$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: CwEtTQGPFDGNQg/xiQY4AxDxk8mNJwQBfZ+8sQaFo7Q= Subject key identifier: E7:01:F9:9E:31:62:79:41:48:43:34:0A:AC:C9:81:B7:19:50:19:FA Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 01973BAC2FA7AA0FA918698C54FE581C011F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 0DFD Signing time: Wed 04 Jun 2025 16:00:29 +0000 Manifest this update: Wed 04 Jun 2025 16:00:29 +0000 Manifest next update: Thu 05 Jun 2025 16:00:29 +0000 Files and hashes: 1: 10boupFvI1XULQNro2UN6lTac7g.roa (hash: TeSlzV5XfscAlltaInqH0+tXc9GXKbl3p81v+qesFug=) 2: 39NWCkxRJ14fZsy4fi4Dndunc3E.roa (hash: I60N/7b2uZcY0NbUe1SX8teSf0fVCyRemkra4xSsvf0=) 3: 3gaGUu98vgQ58MJvezo7k-ARASo.roa (hash: zKOcaqs6+UltL1w+RWoeOik9hgJIRqoSknm0oRsT/R8=) 4: 9SjejDTjZj0BtNF2Kp675mfLhag.roa (hash: RSM260xjwGf3+M4q8hzyY6CZ3UIIUis4qXJ8wDFcbHo=) 5: KUbX0VcDxa-Iyxzf4X9iZxn8Eig.roa (hash: bb9xUuRWwAY6FOOdBD4YOtWtJhp7uGNnKhs67QdqaKM=) 6: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: HHArSOUILhtt0KB8XGsetHh+rlACYsDgLN91H96Q22c=) 7: UBsXmv4C5qffM7QM-9ND5QsfZfM.roa (hash: txrbSAO01vgCN97ZFCzVUVpn4VMkZhlbZmWHgF7E6VM=) 8: UMD_GrrBm5exfk4ne6BfKt3EdWg.roa (hash: r961vKQM2ic8nkYfC0teGF9Gu+iyVr4kAJkHxGV3f5E=) 9: Ug3t5QSKiSeV7OaH9F3UphE_NVs.roa (hash: VCeDrHYHr0n+emKVtRdKeoVIDZkLCFe4gRvZ/XqLmhk=) 10: ZHR6Evs2t_5MsAWITZbO0_S2MQc.roa (hash: TTSbz7ZJFR5Cfc5bWCmHmNZ+Klnd0Mt+hNshpgdxShs=) 11: g6eqrIfadHQCNvxrUPQ7Hredl8c.roa (hash: KzSePhZAtRu+meTZKCOYI8r/ad0eb15/dsNOD2iILt8=) 12: qnVXtf1TVi5GCQxQhYlNE39LANs.roa (hash: Vkby1xioM0TdE4rcN305dR5fIAGrIUI8/ZjjHRe70O4=) 13: sAlcT023Re1_motyjBVZccLuCgg.roa (hash: tja1+p7BrfZqb4rfBBKJcVOy+ZddkR/MXj/lAwerOJo=) 14: wC0sOJE7Wv-NDnjnHyFLfG4GZzQ.roa (hash: eBDWtuxEoge7xWpb5CncoOSy1UIXobW2890cjPYuR1s=) 15: zF2MV26QdQWRwXiicXiudK6n1Xw.roa (hash: 4aHxt6tPwu63K1PTNxL4On+nj5XwjJaZnAxdGrgtlxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3b:ac:2f:a7:aa:0f:a9:18:69:8c:54:fe:58:1c:01:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Jun 4 16:00:29 2025 GMT Not After : Jun 5 16:00:29 2025 GMT Subject: CN=e701f99e316279414843340aacc981b7195019fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:cb:8a:23:2f:5c:f1:83:4d:04:38:7e:34: 1f:d6:eb:46:8c:ba:f4:36:f3:f3:60:71:b5:80:98: a8:75:12:1e:f1:b3:47:f0:1c:c5:af:f1:40:5f:51: 4c:1f:13:66:c2:3d:12:47:5a:12:f2:10:3d:fe:b7: 3f:5d:29:31:d4:98:00:5f:fe:e6:37:0a:4e:f7:ad: 4d:aa:ef:0e:f0:c6:bf:19:0d:ca:1b:d9:a8:34:7e: 08:3e:ad:65:69:56:8a:ba:05:cf:dc:46:b0:b4:e1: 06:53:aa:13:7c:d4:ba:38:47:e0:e2:8c:4d:e0:7b: