$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: s2/5LVDMRBoCRy/szAi3ccnzY4Jw3tJirDJDFIDeOJ8= Subject key identifier: 14:AB:FA:1C:49:F0:92:12:C6:73:64:3D:4C:6F:3C:87:C7:98:31:3E Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 0199FBEC32DC29FDA32F8976F6FF80C8263B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 0F6B Signing time: Sun 19 Oct 2025 10:03:04 +0000 Manifest this update: Sun 19 Oct 2025 10:03:04 +0000 Manifest next update: Mon 20 Oct 2025 10:03:04 +0000 Files and hashes: 1: 10boupFvI1XULQNro2UN6lTac7g.roa (hash: TeSlzV5XfscAlltaInqH0+tXc9GXKbl3p81v+qesFug=) 2: 39NWCkxRJ14fZsy4fi4Dndunc3E.roa (hash: I60N/7b2uZcY0NbUe1SX8teSf0fVCyRemkra4xSsvf0=) 3: 3gaGUu98vgQ58MJvezo7k-ARASo.roa (hash: zKOcaqs6+UltL1w+RWoeOik9hgJIRqoSknm0oRsT/R8=) 4: 9SjejDTjZj0BtNF2Kp675mfLhag.roa (hash: RSM260xjwGf3+M4q8hzyY6CZ3UIIUis4qXJ8wDFcbHo=) 5: KUbX0VcDxa-Iyxzf4X9iZxn8Eig.roa (hash: bb9xUuRWwAY6FOOdBD4YOtWtJhp7uGNnKhs67QdqaKM=) 6: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: 4s+aREA8iJ54V2tKYsG17I1SuG2caYmfWURqGkCAt28=) 7: M67bSslu4i4Gy4p1ZlEfDj5c18Q.roa (hash: Cn1wdpfKE6warGKgEQa4o30Ra7TF3raQ0MpI76McIbU=) 8: P_s-zHSXglw_281jGOhyczBmJzI.roa (hash: wyG34RwDivUB0Qbi0DQatHzUoY8seUZaKV4g8a0quJw=) 9: UBsXmv4C5qffM7QM-9ND5QsfZfM.roa (hash: txrbSAO01vgCN97ZFCzVUVpn4VMkZhlbZmWHgF7E6VM=) 10: UMD_GrrBm5exfk4ne6BfKt3EdWg.roa (hash: r961vKQM2ic8nkYfC0teGF9Gu+iyVr4kAJkHxGV3f5E=) 11: Ug3t5QSKiSeV7OaH9F3UphE_NVs.roa (hash: VCeDrHYHr0n+emKVtRdKeoVIDZkLCFe4gRvZ/XqLmhk=) 12: ZHR6Evs2t_5MsAWITZbO0_S2MQc.roa (hash: TTSbz7ZJFR5Cfc5bWCmHmNZ+Klnd0Mt+hNshpgdxShs=) 13: g6eqrIfadHQCNvxrUPQ7Hredl8c.roa (hash: KzSePhZAtRu+meTZKCOYI8r/ad0eb15/dsNOD2iILt8=) 14: qnVXtf1TVi5GCQxQhYlNE39LANs.roa (hash: Vkby1xioM0TdE4rcN305dR5fIAGrIUI8/ZjjHRe70O4=) 15: sAlcT023Re1_motyjBVZccLuCgg.roa (hash: tja1+p7BrfZqb4rfBBKJcVOy+ZddkR/MXj/lAwerOJo=) 16: wC0sOJE7Wv-NDnjnHyFLfG4GZzQ.roa (hash: eBDWtuxEoge7xWpb5CncoOSy1UIXobW2890cjPYuR1s=) 17: zF2MV26QdQWRwXiicXiudK6n1Xw.roa (hash: 4aHxt6tPwu63K1PTNxL4On+nj5XwjJaZnAxdGrgtlxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 10:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:ec:32:dc:29:fd:a3:2f:89:76:f6:ff:80:c8:26:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Oct 19 10:03:04 2025 GMT Not After : Oct 20 10:03:04 2025 GMT Subject: CN=14abfa1c49f09212c673643d4c6f3c87c798313e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c8:09:8a:6f:19:e1:88:77:fc:6c:00:b7:06: a8:6b:b2:8a:5b:15:52:a1:90:76:d3:77:9f:a3:36: 4b:04:1a:35:5c:9d:9e:cb:87:25:3e:af:cc:6f:1f: 6f:b3:5e:8f:6e:3d:e8:53:57:6c:61:e6:b5:fb:d2: 57:e7:7d:1f:a6:dd:33:72:46:6e:c9:f9:3f:12:3e: 37:bc:96:62:8e:a4:55:62:87:37:0a:d4:c0:5a:d5: