$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: 3JP3Zp8Ay0kQlDOHETftDCjHQb4iqG/Q6fWipsp77NE= Subject key identifier: CB:33:59:93:FB:C3:56:F7:9C:52:87:D3:D6:04:BF:DB:37:13:58:9B Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 0198752B5705EAA1D2CA27C89740B188A4A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 083E Signing time: Mon 04 Aug 2025 13:00:31 +0000 Manifest this update: Mon 04 Aug 2025 13:00:31 +0000 Manifest next update: Tue 05 Aug 2025 13:00:31 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: XqBVerOk9qgetsQMC7mRsMSjIq4I17RfT9EW6HZ1Jyg=) 2: 5osuIpQEXkmgGGfabxgkobMCOqo.roa (hash: ar+Luee3A/qxuqFBW+KjI5NWMnxgfB2LrCoUMGMm2y0=) 3: BY0ulxbKjju4vLrdhG3t1EWUsfc.roa (hash: K5zGur7lx+aV24qdxwKfnGw/Mm79v7yGfl4MiAhAsZQ=) 4: EYqz9-lWcT6mAZDYhv76ihfxRKA.roa (hash: 2kj2lpyBuoRk5Uqc6kG2vMBRCERsonaSDs/n/J78Nlc=) 5: IZB5fE3vCYPzm412fZZk7uYbwgE.roa (hash: cWCrnSM11F8k4l8vziWTFuB3S6ERgGRGnqCvZnuNDXk=) 6: LB0RhZaeHc4lFeLZglNMj0M0iuc.roa (hash: pKzr9fhEjb+2hcFnGRNZ9yDdUriurScTg3ZqXErO5Fk=) 7: LebN_fB1s6ScKeJ5c8zfxUklaIc.roa (hash: ugIRy/GdUvkC8oivMaAEQB7yPRimuew/T3ig9FaE2mE=) 8: NnqvQhUaUP2DJi_WZAMSKo0P-OQ.roa (hash: nk529TsYCvVQjH8mDtUSTqsATbfQa7whuncsuwTHiRc=) 9: Pm3ij8drL7WRD0R4R54qP4eC7Q0.roa (hash: hzWkutnsJx/Qg99NS0sDlr/7EdarXvXso1X585eWACI=) 10: TWprmIRYABwJKC3e_3_5wzunOVk.roa (hash: ax2e42jwFW+IhzbsKHYLodyYVLy/wsVmS87dwyQkShM=) 11: XQHVRGTqM3fRB_j_ijhUwjJs9Ug.roa (hash: fKPNzBl0e4tcVAHFnpIZK59mBTOB3H7FeF+MB2XfaW0=) 12: e50PKaKFcaW3uGMNUchzpEB18-M.roa (hash: c0PkOWIaLZSS8TffWgd4kYVYWuDWquopKeKw112DVMI=) 13: ecLZxlk5uOKtie8YZypau_dP7Nk.roa (hash: qDzztQzT4j41tAiYOJhicLZgVePR5Gy6YYwn9Gm7Kj0=) 14: eeYpshaoc5go--DBuuRmLZpBsio.roa (hash: 9Ypg180659MtxxUjCyOwRub9c14vNLr84izZxblP7gQ=) 15: fp7iaq3w3IK7xxC4hTxOHXlgQdo.roa (hash: IIdoboRyB6xVt9Ub/S//LkCzsgiZ4eA93ZNjm/kWoFw=) 16: giUGr98XTvMTapx-HcfkJZUS_QQ.roa (hash: t3Dcx8q3eGk8zI/z9A/Ebz1Oh7dW30YVpRQVHDQqIlA=) 17: nNGX_OCe8X9nXrEP34vII8SEf10.roa (hash: n1Og0cpU00h6IhKyI+ECnhLWs0U3hRjPdAcqH8CABIM=) 18: vIo5JZEbJy_j1F7Gy0x0-4XTOm4.roa (hash: aqC1tIrcI2MF2zcWVNBFSrIprB6SpbD2HGFhZaRj/MQ=) 19: wQyg8eA6lRREzJ9taIK7-ABN-Vk.roa (hash: 56Z2ikBVQqPH0LfM7ywhy1//SerrhxAPBdjzeQApODo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:75:2b:57:05:ea:a1:d2:ca:27:c8:97:40:b1:88:a4:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Aug 4 13:00:31 2025 GMT Not After : Aug 5 13:00:31 2025 GMT Subject: CN=cb335993fbc356f79c5287d3d604bfdb3713589b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1c:1b:69:d6:7e:cc:cb:5a:0a:e1:6e:c8:da: 3c:97:8d:e0:bd:b0:40:39:9a:8e:07:11:62:b0:b7: b3:89:e8:50:b7:37:af:ec:40:0d:65:9a:81:1c:91: e4:7a:2e:84:59:ba:17:0a:f1:cd:ef:ef:f2:0b:10: 67:5d:ff:f6:3a:07:df:e5:02:17:38:24:37:9f:40: