$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: 89TNVt4mNTt+lFIEdiGLG8nFRlf54SSjOZL/wsig0hk= Subject key identifier: 22:EE:14:09:52:BF:E9:59:12:8D:DB:04:BD:8D:07:4C:0E:D2:B5:AF Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019CA9EA9BF2F7C372BE82612B68184A8A10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0A79 Signing time: Sun 01 Mar 2026 15:00:50 +0000 Manifest this update: Sun 01 Mar 2026 15:00:50 +0000 Manifest next update: Mon 02 Mar 2026 15:00:50 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: 85omqUt3NWoX7QstQGz5emm8HFTnkURkdsYvU9JOt64=) 2: 8SFZw8BMAj1xVhdMMCCs15uYf7Q.roa (hash: 9ezJKc1nhlgcq48JgfbfaaUeNcn0fAJH9w4Rv8ctllY=) 3: 9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa (hash: xNWcTes1rfng2Xoo1q/dVG7NMZ8Ww7cO2s1+2Z0yWlA=) 4: DxhjENvG5OYUJvVZsM8qLwRgMX8.roa (hash: AXiwp6mvVukrTKFIByO8+UyYRveHX4/Xn2+jsMwO1nY=) 5: E9APco7X5s-y_ndtROFoXtIewVo.roa (hash: ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=) 6: Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa (hash: MmpGqyxYpKQIYnf6OI/K/GvwLTjCCsiguVNJ0TpVI8A=) 7: LZ_m2waZIs7_F9DFpQeDZwKSqaI.roa (hash: AswbWRxQk3rPm90PMBMeMwOGoat0R8hOqCGqrGPRnek=) 8: MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa (hash: KbrH7LcYaa394FA8k0S5gWJFBJdKc28amMjP1aLjN/M=) 9: P12Bd5VdoMxJk2YYVATcG1-aLsk.roa (hash: tMed7m101KjSKZGY84e4m62zANDxSX8qjIVWkfIG7SI=) 10: PEzreo_YaPTvZmeHLlLFR5kVjWY.roa (hash: eXeiZ79p8Uap0Wt90BnDGjxDFdIM/UYDOLfaEdoVu7k=) 11: YsTwicH1tOydKXwijh3NKIAFLS0.roa (hash: a4Esas1VFYhKGMF7C/m0rI+wkbXft/Q6b4xO9aKQj64=) 12: eExRkfPu0Gwge_hF5bZ87TMqJSc.roa (hash: GbCahJADgly+/ikqsEm4KY5sCrzG5FQDBoPzkX+HqA0=) 13: gkcGn3ENPLtTEnDqjUqXbmSRgng.roa (hash: U6oenFeqTjFDCfsFo9/G7/iGAGLsgJkrsjxoMp46oSE=) 14: k4m5uF6d86bKxXryYJZgXjvW8I0.roa (hash: H2jNyKD+HmfBkpz7JaRABFyLsbIlNp19F4CUBAdQu10=) 15: k9h8QS5gEzXpkcVVNe-dAvt8_v8.roa (hash: zBG+kHBGYstuoXqKiYKOkY+fZi1x5xlU5harwXVVNII=) 16: py8kH9n_2-OnxW6spEMi6oEGK_w.roa (hash: GsXp7eLTo1qCtBBCoDFQgU12gK3EvVtwUdWIN2dH9CY=) 17: rhGX_5s3UmZjlpks20dW8Uwf5xY.roa (hash: JBHH+NoWY0D+hMChID36tmQIbWsMkAg53XmNFpTIjc4=) 18: rw4pdFSTNcqR4HSLH99TYBGU5M8.roa (hash: ArUMSjBrgFsVWtaXlYqazL0AVRoBUJiJ/pOtvA7ObNw=) 19: zn4F63TYgWqEf5oY3C0aSoOPaXU.roa (hash: 4XzpBGSKIpqrgzYV8bDUbJCBoMSY0ytUeCyMxChhVnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:ea:9b:f2:f7:c3:72:be:82:61:2b:68:18:4a:8a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Mar 1 15:00:50 2026 GMT Not After : Mar 2 15:00:50 2026 GMT Subject: CN=22ee140952bfe959128ddb04bd8d074c0ed2b5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:53:60:3c:cc:89:df:08:0f:0a:60:5b:3e:1d: ae:a0:c9:04:ce:b2:7b:1b:30:52:b6:d7:c6:7d:b7: 0d:03:a7:0f:46:f1:fa:53:f8:0c:e5:15:c3:e1:03: 41:5f:20:3f:47:59:0b:13:00:66:e1:4a:46:04:8b: 