$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: i5YJMLjK38nIg7X9YlLO5FyiOWoRQoprhe0WMsL1/eQ= Subject key identifier: 05:3D:1D:20:F4:99:89:2F:ED:B0:85:8A:48:23:40:27:FD:4A:B5:FA Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019EC1493F086EC2526437B06E0855F4C570 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 1960 Signing time: Sat 13 Jun 2026 14:01:03 +0000 Manifest this update: Sat 13 Jun 2026 14:01:03 +0000 Manifest next update: Sun 14 Jun 2026 14:01:03 +0000 Files and hashes: 1: 5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa (hash: vhWvb47xm9ebRAseLYTwnZU0IPiMDqw3uETfxMC4UbA=) 2: 8dwNjvL9MJgQI0OVV7woi3xWYxI.roa (hash: pvzPPY8ueJkU8NUuAq5vy1y2A7mjLuLyMdlQjovqvLI=) 3: 8ob5FLuOujVhWEOwxv-forDA0cY.roa (hash: 84hMVRMPCF3nYrOl11aBzjK0ugOKjdN5OhtUyw9UGLw=) 4: CL2GMWv6pCXR2_356vc3PKuWXvs.roa (hash: y/dr783gs6j/tPotjhEDFZBriQQscWgnNMDkVNhcMXA=) 5: DUZOtNSDDHj7cC86OP1fzZHoD1Q.roa (hash: sq3RafP/g4VzkIenR5pfY7s3somV9YUfAd4xuK9GhSA=) 6: IebEbuAN9nRUPZFdRs-e4w7Fg5E.roa (hash: jIR1b9upXq/6crre8hwOSTG4cOP8nIdGvBsMPe2V/Ko=) 7: KywvzoRGSfaFf4crg97cyBzKoQg.roa (hash: +zmajVZk3ZJyJBrTV2gOa41M7zLT4z26iJSomfXlFX0=) 8: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: 8ud25rjOdCnv7/L1K84DNXnaixMgmoPs8JXeW9ctRyo=) 9: T6201kaKz2wAhM6zPCN8a023mG8.roa (hash: ahv8z1IDEiRyXew3YyCL7x/GOhwD7Uqtn910nunK2U4=) 10: YOa6NQaDPDJlsrbtADynIa_NyaU.roa (hash: FoktoHEULMwMUIjsscghqSvVAsZbXr6CN7lF5ijkARc=) 11: Zp9zRiO75kWzExNlPmmXxiSiVB8.roa (hash: v83of7u5H6aL+AuW3nStEeiW6yeJITq4WVe1dcQEc/8=) 12: ezMcKD1ocdQnV8_lR3eRy32z5zk.roa (hash: fTetUR020tv6nBRIK7MCA4dwzA33cRIz7jgKMOHo3p8=) 13: gP563nxVMA_mNyBlWZLFCY-wLxE.roa (hash: aJwn1metHDcgL3IPWwXXHA6UIOyTz7dqDhcJZeynSIg=) 14: j2oK7garGa64vPG9Zj-3eHhby28.roa (hash: ZAX94OS32a4+/IR5q/bXkVHeXAeY+w7FlOE25hmdqL0=) 15: n149pV6YzpfmUFYDEF8Zv2819ak.roa (hash: HIRhwpgdeu7PD7ku5LyNlYKbvqN+PW+zocaMcV3HnPg=) 16: yVxkpnNWNPmfLM8KiJbpmmzhscw.roa (hash: wqxbIcyfrK8aJMxY/yMeGWSpob5ZYuT+6YYKdi4r/Pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 14:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c1:49:3f:08:6e:c2:52:64:37:b0:6e:08:55:f4:c5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Jun 13 14:01:03 2026 GMT Not After : Jun 14 14:01:03 2026 GMT Subject: CN=053d1d20f499892fedb0858a48234027fd4ab5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:13:5f:88:ee:77:61:dd:ad:a8:6b:e5:fd:6d: 08:3b:77:c5:4d:2c:4e:61:ae:09:42:1d:d2:0c:02: bf:cd:08:b7:8a:65:44:d5:82:bd:f4:0b:e3:ec:b2: ed:5a:ab:4e:be:24:64:94:3d:63:33:e2:6c:88:16: 09:f9:a5:bc:73:c4:40:d6:10:27:bc:19:a4:20:c9: df:40:21:b3:40:61:ea:f9:91:85:58:de:c5:40:cf: 7f:0d:a2:33:b1:25:e5:c5:1e:55:8e:72:c9:bf:eb: