$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: xig4J2rej1jDaRcB3rqyqicyPEgK0eAh63OuMjlK0JY= Subject key identifier: 90:D3:BF:00:E1:FC:08:91:50:0F:5E:8E:F2:13:77:B6:2A:61:65:8F Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019FAAF5E8766B33080A298F898B0C6E8281 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 19D9 Signing time: Tue 28 Jul 2026 23:01:10 +0000 Manifest this update: Tue 28 Jul 2026 23:01:10 +0000 Manifest next update: Wed 29 Jul 2026 23:01:10 +0000 Files and hashes: 1: 5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa (hash: vhWvb47xm9ebRAseLYTwnZU0IPiMDqw3uETfxMC4UbA=) 2: 8dwNjvL9MJgQI0OVV7woi3xWYxI.roa (hash: pvzPPY8ueJkU8NUuAq5vy1y2A7mjLuLyMdlQjovqvLI=) 3: 8ob5FLuOujVhWEOwxv-forDA0cY.roa (hash: 84hMVRMPCF3nYrOl11aBzjK0ugOKjdN5OhtUyw9UGLw=) 4: CL2GMWv6pCXR2_356vc3PKuWXvs.roa (hash: y/dr783gs6j/tPotjhEDFZBriQQscWgnNMDkVNhcMXA=) 5: DUZOtNSDDHj7cC86OP1fzZHoD1Q.roa (hash: sq3RafP/g4VzkIenR5pfY7s3somV9YUfAd4xuK9GhSA=) 6: IebEbuAN9nRUPZFdRs-e4w7Fg5E.roa (hash: jIR1b9upXq/6crre8hwOSTG4cOP8nIdGvBsMPe2V/Ko=) 7: KywvzoRGSfaFf4crg97cyBzKoQg.roa (hash: +zmajVZk3ZJyJBrTV2gOa41M7zLT4z26iJSomfXlFX0=) 8: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: 6z1gjT0DDGRw8s+sz81nNWWiO/zFguoVBdHNXlj9KvM=) 9: T6201kaKz2wAhM6zPCN8a023mG8.roa (hash: ahv8z1IDEiRyXew3YyCL7x/GOhwD7Uqtn910nunK2U4=) 10: YOa6NQaDPDJlsrbtADynIa_NyaU.roa (hash: FoktoHEULMwMUIjsscghqSvVAsZbXr6CN7lF5ijkARc=) 11: Zp9zRiO75kWzExNlPmmXxiSiVB8.roa (hash: v83of7u5H6aL+AuW3nStEeiW6yeJITq4WVe1dcQEc/8=) 12: ezMcKD1ocdQnV8_lR3eRy32z5zk.roa (hash: fTetUR020tv6nBRIK7MCA4dwzA33cRIz7jgKMOHo3p8=) 13: gP563nxVMA_mNyBlWZLFCY-wLxE.roa (hash: aJwn1metHDcgL3IPWwXXHA6UIOyTz7dqDhcJZeynSIg=) 14: j2oK7garGa64vPG9Zj-3eHhby28.roa (hash: ZAX94OS32a4+/IR5q/bXkVHeXAeY+w7FlOE25hmdqL0=) 15: n149pV6YzpfmUFYDEF8Zv2819ak.roa (hash: HIRhwpgdeu7PD7ku5LyNlYKbvqN+PW+zocaMcV3HnPg=) 16: yVxkpnNWNPmfLM8KiJbpmmzhscw.roa (hash: wqxbIcyfrK8aJMxY/yMeGWSpob5ZYuT+6YYKdi4r/Pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:f5:e8:76:6b:33:08:0a:29:8f:89:8b:0c:6e:82:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Jul 28 23:01:10 2026 GMT Not After : Jul 29 23:01:10 2026 GMT Subject: CN=90d3bf00e1fc0891500f5e8ef21377b62a61658f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:7c:8e:61:64:4d:b2:42:b3:ea:0b:1e:8c: 3a:4c:0d:83:86:c3:29:a6:b7:bf:d5:c1:7b:ab:b2: af:fa:b3:70:07:10:b1:c3:e8:40:bf:14:14:49:3f: 29:e8:45:c4:16:3d:66:98:63:0a:5e:9a:b0:3d:bd: 0e:72:23:69:b0:0a:99:53:91:45:bd:a4:41:03:19: f5:66:7e:49:de:4b:31:59:d6:c1:75:bc:a1:c3:a6: d4:a4:c3:7f:dd:88:0a:3f:8e:a4:bf:21:4f:68:dd: 