$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: CU/C7ZsENTmzNi3FP0ac41YnaT/QqFSoniQznc5z2y0= Subject key identifier: 9D:38:63:57:BD:EA:68:A9:0D:AE:E3:FD:A6:57:FB:8E:5C:8D:E8:1E Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019A4EF47AF7142DA699A2D80E421B7B906C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 0F96 Signing time: Tue 04 Nov 2025 13:00:36 +0000 Manifest this update: Tue 04 Nov 2025 13:00:36 +0000 Manifest next update: Wed 05 Nov 2025 13:00:36 +0000 Files and hashes: 1: 10boupFvI1XULQNro2UN6lTac7g.roa (hash: TeSlzV5XfscAlltaInqH0+tXc9GXKbl3p81v+qesFug=) 2: 39NWCkxRJ14fZsy4fi4Dndunc3E.roa (hash: I60N/7b2uZcY0NbUe1SX8teSf0fVCyRemkra4xSsvf0=) 3: 3gaGUu98vgQ58MJvezo7k-ARASo.roa (hash: zKOcaqs6+UltL1w+RWoeOik9hgJIRqoSknm0oRsT/R8=) 4: 9SjejDTjZj0BtNF2Kp675mfLhag.roa (hash: RSM260xjwGf3+M4q8hzyY6CZ3UIIUis4qXJ8wDFcbHo=) 5: KUbX0VcDxa-Iyxzf4X9iZxn8Eig.roa (hash: bb9xUuRWwAY6FOOdBD4YOtWtJhp7uGNnKhs67QdqaKM=) 6: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: dTm+cxHd5JQa07xXyouVi33MVcRgJhPCQcCOLYPEVAQ=) 7: M67bSslu4i4Gy4p1ZlEfDj5c18Q.roa (hash: Cn1wdpfKE6warGKgEQa4o30Ra7TF3raQ0MpI76McIbU=) 8: P_s-zHSXglw_281jGOhyczBmJzI.roa (hash: wyG34RwDivUB0Qbi0DQatHzUoY8seUZaKV4g8a0quJw=) 9: UBsXmv4C5qffM7QM-9ND5QsfZfM.roa (hash: txrbSAO01vgCN97ZFCzVUVpn4VMkZhlbZmWHgF7E6VM=) 10: UMD_GrrBm5exfk4ne6BfKt3EdWg.roa (hash: r961vKQM2ic8nkYfC0teGF9Gu+iyVr4kAJkHxGV3f5E=) 11: Ug3t5QSKiSeV7OaH9F3UphE_NVs.roa (hash: VCeDrHYHr0n+emKVtRdKeoVIDZkLCFe4gRvZ/XqLmhk=) 12: ZHR6Evs2t_5MsAWITZbO0_S2MQc.roa (hash: TTSbz7ZJFR5Cfc5bWCmHmNZ+Klnd0Mt+hNshpgdxShs=) 13: g6eqrIfadHQCNvxrUPQ7Hredl8c.roa (hash: KzSePhZAtRu+meTZKCOYI8r/ad0eb15/dsNOD2iILt8=) 14: qnVXtf1TVi5GCQxQhYlNE39LANs.roa (hash: Vkby1xioM0TdE4rcN305dR5fIAGrIUI8/ZjjHRe70O4=) 15: sAlcT023Re1_motyjBVZccLuCgg.roa (hash: tja1+p7BrfZqb4rfBBKJcVOy+ZddkR/MXj/lAwerOJo=) 16: wC0sOJE7Wv-NDnjnHyFLfG4GZzQ.roa (hash: eBDWtuxEoge7xWpb5CncoOSy1UIXobW2890cjPYuR1s=) 17: zF2MV26QdQWRwXiicXiudK6n1Xw.roa (hash: 4aHxt6tPwu63K1PTNxL4On+nj5XwjJaZnAxdGrgtlxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 13:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f4:7a:f7:14:2d:a6:99:a2:d8:0e:42:1b:7b:90:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Nov 4 13:00:36 2025 GMT Not After : Nov 5 13:00:36 2025 GMT Subject: CN=9d386357bdea68a90daee3fda657fb8e5c8de81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7a:9e:82:63:d0:be:91:10:fb:2a:4e:a5:1e: 7a:8b:55:48:1f:0f:e1:cd:4a:4d:98:b6:26:52:19: 2a:d9:d6:14:5f:a4:7d:57:94:ee:8b:3d:6f:af:70: 74:6e:47:f6:89:7f:11:55:58:cf:16:48:5b:f7:67: c1:68:7c:37:33:07:8e:48:67:71:89:07:ef:35:54: a6:8c:45:9c:32:52:5f:92:fa:c5:c8:5f:ef:d7:83: 