$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: dnw64hQZzn8/ERjQvBl1bi/h3Ao+hizN/JSUrIL3zFk= Subject key identifier: 5A:B6:C4:0D:6E:6B:8C:69:39:69:E9:40:60:52:C4:4E:DC:77:24:63 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 0198D5BC2CC171D9036B8B079477ADE278DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0870 Signing time: Sat 23 Aug 2025 07:02:15 +0000 Manifest this update: Sat 23 Aug 2025 07:02:15 +0000 Manifest next update: Sun 24 Aug 2025 07:02:15 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: jtYjZpurvJNHAcpxjVSJYeDCBedtH6AC2pL5kDZDhJY=) 2: 5osuIpQEXkmgGGfabxgkobMCOqo.roa (hash: ar+Luee3A/qxuqFBW+KjI5NWMnxgfB2LrCoUMGMm2y0=) 3: BY0ulxbKjju4vLrdhG3t1EWUsfc.roa (hash: K5zGur7lx+aV24qdxwKfnGw/Mm79v7yGfl4MiAhAsZQ=) 4: EYqz9-lWcT6mAZDYhv76ihfxRKA.roa (hash: 2kj2lpyBuoRk5Uqc6kG2vMBRCERsonaSDs/n/J78Nlc=) 5: IZB5fE3vCYPzm412fZZk7uYbwgE.roa (hash: cWCrnSM11F8k4l8vziWTFuB3S6ERgGRGnqCvZnuNDXk=) 6: LB0RhZaeHc4lFeLZglNMj0M0iuc.roa (hash: pKzr9fhEjb+2hcFnGRNZ9yDdUriurScTg3ZqXErO5Fk=) 7: LebN_fB1s6ScKeJ5c8zfxUklaIc.roa (hash: ugIRy/GdUvkC8oivMaAEQB7yPRimuew/T3ig9FaE2mE=) 8: NnqvQhUaUP2DJi_WZAMSKo0P-OQ.roa (hash: nk529TsYCvVQjH8mDtUSTqsATbfQa7whuncsuwTHiRc=) 9: Pm3ij8drL7WRD0R4R54qP4eC7Q0.roa (hash: hzWkutnsJx/Qg99NS0sDlr/7EdarXvXso1X585eWACI=) 10: TWprmIRYABwJKC3e_3_5wzunOVk.roa (hash: ax2e42jwFW+IhzbsKHYLodyYVLy/wsVmS87dwyQkShM=) 11: XQHVRGTqM3fRB_j_ijhUwjJs9Ug.roa (hash: fKPNzBl0e4tcVAHFnpIZK59mBTOB3H7FeF+MB2XfaW0=) 12: e50PKaKFcaW3uGMNUchzpEB18-M.roa (hash: c0PkOWIaLZSS8TffWgd4kYVYWuDWquopKeKw112DVMI=) 13: ecLZxlk5uOKtie8YZypau_dP7Nk.roa (hash: qDzztQzT4j41tAiYOJhicLZgVePR5Gy6YYwn9Gm7Kj0=) 14: eeYpshaoc5go--DBuuRmLZpBsio.roa (hash: 9Ypg180659MtxxUjCyOwRub9c14vNLr84izZxblP7gQ=) 15: fp7iaq3w3IK7xxC4hTxOHXlgQdo.roa (hash: IIdoboRyB6xVt9Ub/S//LkCzsgiZ4eA93ZNjm/kWoFw=) 16: giUGr98XTvMTapx-HcfkJZUS_QQ.roa (hash: t3Dcx8q3eGk8zI/z9A/Ebz1Oh7dW30YVpRQVHDQqIlA=) 17: nNGX_OCe8X9nXrEP34vII8SEf10.roa (hash: n1Og0cpU00h6IhKyI+ECnhLWs0U3hRjPdAcqH8CABIM=) 18: vIo5JZEbJy_j1F7Gy0x0-4XTOm4.roa (hash: aqC1tIrcI2MF2zcWVNBFSrIprB6SpbD2HGFhZaRj/MQ=) 19: wQyg8eA6lRREzJ9taIK7-ABN-Vk.roa (hash: 56Z2ikBVQqPH0LfM7ywhy1//SerrhxAPBdjzeQApODo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bc:2c:c1:71:d9:03:6b:8b:07:94:77:ad:e2:78:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Aug 23 07:02:15 2025 GMT Not After : Aug 24 07:02:15 2025 GMT Subject: CN=5ab6c40d6e6b8c693969e9406052c44edc772463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:48:b3:d8:79:4a:a8:88:89:9e:4a:05:4f:fa: 31:a9:d8:25:d8:c2:39:af:a3:2e:30:b9:6e:b5:eb: e8:b8:8b:6d:60:f2:ca:ee:66:bb:aa:50:64:56:49: 65:9a:94:95:f1:2c:fc:2d:ad:2f:4b:f4:bf:fe:2f: e2:bb:a8:e2:e8:1f:97:30:ee:79:54:14:11:c5:ba: 