$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: iQ+Z8ccAaqi/407IxI7r2zlwCJjK2GB9qWBi5+X3N8s= Subject key identifier: 5E:86:15:E6:32:F9:0E:36:56:FC:CD:2B:EA:C9:9F:4B:FB:CA:89:5F Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 0196C013F373B58F67F10E97F8AC684BFC17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 0DBD Signing time: Sun 11 May 2025 16:00:55 +0000 Manifest this update: Sun 11 May 2025 16:00:55 +0000 Manifest next update: Mon 12 May 2025 16:00:55 +0000 Files and hashes: 1: 10boupFvI1XULQNro2UN6lTac7g.roa (hash: TeSlzV5XfscAlltaInqH0+tXc9GXKbl3p81v+qesFug=) 2: 39NWCkxRJ14fZsy4fi4Dndunc3E.roa (hash: I60N/7b2uZcY0NbUe1SX8teSf0fVCyRemkra4xSsvf0=) 3: 3gaGUu98vgQ58MJvezo7k-ARASo.roa (hash: zKOcaqs6+UltL1w+RWoeOik9hgJIRqoSknm0oRsT/R8=) 4: 9SjejDTjZj0BtNF2Kp675mfLhag.roa (hash: RSM260xjwGf3+M4q8hzyY6CZ3UIIUis4qXJ8wDFcbHo=) 5: KUbX0VcDxa-Iyxzf4X9iZxn8Eig.roa (hash: bb9xUuRWwAY6FOOdBD4YOtWtJhp7uGNnKhs67QdqaKM=) 6: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: zVdelF8BEKxrlM+w28//0zw3ue2Ghy9lFLKeikcSNJE=) 7: UBsXmv4C5qffM7QM-9ND5QsfZfM.roa (hash: txrbSAO01vgCN97ZFCzVUVpn4VMkZhlbZmWHgF7E6VM=) 8: UMD_GrrBm5exfk4ne6BfKt3EdWg.roa (hash: r961vKQM2ic8nkYfC0teGF9Gu+iyVr4kAJkHxGV3f5E=) 9: Ug3t5QSKiSeV7OaH9F3UphE_NVs.roa (hash: VCeDrHYHr0n+emKVtRdKeoVIDZkLCFe4gRvZ/XqLmhk=) 10: ZHR6Evs2t_5MsAWITZbO0_S2MQc.roa (hash: TTSbz7ZJFR5Cfc5bWCmHmNZ+Klnd0Mt+hNshpgdxShs=) 11: g6eqrIfadHQCNvxrUPQ7Hredl8c.roa (hash: KzSePhZAtRu+meTZKCOYI8r/ad0eb15/dsNOD2iILt8=) 12: qnVXtf1TVi5GCQxQhYlNE39LANs.roa (hash: Vkby1xioM0TdE4rcN305dR5fIAGrIUI8/ZjjHRe70O4=) 13: sAlcT023Re1_motyjBVZccLuCgg.roa (hash: tja1+p7BrfZqb4rfBBKJcVOy+ZddkR/MXj/lAwerOJo=) 14: wC0sOJE7Wv-NDnjnHyFLfG4GZzQ.roa (hash: eBDWtuxEoge7xWpb5CncoOSy1UIXobW2890cjPYuR1s=) 15: zF2MV26QdQWRwXiicXiudK6n1Xw.roa (hash: 4aHxt6tPwu63K1PTNxL4On+nj5XwjJaZnAxdGrgtlxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c0:13:f3:73:b5:8f:67:f1:0e:97:f8:ac:68:4b:fc:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: May 11 16:00:55 2025 GMT Not After : May 12 16:00:55 2025 GMT Subject: CN=5e8615e632f90e3656fccd2beac99f4bfbca895f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b2:87:0c:d3:97:e4:63:8c:90:bc:7a:2d:28: b2:af:b5:89:2c:36:77:de:dd:d5:d3:9e:f4:10:e9: 19:95:6e:eb:89:f0:98:7d:81:1c:ef:97:02:ed:34: 9a:c2:5d:cc:b3:f3:4e:a4:57:b4:f7:79:e1:69:c6: be:22:6c:64:89:81:8a:05:83:80:5e:09:aa:85:50: bd:73:9d:ec:49:bc:74:b1:50:c0:f7:ed:66:10:5e: 73:8c:6f:77:89:4b:f6:00:cf:32:76:c4:48:1f:a2: 41:a8:d1:76:81:6f:be:49:bf:22:7b:6a:6d:7f:3c: b3:61:35:ce:75:3b:be:07:4c:ea:01:6d:cb:51:1e: ce:f1:4d:72:90:c4:85:05:8c:ea:54:03:30:83:67: 01:b7:fe:c5:2a:b5:cb:33:39:aa:97:ce:b6:b8:b4: 41:55:c5:21:7c:0f:f3:b6:9d:6f:21:a4:33:b0:3a: 27:65:f6:eb:af:d1:bc:b6:f0:79:a4:67:61:35:e2: e1:01:e4:0d:72:16:f6:ea:e6:f0:af:2e:b9:5e:d7: aa:f0:19:91:db:c4:e7:6b:69:6e:ab:82:b9:ce:f4: 82:9e:d0:c6:69:b5:f7:e4:d9:c5:0d:76:ef:43:5c: 69:42:b1:04:5d:29:53:c7:12:b2:45:80:ab:24:c9: 0b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:86:15:E6:32:F9:0E:36:56:FC:CD:2B:EA:C9:9F:4B:FB:CA:89:5F X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:77:e8:49:eb:9f:90:a0:06:ed:c4:a2:08:3b:09:98:cc:e7: 40:39:dd:f3:42:25:59:90:0d:8f:91:89:2d:73:c5:ed:77:7a: 86:1f:03:7a:35:d3:b5:42:d3:7b:99:1a:1a:e2:96:1f:5c:7d: b5:66:13:51:8e:7e:ee:a9:91:e1:95:d8:db:b6:c3:5f:c9:37: b0:bc:f6:7d:63:e2:1d:f7:8f:46:88:71:14:a1:26:1e:8a:98: a0:b6:92:6a:12:cb:ce:6d:0f:7c:99:ce:77:6a:73:9a:4b:f4: a9:d9:a5:94:1a:3a:81:9b:73:f0:bc:80:f5:b4:b2:09:f8:4c: 9c:2d:07:43:4f:5e:dc:6f:29:6e:a0:5f:18:fc:96:0c:67:6b: 31:91:50:fa:be:15:3c:b9:8a:ab:b3:06:62:58:b3:69:1e:96: 65:7f:ba:ae:9d:00:44:16:ff:b7:a1:e6:a7:7d:08:ba:df:ef: 0d:b3:e4:81:72:28:43:34:13:32:47:11:f8:c0:1b:3b:d4:2e: a0:eb:48:b3:66:2e:c1:8f:fb:d1:0b:57:37:d6:be:f4:3c:a4: 2a:91:ea:50:85:3e:24:3b:fc:1f:1d:ad:74:81:a6:9a:1e:fc: 50:13:59:80:70:f7:7e:7c:22:86:5a:9e:8b:dd:12:31:2b:85: 2f:b2:df:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbAE/NztY9n8Q6X+KxoS/wXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjUwNTExMTYwMDU1WhcNMjUwNTEyMTYwMDU1WjAzMTEwLwYDVQQD Eyg1ZTg2MTVlNjMyZjkwZTM2NTZmY2NkMmJlYWM5OWY0YmZiY2E4OTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLKHDNOX5GOMkLx6LSiyr7WJLDZ3 3t3V0570EOkZlW7rifCYfYEc75cC7TSawl3Ms/NOpFe093nhaca+ImxkiYGKBYOA XgmqhVC9c53sSbx0sVDA9+1mEF5zjG93iUv2AM8ydsRIH6JBqNF2gW++Sb8ie2pt fzyzYTXOdTu+B0zqAW3LUR7O8U1ykMSFBYzqVAMwg2cBt/7FKrXLMzmql862uLRB VcUhfA/ztp1vIaQzsDonZfbrr9G8tvB5pGdhNeLhAeQNchb26ubwry65Xteq8BmR 28Tna2luq4K5zvSCntDGabX35NnFDXbvQ1xpQrEEXSlTxxKyRYCrJMkLPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6GFeYy+Q42VvzNK+rJn0v7yolfMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3foSeuf kKAG7cSiCDsJmMznQDnd80IlWZANj5GJLXPF7Xd6hh8DejXTtULTe5kaGuKWH1x9 tWYTUY5+7qmR4ZXY27bDX8k3sLz2fWPiHfePRohxFKEmHoqYoLaSahLLzm0PfJnO d2pzmkv0qdmllBo6gZtz8LyA9bSyCfhMnC0HQ09e3G8pbqBfGPyWDGdrMZFQ+r4V PLmKq7MGYlizaR6WZX+6rp0ARBb/t6Hmp30Iut/vDbPkgXIoQzQTMkcR+MAbO9Qu oOtIs2YuwY/70QtXN9a+9DykKpHqUIU+JDv8Hx2tdIGmmh78UBNZgHD3fnwihlqe i90SMSuFL7LfTw== -----END CERTIFICATE-----Generated at Sun May 11 19:02:51 2025 by rpki-client