$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: lAn7McFUNVT+KnsKAWzpRJYD4LmgL/mZOhy9YwlYoHY= Subject key identifier: 4C:FC:63:7A:81:A4:E4:37:2D:3F:E5:F9:26:4C:F7:84:09:EA:72:1D Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 01982B246562050537784FCD4CD78FB174D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 0E79 Signing time: Mon 21 Jul 2025 04:01:02 +0000 Manifest this update: Mon 21 Jul 2025 04:01:02 +0000 Manifest next update: Tue 22 Jul 2025 04:01:02 +0000 Files and hashes: 1: 10boupFvI1XULQNro2UN6lTac7g.roa (hash: TeSlzV5XfscAlltaInqH0+tXc9GXKbl3p81v+qesFug=) 2: 39NWCkxRJ14fZsy4fi4Dndunc3E.roa (hash: I60N/7b2uZcY0NbUe1SX8teSf0fVCyRemkra4xSsvf0=) 3: 3gaGUu98vgQ58MJvezo7k-ARASo.roa (hash: zKOcaqs6+UltL1w+RWoeOik9hgJIRqoSknm0oRsT/R8=) 4: 9SjejDTjZj0BtNF2Kp675mfLhag.roa (hash: RSM260xjwGf3+M4q8hzyY6CZ3UIIUis4qXJ8wDFcbHo=) 5: KUbX0VcDxa-Iyxzf4X9iZxn8Eig.roa (hash: bb9xUuRWwAY6FOOdBD4YOtWtJhp7uGNnKhs67QdqaKM=) 6: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: tYOrZ7kbV72A/gGUM/C/o1WHhpmz5uO3HaNDEccgDnc=) 7: UBsXmv4C5qffM7QM-9ND5QsfZfM.roa (hash: txrbSAO01vgCN97ZFCzVUVpn4VMkZhlbZmWHgF7E6VM=) 8: UMD_GrrBm5exfk4ne6BfKt3EdWg.roa (hash: r961vKQM2ic8nkYfC0teGF9Gu+iyVr4kAJkHxGV3f5E=) 9: Ug3t5QSKiSeV7OaH9F3UphE_NVs.roa (hash: VCeDrHYHr0n+emKVtRdKeoVIDZkLCFe4gRvZ/XqLmhk=) 10: ZHR6Evs2t_5MsAWITZbO0_S2MQc.roa (hash: TTSbz7ZJFR5Cfc5bWCmHmNZ+Klnd0Mt+hNshpgdxShs=) 11: g6eqrIfadHQCNvxrUPQ7Hredl8c.roa (hash: KzSePhZAtRu+meTZKCOYI8r/ad0eb15/dsNOD2iILt8=) 12: qnVXtf1TVi5GCQxQhYlNE39LANs.roa (hash: Vkby1xioM0TdE4rcN305dR5fIAGrIUI8/ZjjHRe70O4=) 13: sAlcT023Re1_motyjBVZccLuCgg.roa (hash: tja1+p7BrfZqb4rfBBKJcVOy+ZddkR/MXj/lAwerOJo=) 14: wC0sOJE7Wv-NDnjnHyFLfG4GZzQ.roa (hash: eBDWtuxEoge7xWpb5CncoOSy1UIXobW2890cjPYuR1s=) 15: zF2MV26QdQWRwXiicXiudK6n1Xw.roa (hash: 4aHxt6tPwu63K1PTNxL4On+nj5XwjJaZnAxdGrgtlxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 04:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:2b:24:65:62:05:05:37:78:4f:cd:4c:d7:8f:b1:74:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Jul 21 04:01:02 2025 GMT Not After : Jul 22 04:01:02 2025 GMT Subject: CN=4cfc637a81a4e4372d3fe5f9264cf78409ea721d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ce:72:44:48:02:4f:e9:77:64:7c:96:83:d4: 2b:49:e7:65:70:d4:0c:38:75:0f:d5:62:9c:f4:5c: 43:0c:87:08:3a:75:5b:06:9b:55:08:ed:34:6e:0e: 87:55:dc:dc:14:12:86:a9:df:83:d3:cb:87:c0:24: 7a:9c:34:cf:e9:f2:f6:da:81:87:4f:75:2c:06:cb: 40:92:98:1f:96:5e:54:cc:2e:97:4e:29:06:d0:08: d6:80:e9:d4:b4:b5:ec:bc:25:e9:d0:6e:1d:a7:08: 65:91:5b:a1:b6:22:d0:fe:1e:74:ad:76:7e:51:77: fb:6b:4a:7f:e6:44:5b:57:9e:aa:72:35:98:55:f9: 8d:08:31:b5:d9:2e:33:f4:ef:f9:2d:d5:ad:94:e4: 0f:32:b6:19:8d:4b:29:2a:2a:88:7b:08:29:33:25: 86:c2:ad:f1:f2:0b:c5:af:e4:ba:88:63:20:ae:4c: d5:cf:1c:8d:ee:ac:e7:47:c8:f9:59:0c:52:79:07: 3f:83:3f:53:dc:6b:f4:2d:e7:ee:57:81:9f:9b:30: 80:4e:10:a1:f4:2f:76:42:51:5a:87:a1:39:f2:cc: a7:9d:f0:71:59:d2:3a:9b:33:b4:c9:2d:41:93:2c: 61:f3:a7:03:0a:6a:5f:c5:cb:9c:7e:3e:ff:2e:aa: 53:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FC:63:7A:81:A4:E4:37:2D:3F:E5:F9:26:4C:F7:84:09:EA:72:1D X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:47:b9:bc:9b:4b:ca:b2:ae:66:16:1b:90:13:bc:5b:34:11: 4b:a2:73:5c:6e:f1:b6:90:0d:ab:59:ed:fd:9e:8c:0e:66:b8: cf:83:0b:56:54:8b:98:75:4d:d8:a4:68:79:26:04:ce:ae:de: 34:e0:87:37:fb:03:22:73:e8:ef:9e:7b:00:91:79:72:cb:a7: 14:9b:8b:f1:f6:4d:2a:af:88:f4:45:9c:9a:c3:97:15:37:09: d8:83:28:48:5d:b6:f0:f4:ca:66:ac:80:a0:66:06:32:5a:0f: ed:e8:90:db:23:ba:a5:50:d7:a0:3b:24:83:bf:67:98:67:f1: d1:35:aa:2b:69:2e:58:55:da:8c:8c:5a:7d:39:ba:77:16:53: d5:44:51:4b:69:e7:3d:e4:28:35:e4:0e:fc:14:4f:a0:b1:cf: 64:09:32:a6:51:6b:62:37:9a:af:13:56:20:ad:d6:a1:a8:97: b9:88:98:99:3f:3b:ec:3d:06:b8:c1:5c:aa:c5:ed:73:ee:17: 39:79:8d:fb:3f:88:ed:f1:2f:bf:f5:a5:c4:66:46:8c:24:f1: 7a:11:93:4d:80:1a:44:63:99:ef:9f:e2:cd:8d:a4:a7:f9:dc: db:30:85:3e:d3:12:52:a1:a1:21:f1:61:8e:21:6b:4d:c0:79: 53:88:fe:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgrJGViBQU3eE/NTNePsXTZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjUwNzIxMDQwMTAyWhcNMjUwNzIyMDQwMTAyWjAzMTEwLwYDVQQD Eyg0Y2ZjNjM3YTgxYTRlNDM3MmQzZmU1ZjkyNjRjZjc4NDA5ZWE3MjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM5yREgCT+l3ZHyWg9QrSedlcNQM OHUP1WKc9FxDDIcIOnVbBptVCO00bg6HVdzcFBKGqd+D08uHwCR6nDTP6fL22oGH T3UsBstAkpgfll5UzC6XTikG0AjWgOnUtLXsvCXp0G4dpwhlkVuhtiLQ/h50rXZ+ UXf7a0p/5kRbV56qcjWYVfmNCDG12S4z9O/5LdWtlOQPMrYZjUspKiqIewgpMyWG wq3x8gvFr+S6iGMgrkzVzxyN7qznR8j5WQxSeQc/gz9T3Gv0LefuV4GfmzCAThCh 9C92QlFah6E58synnfBxWdI6mzO0yS1Bkyxh86cDCmpfxcucfj7/LqpT/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEz8Y3qBpOQ3LT/l+SZM94QJ6nIdMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUe5vJtL yrKuZhYbkBO8WzQRS6JzXG7xtpANq1nt/Z6MDma4z4MLVlSLmHVN2KRoeSYEzq7e NOCHN/sDInPo7557AJF5csunFJuL8fZNKq+I9EWcmsOXFTcJ2IMoSF228PTKZqyA oGYGMloP7eiQ2yO6pVDXoDskg79nmGfx0TWqK2kuWFXajIxafTm6dxZT1URRS2nn PeQoNeQO/BRPoLHPZAkyplFrYjearxNWIK3WoaiXuYiYmT877D0GuMFcqsXtc+4X OXmN+z+I7fEvv/WlxGZGjCTxehGTTYAaRGOZ75/izY2kp/nc2zCFPtMSUqGhIfFh jiFrTcB5U4j+lw== -----END CERTIFICATE-----Generated at Mon Jul 21 12:33:16 2025 by rpki-client