$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft File: lwJP_Eknv-NSiUNdnQKAQguOzcs.mft (raw, json) Hash identifier: BHKm80b9ZHoKiYcjGhBov2goE2/+k80tBMNUWwN5mPQ= Subject key identifier: 33:23:D8:6C:63:03:45:E4:D6:40:CF:3D:DD:3E:59:65:9B:43:2F:6E Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Certificate serial: 0198D515A3A869838E25C2988BD3657B1CD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft Manifest number: 032E Signing time: Sat 23 Aug 2025 04:00:21 +0000 Manifest this update: Sat 23 Aug 2025 04:00:21 +0000 Manifest next update: Sun 24 Aug 2025 04:00:21 +0000 Files and hashes: 1: 2SkENpXb0el73BG8YEd0qffOYtk.roa (hash: 0jaoPpV/MX/H1rwXTjmAcjuo/4JCznBTWQGqCB7AVKs=) 2: JZvyn9etRbXjoocBllh7CNIOWtQ.roa (hash: mGlCIUXbc6xwaltgbnFxc0QkfIrllonR1TRT5DAGlfo=) 3: TPKP9_vIv3ZwN8x82Si3hqn8TqY.roa (hash: yYiZ6dC2HXsnlhNc9UgTQuWOe3jZHK4v0roNCv1tWq8=) 4: UQTJpCv9bdrUfH2Saww4hxPMkG8.roa (hash: SUoc+09CYtApBYMdnWncVZH3VjgdKoqVPXysENVRzSs=) 5: V4OKC9u84ToAwKHP8ipFnECEUSc.roa (hash: 63X029Xmtv3CuXa3LW6ITuuCc8ehUl7D3xtwLtBbGKw=) 6: gLbYx573_mCaGUlXxiWajg-EMEY.roa (hash: XXunEzXS739jLBVukfokQ5juDd54e+4tF/UDVJT6Zy4=) 7: lwJP_Eknv-NSiUNdnQKAQguOzcs.crl (hash: 7I3JgCjqPdwrM5BVgM6bz3GMwdoKlzl3WZnSt2AHMDE=) 8: nMgeDSRn1palbG1YFRplQLiBJ88.roa (hash: qMMTHgMyiQ7I7jN7xNsRXFOKbCMbPEhnaDyD9fJClec=) 9: r8pB6OBljZlMvGeFwUgatLrYkjM.roa (hash: W/h+mxaAQgY0+amEPgG34hfdTN3S90SZFDGD/ImhAMQ=) 10: uYRmq9riIpnSj-dt063FdDttSMY.roa (hash: eVkY1lCFSypqnoFYGs3dDTWcHF3+cepLJEQKRr/0kno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 04:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:15:a3:a8:69:83:8e:25:c2:98:8b:d3:65:7b:1c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Validity Not Before: Aug 23 04:00:21 2025 GMT Not After : Aug 24 04:00:21 2025 GMT Subject: CN=3323d86c630345e4d640cf3ddd3e59659b432f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:48:ce:95:b7:2b:fd:9e:60:c2:8f:6f:96: 15:2e:27:09:7c:9b:5d:c6:aa:bc:6b:2e:44:82:f0: d8:2d:44:79:d7:00:d2:0f:a9:51:be:94:38:f4:6f: eb:b6:8a:54:cd:ed:55:5d:fb:58:d1:58:4b:81:7b: 28:ec:59:10:ad:eb:b7:df:45:de:db:f7:86:b2:26: ff:3a:ed:0c:c2:3b:52:c4:55:9f:b4:24:02:71:b6: 2a:43:f1:0d:55:03:ca:6c:25:41:30:da:46:30:07: e8:bd:6e:29:11:11:15:5a:ac:be:e5:06:30:c2:c8: fb:75:d6:6b:2a:b2:f2:79:9b:4a:c2:2e:7a:ac:61: f2:5c:22:a9:58:db:7a:be:07:8f:9a:8b:24:75:33: 13:33:77:d6:d8:bc:63:20:92:89:2a:b6:97:93:5b: 4c:94:49:55:bb:2c:92:d7:41:ae:33:17:e2:05:57: 8e:03:fc:49:85:97:49:5a:f9:9a:fa:98:c4:03:54: b7:19:98:ec:30:16:e1:db:91:c7:aa:78:80:38:3f: 