$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: 9m5GWvr1PyThaRt0WhLZrRKYzGqQYZMrNTiF+lg9bCs= Subject key identifier: F5:5F:38:D6:5C:B7:E8:7C:3A:FB:A1:D2:AE:49:C1:2D:9D:B1:94:53 Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019A2855FB499EBE65B27DC1FDAD3D529E99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 0F82 Signing time: Tue 28 Oct 2025 01:01:54 +0000 Manifest this update: Tue 28 Oct 2025 01:01:54 +0000 Manifest next update: Wed 29 Oct 2025 01:01:54 +0000 Files and hashes: 1: 10boupFvI1XULQNro2UN6lTac7g.roa (hash: TeSlzV5XfscAlltaInqH0+tXc9GXKbl3p81v+qesFug=) 2: 39NWCkxRJ14fZsy4fi4Dndunc3E.roa (hash: I60N/7b2uZcY0NbUe1SX8teSf0fVCyRemkra4xSsvf0=) 3: 3gaGUu98vgQ58MJvezo7k-ARASo.roa (hash: zKOcaqs6+UltL1w+RWoeOik9hgJIRqoSknm0oRsT/R8=) 4: 9SjejDTjZj0BtNF2Kp675mfLhag.roa (hash: RSM260xjwGf3+M4q8hzyY6CZ3UIIUis4qXJ8wDFcbHo=) 5: KUbX0VcDxa-Iyxzf4X9iZxn8Eig.roa (hash: bb9xUuRWwAY6FOOdBD4YOtWtJhp7uGNnKhs67QdqaKM=) 6: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: w1msu9MKZfdto+qlcgXR/PuPhe8X0LoNjo1FgOADTuc=) 7: M67bSslu4i4Gy4p1ZlEfDj5c18Q.roa (hash: Cn1wdpfKE6warGKgEQa4o30Ra7TF3raQ0MpI76McIbU=) 8: P_s-zHSXglw_281jGOhyczBmJzI.roa (hash: wyG34RwDivUB0Qbi0DQatHzUoY8seUZaKV4g8a0quJw=) 9: UBsXmv4C5qffM7QM-9ND5QsfZfM.roa (hash: txrbSAO01vgCN97ZFCzVUVpn4VMkZhlbZmWHgF7E6VM=) 10: UMD_GrrBm5exfk4ne6BfKt3EdWg.roa (hash: r961vKQM2ic8nkYfC0teGF9Gu+iyVr4kAJkHxGV3f5E=) 11: Ug3t5QSKiSeV7OaH9F3UphE_NVs.roa (hash: VCeDrHYHr0n+emKVtRdKeoVIDZkLCFe4gRvZ/XqLmhk=) 12: ZHR6Evs2t_5MsAWITZbO0_S2MQc.roa (hash: TTSbz7ZJFR5Cfc5bWCmHmNZ+Klnd0Mt+hNshpgdxShs=) 13: g6eqrIfadHQCNvxrUPQ7Hredl8c.roa (hash: KzSePhZAtRu+meTZKCOYI8r/ad0eb15/dsNOD2iILt8=) 14: qnVXtf1TVi5GCQxQhYlNE39LANs.roa (hash: Vkby1xioM0TdE4rcN305dR5fIAGrIUI8/ZjjHRe70O4=) 15: sAlcT023Re1_motyjBVZccLuCgg.roa (hash: tja1+p7BrfZqb4rfBBKJcVOy+ZddkR/MXj/lAwerOJo=) 16: wC0sOJE7Wv-NDnjnHyFLfG4GZzQ.roa (hash: eBDWtuxEoge7xWpb5CncoOSy1UIXobW2890cjPYuR1s=) 17: zF2MV26QdQWRwXiicXiudK6n1Xw.roa (hash: 4aHxt6tPwu63K1PTNxL4On+nj5XwjJaZnAxdGrgtlxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:28:55:fb:49:9e:be:65:b2:7d:c1:fd:ad:3d:52:9e:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Oct 28 01:01:54 2025 GMT Not After : Oct 29 01:01:54 2025 GMT Subject: CN=f55f38d65cb7e87c3afba1d2ae49c12d9db19453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:5a:ee:2a:ff:ea:12:67:7f:e1:fa:f2:74: f6:1e:b9:31:35:3d:31:96:0f:44:8c:be:d3:ee:50: 88:0b:5a:81:5c:d3:f1:88:3a:bb:13:5b:e7:4e:43: 95:31:8f:5d:33:0d:81:f4:b8:1d:af:38:eb:f0:40: 75:47:73:8b:31:c9:46:e4:24:a3:25:55:4c:50:68: 69:2b:49:a3:61:16:9e:70:19:7a:6b:c4:23:7f:51: 