$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: gYBXd+kvtU9t7R1ynZTVdjo/eAWp81QK2yi4Uv3FOe4= Subject key identifier: 1D:D1:BC:91:B7:29:3F:A1:4F:82:D6:AA:0C:AE:5B:5A:E2:A6:65:32 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019FA93E51B0C4C391C86426201B8980E47F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0C09 Signing time: Tue 28 Jul 2026 15:01:01 +0000 Manifest this update: Tue 28 Jul 2026 15:01:01 +0000 Manifest next update: Wed 29 Jul 2026 15:01:01 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: 8YHTaqSkx6gtMXLgu2bmn8ofKWukfNB87Io+TOofT+I=) 2: 8SFZw8BMAj1xVhdMMCCs15uYf7Q.roa (hash: 9ezJKc1nhlgcq48JgfbfaaUeNcn0fAJH9w4Rv8ctllY=) 3: 9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa (hash: xNWcTes1rfng2Xoo1q/dVG7NMZ8Ww7cO2s1+2Z0yWlA=) 4: DxhjENvG5OYUJvVZsM8qLwRgMX8.roa (hash: AXiwp6mvVukrTKFIByO8+UyYRveHX4/Xn2+jsMwO1nY=) 5: E9APco7X5s-y_ndtROFoXtIewVo.roa (hash: ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=) 6: Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa (hash: MmpGqyxYpKQIYnf6OI/K/GvwLTjCCsiguVNJ0TpVI8A=) 7: MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa (hash: KbrH7LcYaa394FA8k0S5gWJFBJdKc28amMjP1aLjN/M=) 8: PEzreo_YaPTvZmeHLlLFR5kVjWY.roa (hash: eXeiZ79p8Uap0Wt90BnDGjxDFdIM/UYDOLfaEdoVu7k=) 9: SAA7qyjcW84McQBC6YBfHzblJfA.roa (hash: dbjWwV6RFntCa8n+N5y1CE7UmL5X6zdxSBIazMuF9gY=) 10: SAOjAfmVta9T_Ls7ykRFr8U5SYI.roa (hash: r10sWadtpWdod9WG4HGHqPD7qRwz46PwcZV2+I/tlNM=) 11: YsTwicH1tOydKXwijh3NKIAFLS0.roa (hash: a4Esas1VFYhKGMF7C/m0rI+wkbXft/Q6b4xO9aKQj64=) 12: eExRkfPu0Gwge_hF5bZ87TMqJSc.roa (hash: GbCahJADgly+/ikqsEm4KY5sCrzG5FQDBoPzkX+HqA0=) 13: gkcGn3ENPLtTEnDqjUqXbmSRgng.roa (hash: U6oenFeqTjFDCfsFo9/G7/iGAGLsgJkrsjxoMp46oSE=) 14: k9h8QS5gEzXpkcVVNe-dAvt8_v8.roa (hash: zBG+kHBGYstuoXqKiYKOkY+fZi1x5xlU5harwXVVNII=) 15: py8kH9n_2-OnxW6spEMi6oEGK_w.roa (hash: GsXp7eLTo1qCtBBCoDFQgU12gK3EvVtwUdWIN2dH9CY=) 16: rhGX_5s3UmZjlpks20dW8Uwf5xY.roa (hash: JBHH+NoWY0D+hMChID36tmQIbWsMkAg53XmNFpTIjc4=) 17: rw4pdFSTNcqR4HSLH99TYBGU5M8.roa (hash: ArUMSjBrgFsVWtaXlYqazL0AVRoBUJiJ/pOtvA7ObNw=) 18: zFqREBgVNzI2E15fdQInesLKPTw.roa (hash: NsrPAKNCirfx6K/YKvvDtbYP5Q+iM+dl/3GgSwcg4O8=) 19: zn4F63TYgWqEf5oY3C0aSoOPaXU.roa (hash: 4XzpBGSKIpqrgzYV8bDUbJCBoMSY0ytUeCyMxChhVnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:3e:51:b0:c4:c3:91:c8:64:26:20:1b:89:80:e4:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Jul 28 15:01:01 2026 GMT Not After : Jul 29 15:01:01 2026 GMT Subject: CN=1dd1bc91b7293fa14f82d6aa0cae5b5ae2a66532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:1b:92:58:64:95:36:a0:f9:19:07:49:ea: c9:84:da:8b:d6:43:94:ac:4c:c1:d2:12:56:f7:9f: 77:4b:6b:ed:e1:3e:03:dd:33:77:e4:c3:8c:83:ec: c4:ee:7e:39:01:43:71:64:fc:0f:76:bd:85:93:cd: 