$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: nLkgQpzYjvjepc9POPTD1S9VWnGyBPadAURQhjafFAE= Subject key identifier: D6:B2:68:80:73:07:A9:2E:3E:83:38:5C:B8:00:10:82:E7:CC:AB:B1 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019E1BD8D3E690EB17B0D847FDEDE2F2164B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0B3A Signing time: Tue 12 May 2026 11:00:55 +0000 Manifest this update: Tue 12 May 2026 11:00:55 +0000 Manifest next update: Wed 13 May 2026 11:00:55 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: WuvIjqQYW0zncfo8r3kO5+loXe8F7BcBwT/ricZIyIs=) 2: 8SFZw8BMAj1xVhdMMCCs15uYf7Q.roa (hash: 9ezJKc1nhlgcq48JgfbfaaUeNcn0fAJH9w4Rv8ctllY=) 3: 9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa (hash: xNWcTes1rfng2Xoo1q/dVG7NMZ8Ww7cO2s1+2Z0yWlA=) 4: DxhjENvG5OYUJvVZsM8qLwRgMX8.roa (hash: AXiwp6mvVukrTKFIByO8+UyYRveHX4/Xn2+jsMwO1nY=) 5: E9APco7X5s-y_ndtROFoXtIewVo.roa (hash: ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=) 6: Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa (hash: MmpGqyxYpKQIYnf6OI/K/GvwLTjCCsiguVNJ0TpVI8A=) 7: MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa (hash: KbrH7LcYaa394FA8k0S5gWJFBJdKc28amMjP1aLjN/M=) 8: PEzreo_YaPTvZmeHLlLFR5kVjWY.roa (hash: eXeiZ79p8Uap0Wt90BnDGjxDFdIM/UYDOLfaEdoVu7k=) 9: S3LSGjrV7uABu8qEE_ahYBI7SkU.roa (hash: X5ME7tz1ZHkzkoANVkGErwtBAD9pTrBBL5KsvqoJ5Yo=) 10: SAOjAfmVta9T_Ls7ykRFr8U5SYI.roa (hash: r10sWadtpWdod9WG4HGHqPD7qRwz46PwcZV2+I/tlNM=) 11: YsTwicH1tOydKXwijh3NKIAFLS0.roa (hash: a4Esas1VFYhKGMF7C/m0rI+wkbXft/Q6b4xO9aKQj64=) 12: eExRkfPu0Gwge_hF5bZ87TMqJSc.roa (hash: GbCahJADgly+/ikqsEm4KY5sCrzG5FQDBoPzkX+HqA0=) 13: gkcGn3ENPLtTEnDqjUqXbmSRgng.roa (hash: U6oenFeqTjFDCfsFo9/G7/iGAGLsgJkrsjxoMp46oSE=) 14: k4m5uF6d86bKxXryYJZgXjvW8I0.roa (hash: H2jNyKD+HmfBkpz7JaRABFyLsbIlNp19F4CUBAdQu10=) 15: k9h8QS5gEzXpkcVVNe-dAvt8_v8.roa (hash: zBG+kHBGYstuoXqKiYKOkY+fZi1x5xlU5harwXVVNII=) 16: py8kH9n_2-OnxW6spEMi6oEGK_w.roa (hash: GsXp7eLTo1qCtBBCoDFQgU12gK3EvVtwUdWIN2dH9CY=) 17: rhGX_5s3UmZjlpks20dW8Uwf5xY.roa (hash: JBHH+NoWY0D+hMChID36tmQIbWsMkAg53XmNFpTIjc4=) 18: rw4pdFSTNcqR4HSLH99TYBGU5M8.roa (hash: ArUMSjBrgFsVWtaXlYqazL0AVRoBUJiJ/pOtvA7ObNw=) 19: zn4F63TYgWqEf5oY3C0aSoOPaXU.roa (hash: 4XzpBGSKIpqrgzYV8bDUbJCBoMSY0ytUeCyMxChhVnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1b:d8:d3:e6:90:eb:17:b0:d8:47:fd:ed:e2:f2:16:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: May 12 11:00:55 2026 GMT Not After : May 13 11:00:55 2026 GMT Subject: CN=d6b268807307a92e3e83385cb8001082e7ccabb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3c:88:e9:93:b9:59:99:60:cd:cf:19:41:39: 1b:da:7a:e0:ad:3c:54:52:29:87:ee:d5:54:6b:6c: 2f:65:93:62:fd:e6:8a:83:42:bf:eb:cc:1f:29:5a: d5:7d:d4:7c:b8:5c:ac:91:18:5f:e8:24:7f:4c:d9: 