38:01:2d:c3:1c:eb:a8:bf:23:ff:66:a5:09:05:05: 99:67:17:a5:69:e2:66:c7:57:d7:e9:cd:c1:d7:ae: ec:b5:48:49:10:bd:ca:59:63:0d:53:a6:3e:88:f9: 75:15:7b:cb:ea:1f:4e:75:33:f7:74:2b:30:b1:2c: af:78:b5:1e:69:d9:d4:8c:0e:2d:2d:76:cf:82:65: c0:16:03:e0:ec:11:bc:f4:8f:a6:ec:9b:51:96:1f: ce:59:43:9e:15:98:64:89:e0:4c:5c:7b:54:e5:2b: 3d:ba:2e:00:e6:f7:1d:71:7f:4b:cc:6c:b1:39:ab: d7:67:55:0f:f9:04:0e:6e:10:68:06:e4:88:f4:41: d3:a9:f3:cb:b5:76:a3:22:24:9b:45:fa:d1:e9:ec: 66:3c:13:7d:f9:bf:3b:db:bc:5d:e7:c3:30:d4:0b: e9:c3:06:4a:70:f5:eb:72:70:7c:56:1f:85:f9:41: 4f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B6:C4:0D:6E:6B:8C:69:39:69:E9:40:60:52:C4:4E:DC:77:24:63 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:4c:13:23:25:d3:78:2b:1c:71:ec:6b:58:1d:cd:58:13:0e: c0:cf:82:5f:41:38:0e:ce:eb:63:11:52:27:9c:cf:48:e4:2b: 7d:c4:75:e7:9a:82:6f:71:b6:87:5d:e5:6b:ad:bf:32:0a:d6: 2a:20:63:ec:92:04:20:8a:7e:3a:45:fc:6a:59:1a:a1:96:09: 08:ea:a8:70:31:98:c5:bc:f2:68:bf:d7:56:b6:e1:43:d1:74: 2e:66:0d:67:4b:24:52:72:42:93:d6:3b:04:bc:b8:57:d3:e5: d3:83:1a:13:2f:a7:ef:62:7a:f6:9b:dc:b7:19:c7:01:04:8c: 61:d6:26:5b:3e:31:5b:f7:39:97:e3:bc:e5:4a:eb:31:12:0f: 6d:33:42:5f:cd:63:ab:42:22:0c:ac:6b:7d:4a:37:49:20:5e: 8f:98:e8:41:42:4b:47:39:08:19:39:0a:cf:20:a7:38:51:56: d5:80:34:b5:9f:e6:3f:0a:5b:e8:08:34:b1:43:b0:c2:83:34: 13:7b:1b:a7:20:62:fc:d5:8f:ff:ee:61:bc:1f:2c:69:3a:1f: 02:c6:80:fe:5c:38:12:45:f9:be:6d:2c:fe:38:d9:a2:62:03: 40:48:6a:b4:14:ef:4a:6c:f0:6f:ff:9b:bb:4a:91:7a:67:89: de:69:13:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVvCzBcdkDa4sHlHet4njcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjUwODIzMDcwMjE1WhcNMjUwODI0MDcwMjE1WjAzMTEwLwYDVQQD Eyg1YWI2YzQwZDZlNmI4YzY5Mzk2OWU5NDA2MDUyYzQ0ZWRjNzcyNDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20iz2HlKqIiJnkoFT/oxqdgl2MI5 r6MuMLlutevouIttYPLK7ma7qlBkVkllmpSV8Sz8La0vS/S//i/iu6ji6B+XMO55 VBQRxbo4AS3DHOuovyP/ZqUJBQWZZxelaeJmx1fX6c3B167stUhJEL3KWWMNU6Y+ iPl1FXvL6h9OdTP3dCswsSyveLUeadnUjA4tLXbPgmXAFgPg7BG89I+m7JtRlh/O WUOeFZhkieBMXHtU5Ss9ui4A5vcdcX9LzGyxOavXZ1UP+QQObhBoBuSI9EHTqfPL tXajIiSbRfrR6exmPBN9+b8727xd58Mw1AvpwwZKcPXrcnB8Vh+F+UFP4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFq2xA1ua4xpOWnpQGBSxE7cdyRjMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkwTIyXT eCsccexrWB3NWBMOwM+CX0E4Ds7rYxFSJ5zPSOQrfcR155qCb3G2h13la62/MgrW KiBj7JIEIIp+OkX8alkaoZYJCOqocDGYxbzyaL/XVrbhQ9F0LmYNZ0skUnJCk9Y7 BLy4V9Pl04MaEy+n72J69pvctxnHAQSMYdYmWz4xW/c5l+O85UrrMRIPbTNCX81j q0IiDKxrfUo3SSBej5joQUJLRzkIGTkKzyCnOFFW1YA0tZ/mPwpb6Ag0sUOwwoM0 E3sbpyBi/NWP/+5hvB8saTofAsaA/lw4EkX5vm0s/jjZomIDQEhqtBTvSmzwb/+b u0qRemeJ3mkT6w== -----END CERTIFICATE-----Generated at Sat Aug 23 10:11:36 2025 by rpki-client