$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: 3y3ybYK1myVm/XQd8+PBIjIC0NkdnQquqWqYLxgKVyY= Subject key identifier: 32:F7:40:5D:BE:B2:03:D2:05:19:77:E1:B9:03:14:E0:A8:2D:AC:2A Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 0197B6A1EA2A3AB87DF9CEFACD91DFBB99D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 07D7 Signing time: Sat 28 Jun 2025 13:02:33 +0000 Manifest this update: Sat 28 Jun 2025 13:02:33 +0000 Manifest next update: Sun 29 Jun 2025 13:02:33 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: sAVrw/WbtqNmMrojXd5rZ8FQHV33AKwNfsm8V76J4cM=) 2: 5osuIpQEXkmgGGfabxgkobMCOqo.roa (hash: ar+Luee3A/qxuqFBW+KjI5NWMnxgfB2LrCoUMGMm2y0=) 3: CdQL_rNfT4mruJeuRhVd0hpPdps.roa (hash: Z/uUo7J+RuPWC8u1ha2F9ldd1L0f2IgJnPvQNnlMC1w=) 4: EYqz9-lWcT6mAZDYhv76ihfxRKA.roa (hash: 2kj2lpyBuoRk5Uqc6kG2vMBRCERsonaSDs/n/J78Nlc=) 5: IZB5fE3vCYPzm412fZZk7uYbwgE.roa (hash: cWCrnSM11F8k4l8vziWTFuB3S6ERgGRGnqCvZnuNDXk=) 6: LB0RhZaeHc4lFeLZglNMj0M0iuc.roa (hash: pKzr9fhEjb+2hcFnGRNZ9yDdUriurScTg3ZqXErO5Fk=) 7: LebN_fB1s6ScKeJ5c8zfxUklaIc.roa (hash: ugIRy/GdUvkC8oivMaAEQB7yPRimuew/T3ig9FaE2mE=) 8: TWprmIRYABwJKC3e_3_5wzunOVk.roa (hash: ax2e42jwFW+IhzbsKHYLodyYVLy/wsVmS87dwyQkShM=) 9: XQHVRGTqM3fRB_j_ijhUwjJs9Ug.roa (hash: fKPNzBl0e4tcVAHFnpIZK59mBTOB3H7FeF+MB2XfaW0=) 10: e50PKaKFcaW3uGMNUchzpEB18-M.roa (hash: c0PkOWIaLZSS8TffWgd4kYVYWuDWquopKeKw112DVMI=) 11: ecLZxlk5uOKtie8YZypau_dP7Nk.roa (hash: qDzztQzT4j41tAiYOJhicLZgVePR5Gy6YYwn9Gm7Kj0=) 12: eeYpshaoc5go--DBuuRmLZpBsio.roa (hash: 9Ypg180659MtxxUjCyOwRub9c14vNLr84izZxblP7gQ=) 13: fp7iaq3w3IK7xxC4hTxOHXlgQdo.roa (hash: IIdoboRyB6xVt9Ub/S//LkCzsgiZ4eA93ZNjm/kWoFw=) 14: giUGr98XTvMTapx-HcfkJZUS_QQ.roa (hash: t3Dcx8q3eGk8zI/z9A/Ebz1Oh7dW30YVpRQVHDQqIlA=) 15: lSpQXF77aOd5aaWL7y9AyYlQaWs.roa (hash: k9FWEbwffQtuSyIeXa8qgZ8XemL3dT9nYO5Khh1P6zU=) 16: nNGX_OCe8X9nXrEP34vII8SEf10.roa (hash: n1Og0cpU00h6IhKyI+ECnhLWs0U3hRjPdAcqH8CABIM=) 17: tcp-Msodt7Yoyc_U-JzWb4RQflg.roa (hash: 2O16WNiH/chbI3skghuISKeRLWAnGH5be6qCPHCOEPw=) 18: vIo5JZEbJy_j1F7Gy0x0-4XTOm4.roa (hash: aqC1tIrcI2MF2zcWVNBFSrIprB6SpbD2HGFhZaRj/MQ=) 19: wQyg8eA6lRREzJ9taIK7-ABN-Vk.roa (hash: 56Z2ikBVQqPH0LfM7ywhy1//SerrhxAPBdjzeQApODo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a1:ea:2a:3a:b8:7d:f9:ce:fa:cd:91:df:bb:99:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Jun 28 13:02:33 2025 GMT Not After : Jun 29 13:02:33 2025 GMT Subject: CN=32f7405dbeb203d2051977e1b90314e0a82dac2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9b:b6:7e:1f:47:90:63:7e:06:7c:98:54:6b: 50:d0:a4:69:49:89:f1:09:88:27:16:c8:29:f3:22: e0:2c:26:f5:7a:a4:98:cf:3b:c3:d1:dc:eb:9a:57: 8e:f0:2a:8c:a5:1a:da:28:6d:03:b4:61:35:48:32: 13:55:12:0c:6a:b5:18:ab:1a:84:16:7f:0e:00:87: 