$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: l54RXg5ncrJI9XYEm7QhgKuf0QCKLH/d3kSepKL3R4M= Subject key identifier: B9:43:74:D9:A9:72:FB:90:48:00:6C:9E:EE:74:F3:73:C2:3F:6C:A1 Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 01976BF40CC9E13D4A931828BDB31727E545 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 0E16 Signing time: Sat 14 Jun 2025 01:00:45 +0000 Manifest this update: Sat 14 Jun 2025 01:00:45 +0000 Manifest next update: Sun 15 Jun 2025 01:00:45 +0000 Files and hashes: 1: 10boupFvI1XULQNro2UN6lTac7g.roa (hash: TeSlzV5XfscAlltaInqH0+tXc9GXKbl3p81v+qesFug=) 2: 39NWCkxRJ14fZsy4fi4Dndunc3E.roa (hash: I60N/7b2uZcY0NbUe1SX8teSf0fVCyRemkra4xSsvf0=) 3: 3gaGUu98vgQ58MJvezo7k-ARASo.roa (hash: zKOcaqs6+UltL1w+RWoeOik9hgJIRqoSknm0oRsT/R8=) 4: 9SjejDTjZj0BtNF2Kp675mfLhag.roa (hash: RSM260xjwGf3+M4q8hzyY6CZ3UIIUis4qXJ8wDFcbHo=) 5: KUbX0VcDxa-Iyxzf4X9iZxn8Eig.roa (hash: bb9xUuRWwAY6FOOdBD4YOtWtJhp7uGNnKhs67QdqaKM=) 6: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: Pb9uK1Jplij6HgSaMPotTO+xlRg3YFQDszpdrgZa2Jc=) 7: UBsXmv4C5qffM7QM-9ND5QsfZfM.roa (hash: txrbSAO01vgCN97ZFCzVUVpn4VMkZhlbZmWHgF7E6VM=) 8: UMD_GrrBm5exfk4ne6BfKt3EdWg.roa (hash: r961vKQM2ic8nkYfC0teGF9Gu+iyVr4kAJkHxGV3f5E=) 9: Ug3t5QSKiSeV7OaH9F3UphE_NVs.roa (hash: VCeDrHYHr0n+emKVtRdKeoVIDZkLCFe4gRvZ/XqLmhk=) 10: ZHR6Evs2t_5MsAWITZbO0_S2MQc.roa (hash: TTSbz7ZJFR5Cfc5bWCmHmNZ+Klnd0Mt+hNshpgdxShs=) 11: g6eqrIfadHQCNvxrUPQ7Hredl8c.roa (hash: KzSePhZAtRu+meTZKCOYI8r/ad0eb15/dsNOD2iILt8=) 12: qnVXtf1TVi5GCQxQhYlNE39LANs.roa (hash: Vkby1xioM0TdE4rcN305dR5fIAGrIUI8/ZjjHRe70O4=) 13: sAlcT023Re1_motyjBVZccLuCgg.roa (hash: tja1+p7BrfZqb4rfBBKJcVOy+ZddkR/MXj/lAwerOJo=) 14: wC0sOJE7Wv-NDnjnHyFLfG4GZzQ.roa (hash: eBDWtuxEoge7xWpb5CncoOSy1UIXobW2890cjPYuR1s=) 15: zF2MV26QdQWRwXiicXiudK6n1Xw.roa (hash: 4aHxt6tPwu63K1PTNxL4On+nj5XwjJaZnAxdGrgtlxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6b:f4:0c:c9:e1:3d:4a:93:18:28:bd:b3:17:27:e5:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Jun 14 01:00:45 2025 GMT Not After : Jun 15 01:00:45 2025 GMT Subject: CN=b94374d9a972fb9048006c9eee74f373c23f6ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:65:94:05:16:15:21:57:f6:83:65:21:f7:c3: b9:6d:b7:b3:31:d1:64:dd:90:df:ee:f3:8b:e7:70: eb:fc:b4:77:24:34:cc:f4:3a:b1:d1:3b:fa:1c:f3: fc:9d:a3:80:89:50:44:18:83:4d:06:1f:c6:c0:b6: 08:f6:c3:c0:21:13:7b:8f:88:a8:e6:50:86:f6:55: 05:45:e4:42:da:92:ef:d3:2a:fc:11:4e:ea:5a:38: dd:c2:c2:61:81:d8:6b:12:9a:d8:17:c6:69:86:b6: de:d1:31:55:bb:b1:21:fd:45:3c:53:a6:4c:0f:8a: