$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: h/45WIrU/DeA/XXGdXcebh+6ZOY1aT7GXw78AuCpAZI= Subject key identifier: 2D:89:29:2F:DA:D6:D6:9B:0D:33:69:3E:C7:01:46:1F:02:77:44:90 Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019EC337BD3547CAD379C3F25E58AE766634 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 1961 Signing time: Sat 13 Jun 2026 23:01:10 +0000 Manifest this update: Sat 13 Jun 2026 23:01:10 +0000 Manifest next update: Sun 14 Jun 2026 23:01:10 +0000 Files and hashes: 1: 5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa (hash: vhWvb47xm9ebRAseLYTwnZU0IPiMDqw3uETfxMC4UbA=) 2: 8dwNjvL9MJgQI0OVV7woi3xWYxI.roa (hash: pvzPPY8ueJkU8NUuAq5vy1y2A7mjLuLyMdlQjovqvLI=) 3: 8ob5FLuOujVhWEOwxv-forDA0cY.roa (hash: 84hMVRMPCF3nYrOl11aBzjK0ugOKjdN5OhtUyw9UGLw=) 4: CL2GMWv6pCXR2_356vc3PKuWXvs.roa (hash: y/dr783gs6j/tPotjhEDFZBriQQscWgnNMDkVNhcMXA=) 5: DUZOtNSDDHj7cC86OP1fzZHoD1Q.roa (hash: sq3RafP/g4VzkIenR5pfY7s3somV9YUfAd4xuK9GhSA=) 6: IebEbuAN9nRUPZFdRs-e4w7Fg5E.roa (hash: jIR1b9upXq/6crre8hwOSTG4cOP8nIdGvBsMPe2V/Ko=) 7: KywvzoRGSfaFf4crg97cyBzKoQg.roa (hash: +zmajVZk3ZJyJBrTV2gOa41M7zLT4z26iJSomfXlFX0=) 8: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: 5CPc7oEnToPFQUL8Xi9zdpxKKAw6xNI69NJVEWUMBlA=) 9: T6201kaKz2wAhM6zPCN8a023mG8.roa (hash: ahv8z1IDEiRyXew3YyCL7x/GOhwD7Uqtn910nunK2U4=) 10: YOa6NQaDPDJlsrbtADynIa_NyaU.roa (hash: FoktoHEULMwMUIjsscghqSvVAsZbXr6CN7lF5ijkARc=) 11: Zp9zRiO75kWzExNlPmmXxiSiVB8.roa (hash: v83of7u5H6aL+AuW3nStEeiW6yeJITq4WVe1dcQEc/8=) 12: ezMcKD1ocdQnV8_lR3eRy32z5zk.roa (hash: fTetUR020tv6nBRIK7MCA4dwzA33cRIz7jgKMOHo3p8=) 13: gP563nxVMA_mNyBlWZLFCY-wLxE.roa (hash: aJwn1metHDcgL3IPWwXXHA6UIOyTz7dqDhcJZeynSIg=) 14: j2oK7garGa64vPG9Zj-3eHhby28.roa (hash: ZAX94OS32a4+/IR5q/bXkVHeXAeY+w7FlOE25hmdqL0=) 15: n149pV6YzpfmUFYDEF8Zv2819ak.roa (hash: HIRhwpgdeu7PD7ku5LyNlYKbvqN+PW+zocaMcV3HnPg=) 16: yVxkpnNWNPmfLM8KiJbpmmzhscw.roa (hash: wqxbIcyfrK8aJMxY/yMeGWSpob5ZYuT+6YYKdi4r/Pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 17:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c3:37:bd:35:47:ca:d3:79:c3:f2:5e:58:ae:76:66:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Jun 13 23:01:10 2026 GMT Not After : Jun 14 23:01:10 2026 GMT Subject: CN=2d89292fdad6d69b0d33693ec701461f02774490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:06:18:72:12:0c:0e:c6:0e:81:34:34:17:8a: ad:7b:ca:f6:3e:f6:6c:27:a4:b9:23:3b:cb:32:74: 1b:5c:d5:b4:ef:e9:1e:17:6a:f1:62:83:b9:98:f7: 77:70:cd:b9:bc:46:a9:4f:1e:37:6c:0e:41:c5:53: 68:89:bf:40:0e:d2:6b:72:eb:37:83:f8:86:67:22: 7f:6e:52:05:61:f7:96:67:7e:da:d9:a8:6a:b0:b8: e8:27:d6:23:d7:30:0b:30:59:25:32:50:a1:76:52: ec:b1:e5:b3:e8:78:48:dd:af:0f:f5:e0:4f:b2:cb: 3b:c2:fd:9d:c6:e8:20:7b:3c:e9:40:50:7f:4e:63: 2f:ee:92:34:11:72:9a:b6:34:da:f5:d3:8a:80:b0: ae:53:fd:84:d8:8f:57:3a:27:40:08:69:70:52:93: 64:c6:fc:b7:84:39:77:aa:d2:ce:99:a0:9e:ce:c7: e2:e4:6e:f4:f9:a1:57:5d:c2:36:06:6f:d9:f9:db: e6:26:01:bc:02:02:48:5c:4e:47:51:ba:96:04:8c: 1c:76:cf:50:99:42:65:0a:24:8b:38:ad:d9:f5:70: 29:6f:aa:fc:fa:1d:48:e9:b6:72:66:44:6c:5b:d1: 57:b9:14:7c:5f:21:48:ea:3a:67:6b:7d:42:3f:df: 8b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:89:29:2F:DA:D6:D6:9B:0D:33:69:3E:C7:01:46:1F:02:77:44:90 X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:0e:a6:88:e4:ca:90:98:95:8f:04:eb:47:1f:fc:1d:29:a7: 96:0b:5b:58:b2:77:98:30:81:7d:bc:ff:73:50:7b:44:e6:fe: 49:ac:af:22:05:8f:cc:a5:0a:8a:4c:3d:11:58:01:21:3d:fd: 1f:1e:18:af:6d:14:35:ff:1a:ea:41:c9:21:7e:c9:af:ed:00: 71:61:36:c1:19:01:02:cf:89:97:e5:07:32:a0:53:e6:a2:ce: f2:bc:8e:ae:ce:f7:c7:63:da:b8:43:bb:b5:53:b0:54:87:a8: 9c:79:cf:73:21:ad:21:af:cd:28:d3:50:04:f4:31:bb:95:54: d9:ad:1a:07:4d:a9:1c:72:18:5b:86:bd:28:a2:c9:f9:9c:a5: 35:23:fb:a0:df:ba:6a:4e:e1:73:90:5f:b8:f6:46:fe:6b:41: 11:00:52:d3:63:27:7b:a8:f2:92:4f:d2:95:c4:c5:30:51:e1: 30:76:1f:cb:82:81:3f:1f:3f:39:7f:74:6b:25:19:2a:75:58: e1:dd:46:50:14:f0:25:8e:a6:37:4b:bc:3e:ed:3d:71:a6:21: 98:28:77:a2:41:cb:a1:8a:92:3a:94:99:d5:4e:76:11:4b:8b: 87:ff:bb:42:88:77:17:38:95:ce:75:a0:36:50:b9:57:e4:3a: b5:92:58:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7DN701R8rTecPyXliudmY0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYwNjEzMjMwMTEwWhcNMjYwNjE0MjMwMTEwWjAzMTEwLwYDVQQD EygyZDg5MjkyZmRhZDZkNjliMGQzMzY5M2VjNzAxNDYxZjAyNzc0NDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAYYchIMDsYOgTQ0F4qte8r2PvZs J6S5IzvLMnQbXNW07+keF2rxYoO5mPd3cM25vEapTx43bA5BxVNoib9ADtJrcus3 g/iGZyJ/blIFYfeWZ37a2ahqsLjoJ9Yj1zALMFklMlChdlLsseWz6HhI3a8P9eBP sss7wv2dxuggezzpQFB/TmMv7pI0EXKatjTa9dOKgLCuU/2E2I9XOidACGlwUpNk xvy3hDl3qtLOmaCezsfi5G70+aFXXcI2Bm/Z+dvmJgG8AgJIXE5HUbqWBIwcds9Q mUJlCiSLOK3Z9XApb6r8+h1I6bZyZkRsW9FXuRR8XyFI6jpna31CP9+LGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2JKS/a1tabDTNpPscBRh8Cd0SQMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKA6miOTK kJiVjwTrRx/8HSmnlgtbWLJ3mDCBfbz/c1B7ROb+SayvIgWPzKUKikw9EVgBIT39 Hx4Yr20UNf8a6kHJIX7Jr+0AcWE2wRkBAs+Jl+UHMqBT5qLO8ryOrs73x2PauEO7 tVOwVIeonHnPcyGtIa/NKNNQBPQxu5VU2a0aB02pHHIYW4a9KKLJ+ZylNSP7oN+6 ak7hc5BfuPZG/mtBEQBS02Mne6jykk/SlcTFMFHhMHYfy4KBPx8/OX90ayUZKnVY 4d1GUBTwJY6mN0u8Pu09caYhmCh3okHLoYqSOpSZ1U52EUuLh/+7Qoh3FziVznWg NlC5V+Q6tZJYZQ== -----END CERTIFICATE-----Generated at Sun Jun 14 03:30:09 2026 by rpki-client