4d:01:f1:b8:9e:41:82:f7:75:5a:94:3b:4a:13:88: ab:4f:43:6c:c9:72:7f:46:82:98:c2:49:b5:e9:92: 6c:a0:82:1b:f8:75:f4:37:70:3e:d0:b9:9b:81:cc: 0d:b6:d7:77:e7:cf:b2:16:f1:43:5a:ca:ef:6c:49: 68:64:44:4f:40:f1:fe:ca:40:6e:67:bb:85:20:09: 58:f7:ca:64:22:76:74:9a:fc:8b:ed:32:18:d6:30: d9:19:79:3c:04:c7:ec:f2:1a:cf:22:94:6d:ed:70: 20:23:68:1e:19:19:aa:71:81:d3:a8:b2:93:0d:e4: a0:b2:99:67:9a:bf:63:60:29:95:6f:7c:89:18:2b: ec:b7:fc:b4:1a:7a:c2:26:06:fe:00:96:b5:d4:5d: bb:ad:18:2b:bf:95:99:66:21:23:dc:3d:d3:ec:90: 8b:d2:c6:a9:14:2d:5d:9f:12:36:5b:6b:33:58:05: 1e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F7:40:5D:BE:B2:03:D2:05:19:77:E1:B9:03:14:E0:A8:2D:AC:2A X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:bc:ae:63:34:eb:1c:40:f6:62:01:0d:a4:9b:08:5d:c6:0f: 8f:a3:9e:2b:43:01:6d:c8:a2:b5:16:eb:18:8b:32:d5:46:bf: 24:43:02:ee:da:63:4f:0f:27:aa:81:98:71:b0:71:92:85:15: c9:30:36:9a:2e:eb:31:d9:e8:7b:96:a9:0d:dd:e6:1b:6b:aa: 70:6b:8f:78:97:f7:f0:46:21:b4:52:98:f4:98:10:85:4c:20: cb:12:3c:bc:1f:63:40:a9:3e:25:d9:20:16:cf:fc:88:b1:ac: 92:2a:80:f0:6b:c3:e0:d9:89:05:a9:b8:41:a4:64:6b:c1:f0: e8:5e:c2:1a:f2:e0:21:61:77:ef:09:64:94:f5:2d:97:f3:c6: 77:22:29:1b:9d:de:36:e6:1b:27:fc:71:ed:04:2c:97:cf:8d: 1d:22:49:cd:41:4b:36:7e:af:cd:ca:6c:f1:30:c1:1b:ee:dc: 88:3e:73:70:61:82:cd:20:8a:ea:a9:65:0e:7c:ae:f4:bc:6a: 64:86:1c:68:b5:e7:6a:b5:63:c1:35:0a:24:0e:57:03:26:2e: 8e:06:0d:2e:ff:4c:bf:70:ab:2b:1d:eb:7a:48:91:77:2c:47: 57:cb:ea:86:c8:dd:4c:30:65:0a:02:75:36:6a:f9:bc:49:1d: f3:3e:29:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oeoqOrh9+c76zZHfu5nZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjUwNjI4MTMwMjMzWhcNMjUwNjI5MTMwMjMzWjAzMTEwLwYDVQQD EygzMmY3NDA1ZGJlYjIwM2QyMDUxOTc3ZTFiOTAzMTRlMGE4MmRhYzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZu2fh9HkGN+BnyYVGtQ0KRpSYnx CYgnFsgp8yLgLCb1eqSYzzvD0dzrmleO8CqMpRraKG0DtGE1SDITVRIMarUYqxqE Fn8OAIdNAfG4nkGC93ValDtKE4irT0NsyXJ/RoKYwkm16ZJsoIIb+HX0N3A+0Lmb gcwNttd358+yFvFDWsrvbEloZERPQPH+ykBuZ7uFIAlY98pkInZ0mvyL7TIY1jDZ GXk8BMfs8hrPIpRt7XAgI2geGRmqcYHTqLKTDeSgsplnmr9jYCmVb3yJGCvst/y0 GnrCJgb+AJa11F27rRgrv5WZZiEj3D3T7JCL0sapFC1dnxI2W2szWAUerQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDL3QF2+sgPSBRl34bkDFOCoLawqMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXryuYzTr HED2YgENpJsIXcYPj6OeK0MBbciitRbrGIsy1Ua/JEMC7tpjTw8nqoGYcbBxkoUV yTA2mi7rMdnoe5apDd3mG2uqcGuPeJf38EYhtFKY9JgQhUwgyxI8vB9jQKk+Jdkg Fs/8iLGskiqA8GvD4NmJBam4QaRka8Hw6F7CGvLgIWF37wlklPUtl/PGdyIpG53e NuYbJ/xx7QQsl8+NHSJJzUFLNn6vzcps8TDBG+7ciD5zcGGCzSCK6qllDnyu9Lxq ZIYcaLXnarVjwTUKJA5XAyYujgYNLv9Mv3CrKx3rekiRdyxHV8vqhsjdTDBlCgJ1 Nmr5vEkd8z4pvQ== -----END CERTIFICATE-----Generated at Sat Jun 28 21:56:59 2025 by rpki-client