da:32:b4:9c:18:b9:bb:b4:6b:ea:bf:97:5b:2b:98: 6b:be:37:bf:9d:56:69:1d:71:66:19:86:28:61:4e: c1:53:20:62:ca:0c:de:ad:0f:65:bb:9c:b0:f5:46: 43:20:90:96:1e:5e:94:fb:b7:e2:d2:3f:1b:12:ba: 63:14:a5:43:68:de:11:fb:4d:70:7a:21:23:a9:06: c2:e7:ee:b1:21:e4:7b:84:61:49:75:18:c5:54:8a: 4c:15:2f:47:c6:44:11:c5:eb:09:30:ab:f7:60:be: 11:c2:03:bc:90:6b:64:60:50:27:0a:64:47:31:53: 1d:c5:91:fb:5e:97:2d:f2:2d:87:99:77:e0:6c:f0: cf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:01:F9:9E:31:62:79:41:48:43:34:0A:AC:C9:81:B7:19:50:19:FA X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6a:2b:09:fe:4b:91:0c:35:10:4f:74:81:5e:2c:a0:8a:40: f6:53:82:73:dd:ed:85:4d:11:bc:da:c5:a2:06:2c:7a:22:1e: b3:0f:21:9e:d1:15:d3:b2:6d:be:91:b6:0a:0b:aa:49:fa:4d: b0:74:71:e6:6f:4b:56:7d:60:48:2f:bf:4b:27:a2:21:ad:26: 93:0b:c9:30:37:ae:3c:ab:fd:74:44:6d:7b:a9:c2:f4:14:d6: 35:1a:46:93:91:74:f1:52:22:5a:8c:02:3b:3e:7d:5e:48:ac: 17:07:65:2a:2e:cd:4f:3a:15:b5:d7:de:a1:dd:3e:bf:5a:c1: 94:9b:04:a9:fc:1b:63:da:c2:7a:39:9a:8b:b4:82:79:34:24: 0d:ef:a0:62:61:85:93:f2:34:44:52:f1:43:77:8a:97:51:b0: 00:2e:90:df:57:0d:a5:3e:09:2e:63:26:d4:e7:91:25:16:19: 78:3e:00:7a:b6:53:c1:8c:f8:05:6b:59:07:25:dd:e7:8e:1f: d1:af:cf:b9:d0:52:58:3a:e1:e7:cc:95:2e:76:d0:62:23:9f: f6:c6:25:cb:23:1b:ab:48:1b:4d:f7:7f:59:94:98:28:0f:fb: 6e:6d:98:07:ea:ae:e0:44:31:f6:3b:fc:7a:e4:b8:96:d7:c3: 37:7c:77:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc7rC+nqg+pGGmMVP5YHAEfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjUwNjA0MTYwMDI5WhcNMjUwNjA1MTYwMDI5WjAzMTEwLwYDVQQD EyhlNzAxZjk5ZTMxNjI3OTQxNDg0MzM0MGFhY2M5ODFiNzE5NTAxOWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI7LiiMvXPGDTQQ4fjQf1utGjLr0 NvPzYHG1gJiodRIe8bNH8BzFr/FAX1FMHxNmwj0SR1oS8hA9/rc/XSkx1JgAX/7m NwpO961Nqu8O8Ma/GQ3KG9moNH4IPq1laVaKugXP3EawtOEGU6oTfNS6OEfg4oxN 4HvaMrScGLm7tGvqv5dbK5hrvje/nVZpHXFmGYYoYU7BUyBiygzerQ9lu5yw9UZD IJCWHl6U+7fi0j8bErpjFKVDaN4R+01weiEjqQbC5+6xIeR7hGFJdRjFVIpMFS9H xkQRxesJMKv3YL4RwgO8kGtkYFAnCmRHMVMdxZH7Xpct8i2HmXfgbPDPPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcB+Z4xYnlBSEM0CqzJgbcZUBn6MB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGorCf5L kQw1EE90gV4soIpA9lOCc93thU0RvNrFogYseiIesw8hntEV07JtvpG2CguqSfpN sHRx5m9LVn1gSC+/SyeiIa0mkwvJMDeuPKv9dERte6nC9BTWNRpGk5F08VIiWowC Oz59XkisFwdlKi7NTzoVtdfeod0+v1rBlJsEqfwbY9rCejmai7SCeTQkDe+gYmGF k/I0RFLxQ3eKl1GwAC6Q31cNpT4JLmMm1OeRJRYZeD4AerZTwYz4BWtZByXd544f 0a/PudBSWDrh58yVLnbQYiOf9sYlyyMbq0gbTfd/WZSYKA/7bm2YB+qu4EQx9jv8 euS4ltfDN3x33w== -----END CERTIFICATE-----Generated at Thu Jun 5 00:02:36 2025 by rpki-client