$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft File: lwJP_Eknv-NSiUNdnQKAQguOzcs.mft (raw, json) Hash identifier: 9uwbiUExl6BxE0nzHaHxy3M6hqU84uHo9zsGN8dToy0= Subject key identifier: B5:7C:8C:83:BD:56:92:88:D3:F6:CE:96:F8:4F:FA:51:33:69:E1:18 Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Certificate serial: 019A706DFAE506E7E12F81CC4F7112BF6C04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft Manifest number: 0403 Signing time: Tue 11 Nov 2025 01:00:47 +0000 Manifest this update: Tue 11 Nov 2025 01:00:47 +0000 Manifest next update: Wed 12 Nov 2025 01:00:47 +0000 Files and hashes: 1: 2SkENpXb0el73BG8YEd0qffOYtk.roa (hash: 0jaoPpV/MX/H1rwXTjmAcjuo/4JCznBTWQGqCB7AVKs=) 2: JZvyn9etRbXjoocBllh7CNIOWtQ.roa (hash: mGlCIUXbc6xwaltgbnFxc0QkfIrllonR1TRT5DAGlfo=) 3: TPKP9_vIv3ZwN8x82Si3hqn8TqY.roa (hash: yYiZ6dC2HXsnlhNc9UgTQuWOe3jZHK4v0roNCv1tWq8=) 4: UQTJpCv9bdrUfH2Saww4hxPMkG8.roa (hash: SUoc+09CYtApBYMdnWncVZH3VjgdKoqVPXysENVRzSs=) 5: V4OKC9u84ToAwKHP8ipFnECEUSc.roa (hash: 63X029Xmtv3CuXa3LW6ITuuCc8ehUl7D3xtwLtBbGKw=) 6: gLbYx573_mCaGUlXxiWajg-EMEY.roa (hash: XXunEzXS739jLBVukfokQ5juDd54e+4tF/UDVJT6Zy4=) 7: lwJP_Eknv-NSiUNdnQKAQguOzcs.crl (hash: ELzj6ulbsXk64Io7Romot9KXvNBlIiHX8K+hGyKzB+0=) 8: nMgeDSRn1palbG1YFRplQLiBJ88.roa (hash: qMMTHgMyiQ7I7jN7xNsRXFOKbCMbPEhnaDyD9fJClec=) 9: r8pB6OBljZlMvGeFwUgatLrYkjM.roa (hash: W/h+mxaAQgY0+amEPgG34hfdTN3S90SZFDGD/ImhAMQ=) 10: uYRmq9riIpnSj-dt063FdDttSMY.roa (hash: eVkY1lCFSypqnoFYGs3dDTWcHF3+cepLJEQKRr/0kno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 12 Nov 2025 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:70:6d:fa:e5:06:e7:e1:2f:81:cc:4f:71:12:bf:6c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Validity Not Before: Nov 11 01:00:47 2025 GMT Not After : Nov 12 01:00:47 2025 GMT Subject: CN=b57c8c83bd569288d3f6ce96f84ffa513369e118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:55:d2:9d:1b:d9:ef:70:f1:c0:37:c2:c2: 95:24:de:3d:5d:b3:e3:fa:1c:2d:bc:31:2d:68:01: 4f:6c:75:de:48:de:ba:3f:4f:8a:22:b6:25:d9:b9: 3d:9c:dc:0f:6f:4d:9a:56:ce:64:46:96:f8:10:61: 0c:c8:45:f3:99:11:0a:40:52:8c:b5:ae:c9:34:31: 02:f7:fd:b3:24:cd:d3:65:8c:08:88:9b:95:36:95: 01:00:c7:35:8e:ad:a4:b1:9d:8a:8d:bd:79:e6:2b: 8e:9e:d4:67:fc:d5:b9:90:e9:c6:f8:66:1f:23:e7: 49:5f:a0:76:d4:0e:9f:77:29:55:59:66:0b:5c:5a: b6:98:40:68:47:e9:ad:bb:1d:6b:e3:5c:e6:af:d1: 04:48:f4:c7:13:f5:f1:e8:8d:35:ba:79:d7:1d:d1: 6f:d1:b5:ae:e3:35:20:61:83:15:7f:ab:fa:1c:51: 5b:d6:6c:fb:f2:99:53:e1:f0:a3:dd:f3:b1:98:75: b6:6f:67:3a:0b:46:dd:25:1e:67:04:ba:61:48:ef: e9:db:be:95:a4:2b:69:79:b0:ad:59:80:51:6e:9e: a8:a0:40:87:f8:59:b9:44:8e:29:d1:15:56:91:51: c9:64:6b:31:8f:92:f7:ae:70:d6:40:0d:57:38:a8: 97:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7C:8C:83:BD:56:92:88:D3:F6:CE:96:F8:4F:FA:51:33:69:E1:18 X509v3 Authority Key Identifier: keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:bf:42:1d:ff:34:31:ff:a5:0a:db:05:c6:c0:94:c6:45:e2: 80:2b:fc:1e:73:e6:d3:11:ae:96:68:86:0f:38:47:23:8c:6b: 76:ae:2d:3b:3a:b6:db:16:01:13:cb:44:21:bc:88:ec:42:44: e9:40:7c:d5:21:f2:d4:33:72:b8:92:70:4e:75:d8:37:83:10: ba:bd:1b:a4:8c:09:c3:58:79:3f:3a:0b:6f:68:31:dc:24:ae: a2:a3:4e:fb:2c:8e:22:d3:39:6b:75:4a:ce:fa:14:b8:21:e7: 78:b0:c9:b5:9f:76:3d:89:68:fc:26:39:63:63:f3:40:93:37: 93:8c:f0:bf:e8:90:3b:5a:d9:ef:c5:cb:96:10:1a:b2:52:73: a5:ae:7a:6a:a2:55:e7:86:ab:5f:0e:02:a4:fc:11:3c:14:6a: ed:df:6a:c2:ad:7e:c4:35:e9:67:22:4f:c0:44:3a:47:58:f5: 85:2b:50:95:83:64:ba:b6:f9:1a:ce:e2:91:44:40:54:a1:71: 35:85:b2:fb:89:e9:5b:c6:29:c9:ca:9b:38:2f:b7:25:ca:1f: d0:3d:e2:9a:36:69:92:4d:2a:bd:9d:08:82:74:a5:b9:a0:b0: 37:ce:3b:2a:6a:63:6d:7b:74:ea:4f:12:c4:35:bf:b4:ea:a1: b1:41:f5:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpwbfrlBufhL4HMT3ESv2wEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MDI0ZmZjNDkyN2JmZTM1Mjg5NDM1ZDlkMDI4MDQyMGI4 ZWNkY2IwHhcNMjUxMTExMDEwMDQ3WhcNMjUxMTEyMDEwMDQ3WjAzMTEwLwYDVQQD EyhiNTdjOGM4M2JkNTY5Mjg4ZDNmNmNlOTZmODRmZmE1MTMzNjllMTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaJV0p0b2e9w8cA3wsKVJN49XbPj +hwtvDEtaAFPbHXeSN66P0+KIrYl2bk9nNwPb02aVs5kRpb4EGEMyEXzmREKQFKM ta7JNDEC9/2zJM3TZYwIiJuVNpUBAMc1jq2ksZ2Kjb155iuOntRn/NW5kOnG+GYf I+dJX6B21A6fdylVWWYLXFq2mEBoR+mtux1r41zmr9EESPTHE/Xx6I01unnXHdFv 0bWu4zUgYYMVf6v6HFFb1mz78plT4fCj3fOxmHW2b2c6C0bdJR5nBLphSO/p276V pCtpebCtWYBRbp6ooECH+Fm5RI4p0RVWkVHJZGsxj5L3rnDWQA1XOKiXHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLV8jIO9VpKI0/bOlvhP+lEzaeEYMB8GA1UdIwQY MBaAFJcCT/xJJ7/jUolDXZ0CgEILjs3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDkt NDAxYmRhNDQ3N2I1LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDktNDAxYmRhNDQ3N2I1 LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUr9CHf80 Mf+lCtsFxsCUxkXigCv8HnPm0xGulmiGDzhHI4xrdq4tOzq22xYBE8tEIbyI7EJE 6UB81SHy1DNyuJJwTnXYN4MQur0bpIwJw1h5PzoLb2gx3CSuoqNO+yyOItM5a3VK zvoUuCHneLDJtZ92PYlo/CY5Y2PzQJM3k4zwv+iQO1rZ78XLlhAaslJzpa56aqJV 54arXw4CpPwRPBRq7d9qwq1+xDXpZyJPwEQ6R1j1hStQlYNkurb5Gs7ikURAVKFx NYWy+4npW8YpycqbOC+3Jcof0D3imjZpkk0qvZ0IgnSluaCwN847KmpjbXt06k8S xDW/tOqhsUH10w== -----END CERTIFICATE-----Generated at Tue Nov 11 11:33:56 2025 by rpki-client