80:73:7e:4c:c0:c3:d9:82:c1:1f:64:a0:45:8f:07: b1:0a:10:ab:c7:b6:bb:5b:0d:82:71:4d:90:da:3f: 85:48:e0:16:b9:63:85:0d:98:6b:56:f7:6b:36:26: 76:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:23:D8:6C:63:03:45:E4:D6:40:CF:3D:DD:3E:59:65:9B:43:2F:6E X509v3 Authority Key Identifier: keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:53:af:3e:4e:ce:9b:08:23:f1:b0:bb:e8:05:4e:21:93:32: 8c:1f:fd:73:e9:48:d9:25:8e:b7:ca:e2:ba:0c:5c:1b:f8:b1: 22:36:93:92:f7:d6:1a:eb:83:59:2f:23:f9:31:91:b2:a9:cb: 06:b2:94:c3:89:90:c6:29:bb:95:d6:98:2d:d4:71:6c:3d:15: c3:59:d7:61:4e:0c:85:33:de:c0:51:ad:8b:30:9c:a7:03:25: 2e:94:49:6e:fe:f6:f9:cb:27:05:a6:8f:d3:ed:ee:25:87:7e: 11:63:56:dc:a2:24:54:cb:4c:0c:72:c3:c6:84:56:ff:bf:40: 7e:65:10:be:fd:54:88:20:68:0e:71:59:93:b2:d8:54:10:12: dd:4b:4e:a7:7a:dc:1a:d0:ae:30:07:b3:f8:56:5d:e1:98:e5: 0b:7d:42:61:3c:3c:be:86:89:a8:6b:70:bb:0f:84:35:78:2c: eb:f1:c0:ae:6b:15:17:57:b4:c1:d1:9d:02:e8:26:3c:60:e8: be:37:57:08:a0:2c:91:f2:cd:e1:3e:d4:e2:43:ae:39:9b:8a: 2c:63:fb:5c:7a:73:a7:67:4d:cc:cd:f9:ac:34:c2:b8:16:8d: 7f:cc:34:6a:27:4d:99:ff:ef:06:7c:5c:89:a7:bd:27:96:96: cf:9f:d0:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFaOoaYOOJcKYi9NlexzVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MDI0ZmZjNDkyN2JmZTM1Mjg5NDM1ZDlkMDI4MDQyMGI4 ZWNkY2IwHhcNMjUwODIzMDQwMDIxWhcNMjUwODI0MDQwMDIxWjAzMTEwLwYDVQQD EygzMzIzZDg2YzYzMDM0NWU0ZDY0MGNmM2RkZDNlNTk2NTliNDMyZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqltIzpW3K/2eYMKPb5YVLicJfJtd xqq8ay5EgvDYLUR51wDSD6lRvpQ49G/rtopUze1VXftY0VhLgXso7FkQreu330Xe 2/eGsib/Ou0MwjtSxFWftCQCcbYqQ/ENVQPKbCVBMNpGMAfovW4pEREVWqy+5QYw wsj7ddZrKrLyeZtKwi56rGHyXCKpWNt6vgePmoskdTMTM3fW2LxjIJKJKraXk1tM lElVuyyS10GuMxfiBVeOA/xJhZdJWvma+pjEA1S3GZjsMBbh25HHqniAOD+Ac35M wMPZgsEfZKBFjwexChCrx7a7Ww2CcU2Q2j+FSOAWuWOFDZhrVvdrNiZ2LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMj2GxjA0Xk1kDPPd0+WWWbQy9uMB8GA1UdIwQY MBaAFJcCT/xJJ7/jUolDXZ0CgEILjs3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDkt NDAxYmRhNDQ3N2I1LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDktNDAxYmRhNDQ3N2I1 LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVOvPk7O mwgj8bC76AVOIZMyjB/9c+lI2SWOt8riugxcG/ixIjaTkvfWGuuDWS8j+TGRsqnL BrKUw4mQxim7ldaYLdRxbD0Vw1nXYU4MhTPewFGtizCcpwMlLpRJbv72+csnBaaP 0+3uJYd+EWNW3KIkVMtMDHLDxoRW/79AfmUQvv1UiCBoDnFZk7LYVBAS3UtOp3rc GtCuMAez+FZd4ZjlC31CYTw8voaJqGtwuw+ENXgs6/HArmsVF1e0wdGdAugmPGDo vjdXCKAskfLN4T7U4kOuOZuKLGP7XHpzp2dNzM35rDTCuBaNf8w0aidNmf/vBnxc iae9J5aWz5/QrA== -----END CERTIFICATE-----Generated at Sat Aug 23 11:37:17 2025 by rpki-client