$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: JhAQdx7kTCBRKCIvLJ/jOmehhnF+SCsrrqIHH3T498s= Subject key identifier: 4F:CD:2B:FF:0A:8E:07:DA:31:9D:D7:9A:F2:55:1E:09:07:D9:57:5C Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019922FA84C54B0C164DCA957F337CB67210 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 0EFA Signing time: Sun 07 Sep 2025 07:01:07 +0000 Manifest this update: Sun 07 Sep 2025 07:01:07 +0000 Manifest next update: Mon 08 Sep 2025 07:01:07 +0000 Files and hashes: 1: 10boupFvI1XULQNro2UN6lTac7g.roa (hash: TeSlzV5XfscAlltaInqH0+tXc9GXKbl3p81v+qesFug=) 2: 39NWCkxRJ14fZsy4fi4Dndunc3E.roa (hash: I60N/7b2uZcY0NbUe1SX8teSf0fVCyRemkra4xSsvf0=) 3: 3gaGUu98vgQ58MJvezo7k-ARASo.roa (hash: zKOcaqs6+UltL1w+RWoeOik9hgJIRqoSknm0oRsT/R8=) 4: 9SjejDTjZj0BtNF2Kp675mfLhag.roa (hash: RSM260xjwGf3+M4q8hzyY6CZ3UIIUis4qXJ8wDFcbHo=) 5: KUbX0VcDxa-Iyxzf4X9iZxn8Eig.roa (hash: bb9xUuRWwAY6FOOdBD4YOtWtJhp7uGNnKhs67QdqaKM=) 6: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: Vr5t3G21C3qUJnU360s0FSWGWkZ143QQnFbG3PAP240=) 7: P_s-zHSXglw_281jGOhyczBmJzI.roa (hash: wyG34RwDivUB0Qbi0DQatHzUoY8seUZaKV4g8a0quJw=) 8: UBsXmv4C5qffM7QM-9ND5QsfZfM.roa (hash: txrbSAO01vgCN97ZFCzVUVpn4VMkZhlbZmWHgF7E6VM=) 9: UMD_GrrBm5exfk4ne6BfKt3EdWg.roa (hash: r961vKQM2ic8nkYfC0teGF9Gu+iyVr4kAJkHxGV3f5E=) 10: Ug3t5QSKiSeV7OaH9F3UphE_NVs.roa (hash: VCeDrHYHr0n+emKVtRdKeoVIDZkLCFe4gRvZ/XqLmhk=) 11: ZHR6Evs2t_5MsAWITZbO0_S2MQc.roa (hash: TTSbz7ZJFR5Cfc5bWCmHmNZ+Klnd0Mt+hNshpgdxShs=) 12: g6eqrIfadHQCNvxrUPQ7Hredl8c.roa (hash: KzSePhZAtRu+meTZKCOYI8r/ad0eb15/dsNOD2iILt8=) 13: qnVXtf1TVi5GCQxQhYlNE39LANs.roa (hash: Vkby1xioM0TdE4rcN305dR5fIAGrIUI8/ZjjHRe70O4=) 14: sAlcT023Re1_motyjBVZccLuCgg.roa (hash: tja1+p7BrfZqb4rfBBKJcVOy+ZddkR/MXj/lAwerOJo=) 15: wC0sOJE7Wv-NDnjnHyFLfG4GZzQ.roa (hash: eBDWtuxEoge7xWpb5CncoOSy1UIXobW2890cjPYuR1s=) 16: zF2MV26QdQWRwXiicXiudK6n1Xw.roa (hash: 4aHxt6tPwu63K1PTNxL4On+nj5XwjJaZnAxdGrgtlxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 05:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:22:fa:84:c5:4b:0c:16:4d:ca:95:7f:33:7c:b6:72:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Sep 7 07:01:07 2025 GMT Not After : Sep 8 07:01:07 2025 GMT Subject: CN=4fcd2bff0a8e07da319dd79af2551e0907d9575c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:22:4d:3e:b4:e9:40:6c:0e:56:d4:e3:71: 5c:61:31:f9:71:12:3b:c8:38:5f:58:19:04:0f:be: ed:5a:7e:c3:d4:67:b6:cc:d2:b2:da:f7:4a:af:1f: c5:fa:81:a6:8d:0d:82:42:cf:f0:53:de:a2:bd:32: e7:19:d3:1b:ad:7c:df:ca:6a:43:ef:d8:64:dc:d5: 73:c7:8c:c5:94:64:82:5f:ef:bc:f1:fc:64:fb:32: e8:53:b6:7c:88:f3:a7:35:b0:ce:0a:37:4c:fa:e9: