$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: KxKMLiJgB9K0K3/Cfmq7YqfnXIkPco3D4fAIzaSdUGM= Subject key identifier: 7D:A1:A7:23:F1:99:96:2A:9C:49:B8:B0:8F:3C:75:61:8E:D2:52:52 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 0199FDDA3EFFC2AEB7B94822D114F06F85FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0911 Signing time: Sun 19 Oct 2025 19:02:42 +0000 Manifest this update: Sun 19 Oct 2025 19:02:42 +0000 Manifest next update: Mon 20 Oct 2025 19:02:42 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: dxQTz8dHdYXoudZIHtJVQBIzVGPR5WpJ8H9WN0zam8M=) 2: 5osuIpQEXkmgGGfabxgkobMCOqo.roa (hash: ar+Luee3A/qxuqFBW+KjI5NWMnxgfB2LrCoUMGMm2y0=) 3: BY0ulxbKjju4vLrdhG3t1EWUsfc.roa (hash: K5zGur7lx+aV24qdxwKfnGw/Mm79v7yGfl4MiAhAsZQ=) 4: EYqz9-lWcT6mAZDYhv76ihfxRKA.roa (hash: 2kj2lpyBuoRk5Uqc6kG2vMBRCERsonaSDs/n/J78Nlc=) 5: IOUjT-w4NntQ6mLe1xzxWKGa6vY.roa (hash: /ne3uHIaKrP56Ewsozlm4hMMf/E0GgsFtxRU9KESn98=) 6: LB0RhZaeHc4lFeLZglNMj0M0iuc.roa (hash: pKzr9fhEjb+2hcFnGRNZ9yDdUriurScTg3ZqXErO5Fk=) 7: LebN_fB1s6ScKeJ5c8zfxUklaIc.roa (hash: ugIRy/GdUvkC8oivMaAEQB7yPRimuew/T3ig9FaE2mE=) 8: Pm3ij8drL7WRD0R4R54qP4eC7Q0.roa (hash: hzWkutnsJx/Qg99NS0sDlr/7EdarXvXso1X585eWACI=) 9: TEJEbJfLCSRRss_K_5H5CYFaiCg.roa (hash: M75oi001sE7d1H5/CUbAVgDs1DNoW5yTIFB3xJzgE24=) 10: TWprmIRYABwJKC3e_3_5wzunOVk.roa (hash: ax2e42jwFW+IhzbsKHYLodyYVLy/wsVmS87dwyQkShM=) 11: XQHVRGTqM3fRB_j_ijhUwjJs9Ug.roa (hash: fKPNzBl0e4tcVAHFnpIZK59mBTOB3H7FeF+MB2XfaW0=) 12: e50PKaKFcaW3uGMNUchzpEB18-M.roa (hash: c0PkOWIaLZSS8TffWgd4kYVYWuDWquopKeKw112DVMI=) 13: ecLZxlk5uOKtie8YZypau_dP7Nk.roa (hash: qDzztQzT4j41tAiYOJhicLZgVePR5Gy6YYwn9Gm7Kj0=) 14: eeYpshaoc5go--DBuuRmLZpBsio.roa (hash: 9Ypg180659MtxxUjCyOwRub9c14vNLr84izZxblP7gQ=) 15: giUGr98XTvMTapx-HcfkJZUS_QQ.roa (hash: t3Dcx8q3eGk8zI/z9A/Ebz1Oh7dW30YVpRQVHDQqIlA=) 16: nNGX_OCe8X9nXrEP34vII8SEf10.roa (hash: n1Og0cpU00h6IhKyI+ECnhLWs0U3hRjPdAcqH8CABIM=) 17: vIo5JZEbJy_j1F7Gy0x0-4XTOm4.roa (hash: aqC1tIrcI2MF2zcWVNBFSrIprB6SpbD2HGFhZaRj/MQ=) 18: wQyg8eA6lRREzJ9taIK7-ABN-Vk.roa (hash: 56Z2ikBVQqPH0LfM7ywhy1//SerrhxAPBdjzeQApODo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:da:3e:ff:c2:ae:b7:b9:48:22:d1:14:f0:6f:85:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Oct 19 19:02:42 2025 GMT Not After : Oct 20 19:02:42 2025 GMT Subject: CN=7da1a723f199962a9c49b8b08f3c75618ed25252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:24:10:7f:49:52:a5:12:9b:cc:fe:76:f6:e6: b7:f7:29:c2:b8:d9:3d:f8:c8:fd:4a:0a:9c:af:d6: 02:91:72:e9:b1:59:92:7b:10:c3:00:1a:87:36:7c: 05:e0:71:54:8b:34:4b:f7:08:84:24:58:c9:f7:4c: 46:dd:58:2e:f2:6e:0a:32:2a:01:a9:8c:be:db:3b: 50:ad:0e:91:4b:db:bb:67:cc:49:b8:51:14:61:81: 