0d:24:8d:a4:c8:07:2a:8c:48:3d:c7:b9:86:21:37: d8:c8:4f:ed:5e:cc:7f:61:87:6e:47:69:6b:65:5c: 05:a3:d3:4c:4e:b3:51:c0:60:a2:5e:33:59:83:8b: 78:39:f5:47:b9:f4:d3:d9:1a:c7:54:cd:dd:94:2a: 98:f9:79:08:ec:ed:93:49:84:8e:ea:0e:11:2e:22: d6:3f:b3:fe:22:2d:74:3a:41:8f:d4:7e:54:64:56: 6c:61:88:6e:9a:ab:e4:bb:01:94:db:75:6b:5f:3b: 8d:22:ec:c6:8d:bd:71:0e:db:b4:43:98:74:8a:ee: a8:a2:dc:1a:6f:76:76:30:df:b8:0a:80:2f:54:b3: 0b:fa:d7:48:cc:27:12:a7:39:76:11:d3:e2:60:ff: 6c:a4:21:f8:1f:d0:fc:bc:d5:f9:e5:83:0f:9a:ba: f4:f3:6b:92:90:bb:f1:28:37:1b:bd:6c:95:c6:54: 75:92:fd:ed:5b:d5:24:14:bc:e7:ee:5b:f0:28:01: 91:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B2:68:80:73:07:A9:2E:3E:83:38:5C:B8:00:10:82:E7:CC:AB:B1 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e5:63:e2:4b:d0:5d:17:dc:5a:1f:57:b8:33:42:c5:b7:9a: 6b:95:70:dc:50:53:57:f0:e3:bd:9f:71:b6:22:45:21:bb:e8: 51:d2:07:1b:eb:aa:5c:63:2d:c7:25:45:3a:86:da:0e:8c:3f: f4:97:1b:b2:66:ae:4e:fb:5f:ba:c2:8b:8e:04:71:8b:47:98: c5:49:30:0d:17:fb:ec:c4:cf:44:61:f6:46:0a:f9:30:21:72: 08:f9:de:21:9d:e0:c9:28:8f:39:bf:66:39:bb:ab:95:b0:1c: 1d:fd:e7:06:73:93:76:12:36:0f:aa:1c:f0:4b:36:34:8d:32: 2d:f9:39:03:dc:4a:a0:15:e6:e4:2d:e1:d0:4d:d8:97:f7:30: 26:a4:97:30:48:e8:53:a7:ca:d7:ab:0a:d2:8c:26:c3:3b:17: b7:b6:12:c5:7b:cc:a5:76:c2:8b:4c:24:38:c2:df:ea:88:6f: 69:12:6e:ba:75:d5:7e:7d:3e:11:41:f6:e3:50:ff:cb:d3:cd: f2:04:e3:14:bc:d9:9d:2e:39:3c:63:9f:20:c1:b2:21:71:cb: ba:68:a5:98:c5:c5:52:48:cc:d7:1b:55:69:80:fd:d7:66:34: 9e:44:f6:01:17:d7:0d:80:df:8d:bb:14:8c:0b:19:23:78:74: f2:bf:24:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4b2NPmkOsXsNhH/e3i8hZLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwNTEyMTEwMDU1WhcNMjYwNTEzMTEwMDU1WjAzMTEwLwYDVQQD EyhkNmIyNjg4MDczMDdhOTJlM2U4MzM4NWNiODAwMTA4MmU3Y2NhYmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjyI6ZO5WZlgzc8ZQTkb2nrgrTxU UimH7tVUa2wvZZNi/eaKg0K/68wfKVrVfdR8uFyskRhf6CR/TNkNJI2kyAcqjEg9 x7mGITfYyE/tXsx/YYduR2lrZVwFo9NMTrNRwGCiXjNZg4t4OfVHufTT2RrHVM3d lCqY+XkI7O2TSYSO6g4RLiLWP7P+Ii10OkGP1H5UZFZsYYhumqvkuwGU23VrXzuN IuzGjb1xDtu0Q5h0iu6ootwab3Z2MN+4CoAvVLML+tdIzCcSpzl2EdPiYP9spCH4 H9D8vNX55YMPmrr082uSkLvxKDcbvWyVxlR1kv3tW9UkFLzn7lvwKAGRaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNayaIBzB6kuPoM4XLgAEILnzKuxMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeVj4kvQ XRfcWh9XuDNCxbeaa5Vw3FBTV/DjvZ9xtiJFIbvoUdIHG+uqXGMtxyVFOobaDow/ 9JcbsmauTvtfusKLjgRxi0eYxUkwDRf77MTPRGH2Rgr5MCFyCPneIZ3gySiPOb9m OburlbAcHf3nBnOTdhI2D6oc8Es2NI0yLfk5A9xKoBXm5C3h0E3Yl/cwJqSXMEjo U6fK16sK0owmwzsXt7YSxXvMpXbCi0wkOMLf6ohvaRJuunXVfn0+EUH241D/y9PN 8gTjFLzZnS45PGOfIMGyIXHLumilmMXFUkjM1xtVaYD912Y0nkT2ARfXDYDfjbsU jAsZI3h08r8kkA== -----END CERTIFICATE-----Generated at Tue May 12 21:43:00 2026 by rpki-client