01:88:14:ee:2f:23:ed:56:f1:54:8e:6d:08:d4:32: 9f:ba:ed:5c:5b:ed:a9:fd:66:46:3c:45:aa:68:02: a2:e3:18:a6:d6:1a:a3:2f:10:d6:8f:72:a3:67:2e: 2c:ae:77:99:f1:84:01:c1:64:9f:f6:b4:43:a1:89: bc:01:2d:f3:ae:43:25:27:3f:87:14:e3:da:ff:65: dc:9e:42:74:0f:da:8c:e6:b7:4e:4d:48:23:30:e0: 7e:34:75:38:90:17:9e:91:df:a6:74:f1:40:78:66: c3:9e:db:02:71:da:e7:d4:54:7b:35:da:49:94:fb: ad:95:04:84:4c:7b:c5:b2:26:36:5f:4b:74:f8:16: 9c:40:10:ef:32:e7:3e:e9:71:b1:53:ec:ff:79:50: 67:87:9d:6b:03:b8:5c:d5:24:92:03:7f:46:15:bd: d7:bd:4b:73:2c:a8:70:ec:df:b3:4c:7d:cf:cf:cc: ac:17:65:c6:60:bf:72:7c:39:32:8a:f9:09:94:18: 93:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D1:BC:91:B7:29:3F:A1:4F:82:D6:AA:0C:AE:5B:5A:E2:A6:65:32 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:79:eb:10:d2:b0:7c:28:76:e3:6b:15:5a:a9:e5:04:d9:3b: dd:a3:9f:67:c1:ce:a0:0c:60:2b:8e:f1:49:e6:32:34:d4:af: 47:54:fb:27:b6:ef:09:cd:54:2d:03:7a:2a:72:7d:54:8b:e6: 96:a7:15:89:a5:53:93:18:4a:b2:f0:9b:3f:60:6c:fa:67:37: d4:a7:24:f8:35:2f:d2:e2:8c:bf:bc:69:53:9c:86:b4:5c:63: 56:6b:c8:f0:c7:70:e7:16:08:ad:ba:34:35:1b:1b:a2:14:1f: 94:e2:62:bf:31:bd:5d:42:84:62:72:68:69:9c:0a:d6:47:cd: 37:79:57:e0:06:94:10:fb:1a:c9:5d:b9:9f:48:ea:6b:df:e1: 6f:38:1f:4b:8d:89:ee:ed:dd:92:58:de:7f:d5:92:ef:f9:95: 38:e6:4f:56:24:8f:13:42:fa:18:1c:ed:d6:b6:cb:d5:24:eb: 3c:9b:18:5c:de:85:a3:d2:97:39:29:1b:00:1e:4b:76:24:92: d7:8a:31:b6:5f:16:4d:8d:24:8d:23:c7:ec:8a:f6:7f:7c:15: 29:3f:26:13:ec:a3:d4:55:97:69:99:24:e1:0d:68:4d:de:e0: 77:43:fc:7c:e3:3a:56:5a:8f:05:ec:15:1c:0c:b7:2f:11:e2: be:14:27:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pPlGwxMORyGQmIBuJgOR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwNzI4MTUwMTAxWhcNMjYwNzI5MTUwMTAxWjAzMTEwLwYDVQQD EygxZGQxYmM5MWI3MjkzZmExNGY4MmQ2YWEwY2FlNWI1YWUyYTY2NTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvMbklhklTag+RkHSerJhNqL1kOU rEzB0hJW9593S2vt4T4D3TN35MOMg+zE7n45AUNxZPwPdr2Fk80BiBTuLyPtVvFU jm0I1DKfuu1cW+2p/WZGPEWqaAKi4xim1hqjLxDWj3KjZy4srneZ8YQBwWSf9rRD oYm8AS3zrkMlJz+HFOPa/2XcnkJ0D9qM5rdOTUgjMOB+NHU4kBeekd+mdPFAeGbD ntsCcdrn1FR7NdpJlPutlQSETHvFsiY2X0t0+BacQBDvMuc+6XGxU+z/eVBnh51r A7hc1SSSA39GFb3XvUtzLKhw7N+zTH3Pz8ysF2XGYL9yfDkyivkJlBiTBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3RvJG3KT+hT4LWqgyuW1ripmUyMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXnrENKw fCh242sVWqnlBNk73aOfZ8HOoAxgK47xSeYyNNSvR1T7J7bvCc1ULQN6KnJ9VIvm lqcViaVTkxhKsvCbP2Bs+mc31Kck+DUv0uKMv7xpU5yGtFxjVmvI8Mdw5xYIrbo0 NRsbohQflOJivzG9XUKEYnJoaZwK1kfNN3lX4AaUEPsayV25n0jqa9/hbzgfS42J 7u3dkljef9WS7/mVOOZPViSPE0L6GBzt1rbL1STrPJsYXN6Fo9KXOSkbAB5LdiSS 14oxtl8WTY0kjSPH7Ir2f3wVKT8mE+yj1FWXaZkk4Q1oTd7gd0P8fOM6VlqPBewV HAy3LxHivhQnJQ== -----END CERTIFICATE-----Generated at Tue Jul 28 18:27:02 2026 by rpki-client