYqz9-lWcT6mAZDYhv76ihfxRKA.roa (hash: 2kj2lpyBuoRk5Uqc6kG2vMBRCERsonaSDs/n/J78Nlc=) 6: LB0RhZaeHc4lFeLZglNMj0M0iuc.roa (hash: pKzr9fhEjb+2hcFnGRNZ9yDdUriurScTg3ZqXErO5Fk=) 7: LebN_fB1s6ScKeJ5c8zfxUklaIc.roa (hash: ugIRy/GdUvkC8oivMaAEQB7yPRimuew/T3ig9FaE2mE=) 8: Pm3ij8drL7WRD0R4R54qP4eC7Q0.roa (hash: hzWkutnsJx/Qg99NS0sDlr/7EdarXvXso1X585eWACI=) 9: TEJEbJfLCSRRss_K_5H5CYFaiCg.roa (hash: M75oi001sE7d1H5/CUbAVgDs1DNoW5yTIFB3xJzgE24=) 10: TWprmIRYABwJKC3e_3_5wzunOVk.roa (hash: ax2e42jwFW+IhzbsKHYLodyYVLy/wsVmS87dwyQkShM=) 11: XQHVRGTqM3fRB_j_ijhUwjJs9Ug.roa (hash: fKPNzBl0e4tcVAHFnpIZK59mBTOB3H7FeF+MB2XfaW0=) 12: e50PKaKFcaW3uGMNUchzpEB18-M.roa (hash: c0PkOWIaLZSS8TffWgd4kYVYWuDWquopKeKw112DVMI=) 13: ecLZxlk5uOKtie8YZypau_dP7Nk.roa (hash: qDzztQzT4j41tAiYOJhicLZgVePR5Gy6YYwn9Gm7Kj0=) 14: eeYpshaoc5go--DBuuRmLZpBsio.roa (hash: 9Ypg180659MtxxUjCyOwRub9c14vNLr84izZxblP7gQ=) 15: giUGr98XTvMTapx-HcfkJZUS_QQ.roa (hash: t3Dcx8q3eGk8zI/z9A/Ebz1Oh7dW30YVpRQVHDQqIlA=) 16: nNGX_OCe8X9nXrEP34vII8SEf10.roa (hash: n1Og0cpU00h6IhKyI+ECnhLWs0U3hRjPdAcqH8CABIM=) 17: oZa7A9bUHsUKstgiUzlH19gEpms.roa (hash: WHSTqacnqXdrkaQLqyi0tS/CE8mZTZm3bc09Ls5SsEU=) 18: wQyg8eA6lRREzJ9taIK7-ABN-Vk.roa (hash: 56Z2ikBVQqPH0LfM7ywhy1//SerrhxAPBdjzeQApODo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:2b:3f:10:59:c1:b5:6f:5e:04:2e:9f:06:8d:c8:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Nov 4 14:00:25 2025 GMT Not After : Nov 5 14:00:25 2025 GMT Subject: CN=fa9a9a1897734e8bbfea137e1ae2fe93d30d2182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6e:56:2e:d8:48:a3:41:75:bb:a5:30:f9:f8: 2f:c3:a6:6d:37:3f:3d:b6:14:46:24:df:4f:64:84: 3d:35:68:84:3b:05:c1:e8:22:85:e4:8d:0f:f1:9e: 15:bb:a0:38:17:6c:33:a6:94:33:eb:f9:d7:59:56: 54:8d:90:96:a3:32:90:9f:b1:42:56:3e:47:27:54: d5:67:e5:ee:cc:bb:7f:fa:98:be:ab:08:92:a5:8b: 4d:c4:4a:a9:12:07:ee:98:6e:eb:b3:06:fb:1b:34: b8:45:12:f6:4b:6a:3a:57:fa:9f:ef:9a:37:f6:2c: 0e:1f:26:71:ac:cb:a8:36:e9:62:e2:a9:3f:15:e5: e5:b1:3a:52:54:62:20:b8:c1:35:d3:d5:cb:ac:8b: eb:c7:5a:7e:4a:d3:05:92:5a:02:ec:df:1d:a7:57: 71:85:e4:0d:8b:10:98:08:f6:62:22:19:b1:83:f5: 2b:7e:76:25:7c:f0:91:53:16:0c:93:77:48:df:f5: f3:b1:d5:37:bb:cd:c4:23:82:f2:93:82:75:13:b8: da:05:49:b3:52:06:48:68:63:20:2f:5f:32:03:d1: b8:96:e9:ae:93:f2:04:da:ef:58:10:9e:12:10:14: 7f:29:cf:ff:b5:1f:c6:af:38:87:68:60:f5:ea:39: a2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9A:9A:18:97:73:4E:8B:BF:EA:13:7E:1A:E2:FE:93:D3:0D:21:82 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:25:48:01:a2:cf:19:bf:91:f3:6b:65:ec:43:30:89:84:c3: 67:ab:09:6a:ac:c8:38:de:4c:a4:f9:10:60:57:f2:de:47:18: e8:7a:d0:9a:d3:a2:46:3e:8d:82:7c:bf:ac:61:8d:03:6a:3a: a9:38:d7:4d:d3:cd:2b:ef:4e:4f:07:19:61:c9:2e:b6:f0:a4: 47:64:18:96:d7:d0:f4:21:3f:da:48:06:a6:9f:90:e4:53:a9: 7e:49:ab:42:b4:46:84:4e:c4:95:7b:d0:52:8a:28:70:8d:40: 55:ce:e4:df:0d:93:01:b2:87:88:4f:ef:95:78:62:ac:e9:19: 90:f5:f2:4f:b4:a7:a6:d2:ea:52:f1:ca:10:df:3a:69:60:e1: b5:54:04:50:a8:0b:90:7e:ce:be:b1:6f:39:8c:d0:4e:87:5d: 20:05:c8:ca:93:14:0d:d1:ab:11:a3:c3:ba:d8:b7:7a:dd:2f: cd:72:8d:ab:3a:3f:b3:d5:d8:a7:2e:f9:6a:3d:9b:4c:80:95: 0b:c2:ab:82:df:e1:2a:35:5b:dd:e1:f3:ec:81:69:9d:55:77: 8b:c2:c4:71:66:ac:9f:b0:c0:19:43:0b:47:c7:02:2b:81:b3: 69:0f:e2:aa:69:89:3a:b9:5c:58:e9:03:79:89:cb:1b:27:48: 61:20:6b:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPKz8QWcG1b14ELp8GjcjkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjUxMTA0MTQwMDI1WhcNMjUxMTA1MTQwMDI1WjAzMTEwLwYDVQQD EyhmYTlhOWExODk3NzM0ZThiYmZlYTEzN2UxYWUyZmU5M2QzMGQyMTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG5WLthIo0F1u6Uw+fgvw6ZtNz89 thRGJN9PZIQ9NWiEOwXB6CKF5I0P8Z4Vu6A4F2wzppQz6/nXWVZUjZCWozKQn7FC Vj5HJ1TVZ+XuzLt/+pi+qwiSpYtNxEqpEgfumG7rswb7GzS4RRL2S2o6V/qf75o3 9iwOHyZxrMuoNuli4qk/FeXlsTpSVGIguME109XLrIvrx1p+StMFkloC7N8dp1dx heQNixCYCPZiIhmxg/UrfnYlfPCRUxYMk3dI3/XzsdU3u83EI4Lyk4J1E7jaBUmz UgZIaGMgL18yA9G4lumuk/IE2u9YEJ4SEBR/Kc//tR/GrziHaGD16jmi7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqamhiXc06Lv+oTfhri/pPTDSGCMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsCVIAaLP Gb+R82tl7EMwiYTDZ6sJaqzION5MpPkQYFfy3kcY6HrQmtOiRj6Ngny/rGGNA2o6 qTjXTdPNK+9OTwcZYckutvCkR2QYltfQ9CE/2kgGpp+Q5FOpfkmrQrRGhE7ElXvQ UooocI1AVc7k3w2TAbKHiE/vlXhirOkZkPXyT7SnptLqUvHKEN86aWDhtVQEUKgL kH7OvrFvOYzQToddIAXIypMUDdGrEaPDuti3et0vzXKNqzo/s9XYpy75aj2bTICV C8Krgt/hKjVb3eHz7IFpnVV3i8LEcWasn7DAGUMLR8cCK4GzaQ/iqmmJOrlcWOkD eYnLGydIYSBrWA== -----END CERTIFICATE-----Generated at Tue Nov 4 17:59:05 2025 by rpki-client