$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft File: lwJP_Eknv-NSiUNdnQKAQguOzcs.mft (raw, json) Hash identifier: XLlIq7M3/OJ2qRu6wIWMkEVf6xbzcyAo9Yxp0SakRUM= Subject key identifier: C6:AB:A0:F2:F9:42:8B:9A:0E:1B:49:0B:11:CC:C0:DA:11:1A:7F:03 Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Certificate serial: 0199FC8F86B58F5AE3E72CF44F2604F1E66A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft Manifest number: 03C7 Signing time: Sun 19 Oct 2025 13:01:28 +0000 Manifest this update: Sun 19 Oct 2025 13:01:28 +0000 Manifest next update: Mon 20 Oct 2025 13:01:28 +0000 Files and hashes: 1: 2SkENpXb0el73BG8YEd0qffOYtk.roa (hash: 0jaoPpV/MX/H1rwXTjmAcjuo/4JCznBTWQGqCB7AVKs=) 2: JZvyn9etRbXjoocBllh7CNIOWtQ.roa (hash: mGlCIUXbc6xwaltgbnFxc0QkfIrllonR1TRT5DAGlfo=) 3: TPKP9_vIv3ZwN8x82Si3hqn8TqY.roa (hash: yYiZ6dC2HXsnlhNc9UgTQuWOe3jZHK4v0roNCv1tWq8=) 4: UQTJpCv9bdrUfH2Saww4hxPMkG8.roa (hash: SUoc+09CYtApBYMdnWncVZH3VjgdKoqVPXysENVRzSs=) 5: V4OKC9u84ToAwKHP8ipFnECEUSc.roa (hash: 63X029Xmtv3CuXa3LW6ITuuCc8ehUl7D3xtwLtBbGKw=) 6: gLbYx573_mCaGUlXxiWajg-EMEY.roa (hash: XXunEzXS739jLBVukfokQ5juDd54e+4tF/UDVJT6Zy4=) 7: lwJP_Eknv-NSiUNdnQKAQguOzcs.crl (hash: YroIoBv3o+79dRVhiL42IIgEJ69tmHjvpa+uCvfyroc=) 8: nMgeDSRn1palbG1YFRplQLiBJ88.roa (hash: qMMTHgMyiQ7I7jN7xNsRXFOKbCMbPEhnaDyD9fJClec=) 9: r8pB6OBljZlMvGeFwUgatLrYkjM.roa (hash: W/h+mxaAQgY0+amEPgG34hfdTN3S90SZFDGD/ImhAMQ=) 10: uYRmq9riIpnSj-dt063FdDttSMY.roa (hash: eVkY1lCFSypqnoFYGs3dDTWcHF3+cepLJEQKRr/0kno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 13:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:86:b5:8f:5a:e3:e7:2c:f4:4f:26:04:f1:e6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Validity Not Before: Oct 19 13:01:28 2025 GMT Not After : Oct 20 13:01:28 2025 GMT Subject: CN=c6aba0f2f9428b9a0e1b490b11ccc0da111a7f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3f:66:27:50:47:8e:2b:c7:86:ba:b8:18:0d: 93:30:cf:99:a4:71:63:a8:e4:a6:e4:95:ae:cf:a1: 4b:80:19:4e:80:79:3c:60:17:02:9c:98:1f:4f:65: 8f:54:bc:07:a4:9d:5f:b3:df:a8:ac:00:17:c3:3a: 5b:86:21:c3:82:b8:22:1f:70:23:de:dc:c1:90:2b: 69:ce:91:66:95:ad:a5:cd:9f:01:fc:d1:44:05:07: f7:79:5e:b0:a1:22:d0:e1:db:8b:ec:02:88:b5:8b: 54:62:ad:08:6b:da:52:1f:1f:28:95:a7:60:4a:1c: cc:35:0f:45:77:d9:51:1b:f2:93:a4:f8:be:5c:84: a2:55:6f:af:0a:c2:84:74:33:8f:de:97:16:cd:63: 5f:fe:63:96:1b:2a:1e:5c:38:14:d4:1e:ff:01:a0: 8e:ce:47:fe:b6:21:d0:5b:d0:00:2d:5b:8d:4a:e1: 9b:71:60:04:5e:c1:fb:14:95:9a:fe:4d:d2:c7:9e: 56:64:4c:d3:7f:12:00:9e:50:d6:11:67:fe:c5:e0: e9:cf:f3:3c:23:e9:db:d5:f7:b2:6d:90:62:fd:cd: 72:76:68:30:fb:ea:52:9a:c4:f2:d2:f7:34:e7:75: 26:c9:33:f1:14:ac:30:5c:e9:16:2c:4d:2c:44:80: eb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AB:A0:F2:F9:42:8B:9A:0E:1B:49:0B:11:CC:C0:DA:11:1A:7F:03 X509v3 Authority Key Identifier: keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:2e:50:64:4e:15:f1:92:ae:c0:fc:b0:4d:2f:58:19:aa:21: 38:76:71:97:5c:f6:e6:16:6c:00:29:b3:da:26:82:a2:21:36: 5e:c1:30:3c:d5:f8:3f:37:15:8f:ff:a1:8e:1a:5f:f2:52:d3: 22:9a:da:61:1e:a8:e6:86:54:ef:40:98:4e:0f:b1:a8:6c:6c: 79:b0:49:3a:26:e9:fb:f1:51:0f:22:88:68:a2:bf:4e:e7:38: ca:f4:42:c8:f9:cd:45:ea:54:b5:77:42:e7:2e:bc:b5:41:9a: 30:97:b2:d1:b8:04:9e:24:d5:8c:f8:b6:da:16:0e:2d:49:dd: 65:a8:57:db:47:58:df:60:44:f8:d1:3c:3f:0d:c9:14:c2:47: 45:d7:6f:8e:89:8e:bd:76:d8:6d:5f:04:05:47:3f:e2:a0:b8: 32:86:4d:25:59:8b:45:32:74:74:e3:36:b6:a4:fa:c1:fb:04: 05:1d:fc:e1:5a:56:1d:a5:59:28:c7:a8:de:a8:ea:5d:aa:3f: 32:2f:fd:43:f2:50:7e:d3:d6:d4:38:64:23:80:be:3d:3e:4c: 9d:b5:2e:10:84:d4:ff:62:4c:04:2d:40:38:9a:b6:7a:9f:79: 0b:c4:45:94:07:03:0e:f3:07:82:79:2e:59:d4:0c:25:1d:90: cc:4f:e0:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j4a1j1rj5yz0TyYE8eZqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MDI0ZmZjNDkyN2JmZTM1Mjg5NDM1ZDlkMDI4MDQyMGI4 ZWNkY2IwHhcNMjUxMDE5MTMwMTI4WhcNMjUxMDIwMTMwMTI4WjAzMTEwLwYDVQQD EyhjNmFiYTBmMmY5NDI4YjlhMGUxYjQ5MGIxMWNjYzBkYTExMWE3ZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT9mJ1BHjivHhrq4GA2TMM+ZpHFj qOSm5JWuz6FLgBlOgHk8YBcCnJgfT2WPVLwHpJ1fs9+orAAXwzpbhiHDgrgiH3Aj 3tzBkCtpzpFmla2lzZ8B/NFEBQf3eV6woSLQ4duL7AKItYtUYq0Ia9pSHx8oladg ShzMNQ9Fd9lRG/KTpPi+XISiVW+vCsKEdDOP3pcWzWNf/mOWGyoeXDgU1B7/AaCO zkf+tiHQW9AALVuNSuGbcWAEXsH7FJWa/k3Sx55WZEzTfxIAnlDWEWf+xeDpz/M8 I+nb1feybZBi/c1ydmgw++pSmsTy0vc053UmyTPxFKwwXOkWLE0sRIDrxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaroPL5QouaDhtJCxHMwNoRGn8DMB8GA1UdIwQY MBaAFJcCT/xJJ7/jUolDXZ0CgEILjs3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDkt NDAxYmRhNDQ3N2I1LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDktNDAxYmRhNDQ3N2I1 LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASy5QZE4V 8ZKuwPywTS9YGaohOHZxl1z25hZsACmz2iaCoiE2XsEwPNX4PzcVj/+hjhpf8lLT IpraYR6o5oZU70CYTg+xqGxsebBJOibp+/FRDyKIaKK/Tuc4yvRCyPnNRepUtXdC 5y68tUGaMJey0bgEniTVjPi22hYOLUndZahX20dY32BE+NE8Pw3JFMJHRddvjomO vXbYbV8EBUc/4qC4MoZNJVmLRTJ0dOM2tqT6wfsEBR384VpWHaVZKMeo3qjqXao/ Mi/9Q/JQftPW1DhkI4C+PT5MnbUuEITU/2JMBC1AOJq2ep95C8RFlAcDDvMHgnku WdQMJR2QzE/gNA== -----END CERTIFICATE-----Generated at Sun Oct 19 22:36:37 2025 by rpki-client