5a:39:e3:ba:8f:b0:f7:b6:0f:cd:08:ab:43:92:02: 73:63:57:d6:57:ec:8f:ac:2b:2c:99:dc:93:83:a2: 91:7a:27:0e:0f:30:4d:82:8e:29:98:2b:47:5d:82: 47:9f:e5:c9:a9:5d:26:10:5f:74:fc:e4:16:8f:b4: f4:65:90:b9:dc:7a:d1:de:ba:8c:d8:3d:51:dc:fd: 44:f8:49:ab:82:0d:72:79:e0:b7:3c:bb:d3:fe:66: ae:22:ea:3f:5a:1d:86:ae:9b:20:a8:22:44:e7:10: 27:85:2a:78:cb:17:a3:b7:17:f7:1b:b8:d3:94:93: ac:d9:91:c7:27:ee:b4:b7:1e:46:69:59:76:5a:28: b5:ba:b5:6a:aa:b3:57:41:a1:74:51:01:64:15:5c: d1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D3:BF:00:E1:FC:08:91:50:0F:5E:8E:F2:13:77:B6:2A:61:65:8F X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:fb:27:a5:98:ce:58:d0:57:0a:c2:a1:ea:f1:d6:f2:45:eb: db:f5:60:16:13:0f:73:a6:2c:20:50:83:c0:a8:bd:72:8e:84: 2c:c1:01:80:6d:81:92:1c:b9:08:8a:10:5e:e9:19:3d:10:b6: 7c:b9:0c:9a:b0:59:f4:ce:82:c3:fd:30:e9:bc:c0:78:1f:19: da:f8:2c:e1:b2:af:f4:5b:5d:b7:09:70:02:5f:a1:a4:37:d0: 77:bf:34:5f:5a:a6:46:f4:22:aa:b6:77:f2:ab:b2:68:ff:f7: 8d:04:6c:39:01:b6:bc:2f:86:97:5c:eb:48:75:67:14:f8:98: 0e:f1:ea:51:69:78:e6:07:c9:de:41:f1:50:e9:9a:da:7d:13: 0d:68:1b:6d:33:d0:23:15:6c:ce:81:81:5c:40:69:28:d3:43: c0:60:3b:14:02:c2:50:42:e6:c0:0b:2f:d3:45:5c:74:a2:00: 52:ba:1f:83:d7:14:35:d7:fd:0c:f8:15:9d:d5:48:68:09:88: 47:3a:ed:5f:a5:8c:b4:57:b0:76:b0:3e:d7:b7:35:f0:17:ce: 87:07:16:bc:58:b5:5d:65:15:e8:5c:0c:ec:8f:c1:e8:b4:73: 0e:bb:50:c7:cc:f8:0e:fe:10:20:00:75:d5:08:99:7c:26:e6: ff:66:f6:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+q9eh2azMICimPiYsMboKBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYwNzI4MjMwMTEwWhcNMjYwNzI5MjMwMTEwWjAzMTEwLwYDVQQD Eyg5MGQzYmYwMGUxZmMwODkxNTAwZjVlOGVmMjEzNzdiNjJhNjE2NThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT18jmFkTbJCs+oLHow6TA2DhsMp pre/1cF7q7Kv+rNwBxCxw+hAvxQUST8p6EXEFj1mmGMKXpqwPb0OciNpsAqZU5FF vaRBAxn1Zn5J3ksxWdbBdbyhw6bUpMN/3YgKP46kvyFPaN1aOeO6j7D3tg/NCKtD kgJzY1fWV+yPrCssmdyTg6KReicODzBNgo4pmCtHXYJHn+XJqV0mEF90/OQWj7T0 ZZC53HrR3rqM2D1R3P1E+Emrgg1yeeC3PLvT/mauIuo/Wh2GrpsgqCJE5xAnhSp4 yxejtxf3G7jTlJOs2ZHHJ+60tx5GaVl2Wii1urVqqrNXQaF0UQFkFVzR5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDTvwDh/AiRUA9ejvITd7YqYWWPMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfsnpZjO WNBXCsKh6vHW8kXr2/VgFhMPc6YsIFCDwKi9co6ELMEBgG2Bkhy5CIoQXukZPRC2 fLkMmrBZ9M6Cw/0w6bzAeB8Z2vgs4bKv9FtdtwlwAl+hpDfQd780X1qmRvQiqrZ3 8quyaP/3jQRsOQG2vC+Gl1zrSHVnFPiYDvHqUWl45gfJ3kHxUOma2n0TDWgbbTPQ IxVszoGBXEBpKNNDwGA7FALCUELmwAsv00VcdKIAUrofg9cUNdf9DPgVndVIaAmI RzrtX6WMtFewdrA+17c18BfOhwcWvFi1XWUV6FwM7I/B6LRzDrtQx8z4Dv4QIAB1 1QiZfCbm/2b2KA== -----END CERTIFICATE-----Generated at Wed Jul 29 06:29:22 2026 by rpki-client