71:57:16:d7:c9:84:a7:76:9f:d2:8f:98:26:02:fb: cd:37:8a:b6:db:a9:66:df:66:3e:70:4b:1a:7b:e2: 8c:f4:6c:2c:5d:dc:fb:04:07:f3:3f:f2:ff:4e:f7: fc:fa:a1:bb:83:44:4f:fc:f6:db:06:6a:3c:0d:18: 9f:91:3f:90:c7:06:1b:2f:de:d4:83:88:fd:95:4e: 1a:75:bc:3b:b5:b8:7d:c3:7c:a7:71:75:07:45:ab: 96:4c:5f:4c:0b:8c:8a:93:5d:95:aa:54:c6:a4:e0: 99:3e:2c:70:58:6c:91:30:e0:e0:a0:32:93:e4:8f: 3c:74:0d:52:cb:79:f0:27:9b:68:0f:af:f1:60:a0: 7d:d3:95:9c:02:36:14:fa:31:2f:2a:aa:bc:c7:6e: a9:2f:0b:82:be:18:4e:31:18:9e:cb:4b:3d:51:c1: 73:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:38:63:57:BD:EA:68:A9:0D:AE:E3:FD:A6:57:FB:8E:5C:8D:E8:1E X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d2:eb:c2:da:85:07:da:c1:37:df:79:67:1e:34:a3:30:c7: 99:8d:54:36:44:37:0a:5d:24:94:c5:b1:2f:5d:1d:7f:11:f0: 8e:30:3e:b8:d8:8c:73:9e:91:9d:4d:2f:a1:12:7a:4d:7e:0b: 9a:c4:96:11:f9:a0:cf:65:44:71:67:76:48:cf:dd:ce:b8:43: ed:be:b6:1d:9b:aa:8d:d3:47:64:45:71:c7:c8:d7:57:cc:c8: 2e:54:e6:19:22:be:e7:f2:89:27:9a:5d:20:c4:af:d8:bd:7a: 5c:83:20:d2:f8:ef:ad:ab:e6:83:17:9e:f0:b5:ef:a8:5b:fa: 86:bf:75:dc:2b:95:3b:f5:a8:d2:7b:21:1b:74:b2:26:96:2e: d3:9e:22:ae:1e:39:14:34:5f:30:80:82:ec:03:77:e0:8f:eb: 7f:78:c4:de:3f:66:cd:99:f2:32:70:a4:f2:a6:0d:13:cc:79: 6f:2a:51:29:8e:bb:d8:0e:37:dc:c7:f8:02:fd:93:e4:32:b0: d6:0a:3c:af:86:a5:40:60:dd:14:08:88:64:23:77:da:74:7f: df:5b:d7:51:ab:43:7b:45:cc:dd:86:28:d2:8c:06:6e:74:be: f9:99:d8:4b:26:b2:ce:68:cc:28:a0:68:dd:b3:75:47:13:d2: 51:b0:be:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO9Hr3FC2mmaLYDkIbe5BsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjUxMTA0MTMwMDM2WhcNMjUxMTA1MTMwMDM2WjAzMTEwLwYDVQQD Eyg5ZDM4NjM1N2JkZWE2OGE5MGRhZWUzZmRhNjU3ZmI4ZTVjOGRlODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3qegmPQvpEQ+ypOpR56i1VIHw/h zUpNmLYmUhkq2dYUX6R9V5Tuiz1vr3B0bkf2iX8RVVjPFkhb92fBaHw3MweOSGdx iQfvNVSmjEWcMlJfkvrFyF/v14NxVxbXyYSndp/Sj5gmAvvNN4q226lm32Y+cEsa e+KM9GwsXdz7BAfzP/L/Tvf8+qG7g0RP/PbbBmo8DRifkT+QxwYbL97Ug4j9lU4a dbw7tbh9w3yncXUHRauWTF9MC4yKk12VqlTGpOCZPixwWGyRMODgoDKT5I88dA1S y3nwJ5toD6/xYKB905WcAjYU+jEvKqq8x26pLwuCvhhOMRiey0s9UcFzcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ04Y1e96mipDa7j/aZX+45cjegeMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItLrwtqF B9rBN995Zx40ozDHmY1UNkQ3Cl0klMWxL10dfxHwjjA+uNiMc56RnU0voRJ6TX4L msSWEfmgz2VEcWd2SM/dzrhD7b62HZuqjdNHZEVxx8jXV8zILlTmGSK+5/KJJ5pd IMSv2L16XIMg0vjvravmgxee8LXvqFv6hr913CuVO/Wo0nshG3SyJpYu054irh45 FDRfMICC7AN34I/rf3jE3j9mzZnyMnCk8qYNE8x5bypRKY672A433Mf4Av2T5DKw 1go8r4alQGDdFAiIZCN32nR/31vXUatDe0XM3YYo0owGbnS++ZnYSyayzmjMKKBo 3bN1RxPSUbC+yQ== -----END CERTIFICATE-----Generated at Tue Nov 4 19:57:47 2025 by rpki-client