$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: ZNG3DaAUTx8D+9gL8tmX7HAfEiH+xBmoneok9JMskIM= Subject key identifier: DE:8E:08:A4:AA:33:B7:F5:0F:9C:2A:3A:6F:A7:66:9F:8A:E5:F3:6C Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 01976D3E452FB72B4E32777C11FC64017551 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 07B1 Signing time: Sat 14 Jun 2025 07:01:26 +0000 Manifest this update: Sat 14 Jun 2025 07:01:26 +0000 Manifest next update: Sun 15 Jun 2025 07:01:26 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: OvKUMpYl1F+AbdMzEMEZ6dz9ALDkCari/Cln7bxribM=) 2: 5osuIpQEXkmgGGfabxgkobMCOqo.roa (hash: ar+Luee3A/qxuqFBW+KjI5NWMnxgfB2LrCoUMGMm2y0=) 3: CdQL_rNfT4mruJeuRhVd0hpPdps.roa (hash: Z/uUo7J+RuPWC8u1ha2F9ldd1L0f2IgJnPvQNnlMC1w=) 4: EYqz9-lWcT6mAZDYhv76ihfxRKA.roa (hash: 2kj2lpyBuoRk5Uqc6kG2vMBRCERsonaSDs/n/J78Nlc=) 5: IZB5fE3vCYPzm412fZZk7uYbwgE.roa (hash: cWCrnSM11F8k4l8vziWTFuB3S6ERgGRGnqCvZnuNDXk=) 6: LB0RhZaeHc4lFeLZglNMj0M0iuc.roa (hash: pKzr9fhEjb+2hcFnGRNZ9yDdUriurScTg3ZqXErO5Fk=) 7: LebN_fB1s6ScKeJ5c8zfxUklaIc.roa (hash: ugIRy/GdUvkC8oivMaAEQB7yPRimuew/T3ig9FaE2mE=) 8: TWprmIRYABwJKC3e_3_5wzunOVk.roa (hash: ax2e42jwFW+IhzbsKHYLodyYVLy/wsVmS87dwyQkShM=) 9: XQHVRGTqM3fRB_j_ijhUwjJs9Ug.roa (hash: fKPNzBl0e4tcVAHFnpIZK59mBTOB3H7FeF+MB2XfaW0=) 10: e50PKaKFcaW3uGMNUchzpEB18-M.roa (hash: c0PkOWIaLZSS8TffWgd4kYVYWuDWquopKeKw112DVMI=) 11: ecLZxlk5uOKtie8YZypau_dP7Nk.roa (hash: qDzztQzT4j41tAiYOJhicLZgVePR5Gy6YYwn9Gm7Kj0=) 12: eeYpshaoc5go--DBuuRmLZpBsio.roa (hash: 9Ypg180659MtxxUjCyOwRub9c14vNLr84izZxblP7gQ=) 13: fp7iaq3w3IK7xxC4hTxOHXlgQdo.roa (hash: IIdoboRyB6xVt9Ub/S//LkCzsgiZ4eA93ZNjm/kWoFw=) 14: giUGr98XTvMTapx-HcfkJZUS_QQ.roa (hash: t3Dcx8q3eGk8zI/z9A/Ebz1Oh7dW30YVpRQVHDQqIlA=) 15: lSpQXF77aOd5aaWL7y9AyYlQaWs.roa (hash: k9FWEbwffQtuSyIeXa8qgZ8XemL3dT9nYO5Khh1P6zU=) 16: nNGX_OCe8X9nXrEP34vII8SEf10.roa (hash: n1Og0cpU00h6IhKyI+ECnhLWs0U3hRjPdAcqH8CABIM=) 17: tcp-Msodt7Yoyc_U-JzWb4RQflg.roa (hash: 2O16WNiH/chbI3skghuISKeRLWAnGH5be6qCPHCOEPw=) 18: vIo5JZEbJy_j1F7Gy0x0-4XTOm4.roa (hash: aqC1tIrcI2MF2zcWVNBFSrIprB6SpbD2HGFhZaRj/MQ=) 19: wQyg8eA6lRREzJ9taIK7-ABN-Vk.roa (hash: 56Z2ikBVQqPH0LfM7ywhy1//SerrhxAPBdjzeQApODo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6d:3e:45:2f:b7:2b:4e:32:77:7c:11:fc:64:01:75:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Jun 14 07:01:26 2025 GMT Not After : Jun 15 07:01:26 2025 GMT Subject: CN=de8e08a4aa33b7f50f9c2a3a6fa7669f8ae5f36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:aa:d4:89:f4:77:14:68:7c:4b:e0:29:0b:33: 45:ef:29:1c:a4:36:a7:63:82:9d:9c:f5:79:9e:d3: 85:aa:8a:90:50:62:58:2f:0b:48:0e:44:8f:13:fb: 72:d5:ca:27:3b:21:05:f9:dc:c2:c4:a7:e7:46:5f: 14:40:87:22:f5:05:50:53:50:57:b8:9c:ce:42:fa: 