$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: g2VfAv9N41VMifuLwXkNHAePyNhRVQ3I7noJr2N5hOo= Subject key identifier: AF:F1:86:73:6C:87:E4:6F:AF:46:9A:0F:B0:F7:4E:4B:0C:90:C6:9D Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 0198D5BC4EC057739ED93F4EDB410C9315D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 0ED2 Signing time: Sat 23 Aug 2025 07:02:24 +0000 Manifest this update: Sat 23 Aug 2025 07:02:24 +0000 Manifest next update: Sun 24 Aug 2025 07:02:24 +0000 Files and hashes: 1: 10boupFvI1XULQNro2UN6lTac7g.roa (hash: TeSlzV5XfscAlltaInqH0+tXc9GXKbl3p81v+qesFug=) 2: 39NWCkxRJ14fZsy4fi4Dndunc3E.roa (hash: I60N/7b2uZcY0NbUe1SX8teSf0fVCyRemkra4xSsvf0=) 3: 3gaGUu98vgQ58MJvezo7k-ARASo.roa (hash: zKOcaqs6+UltL1w+RWoeOik9hgJIRqoSknm0oRsT/R8=) 4: 9SjejDTjZj0BtNF2Kp675mfLhag.roa (hash: RSM260xjwGf3+M4q8hzyY6CZ3UIIUis4qXJ8wDFcbHo=) 5: KUbX0VcDxa-Iyxzf4X9iZxn8Eig.roa (hash: bb9xUuRWwAY6FOOdBD4YOtWtJhp7uGNnKhs67QdqaKM=) 6: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: yQbHyh0KkTx61zZhfIJ5OwD72Z/TK3TsXRXisAAYcbw=) 7: P_s-zHSXglw_281jGOhyczBmJzI.roa (hash: wyG34RwDivUB0Qbi0DQatHzUoY8seUZaKV4g8a0quJw=) 8: UBsXmv4C5qffM7QM-9ND5QsfZfM.roa (hash: txrbSAO01vgCN97ZFCzVUVpn4VMkZhlbZmWHgF7E6VM=) 9: UMD_GrrBm5exfk4ne6BfKt3EdWg.roa (hash: r961vKQM2ic8nkYfC0teGF9Gu+iyVr4kAJkHxGV3f5E=) 10: Ug3t5QSKiSeV7OaH9F3UphE_NVs.roa (hash: VCeDrHYHr0n+emKVtRdKeoVIDZkLCFe4gRvZ/XqLmhk=) 11: ZHR6Evs2t_5MsAWITZbO0_S2MQc.roa (hash: TTSbz7ZJFR5Cfc5bWCmHmNZ+Klnd0Mt+hNshpgdxShs=) 12: g6eqrIfadHQCNvxrUPQ7Hredl8c.roa (hash: KzSePhZAtRu+meTZKCOYI8r/ad0eb15/dsNOD2iILt8=) 13: qnVXtf1TVi5GCQxQhYlNE39LANs.roa (hash: Vkby1xioM0TdE4rcN305dR5fIAGrIUI8/ZjjHRe70O4=) 14: sAlcT023Re1_motyjBVZccLuCgg.roa (hash: tja1+p7BrfZqb4rfBBKJcVOy+ZddkR/MXj/lAwerOJo=) 15: wC0sOJE7Wv-NDnjnHyFLfG4GZzQ.roa (hash: eBDWtuxEoge7xWpb5CncoOSy1UIXobW2890cjPYuR1s=) 16: zF2MV26QdQWRwXiicXiudK6n1Xw.roa (hash: 4aHxt6tPwu63K1PTNxL4On+nj5XwjJaZnAxdGrgtlxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bc:4e:c0:57:73:9e:d9:3f:4e:db:41:0c:93:15:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Aug 23 07:02:24 2025 GMT Not After : Aug 24 07:02:24 2025 GMT Subject: CN=aff186736c87e46faf469a0fb0f74e4b0c90c69d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:90:74:85:ba:cd:72:55:e7:1e:45:7e:6e:ad: 43:66:a7:8f:86:cc:54:35:f4:c2:96:3a:75:40:38: ab:54:0f:fb:78:95:ae:22:01:79:37:87:47:cc:e3: d6:3b:c0:46:42:ec:38:9e:16:87:cc:64:43:df:83: 18:52:38:47:91:1d:71:ea:9b:fe:59:ce:ff:9c:71: f2:0f:c1:b6:93:b9:16:6b:2b:c4:4d:b7:6e:03:ca: d4:58:96:69:b3:b5:8d:3d:7d:06:93:0a:7d:08:40: 