54:79:c6:9a:4b:89:5a:3b:db:26:3f:2e:ce:59:d8: c1:26:b6:bd:ba:41:1e:f7:85:f9:d3:93:6d:6a:48: 0a:8b:77:10:21:2e:7b:62:9e:97:04:d4:cd:0d:7c: ed:ea:02:b3:d1:b2:49:ef:ee:ea:a3:dc:25:3c:b4: 3d:b4:95:b6:f7:27:50:a0:1e:17:28:48:70:ca:b0: 74:bd:56:2a:9b:b0:e0:c2:7d:18:9d:79:f2:64:a9: c6:9b:af:a5:90:e2:a0:5a:38:ec:8e:5d:5c:f3:16: bd:5c:49:7f:44:95:a1:e1:79:6f:b2:3a:d1:2e:c7: 92:c8:24:ae:a1:11:23:70:65:bc:45:ac:ec:7b:cb: 48:ee:de:e9:f4:8c:5c:09:6b:81:74:fb:3d:d4:25: 39:e1:42:35:f5:5a:6f:62:b3:d5:fb:0e:4f:9e:13: 46:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A1:A7:23:F1:99:96:2A:9C:49:B8:B0:8F:3C:75:61:8E:D2:52:52 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:35:4f:25:9a:38:0f:75:0d:7c:01:4d:9e:13:f6:23:97:3c: 86:7a:16:78:37:f2:a5:85:7b:47:10:aa:8b:b9:fd:18:3b:53: 1a:3e:3e:f2:b8:3d:ce:a9:6a:a4:26:3d:d8:23:d5:cc:89:0a: 6a:83:09:94:79:53:b4:42:7c:0f:7c:f9:8b:69:12:3d:b1:c7: 23:aa:0d:e1:29:01:9b:e9:03:d7:19:a6:df:dc:53:a6:54:52: 89:57:d1:2d:28:d8:be:ce:f9:93:48:a9:62:1c:91:d2:a9:ed: e9:9b:56:67:88:a1:57:ee:c1:2e:18:fd:0b:14:bf:f8:f1:95: 5e:2b:d2:05:2c:e9:f0:7c:3c:09:a5:00:8a:74:5b:ec:47:a2: 06:26:2f:c4:8a:8b:29:65:a6:d7:78:42:26:7a:b3:de:58:29: a1:e4:f0:fb:61:ad:43:2b:7d:62:7e:65:c2:10:49:b1:c0:a3: a9:d0:1d:b2:24:f0:7e:6e:0b:13:42:fa:a5:05:d7:4f:0b:e6: 76:05:74:a9:a6:e8:9e:a5:2d:69:14:77:3d:94:4b:08:3a:19: ce:4f:a8:85:1d:17:18:aa:84:63:c3:52:e9:d1:8d:03:d2:50: ff:cc:36:62:03:52:4e:c2:b8:4b:a4:22:7b:07:33:9a:50:7e: b6:2b:8e:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn92j7/wq63uUgi0RTwb4X9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjUxMDE5MTkwMjQyWhcNMjUxMDIwMTkwMjQyWjAzMTEwLwYDVQQD Eyg3ZGExYTcyM2YxOTk5NjJhOWM0OWI4YjA4ZjNjNzU2MThlZDI1MjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCQQf0lSpRKbzP529ua39ynCuNk9 +Mj9Sgqcr9YCkXLpsVmSexDDABqHNnwF4HFUizRL9wiEJFjJ90xG3Vgu8m4KMioB qYy+2ztQrQ6RS9u7Z8xJuFEUYYFUecaaS4laO9smPy7OWdjBJra9ukEe94X505Nt akgKi3cQIS57Yp6XBNTNDXzt6gKz0bJJ7+7qo9wlPLQ9tJW29ydQoB4XKEhwyrB0 vVYqm7Dgwn0YnXnyZKnGm6+lkOKgWjjsjl1c8xa9XEl/RJWh4XlvsjrRLseSyCSu oREjcGW8Razse8tI7t7p9IxcCWuBdPs91CU54UI19VpvYrPV+w5PnhNG1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2hpyPxmZYqnEm4sI88dWGO0lJSMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDVPJZo4 D3UNfAFNnhP2I5c8hnoWeDfypYV7RxCqi7n9GDtTGj4+8rg9zqlqpCY92CPVzIkK aoMJlHlTtEJ8D3z5i2kSPbHHI6oN4SkBm+kD1xmm39xTplRSiVfRLSjYvs75k0ip YhyR0qnt6ZtWZ4ihV+7BLhj9CxS/+PGVXivSBSzp8Hw8CaUAinRb7EeiBiYvxIqL KWWm13hCJnqz3lgpoeTw+2GtQyt9Yn5lwhBJscCjqdAdsiTwfm4LE0L6pQXXTwvm dgV0qabonqUtaRR3PZRLCDoZzk+ohR0XGKqEY8NS6dGNA9JQ/8w2YgNSTsK4S6Qi ewczmlB+tiuO+Q== -----END CERTIFICATE-----Generated at Sun Oct 19 20:36:17 2025 by rpki-client