16:9e:0d:ea:74:73:e3:75:2e:f5:bf:8d:bd:83:43: 34:78:9f:1e:72:e0:4a:9f:90:69:a5:4c:3e:8d:67: 04:a8:70:1f:57:5b:d6:09:51:4e:96:d0:0a:cf:b9: 01:e6:40:4b:8c:a6:c1:11:55:9f:9f:6c:05:cc:dd: 4c:19:f3:c0:d7:e8:15:15:58:1f:63:4d:5f:36:41: c1:4b:1d:d8:32:5d:31:fc:2f:6b:6b:de:bc:a8:55: 51:77:05:36:6f:e0:35:ea:1d:c7:c7:11:cb:cb:fd: 18:10:ba:e0:9e:8c:8e:ae:8a:00:b9:7a:8e:aa:ee: d1:09:98:26:c6:aa:38:54:49:c8:22:d8:ee:9f:78: 44:ee:f2:bd:f9:14:0b:e1:d9:7a:1e:68:ae:47:84: c0:fa:ed:b7:f7:64:26:0b:7c:53:bb:7e:58:4d:b3: 61:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5F:38:D6:5C:B7:E8:7C:3A:FB:A1:D2:AE:49:C1:2D:9D:B1:94:53 X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:1a:f4:1d:98:bd:e1:c8:87:f8:c2:7a:18:df:fd:55:a6:c6: 54:a9:54:17:ea:a3:49:93:1d:b8:6f:4b:98:88:3e:3c:59:d3: b3:4c:61:e4:81:b7:44:f4:c5:25:2e:34:a2:5a:a0:54:cc:f4: f5:34:8d:48:ca:01:2e:06:3a:08:26:89:44:df:29:a0:d4:56: ce:6c:41:bd:16:96:ae:a3:3f:b0:7f:14:c1:88:32:ae:9f:53: 9c:58:7a:80:75:89:a1:73:5e:53:d1:8f:e2:8f:86:6b:bd:b3: ce:78:ed:2f:81:bf:b9:1b:3d:63:29:fe:59:dc:43:3e:84:93: 73:f3:8a:e3:29:cf:17:55:14:4a:0e:e9:58:f2:ff:c9:ef:13: 5e:3e:b5:47:10:59:d2:51:da:87:4b:72:ea:9d:8f:1b:ee:70: 42:19:b1:49:eb:f5:80:43:0a:90:08:97:75:ae:2c:19:fa:bb: f9:8d:4d:fc:da:1c:e5:b4:4d:70:5e:19:18:da:b0:e5:27:d0: 9c:b6:b9:f2:f0:f2:ab:4a:fe:1b:11:8c:00:66:e0:b4:72:eb: 5f:58:cd:2a:e4:2d:e7:6d:8d:e9:70:1a:50:91:11:72:5b:ae: 17:68:a2:cf:40:2f:c2:1b:21:87:25:79:89:d8:d7:ab:03:4e: 97:68:66:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZooVftJnr5lsn3B/a09Up6ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjUxMDI4MDEwMTU0WhcNMjUxMDI5MDEwMTU0WjAzMTEwLwYDVQQD EyhmNTVmMzhkNjVjYjdlODdjM2FmYmExZDJhZTQ5YzEyZDlkYjE5NDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYNa7ir/6hJnf+H68nT2HrkxNT0x lg9EjL7T7lCIC1qBXNPxiDq7E1vnTkOVMY9dMw2B9Lgdrzjr8EB1R3OLMclG5CSj JVVMUGhpK0mjYRaecBl6a8Qjf1EWng3qdHPjdS71v429g0M0eJ8ecuBKn5BppUw+ jWcEqHAfV1vWCVFOltAKz7kB5kBLjKbBEVWfn2wFzN1MGfPA1+gVFVgfY01fNkHB Sx3YMl0x/C9ra968qFVRdwU2b+A16h3HxxHLy/0YELrgnoyOrooAuXqOqu7RCZgm xqo4VEnIItjun3hE7vK9+RQL4dl6HmiuR4TA+u2392QmC3xTu35YTbNhzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVfONZct+h8Ovuh0q5JwS2dsZRTMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxr0HZi9 4ciH+MJ6GN/9VabGVKlUF+qjSZMduG9LmIg+PFnTs0xh5IG3RPTFJS40olqgVMz0 9TSNSMoBLgY6CCaJRN8poNRWzmxBvRaWrqM/sH8UwYgyrp9TnFh6gHWJoXNeU9GP 4o+Ga72zznjtL4G/uRs9Yyn+WdxDPoSTc/OK4ynPF1UUSg7pWPL/ye8TXj61RxBZ 0lHah0ty6p2PG+5wQhmxSev1gEMKkAiXda4sGfq7+Y1N/Noc5bRNcF4ZGNqw5SfQ nLa58vDyq0r+GxGMAGbgtHLrX1jNKuQt522N6XAaUJERcluuF2iiz0AvwhshhyV5 idjXqwNOl2hm/g== -----END CERTIFICATE-----Generated at Tue Oct 28 07:15:31 2025 by rpki-client