d8:d6:09:d8:6d:71:d1:04:13:4e:97:00:c2:a2:be: 2c:b9:13:7f:fc:e2:fe:c3:fd:0d:c9:40:63:c7:36: 57:09:8c:79:7d:1c:81:17:99:0f:bf:63:a6:25:fc: 2f:66:0b:ca:bd:fd:28:f3:e0:51:2e:a3:86:3d:46: e1:51:b4:aa:f0:78:c6:7f:63:93:70:97:3e:8e:17: 71:8e:b2:a1:bf:72:95:f8:67:79:f9:74:55:40:79: d7:d1:fa:e3:d1:1b:94:72:44:d6:ff:b1:64:3e:ae: c7:04:87:b9:78:ab:2d:4b:1c:4c:d0:26:0c:04:cb: 2f:56:6d:9d:98:cc:62:9a:c6:d7:84:72:5c:1f:da: 4f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:43:74:D9:A9:72:FB:90:48:00:6C:9E:EE:74:F3:73:C2:3F:6C:A1 X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ba:39:22:95:fa:86:4c:44:19:35:b3:ba:e3:2c:b2:10:cf: 75:be:48:f9:df:af:30:3e:49:c3:7a:6b:fe:b2:95:59:7b:9c: 08:5f:83:b2:7f:04:b9:46:1d:36:ab:ea:3c:e2:c3:67:a3:d4: 20:26:8d:4c:da:e9:fb:0a:3b:72:77:05:cc:85:b5:51:20:bd: 32:35:b7:65:01:71:e1:4a:b3:a9:51:71:1e:88:8e:8a:27:00: f6:cd:86:c3:03:20:28:cf:3c:fe:17:3f:a2:7e:b6:b3:5f:7f: 7f:6b:39:a7:4f:21:5f:1a:3a:14:ab:35:61:bd:88:94:50:99: 0a:8d:53:ac:5c:71:96:a3:27:58:cd:2d:8e:38:1a:be:c3:cf: 42:f1:ad:0b:ca:f5:0e:80:d4:c8:68:1d:11:d6:45:f0:d8:7a: 3f:3c:c0:0e:04:4f:40:f1:10:ca:15:06:07:5a:e9:a3:79:0d: 1c:96:1b:0c:dd:61:71:41:a3:1c:7f:5f:21:6a:b3:f2:bf:c7: 54:c0:41:3e:60:c9:fc:d1:be:6c:f3:93:61:b8:b9:82:9e:36: 2e:ed:35:3a:80:90:24:8f:1e:7d:41:6d:82:83:92:a9:57:47: 01:25:5b:eb:f2:bc:e0:a2:31:9f:a7:5c:aa:c2:9c:eb:63:f3: b0:b2:f6:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdr9AzJ4T1KkxgovbMXJ+VFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjUwNjE0MDEwMDQ1WhcNMjUwNjE1MDEwMDQ1WjAzMTEwLwYDVQQD EyhiOTQzNzRkOWE5NzJmYjkwNDgwMDZjOWVlZTc0ZjM3M2MyM2Y2Y2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2WUBRYVIVf2g2Uh98O5bbezMdFk 3ZDf7vOL53Dr/LR3JDTM9Dqx0Tv6HPP8naOAiVBEGINNBh/GwLYI9sPAIRN7j4io 5lCG9lUFReRC2pLv0yr8EU7qWjjdwsJhgdhrEprYF8Zphrbe0TFVu7Eh/UU8U6ZM D4rY1gnYbXHRBBNOlwDCor4suRN//OL+w/0NyUBjxzZXCYx5fRyBF5kPv2OmJfwv ZgvKvf0o8+BRLqOGPUbhUbSq8HjGf2OTcJc+jhdxjrKhv3KV+Gd5+XRVQHnX0frj 0RuUckTW/7FkPq7HBIe5eKstSxxM0CYMBMsvVm2dmMximsbXhHJcH9pPNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlDdNmpcvuQSABsnu5083PCP2yhMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7o5IpX6 hkxEGTWzuuMsshDPdb5I+d+vMD5Jw3pr/rKVWXucCF+Dsn8EuUYdNqvqPOLDZ6PU ICaNTNrp+wo7cncFzIW1USC9MjW3ZQFx4UqzqVFxHoiOiicA9s2GwwMgKM88/hc/ on62s19/f2s5p08hXxo6FKs1Yb2IlFCZCo1TrFxxlqMnWM0tjjgavsPPQvGtC8r1 DoDUyGgdEdZF8Nh6PzzADgRPQPEQyhUGB1rpo3kNHJYbDN1hcUGjHH9fIWqz8r/H VMBBPmDJ/NG+bPOTYbi5gp42Lu01OoCQJI8efUFtgoOSqVdHASVb6/K84KIxn6dc qsKc62PzsLL24Q== -----END CERTIFICATE-----Generated at Sat Jun 14 10:35:50 2025 by rpki-client