01:21:ea:06:ab:b2:3b:95:46:42:87:8c:e8:25:49: 2a:6f:42:1a:76:f9:bb:70:61:3c:fe:93:84:70:d9: 3d:29:f4:bd:7d:62:8a:6d:ae:3a:da:45:72:46:b5: c6:96:aa:88:02:02:32:7b:17:3a:bf:f0:8a:eb:cf: 84:5e:fb:bc:9a:de:9c:28:4e:ea:8a:d7:0e:22:5e: b5:53:b9:1c:8a:24:7c:ba:d5:34:fd:0e:48:0b:22: 2f:ec:c0:e1:73:f4:e3:80:25:97:0b:70:e0:e4:ec: 6f:bc:04:ef:49:1a:e3:8a:6f:09:c4:3d:58:e2:65: f3:7b:e5:b9:0d:04:b3:31:7d:8e:8d:77:6b:a4:3c: 31:7e:02:6a:13:2b:ad:8e:a8:42:19:d6:0e:d2:b8: dc:9c:8a:fa:a6:61:cd:d6:60:b6:89:c6:6e:91:e6: 8e:97:d5:7b:6f:56:12:84:f7:a7:be:af:54:e9:70: 0c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8E:08:A4:AA:33:B7:F5:0F:9C:2A:3A:6F:A7:66:9F:8A:E5:F3:6C X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:de:1f:74:46:57:75:2c:40:91:27:f7:fa:82:92:82:94:12: 97:c5:bd:00:04:1c:ff:61:2b:7a:c9:bb:3e:78:59:db:d0:3f: c5:04:24:53:a5:f1:8b:31:e1:de:9f:a7:be:c0:61:89:cf:05: d5:99:3d:fc:53:17:f6:5d:6a:9c:43:e0:e2:67:50:92:f9:d2: 3b:13:94:d1:79:55:21:84:2e:4f:c3:51:fa:87:39:24:32:32: 1b:1a:f1:45:3e:0a:a7:0c:b7:fd:02:01:1c:f1:c2:b6:4a:e0: a8:45:75:47:02:20:44:b2:ac:a3:06:83:ff:1e:80:98:1b:61: 16:40:7f:32:ca:7b:8b:ca:f1:cf:b5:32:ff:a7:59:8f:36:21: ed:c3:ab:6d:ca:b9:42:b8:dd:34:f1:8f:77:44:b5:1f:84:46: eb:39:20:e0:95:e2:fa:85:8a:33:47:c3:ee:25:e5:f5:ce:04: 55:71:cd:0b:b9:b3:40:ea:cf:78:93:0e:5f:8b:65:53:ee:95: 5c:82:f1:ca:a3:6e:e6:f3:f5:4b:b3:71:64:0f:b3:5e:79:80: 1d:dc:53:21:fb:7f:a8:78:5e:8e:46:48:6d:c6:f0:c4:bd:81: 24:f1:6c:d8:01:51:95:79:72:f1:9d:80:ff:63:4d:82:62:38: 88:c2:4e:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdtPkUvtytOMnd8EfxkAXVRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjUwNjE0MDcwMTI2WhcNMjUwNjE1MDcwMTI2WjAzMTEwLwYDVQQD EyhkZThlMDhhNGFhMzNiN2Y1MGY5YzJhM2E2ZmE3NjY5ZjhhZTVmMzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAharUifR3FGh8S+ApCzNF7ykcpDan Y4KdnPV5ntOFqoqQUGJYLwtIDkSPE/ty1conOyEF+dzCxKfnRl8UQIci9QVQU1BX uJzOQvoBIeoGq7I7lUZCh4zoJUkqb0Iadvm7cGE8/pOEcNk9KfS9fWKKba462kVy RrXGlqqIAgIyexc6v/CK68+EXvu8mt6cKE7qitcOIl61U7kciiR8utU0/Q5ICyIv 7MDhc/TjgCWXC3Dg5OxvvATvSRrjim8JxD1Y4mXze+W5DQSzMX2OjXdrpDwxfgJq EyutjqhCGdYO0rjcnIr6pmHN1mC2icZukeaOl9V7b1YShPenvq9U6XAMyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6OCKSqM7f1D5wqOm+nZp+K5fNsMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdt4fdEZX dSxAkSf3+oKSgpQSl8W9AAQc/2Eresm7PnhZ29A/xQQkU6XxizHh3p+nvsBhic8F 1Zk9/FMX9l1qnEPg4mdQkvnSOxOU0XlVIYQuT8NR+oc5JDIyGxrxRT4Kpwy3/QIB HPHCtkrgqEV1RwIgRLKsowaD/x6AmBthFkB/Msp7i8rxz7Uy/6dZjzYh7cOrbcq5 QrjdNPGPd0S1H4RG6zkg4JXi+oWKM0fD7iXl9c4EVXHNC7mzQOrPeJMOX4tlU+6V XILxyqNu5vP1S7NxZA+zXnmAHdxTIft/qHhejkZIbcbwxL2BJPFs2AFRlXly8Z2A /2NNgmI4iMJOSg== -----END CERTIFICATE-----Generated at Sat Jun 14 11:24:13 2025 by rpki-client