f1:f9:25:99:86:c0:db:98:58:48:be:39:84:fb:05: 17:95:f7:c1:a1:f9:2d:41:0e:61:7b:6d:9c:31:99: b7:3a:55:21:56:d3:05:4f:0a:93:22:c3:ac:9a:c5: cb:ba:76:c8:cb:0a:80:b9:6d:eb:4b:ca:e9:c6:42: 3f:ae:b7:98:4d:66:96:d6:46:7d:07:bf:b9:c2:fd: 0b:01:d8:b3:5a:4c:86:4d:84:95:8a:68:3c:0b:ca: 0c:d4:4a:cb:1f:85:ec:ae:6f:75:61:04:1a:44:67: 9f:2d:47:28:32:9d:48:00:f0:d1:59:5b:86:d2:eb: 5f:b9:9e:5e:09:20:55:3b:03:81:48:e2:94:5a:02: 12:38:2d:e5:cc:c3:8f:36:89:b4:2d:ee:d4:9e:35: a9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CD:2B:FF:0A:8E:07:DA:31:9D:D7:9A:F2:55:1E:09:07:D9:57:5C X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:62:5c:72:70:a3:ce:64:3c:a4:5e:ea:66:dc:76:d0:28:83: 91:f8:fc:ee:1e:32:c5:f8:73:83:fa:8c:a4:b4:c8:54:fe:d9: a5:d0:fa:13:db:3a:0a:02:37:7b:bd:ff:ed:53:9a:e7:7e:31: 10:85:b2:4b:6b:46:f5:ca:11:2e:08:55:5f:54:1f:05:f8:67: 50:63:08:0d:21:fd:6a:9e:9a:57:20:f1:a4:3c:cb:2f:c1:3c: d0:74:7e:9f:b7:3a:db:17:e4:d5:94:bb:46:cd:7b:68:d9:72: 40:a8:f4:f7:35:a0:12:b9:48:27:47:67:a1:bf:f3:cc:c1:5e: e0:f4:c2:bf:45:3c:9e:9c:9d:90:59:b7:a4:85:94:95:2d:a8: 9a:cb:5e:d6:8e:65:7d:97:76:6b:2c:e0:b6:45:ed:c7:bd:ba: 7d:63:b8:0b:42:ca:7c:82:44:9c:c7:55:01:c7:e3:65:ae:c1: 64:03:20:53:60:29:99:86:cd:b9:b5:e6:bc:5a:b5:ed:ef:45: 86:0c:3e:10:ac:6c:02:5d:6d:b9:ab:b7:68:ea:59:be:00:f3: eb:37:7b:e2:59:9d:13:4c:91:27:b5:4b:56:68:70:e6:08:b1: 76:d7:de:2f:94:64:c0:47:f4:68:59:73:6a:75:79:5e:49:40: 1b:47:e1:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZki+oTFSwwWTcqVfzN8tnIQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjUwOTA3MDcwMTA3WhcNMjUwOTA4MDcwMTA3WjAzMTEwLwYDVQQD Eyg0ZmNkMmJmZjBhOGUwN2RhMzE5ZGQ3OWFmMjU1MWUwOTA3ZDk1NzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhwiTT606UBsDlbU43FcYTH5cRI7 yDhfWBkED77tWn7D1Ge2zNKy2vdKrx/F+oGmjQ2CQs/wU96ivTLnGdMbrXzfympD 79hk3NVzx4zFlGSCX++88fxk+zLoU7Z8iPOnNbDOCjdM+unx+SWZhsDbmFhIvjmE +wUXlffBofktQQ5he22cMZm3OlUhVtMFTwqTIsOsmsXLunbIywqAuW3rS8rpxkI/ rreYTWaW1kZ9B7+5wv0LAdizWkyGTYSVimg8C8oM1ErLH4Xsrm91YQQaRGefLUco Mp1IAPDRWVuG0utfuZ5eCSBVOwOBSOKUWgISOC3lzMOPNom0Le7UnjWp6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/NK/8KjgfaMZ3XmvJVHgkH2VdcMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGJccnCj zmQ8pF7qZtx20CiDkfj87h4yxfhzg/qMpLTIVP7ZpdD6E9s6CgI3e73/7VOa534x EIWyS2tG9coRLghVX1QfBfhnUGMIDSH9ap6aVyDxpDzLL8E80HR+n7c62xfk1ZS7 Rs17aNlyQKj09zWgErlIJ0dnob/zzMFe4PTCv0U8npydkFm3pIWUlS2omste1o5l fZd2ayzgtkXtx726fWO4C0LKfIJEnMdVAcfjZa7BZAMgU2ApmYbNubXmvFq17e9F hgw+EKxsAl1tuau3aOpZvgDz6zd74lmdE0yRJ7VLVmhw5gixdtfeL5RkwEf0aFlz anV5XklAG0fhHw== -----END CERTIFICATE-----Generated at Sun Sep 7 10:07:30 2025 by rpki-client