$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: gSbZAbFBu1YGlud3Jnvv/IoNAK4IF8yMposhUAfonFs= Subject key identifier: 27:2E:4A:BB:DA:EF:08:F1:50:8D:E5:08:C9:7D:F1:25:73:7E:D6:1B Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 01988BB33EED1671C0DEBC81F1512A73BFA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 0EAB Signing time: Fri 08 Aug 2025 22:00:36 +0000 Manifest this update: Fri 08 Aug 2025 22:00:36 +0000 Manifest next update: Sat 09 Aug 2025 22:00:36 +0000 Files and hashes: 1: 10boupFvI1XULQNro2UN6lTac7g.roa (hash: TeSlzV5XfscAlltaInqH0+tXc9GXKbl3p81v+qesFug=) 2: 39NWCkxRJ14fZsy4fi4Dndunc3E.roa (hash: I60N/7b2uZcY0NbUe1SX8teSf0fVCyRemkra4xSsvf0=) 3: 3gaGUu98vgQ58MJvezo7k-ARASo.roa (hash: zKOcaqs6+UltL1w+RWoeOik9hgJIRqoSknm0oRsT/R8=) 4: 9SjejDTjZj0BtNF2Kp675mfLhag.roa (hash: RSM260xjwGf3+M4q8hzyY6CZ3UIIUis4qXJ8wDFcbHo=) 5: KUbX0VcDxa-Iyxzf4X9iZxn8Eig.roa (hash: bb9xUuRWwAY6FOOdBD4YOtWtJhp7uGNnKhs67QdqaKM=) 6: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: 9KaybuFNhjX2ggmV9ep4CxqeSuJWTryNepFIwEsVhJ8=) 7: UBsXmv4C5qffM7QM-9ND5QsfZfM.roa (hash: txrbSAO01vgCN97ZFCzVUVpn4VMkZhlbZmWHgF7E6VM=) 8: UMD_GrrBm5exfk4ne6BfKt3EdWg.roa (hash: r961vKQM2ic8nkYfC0teGF9Gu+iyVr4kAJkHxGV3f5E=) 9: Ug3t5QSKiSeV7OaH9F3UphE_NVs.roa (hash: VCeDrHYHr0n+emKVtRdKeoVIDZkLCFe4gRvZ/XqLmhk=) 10: ZHR6Evs2t_5MsAWITZbO0_S2MQc.roa (hash: TTSbz7ZJFR5Cfc5bWCmHmNZ+Klnd0Mt+hNshpgdxShs=) 11: g6eqrIfadHQCNvxrUPQ7Hredl8c.roa (hash: KzSePhZAtRu+meTZKCOYI8r/ad0eb15/dsNOD2iILt8=) 12: qnVXtf1TVi5GCQxQhYlNE39LANs.roa (hash: Vkby1xioM0TdE4rcN305dR5fIAGrIUI8/ZjjHRe70O4=) 13: sAlcT023Re1_motyjBVZccLuCgg.roa (hash: tja1+p7BrfZqb4rfBBKJcVOy+ZddkR/MXj/lAwerOJo=) 14: wC0sOJE7Wv-NDnjnHyFLfG4GZzQ.roa (hash: eBDWtuxEoge7xWpb5CncoOSy1UIXobW2890cjPYuR1s=) 15: zF2MV26QdQWRwXiicXiudK6n1Xw.roa (hash: 4aHxt6tPwu63K1PTNxL4On+nj5XwjJaZnAxdGrgtlxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8b:b3:3e:ed:16:71:c0:de:bc:81:f1:51:2a:73:bf:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Aug 8 22:00:36 2025 GMT Not After : Aug 9 22:00:36 2025 GMT Subject: CN=272e4abbdaef08f1508de508c97df125737ed61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f5:93:8b:0b:4a:e8:76:a5:8e:d2:3d:8c:b0: b4:43:7b:f5:b6:45:5c:1d:23:3e:d1:a4:00:a9:60: 71:8b:fc:a9:54:d9:29:56:3b:fe:ab:b9:5a:c0:f1: fd:07:4a:23:72:83:9e:44:e4:46:ff:c5:19:e1:d1: 51:90:fe:6e:35:1a:f6:13:1f:ff:2a:c7:ac:23:99: 66:b0:d8:e2:e2:cb:0d:41:6b:85:54:ae:59:ce:ff: ff:02:37:c4:f8:1e:e7:c1:6b:d9:d2:76:6d:42:25: 4c:dc:00:b7:fb:7f:1f:fe:3a:65:98:c5:56:f8:e5: ee:7c:d1:6d:e6:00:94:fc:c1:8e:c6:9b:03:0d:f4: 88:eb:dc:0e:b4:de:4f:3a:62:83:ca:e1:81:4b:dc: f2:c5:96:38:80:5b:9b:ed:49:06:bf:cd:d5:bf:2b: 82:4c:58:3f:65:0d:bb:a2:83:33:54:42:5b:1f:bc: 48:37:fd:c2:90:d8:e6:fb:05:85:cf:ce:69:73:8f: 8e:90:d0:80:a7:cc:25:a8:80:8c:5a:e7:fb:bf:be: 86:ca:9f:ef:65:f1:e0:3e:f0:8e:89:e6:c5:a8:89: c3:5b:1a:27:f8:dd:3b:81:4b:9f:11:06:27:1f:9d: 5d:ff:bf:4b:90:49:4e:b6:b8:a8:2f:4d:a6:78:5a: 07:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2E:4A:BB:DA:EF:08:F1:50:8D:E5:08:C9:7D:F1:25:73:7E:D6:1B X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:7a:2e:6a:40:0c:1d:6a:51:2b:32:ed:df:52:73:f2:a6:56: 30:eb:d2:2b:cc:26:6a:ea:9f:1a:49:2c:38:3d:30:88:1a:98: 0c:11:55:1b:8b:45:66:aa:9d:b9:22:c3:61:23:d8:3c:96:70: 5b:21:86:0e:04:50:44:2d:41:22:37:4e:3c:f7:2c:85:86:fe: a5:d1:a6:47:4a:52:4c:bf:dc:4e:9e:1e:aa:5b:1a:e3:5e:a9: 53:03:6b:f0:7d:ac:4f:58:75:f1:29:1c:29:a0:7d:a4:f5:bb: 2f:7f:fc:69:15:5e:6e:e9:21:19:a8:ec:1f:60:14:11:a4:69: 6e:25:87:d1:44:f8:7c:19:1f:5d:2a:54:f8:84:92:b6:67:ed: 32:46:d9:f7:c1:8f:4e:0a:d4:5d:2d:9a:a6:9a:85:3f:53:f7: 54:a5:50:53:01:5c:93:3f:13:d1:41:bf:8d:ce:42:36:12:fb: 1b:7f:0a:33:79:8c:60:84:39:d0:db:0b:4b:d7:5b:81:99:e0: 2e:19:64:41:9c:4f:6a:c0:d5:68:0d:b5:58:81:03:70:6e:fa: 1b:e2:c1:de:6b:90:f8:aa:c4:89:ad:bc:38:41:b4:55:00:c4: c6:9e:cb:4d:26:90:cd:e3:88:0e:93:e9:f9:c6:c2:3f:fd:a6: 00:d5:5f:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiLsz7tFnHA3ryB8VEqc7+pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjUwODA4MjIwMDM2WhcNMjUwODA5MjIwMDM2WjAzMTEwLwYDVQQD EygyNzJlNGFiYmRhZWYwOGYxNTA4ZGU1MDhjOTdkZjEyNTczN2VkNjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivWTiwtK6HaljtI9jLC0Q3v1tkVc HSM+0aQAqWBxi/ypVNkpVjv+q7lawPH9B0ojcoOeRORG/8UZ4dFRkP5uNRr2Ex// KsesI5lmsNji4ssNQWuFVK5Zzv//AjfE+B7nwWvZ0nZtQiVM3AC3+38f/jplmMVW +OXufNFt5gCU/MGOxpsDDfSI69wOtN5POmKDyuGBS9zyxZY4gFub7UkGv83VvyuC TFg/ZQ27ooMzVEJbH7xIN/3CkNjm+wWFz85pc4+OkNCAp8wlqICMWuf7v76Gyp/v ZfHgPvCOiebFqInDWxon+N07gUufEQYnH51d/79LkElOtrioL02meFoHTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcuSrva7wjxUI3lCMl98SVzftYbMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3ouakAM HWpRKzLt31Jz8qZWMOvSK8wmauqfGkksOD0wiBqYDBFVG4tFZqqduSLDYSPYPJZw WyGGDgRQRC1BIjdOPPcshYb+pdGmR0pSTL/cTp4eqlsa416pUwNr8H2sT1h18Skc KaB9pPW7L3/8aRVebukhGajsH2AUEaRpbiWH0UT4fBkfXSpU+ISStmftMkbZ98GP TgrUXS2appqFP1P3VKVQUwFckz8T0UG/jc5CNhL7G38KM3mMYIQ50NsLS9dbgZng LhlkQZxPasDVaA21WIEDcG76G+LB3muQ+KrEia28OEG0VQDExp7LTSaQzeOIDpPp +cbCP/2mANVf8Q== -----END CERTIFICATE-----Generated at Sat Aug 9 01:05:12 2025 by rpki-client