a5:48:07:dc:c3:91:5f:a9:00:61:7e:a7:f5:20:a7: 59:d8:1a:16:45:5d:04:d4:12:c1:71:85:17:bb:17: bc:32:74:e1:f7:e4:26:db:39:9c:03:a0:25:3a:f6: a7:d0:1b:76:d9:60:c6:fc:e4:9e:b5:41:fa:b6:48: 82:f5:ae:e8:64:5b:1b:93:d0:5f:6a:cb:b3:26:d5: c6:0c:53:7e:c8:7c:90:a8:c1:16:d2:d7:3a:da:40: 38:8e:da:36:52:2a:44:20:e7:c5:66:b1:ea:9b:96: b0:ab:e1:e3:6e:1d:2a:63:af:06:3c:5d:62:28:39: c5:78:b9:1e:fc:6e:17:44:22:2e:e0:cb:bd:3f:1f: c7:46:d4:0c:a5:fd:9a:0a:7d:6d:3a:b1:ea:b8:44: 96:18:fd:d1:54:98:ef:d2:84:41:f8:e0:76:0f:0a: 63:ee:48:2c:2d:96:b9:04:1f:c1:72:10:70:6d:47: 92:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:33:59:93:FB:C3:56:F7:9C:52:87:D3:D6:04:BF:DB:37:13:58:9B X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:63:31:64:8e:ce:cf:99:46:30:70:32:6f:a9:53:3f:bc:51: 75:d9:09:27:27:c5:82:77:9a:99:25:e2:2e:8a:ae:fe:c7:fb: 6a:04:85:2c:b7:d3:db:ff:8e:2a:06:ba:46:e6:1b:21:5b:b4: 5d:cd:5e:53:4e:8f:a4:8a:87:94:e0:2e:41:00:fd:26:c9:2e: 16:bd:ca:32:9f:7f:4b:61:6e:68:46:d3:72:55:78:d6:65:c6: f4:0d:2b:71:8a:9c:92:26:86:fa:39:43:dd:6c:8d:2c:16:c9: f1:45:88:8e:98:a8:44:c8:85:81:50:5f:02:65:86:54:b5:a2: bb:be:48:6f:c8:4e:d3:3d:d0:79:93:a7:0a:ce:64:3f:98:9d: 88:ad:d6:af:fb:bb:4a:1f:0a:9b:90:77:1f:57:09:f3:27:41: bf:09:cb:fa:a9:57:db:5e:b9:71:31:a4:a7:44:64:ab:8c:35: 97:35:40:bc:f6:41:ad:b6:1f:92:48:c8:de:94:22:49:be:e3: fa:06:c3:49:cf:af:40:bd:e0:66:96:eb:6c:c0:39:6c:4e:2e: 75:5c:2c:47:38:fe:e1:ed:75:91:b7:62:45:f7:a3:76:91:75: 47:53:dd:0f:c7:ef:c7:86:19:59:48:b7:68:5d:39:67:b8:56: da:2d:ad:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh1K1cF6qHSyifIl0CxiKSiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjUwODA0MTMwMDMxWhcNMjUwODA1MTMwMDMxWjAzMTEwLwYDVQQD EyhjYjMzNTk5M2ZiYzM1NmY3OWM1Mjg3ZDNkNjA0YmZkYjM3MTM1ODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BwbadZ+zMtaCuFuyNo8l43gvbBA OZqOBxFisLeziehQtzev7EANZZqBHJHkei6EWboXCvHN7+/yCxBnXf/2Ogff5QIX OCQ3n0ClSAfcw5FfqQBhfqf1IKdZ2BoWRV0E1BLBcYUXuxe8MnTh9+Qm2zmcA6Al Ovan0Bt22WDG/OSetUH6tkiC9a7oZFsbk9BfasuzJtXGDFN+yHyQqMEW0tc62kA4 jto2UipEIOfFZrHqm5awq+Hjbh0qY68GPF1iKDnFeLke/G4XRCIu4Mu9Px/HRtQM pf2aCn1tOrHquESWGP3RVJjv0oRB+OB2Dwpj7kgsLZa5BB/BchBwbUeSrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMszWZP7w1b3nFKH09YEv9s3E1ibMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApWMxZI7O z5lGMHAyb6lTP7xRddkJJyfFgneamSXiLoqu/sf7agSFLLfT2/+OKga6RuYbIVu0 Xc1eU06PpIqHlOAuQQD9JskuFr3KMp9/S2FuaEbTclV41mXG9A0rcYqckiaG+jlD 3WyNLBbJ8UWIjpioRMiFgVBfAmWGVLWiu75Ib8hO0z3QeZOnCs5kP5idiK3Wr/u7 Sh8Km5B3H1cJ8ydBvwnL+qlX2165cTGkp0Rkq4w1lzVAvPZBrbYfkkjI3pQiSb7j +gbDSc+vQL3gZpbrbMA5bE4udVwsRzj+4e11kbdiRfejdpF1R1PdD8fvx4YZWUi3 aF05Z7hW2i2tLA== -----END CERTIFICATE-----Generated at Mon Aug 4 18:37:01 2025 by rpki-client