a0:62:6b:97:9b:15:80:6d:23:5e:91:23:ba:9b:c5: b8:7c:ee:8d:5b:e2:dc:8c:64:73:4a:23:1a:e1:cc: 34:27:01:54:ac:6f:68:81:06:d1:60:0f:5c:00:c1: 8d:9c:88:cf:c1:db:1c:7d:e5:81:3b:62:29:f2:04: 0b:ea:0a:1f:d9:cf:cf:1d:0c:22:2c:7a:1b:48:37: 0c:61:f2:22:70:6a:56:d9:4e:04:9c:19:dc:7c:11: 2a:44:0e:d7:35:57:21:7b:dc:1d:69:a7:ba:5e:ad: 46:68:e4:88:27:5a:1b:ba:85:6d:a5:ab:8e:30:91: 7c:3a:c6:36:f8:e4:68:88:72:b7:b1:1b:6b:a6:a3: 4d:8b:9f:39:b3:ef:f1:ea:76:6d:97:cd:df:e2:96: 0c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3D:1D:20:F4:99:89:2F:ED:B0:85:8A:48:23:40:27:FD:4A:B5:FA X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1f:87:0b:97:84:bb:02:69:de:83:22:14:f2:49:33:3b:76: 26:6e:52:00:75:ac:4a:dd:9a:76:cf:65:6a:7d:39:c1:39:8d: 12:53:8f:78:4f:1c:cb:c6:b7:34:30:ac:4a:5d:0e:2e:bd:2c: 01:88:c8:08:c7:18:b2:c4:f4:e6:5a:7e:6f:96:d6:a0:56:29: 86:fd:7e:65:b2:b4:91:c2:c1:66:01:c2:21:e8:45:91:0e:ff: 03:af:ae:02:36:ad:f1:a6:38:d1:09:a5:d2:52:91:1f:d8:3a: c3:ab:f6:eb:3d:f7:6e:78:8a:12:46:a7:3b:b1:c6:11:de:55: 4b:6e:b7:4c:24:70:7d:c8:e9:e0:61:1d:85:aa:f1:5b:0a:d1: d0:19:6b:2a:65:d0:f8:0f:ef:12:8b:28:13:04:7d:df:1b:f3: 5f:c3:0f:6f:ea:b8:0e:7f:09:cb:40:19:9f:29:0c:ea:87:b0: 7d:de:22:18:e8:f8:ef:70:6b:df:fd:fb:1a:3f:08:cf:b9:e0: 74:4f:3b:5c:58:7a:75:28:3f:cc:d5:93:0b:42:9f:8d:9b:15: 58:b6:bc:c0:c6:cf:1a:3e:cb:93:80:44:5a:b7:34:ba:e4:5c: 4b:51:6e:bd:db:87:b2:80:b0:ab:7f:33:11:49:b4:74:fa:ac: 35:73:37:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7BST8IbsJSZDewbghV9MVwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYwNjEzMTQwMTAzWhcNMjYwNjE0MTQwMTAzWjAzMTEwLwYDVQQD EygwNTNkMWQyMGY0OTk4OTJmZWRiMDg1OGE0ODIzNDAyN2ZkNGFiNWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BNfiO53Yd2tqGvl/W0IO3fFTSxO Ya4JQh3SDAK/zQi3imVE1YK99Avj7LLtWqtOviRklD1jM+JsiBYJ+aW8c8RA1hAn vBmkIMnfQCGzQGHq+ZGFWN7FQM9/DaIzsSXlxR5VjnLJv+ugYmuXmxWAbSNekSO6 m8W4fO6NW+LcjGRzSiMa4cw0JwFUrG9ogQbRYA9cAMGNnIjPwdscfeWBO2Ip8gQL 6gof2c/PHQwiLHobSDcMYfIicGpW2U4EnBncfBEqRA7XNVche9wdaae6Xq1GaOSI J1obuoVtpauOMJF8OsY2+ORoiHK3sRtrpqNNi585s+/x6nZtl83f4pYM5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAU9HSD0mYkv7bCFikgjQCf9SrX6MB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAix+HC5eE uwJp3oMiFPJJMzt2Jm5SAHWsSt2ads9lan05wTmNElOPeE8cy8a3NDCsSl0OLr0s AYjICMcYssT05lp+b5bWoFYphv1+ZbK0kcLBZgHCIehFkQ7/A6+uAjat8aY40Qml 0lKRH9g6w6v26z33bniKEkanO7HGEd5VS263TCRwfcjp4GEdharxWwrR0BlrKmXQ +A/vEosoEwR93xvzX8MPb+q4Dn8Jy0AZnykM6oewfd4iGOj473Br3/37Gj8Iz7ng dE87XFh6dSg/zNWTC0KfjZsVWLa8wMbPGj7Lk4BEWrc0uuRcS1FuvduHsoCwq38z EUm0dPqsNXM3PA== -----END CERTIFICATE-----Generated at Sun Jun 14 00:41:04 2026 by rpki-client