$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft File: lwJP_Eknv-NSiUNdnQKAQguOzcs.mft (raw, json) Hash identifier: fQtaF5AOIOfqdDHifAtwEknEWuI7XKM0idhKAY03arI= Subject key identifier: 86:42:FD:A5:50:2A:A7:BE:6F:35:3F:F6:E0:B9:D3:10:D1:D4:FB:84 Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Certificate serial: 019A4F98FA5E5738C74EFC18D4697D850464 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft Manifest number: 03F2 Signing time: Tue 04 Nov 2025 16:00:16 +0000 Manifest this update: Tue 04 Nov 2025 16:00:16 +0000 Manifest next update: Wed 05 Nov 2025 16:00:16 +0000 Files and hashes: 1: 2SkENpXb0el73BG8YEd0qffOYtk.roa (hash: 0jaoPpV/MX/H1rwXTjmAcjuo/4JCznBTWQGqCB7AVKs=) 2: JZvyn9etRbXjoocBllh7CNIOWtQ.roa (hash: mGlCIUXbc6xwaltgbnFxc0QkfIrllonR1TRT5DAGlfo=) 3: TPKP9_vIv3ZwN8x82Si3hqn8TqY.roa (hash: yYiZ6dC2HXsnlhNc9UgTQuWOe3jZHK4v0roNCv1tWq8=) 4: UQTJpCv9bdrUfH2Saww4hxPMkG8.roa (hash: SUoc+09CYtApBYMdnWncVZH3VjgdKoqVPXysENVRzSs=) 5: V4OKC9u84ToAwKHP8ipFnECEUSc.roa (hash: 63X029Xmtv3CuXa3LW6ITuuCc8ehUl7D3xtwLtBbGKw=) 6: gLbYx573_mCaGUlXxiWajg-EMEY.roa (hash: XXunEzXS739jLBVukfokQ5juDd54e+4tF/UDVJT6Zy4=) 7: lwJP_Eknv-NSiUNdnQKAQguOzcs.crl (hash: 7M1OduADQRe3Zn2mM5k2yAlmLCw7Y8qeNXexxvZyd+M=) 8: nMgeDSRn1palbG1YFRplQLiBJ88.roa (hash: qMMTHgMyiQ7I7jN7xNsRXFOKbCMbPEhnaDyD9fJClec=) 9: r8pB6OBljZlMvGeFwUgatLrYkjM.roa (hash: W/h+mxaAQgY0+amEPgG34hfdTN3S90SZFDGD/ImhAMQ=) 10: uYRmq9riIpnSj-dt063FdDttSMY.roa (hash: eVkY1lCFSypqnoFYGs3dDTWcHF3+cepLJEQKRr/0kno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:98:fa:5e:57:38:c7:4e:fc:18:d4:69:7d:85:04:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Validity Not Before: Nov 4 16:00:16 2025 GMT Not After : Nov 5 16:00:16 2025 GMT Subject: CN=8642fda5502aa7be6f353ff6e0b9d310d1d4fb84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2e:fe:cc:65:f7:9b:40:44:d3:30:3e:20:98: 69:75:71:43:dc:d5:25:d7:6e:2e:71:a5:61:69:e7: 90:d4:7e:69:de:8c:43:da:8b:91:b8:0f:d3:7a:c2: 2d:e3:07:3c:4e:da:4f:c7:a6:95:d2:15:b9:78:7e: 79:2b:dd:d7:82:64:ce:f8:bc:f0:de:ea:50:9e:28: 8d:fd:c7:b2:1e:be:64:11:c7:68:cc:66:7b:6c:3b: e5:e8:3e:91:33:04:0a:ba:c1:e0:8e:59:c6:d7:74: c9:04:bd:92:d7:8f:0f:f0:46:6e:32:65:3e:d6:45: 37:27:6e:c6:25:0a:5b:7b:90:1e:46:6d:a4:b9:e7: 87:cf:93:90:40:14:28:6d:5b:f1:d4:85:a9:51:67: 68:11:f9:50:df:d1:86:18:6f:24:9b:ca:58:f4:cf: 8b:bc:ce:ea:a8:84:67:a2:a4:40:47:36:24:9a:c3: 36:57:2f:0f:82:6a:4b:c3:d1:dc:b4:5f:10:8d:33: 2f:69:44:1e:eb:8a:94:2d:26:93:4b:5b:d1:fd:9c: 1b:40:a8:d8:9f:7a:70:2a:e8:9b:5f:42:d3:24:9f: 