$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: LinfYpC5K+Oyr2r9SNdgYGSkBHmhlIScuawZRAloY4Y= Subject key identifier: D8:D4:03:27:B8:A5:1B:62:8E:05:E2:A7:5D:FC:EF:7A:92:97:D8:E1 Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019672D46060A3B5F72585C83E3A5D3B6F2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 0D95 Signing time: Sat 26 Apr 2025 16:00:42 +0000 Manifest this update: Sat 26 Apr 2025 16:00:42 +0000 Manifest next update: Sun 27 Apr 2025 16:00:42 +0000 Files and hashes: 1: 10boupFvI1XULQNro2UN6lTac7g.roa (hash: TeSlzV5XfscAlltaInqH0+tXc9GXKbl3p81v+qesFug=) 2: 39NWCkxRJ14fZsy4fi4Dndunc3E.roa (hash: I60N/7b2uZcY0NbUe1SX8teSf0fVCyRemkra4xSsvf0=) 3: 3gaGUu98vgQ58MJvezo7k-ARASo.roa (hash: zKOcaqs6+UltL1w+RWoeOik9hgJIRqoSknm0oRsT/R8=) 4: 9SjejDTjZj0BtNF2Kp675mfLhag.roa (hash: RSM260xjwGf3+M4q8hzyY6CZ3UIIUis4qXJ8wDFcbHo=) 5: KUbX0VcDxa-Iyxzf4X9iZxn8Eig.roa (hash: bb9xUuRWwAY6FOOdBD4YOtWtJhp7uGNnKhs67QdqaKM=) 6: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: 5uI6PeARUT9hRem5rRhgFeSKpAnl49+vRJ+Uqi5gmpw=) 7: UBsXmv4C5qffM7QM-9ND5QsfZfM.roa (hash: txrbSAO01vgCN97ZFCzVUVpn4VMkZhlbZmWHgF7E6VM=) 8: UMD_GrrBm5exfk4ne6BfKt3EdWg.roa (hash: r961vKQM2ic8nkYfC0teGF9Gu+iyVr4kAJkHxGV3f5E=) 9: Ug3t5QSKiSeV7OaH9F3UphE_NVs.roa (hash: VCeDrHYHr0n+emKVtRdKeoVIDZkLCFe4gRvZ/XqLmhk=) 10: ZHR6Evs2t_5MsAWITZbO0_S2MQc.roa (hash: TTSbz7ZJFR5Cfc5bWCmHmNZ+Klnd0Mt+hNshpgdxShs=) 11: g6eqrIfadHQCNvxrUPQ7Hredl8c.roa (hash: KzSePhZAtRu+meTZKCOYI8r/ad0eb15/dsNOD2iILt8=) 12: qnVXtf1TVi5GCQxQhYlNE39LANs.roa (hash: Vkby1xioM0TdE4rcN305dR5fIAGrIUI8/ZjjHRe70O4=) 13: sAlcT023Re1_motyjBVZccLuCgg.roa (hash: tja1+p7BrfZqb4rfBBKJcVOy+ZddkR/MXj/lAwerOJo=) 14: wC0sOJE7Wv-NDnjnHyFLfG4GZzQ.roa (hash: eBDWtuxEoge7xWpb5CncoOSy1UIXobW2890cjPYuR1s=) 15: zF2MV26QdQWRwXiicXiudK6n1Xw.roa (hash: 4aHxt6tPwu63K1PTNxL4On+nj5XwjJaZnAxdGrgtlxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:d4:60:60:a3:b5:f7:25:85:c8:3e:3a:5d:3b:6f:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Apr 26 16:00:42 2025 GMT Not After : Apr 27 16:00:42 2025 GMT Subject: CN=d8d40327b8a51b628e05e2a75dfcef7a9297d8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:39:38:be:77:ec:0d:97:9d:54:2e:ff:8c:7c: 13:b6:5c:df:d8:22:db:02:3d:ae:7f:94:2d:89:c6: c1:10:cd:c4:35:71:40:0b:c8:fc:14:97:40:b9:23: 8d:08:f0:f6:24:41:35:d2:d9:c8:35:7b:40:4c:71: da:0a:7f:f2:54:7d:ce:83:93:c2:c7:f2:99:50:82: e7:74:41:e9:d9:e4:7d:d8:f8:24:52:c3:7e:a1:65: 6e:a8:c7:62:71:5d:52:77:3a:45:c3:13:82:57:3f: e0:18:9a:ea:2b:fd:3c:53:43:16:c9:b8:f0:78:07: a0:75:2f:a9:72:30:41:d6:f9:a4:c4:e3:da:bb:4b: 4d:a4:d2:3a:0c:24:af:1a:66:82:c0:d9:c8:09:b0: 9f:f4:06:26:48:e7:ef:78:ac:a3:7e:96:c7:f5:4d: 8f:72:cc:29:73:07:45:5f:27:a7:f9:b9:c7:01:6b: 0a:5f:6d:0c:9a:92:3e:5c:ba:1c:6e:a2:bc:76:75: ac:12:db:8f:a9:e1:fd:eb:e9:8a:52:77:1c:15:d8: 80:67:23:e6:96:fe:f5:a6:cd:97:b3:95:d5:c4:49: 9e:2d:a1:29:9d:d1:26:9b:34:ea:b5:c6:fd:65:b5: 43:bb:88:bd:6a:52:43:c3:c6:c5:70:93:79:de:2a: 78:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D4:03:27:B8:A5:1B:62:8E:05:E2:A7:5D:FC:EF:7A:92:97:D8:E1 X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:4b:d4:cd:2c:89:53:0d:4d:2d:02:b2:74:d7:e2:10:5d:51: 79:c0:99:72:cb:22:ff:68:d4:24:f9:8a:5f:b0:31:ef:87:07: d9:6e:77:8a:0d:12:1c:91:95:82:9b:c9:99:82:d7:f9:99:af: 09:13:54:c0:24:a4:4c:1d:f2:a6:86:74:16:44:c2:ec:da:9a: a8:e9:5e:08:f2:c1:cd:16:87:0f:cb:ce:1e:cf:41:24:fb:06: bc:fe:2e:a1:60:cf:07:a3:88:f2:0f:5f:17:43:e8:6a:19:c4: cd:03:05:a0:66:a1:a4:f3:cf:b8:33:50:b9:e5:ef:d3:d3:ef: 75:1b:3b:e0:cc:00:cc:2e:55:c3:a6:6c:f2:63:1d:95:f0:f2: ba:a9:46:ba:da:f1:e4:4f:bc:f2:e3:b4:ef:79:dc:42:a2:d3: 6d:0e:aa:d5:c4:e1:c7:d4:ef:a3:8b:25:0d:03:52:ab:7e:89: f7:e4:b3:d9:bc:ac:41:0a:ac:5b:a7:43:be:c5:0f:49:6c:9d: 02:4a:70:67:cb:05:88:17:eb:a7:e2:a1:da:98:03:f8:eb:5e: 3c:74:9f:8b:8b:5d:2a:2c:5a:de:c4:f8:fb:19:a3:bc:2a:ca: 00:7b:a9:30:4f:70:c0:50:a3:fc:41:a6:c2:65:01:84:e5:30: 38:30:bf:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZy1GBgo7X3JYXIPjpdO28qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjUwNDI2MTYwMDQyWhcNMjUwNDI3MTYwMDQyWjAzMTEwLwYDVQQD EyhkOGQ0MDMyN2I4YTUxYjYyOGUwNWUyYTc1ZGZjZWY3YTkyOTdkOGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jk4vnfsDZedVC7/jHwTtlzf2CLb Aj2uf5QticbBEM3ENXFAC8j8FJdAuSONCPD2JEE10tnINXtATHHaCn/yVH3Og5PC x/KZUILndEHp2eR92PgkUsN+oWVuqMdicV1SdzpFwxOCVz/gGJrqK/08U0MWybjw eAegdS+pcjBB1vmkxOPau0tNpNI6DCSvGmaCwNnICbCf9AYmSOfveKyjfpbH9U2P cswpcwdFXyen+bnHAWsKX20MmpI+XLocbqK8dnWsEtuPqeH96+mKUnccFdiAZyPm lv71ps2Xs5XVxEmeLaEpndEmmzTqtcb9ZbVDu4i9alJDw8bFcJN53ip4kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjUAye4pRtijgXip13873qSl9jhMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUvUzSyJ Uw1NLQKydNfiEF1RecCZcssi/2jUJPmKX7Ax74cH2W53ig0SHJGVgpvJmYLX+Zmv CRNUwCSkTB3ypoZ0FkTC7NqaqOleCPLBzRaHD8vOHs9BJPsGvP4uoWDPB6OI8g9f F0PoahnEzQMFoGahpPPPuDNQueXv09PvdRs74MwAzC5Vw6Zs8mMdlfDyuqlGutrx 5E+88uO073ncQqLTbQ6q1cThx9Tvo4slDQNSq36J9+Sz2bysQQqsW6dDvsUPSWyd AkpwZ8sFiBfrp+Kh2pgD+OtePHSfi4tdKixa3sT4+xmjvCrKAHupME9wwFCj/EGm wmUBhOUwODC/3w== -----END CERTIFICATE-----Generated at Sat Apr 26 20:01:05 2025 by rpki-client