2e:3e:a5:da:6c:9e:fd:73:ff:4b:0a:ab:ea:4b:7f: a6:15:4a:50:a9:c9:c4:57:32:1e:d7:d2:d8:1a:6a: 0c:c5:76:d1:90:40:ca:0d:ad:3f:ce:21:98:c5:b7: a7:15:18:08:f6:64:af:f5:4d:5e:16:58:49:66:06: 40:4f:07:1a:fb:d9:20:2c:6a:93:94:88:b2:ad:7e: d0:9c:55:e7:5c:44:62:47:db:ec:83:3c:1b:e6:b7: d8:b2:86:39:22:b9:b2:a0:60:dc:6e:97:7a:f3:e3: 07:65:7d:ed:0e:83:d6:74:a4:f7:e3:99:40:de:b5: d4:9b:9f:63:eb:ae:7b:e2:00:38:80:03:71:12:9f: 87:8b:3b:14:42:be:bc:b1:d3:16:38:62:3c:41:87: 99:9c:17:79:42:3f:4f:5a:89:09:25:02:b8:20:67: f0:9e:c6:e1:6f:3d:ec:ba:9a:df:00:e0:6b:54:fe: 51:a4:6a:7c:de:e2:b1:bd:31:ce:ee:b4:9b:b1:b5: e7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EE:14:09:52:BF:E9:59:12:8D:DB:04:BD:8D:07:4C:0E:D2:B5:AF X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b4:2b:76:00:33:24:f2:a0:b2:52:66:df:49:ab:84:0d:f9: 02:26:9d:27:c7:6d:ec:66:9b:fd:2e:b2:9e:35:44:9a:74:5e: 79:c4:59:90:b4:7c:f1:2b:c4:9e:5c:9a:5c:2f:cc:98:9d:db: 70:2a:2a:6e:c6:66:c2:4c:a6:33:86:5f:c9:ae:b8:50:ad:ce: ee:ca:9b:42:a2:c8:8d:db:5a:e4:f9:7a:70:05:fe:23:3c:c5: f3:82:50:3a:1c:54:ef:a6:31:d7:4a:25:22:9b:79:c7:1c:bf: a7:32:89:2d:96:fc:41:5b:ee:f3:28:89:7a:6f:26:4c:a2:01: 1b:e9:b0:5a:ec:40:dc:f8:79:57:83:7b:c8:2e:b4:78:3d:f7: c3:7e:51:95:16:b2:8c:75:67:5d:16:a6:56:ad:96:28:6e:1d: 02:94:af:08:d8:07:2a:fe:bb:0e:28:92:9d:f5:f5:4f:4b:00: 17:61:bf:f8:11:3e:87:c6:f4:3d:f8:76:ec:6e:cd:9f:3d:ba: 34:45:a6:0a:f1:79:a9:9b:7b:70:ff:dc:14:b0:b8:3d:7c:97: a1:68:c0:cf:24:b0:81:b4:5f:a6:ac:62:62:76:98:24:2a:e6: 34:50:5c:75:1e:8b:95:28:dc:bb:10:d8:9d:4f:94:75:2c:d6: 33:b8:0c:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyp6pvy98NyvoJhK2gYSooQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwMzAxMTUwMDUwWhcNMjYwMzAyMTUwMDUwWjAzMTEwLwYDVQQD EygyMmVlMTQwOTUyYmZlOTU5MTI4ZGRiMDRiZDhkMDc0YzBlZDJiNWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllNgPMyJ3wgPCmBbPh2uoMkEzrJ7 GzBSttfGfbcNA6cPRvH6U/gM5RXD4QNBXyA/R1kLEwBm4UpGBIsuPqXabJ79c/9L CqvqS3+mFUpQqcnEVzIe19LYGmoMxXbRkEDKDa0/ziGYxbenFRgI9mSv9U1eFlhJ ZgZATwca+9kgLGqTlIiyrX7QnFXnXERiR9vsgzwb5rfYsoY5IrmyoGDcbpd68+MH ZX3tDoPWdKT345lA3rXUm59j66574gA4gANxEp+HizsUQr68sdMWOGI8QYeZnBd5 Qj9PWokJJQK4IGfwnsbhbz3suprfAOBrVP5RpGp83uKxvTHO7rSbsbXnhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLuFAlSv+lZEo3bBL2NB0wO0rWvMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirQrdgAz JPKgslJm30mrhA35AiadJ8dt7Gab/S6ynjVEmnReecRZkLR88SvEnlyaXC/MmJ3b cCoqbsZmwkymM4Zfya64UK3O7sqbQqLIjdta5Pl6cAX+IzzF84JQOhxU76Yx10ol Ipt5xxy/pzKJLZb8QVvu8yiJem8mTKIBG+mwWuxA3Ph5V4N7yC60eD33w35RlRay jHVnXRamVq2WKG4dApSvCNgHKv67DiiSnfX1T0sAF2G/+BE+h8b0Pfh27G7Nnz26 NEWmCvF5qZt7cP/cFLC4PXyXoWjAzySwgbRfpqxiYnaYJCrmNFBcdR6LlSjcuxDY nU+UdSzWM7gMNA== -----END CERTIFICATE-----Generated at Mon Mar 2 00:16:37 2026 by rpki-client