2c:ac:8a:b5:d3:4b:dc:9d:2a:cb:3f:ab:3e:d1:ed: 62:4b:f8:50:04:b5:c2:6c:15:4c:01:24:6b:22:68: b5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:42:FD:A5:50:2A:A7:BE:6F:35:3F:F6:E0:B9:D3:10:D1:D4:FB:84 X509v3 Authority Key Identifier: keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:25:a2:0e:34:52:06:54:38:92:f6:11:6e:98:29:8a:d6:54: 46:4b:28:f2:9a:d2:d8:42:23:a4:5e:aa:75:84:b2:66:98:58: 8c:91:e8:86:af:15:8b:ab:db:ab:b5:67:b2:d2:bf:44:14:5e: bc:30:1d:4a:da:b5:11:4e:0f:e4:36:d8:99:16:a1:b5:4e:23: 6b:08:25:6f:37:07:e7:71:cd:91:e6:c6:4d:85:9f:0f:a5:1d: 18:27:b2:15:96:93:85:0f:27:1e:4e:ce:90:34:9c:e3:83:e6: 63:aa:dd:0b:ff:a0:48:e8:0e:74:ca:0b:12:ee:a5:d4:14:2a: 99:76:b2:ac:2f:e2:8e:b9:63:32:03:51:97:62:52:32:a2:ba: 20:33:ce:af:b2:f2:58:61:71:1d:ed:d2:8c:f2:5d:61:67:6f: b8:0e:6f:39:c9:83:cb:79:87:92:75:0d:55:20:30:30:a8:c4: 1e:6c:d2:14:8a:9d:9a:58:44:5d:62:71:e5:c2:88:cc:db:b3: 07:4e:42:f7:11:b7:ba:48:0f:18:2a:f1:0a:ea:8b:3f:f9:8b: 12:52:c4:ee:0e:f0:55:d1:07:f0:d9:c8:93:88:41:cf:e0:b2: d4:da:a5:51:0b:28:b5:98:c8:8f:c1:5a:0a:1b:6c:3f:f2:b1: 62:2a:1a:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPmPpeVzjHTvwY1Gl9hQRkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MDI0ZmZjNDkyN2JmZTM1Mjg5NDM1ZDlkMDI4MDQyMGI4 ZWNkY2IwHhcNMjUxMTA0MTYwMDE2WhcNMjUxMTA1MTYwMDE2WjAzMTEwLwYDVQQD Eyg4NjQyZmRhNTUwMmFhN2JlNmYzNTNmZjZlMGI5ZDMxMGQxZDRmYjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS7+zGX3m0BE0zA+IJhpdXFD3NUl 124ucaVhaeeQ1H5p3oxD2ouRuA/TesIt4wc8TtpPx6aV0hW5eH55K93XgmTO+Lzw 3upQniiN/ceyHr5kEcdozGZ7bDvl6D6RMwQKusHgjlnG13TJBL2S148P8EZuMmU+ 1kU3J27GJQpbe5AeRm2kueeHz5OQQBQobVvx1IWpUWdoEflQ39GGGG8km8pY9M+L vM7qqIRnoqRARzYkmsM2Vy8PgmpLw9HctF8QjTMvaUQe64qULSaTS1vR/ZwbQKjY n3pwKuibX0LTJJ8srIq100vcnSrLP6s+0e1iS/hQBLXCbBVMASRrImi1DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZC/aVQKqe+bzU/9uC50xDR1PuEMB8GA1UdIwQY MBaAFJcCT/xJJ7/jUolDXZ0CgEILjs3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDkt NDAxYmRhNDQ3N2I1LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDktNDAxYmRhNDQ3N2I1 LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1yWiDjRS BlQ4kvYRbpgpitZURkso8prS2EIjpF6qdYSyZphYjJHohq8Vi6vbq7VnstK/RBRe vDAdStq1EU4P5DbYmRahtU4jawglbzcH53HNkebGTYWfD6UdGCeyFZaThQ8nHk7O kDSc44PmY6rdC/+gSOgOdMoLEu6l1BQqmXayrC/ijrljMgNRl2JSMqK6IDPOr7Ly WGFxHe3SjPJdYWdvuA5vOcmDy3mHknUNVSAwMKjEHmzSFIqdmlhEXWJx5cKIzNuz B05C9xG3ukgPGCrxCuqLP/mLElLE7g7wVdEH8NnIk4hBz+Cy1NqlUQsotZjIj8Fa ChtsP/KxYioamg== -----END CERTIFICATE-----Generated at Tue Nov 4 18:18:31 2025 by rpki-client