49:85:c9:41:a4:5a:06:94:e7:69:a9:dc:60:fe:6d: 7c:db:fa:a3:bb:35:92:fe:82:04:b1:10:c1:02:37: f4:37:cd:c6:ad:c3:da:37:dd:4d:c5:ba:1e:cf:68: a1:31:29:58:b3:ea:c5:eb:ba:7f:2b:f8:43:af:06: e8:d3:c5:51:dc:54:eb:d2:fd:c4:fc:2e:bf:74:3e: f2:a3:01:5d:db:58:ea:08:91:9b:9c:4a:10:2e:ab: ed:20:5f:f6:23:4c:cf:e3:9e:a1:7b:e1:22:5f:cb: 9e:0d:93:03:69:f8:3f:cc:c6:1f:02:3e:88:bc:5c: b6:3d:65:88:22:20:48:94:bd:55:a8:05:09:54:1e: 69:10:d9:38:9a:5e:ee:36:e7:4d:4c:e2:b2:02:e9: c9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F1:86:73:6C:87:E4:6F:AF:46:9A:0F:B0:F7:4E:4B:0C:90:C6:9D X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:67:de:bb:f1:c6:d8:c9:78:32:94:38:f0:d9:fa:a2:21:85: dc:a6:82:a6:1b:a7:dc:49:56:7f:d1:2d:d5:d4:da:22:65:4d: 65:a6:2d:56:7e:b2:7f:6e:dc:46:01:21:11:87:c3:a9:48:be: a2:80:cb:11:28:8d:30:8e:ba:9c:40:cf:9a:d3:44:e7:12:08: 94:01:37:c4:09:94:4e:e3:e8:92:db:a3:c7:a6:97:eb:a9:7b: 47:4f:dc:5b:b7:b9:b7:3e:c2:b7:bf:9d:da:bb:e2:78:0f:5e: be:06:cf:bd:89:c9:81:87:e9:2c:44:dd:44:44:a5:25:5c:db: 32:42:05:1e:44:03:31:53:5d:05:d1:d8:aa:c1:2f:93:06:77: e6:9d:82:0e:8d:f2:cd:89:29:08:1a:a3:51:25:47:54:d8:da: a7:ed:4b:70:b4:32:b5:4a:b4:23:c1:34:02:9f:be:6a:89:65: 02:1d:84:6a:bc:38:2d:21:e0:11:c9:63:cc:f8:38:97:e9:85: bf:ae:f3:bf:fe:41:60:bc:8a:b4:10:9a:1a:ba:88:72:25:64: 08:b4:d4:30:47:55:e9:6b:ba:5c:f0:7a:94:ca:f5:6b:91:27: 30:d1:81:c0:e0:c5:95:3c:41:98:60:53:a8:64:d0:e5:d2:10: eb:52:79:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVvE7AV3Oe2T9O20EMkxXUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjUwODIzMDcwMjI0WhcNMjUwODI0MDcwMjI0WjAzMTEwLwYDVQQD EyhhZmYxODY3MzZjODdlNDZmYWY0NjlhMGZiMGY3NGU0YjBjOTBjNjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JB0hbrNclXnHkV+bq1DZqePhsxU NfTCljp1QDirVA/7eJWuIgF5N4dHzOPWO8BGQuw4nhaHzGRD34MYUjhHkR1x6pv+ Wc7/nHHyD8G2k7kWayvETbduA8rUWJZps7WNPX0Gkwp9CEBJhclBpFoGlOdpqdxg /m182/qjuzWS/oIEsRDBAjf0N83GrcPaN91Nxboez2ihMSlYs+rF67p/K/hDrwbo 08VR3FTr0v3E/C6/dD7yowFd21jqCJGbnEoQLqvtIF/2I0zP456he+EiX8ueDZMD afg/zMYfAj6IvFy2PWWIIiBIlL1VqAUJVB5pENk4ml7uNudNTOKyAunJ5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/xhnNsh+Rvr0aaD7D3TksMkMadMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGfeu/HG 2Ml4MpQ48Nn6oiGF3KaCphun3ElWf9Et1dTaImVNZaYtVn6yf27cRgEhEYfDqUi+ ooDLESiNMI66nEDPmtNE5xIIlAE3xAmUTuPoktujx6aX66l7R0/cW7e5tz7Ct7+d 2rvieA9evgbPvYnJgYfpLETdRESlJVzbMkIFHkQDMVNdBdHYqsEvkwZ35p2CDo3y zYkpCBqjUSVHVNjap+1LcLQytUq0I8E0Ap++aollAh2Earw4LSHgEcljzPg4l+mF v67zv/5BYLyKtBCaGrqIciVkCLTUMEdV6Wu6XPB6lMr1a5EnMNGBwODFlTxBmGBT qGTQ5dIQ61J5ug== -----END CERTIFICATE-----Generated at Sat Aug 23 11:10:40 2025 by rpki-client