e2:d1:60:df:f7:4a:5e:dc:6f:4b:37:fe:39:de:92: 5a:cf:d0:b3:0b:6c:b6:bc:27:b1:bd:bb:56:b2:cc: d3:5e:bc:5a:4a:03:e4:ee:28:fb:07:98:6a:5c:6d: 3e:4c:2f:80:c1:f7:d6:ca:ce:f3:fa:fe:15:29:06: a7:c4:2c:61:c7:85:ee:80:05:52:37:20:19:78:fd: 5e:8e:42:37:cf:9a:f3:e1:a6:e6:a8:de:34:e4:d3: ee:c7:15:15:cc:7c:02:fb:f2:80:6d:20:bd:f8:e4: 5d:d0:48:e9:e5:ad:ff:a8:c1:71:1a:45:92:86:de: cb:50:b6:c6:f7:b5:c7:ab:8e:f6:bc:42:ea:b3:9d: e4:3e:45:ca:dd:62:5b:d2:68:5c:9b:9e:d8:58:c9: e0:24:80:19:71:25:1c:14:6a:3a:2a:75:61:9a:3e: a5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AB:FA:1C:49:F0:92:12:C6:73:64:3D:4C:6F:3C:87:C7:98:31:3E X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:e1:ed:16:f9:5a:88:aa:02:12:31:58:dd:52:6c:40:1e:2a: 1d:d2:98:b3:5a:4a:c7:6e:8a:a2:c3:a5:23:0b:6b:1d:aa:8c: 29:79:25:b0:a5:10:a1:63:ca:6d:02:4c:3b:cb:03:71:ad:41: 25:a3:32:a3:3c:66:e6:34:6d:11:c4:bf:5e:bc:41:88:49:8e: ea:9e:eb:21:6f:e0:b9:12:b2:68:ab:86:e5:0b:9e:6a:5e:43: 02:ae:b2:1f:c5:8b:14:1d:28:ff:8b:ed:49:2d:e9:b3:4e:be: bd:f6:0b:eb:49:c8:36:59:5b:30:42:e5:00:60:6c:4d:2e:b3: 33:29:bc:f1:81:b0:6e:0c:19:2c:9d:3b:e2:ad:46:53:9b:ff: 64:7d:6e:32:9e:d8:88:6f:20:9a:7d:ce:c0:f6:e5:b0:b0:ad: bf:96:94:a4:ff:d2:2c:b5:43:18:aa:dd:71:64:fc:af:1d:56: ac:0d:c0:5e:04:63:43:91:c5:4d:90:c9:0c:73:ea:c6:9b:1e: c8:f9:8f:d8:9d:7d:b6:94:32:f7:ca:26:d1:ba:a2:25:4a:ea: 22:bb:4f:54:56:9a:4b:3a:4f:c4:b3:d4:13:a7:94:db:7d:ef: d5:c7:e0:7c:da:4a:c8:3b:51:7f:37:58:4d:c3:37:5e:ae:55: 01:aa:a0:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn77DLcKf2jL4l29v+AyCY7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjUxMDE5MTAwMzA0WhcNMjUxMDIwMTAwMzA0WjAzMTEwLwYDVQQD EygxNGFiZmExYzQ5ZjA5MjEyYzY3MzY0M2Q0YzZmM2M4N2M3OTgzMTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscgJim8Z4Yh3/GwAtwaoa7KKWxVS oZB203efozZLBBo1XJ2ey4clPq/Mbx9vs16Pbj3oU1dsYea1+9JX530fpt0zckZu yfk/Ej43vJZijqRVYoc3CtTAWtXi0WDf90pe3G9LN/453pJaz9CzC2y2vCexvbtW sszTXrxaSgPk7ij7B5hqXG0+TC+AwffWys7z+v4VKQanxCxhx4XugAVSNyAZeP1e jkI3z5rz4abmqN405NPuxxUVzHwC+/KAbSC9+ORd0Ejp5a3/qMFxGkWSht7LULbG 97XHq472vELqs53kPkXK3WJb0mhcm57YWMngJIAZcSUcFGo6KnVhmj6ldQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSr+hxJ8JISxnNkPUxvPIfHmDE+MB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+HtFvla iKoCEjFY3VJsQB4qHdKYs1pKx26KosOlIwtrHaqMKXklsKUQoWPKbQJMO8sDca1B JaMyozxm5jRtEcS/XrxBiEmO6p7rIW/guRKyaKuG5Queal5DAq6yH8WLFB0o/4vt SS3ps06+vfYL60nINllbMELlAGBsTS6zMym88YGwbgwZLJ074q1GU5v/ZH1uMp7Y iG8gmn3OwPblsLCtv5aUpP/SLLVDGKrdcWT8rx1WrA3AXgRjQ5HFTZDJDHPqxpse yPmP2J19tpQy98om0bqiJUrqIrtPVFaaSzpPxLPUE6eU233v1cfgfNpKyDtRfzdY TcM3Xq5VAaqg+Q== -----END CERTIFICATE-----Generated at Sun Oct 19 17:31:24 2025 by rpki-client