$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: ywtP//gcPZ/7+8ajj/Ne1pc54NRCw4UAdXklY+zed18= Subject key identifier: 2B:75:86:E4:50:9F:9D:37:7E:BB:AE:1D:BC:66:A0:96:1F:0A:2C:A5 Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019A53086040052C02E841999094D1D238CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 1714 Signing time: Wed 05 Nov 2025 08:00:49 +0000 Manifest this update: Wed 05 Nov 2025 08:00:49 +0000 Manifest next update: Thu 06 Nov 2025 08:00:49 +0000 Files and hashes: 1: 1-YLitnkBbXXsQAFgwq_VXNT0JiU.roa (hash: AJ3gimUDCGBcWcTGkG9GHuWdzHVsFaaNIwm4c/UaNKI=) 2: EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa (hash: mjozCBG8d8a1a9rxk2/WXOhv1sAeajKVlJoBmpCTphI=) 3: JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa (hash: MfyInY8zOEg6qrPZH5fZlCQbjzWyB7B/O95gOPgwBK8=) 4: JRPXqjHWLaWnIuSL8g9IeICp1DA.roa (hash: 2iPE1VbPS86vB8xHzmkYPiMJ/2pRuAO+4Eo+0e52CUU=) 5: KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa (hash: v+IFmLklJP0SF039aJ72TNFUXKdUB+t1BQfemj0rrwE=) 6: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: 0jalgAbxH3elA4jl1gV3sMSJ3587ezENof4YV9EESlw=) 7: PKP5a34KkATdKIYJt-5YPdlCScc.roa (hash: DIduPrIRFwlPmmTvgmnIOUqFQ2p2Urxx9bdsVWJtVNQ=) 8: URdHpLliQS0f_xW89x43dy03NFM.roa (hash: slk/BTTaKKDTHH1yknm1NTv+Ov77fSUjZtooH73b8sg=) 9: gEEujvRXufmsjgTmstu1Zbbnfs0.roa (hash: P5YHH8ETd3YFKeI8j0ogt9xk/9FEVi5SrSm44Y95yWk=) 10: koANhf94Ms7kfxsa0LrqViexTxU.roa (hash: n1usXJi4k9IdIFnEicQPzyVEwnESkffY6S41/7XDahM=) 11: lsyqD2gTgikkDZqsbqed-AvQOFE.roa (hash: 2f7aOq0K3Z5tB/Bm8elLHTKPwyM1VQt3iTAgGQr0kUA=) 12: m-IIE152ao_pZE4Wt42YO_x1XlM.roa (hash: muFT1Obe9mEevORUc6UEy/Cz3RKhk79/nUEvl5PDZM4=) 13: nZHdV3WJYYopwUGJLwL5bZm3VpI.roa (hash: yZFjAsboNvT9P5DWXdZp8gsxk1AZMOxeZfK2Mq9pQEU=) 14: oJy5Ih3Wi9poj-CApp9bi93q2-8.roa (hash: UiKgdsncZ7pajJ8yDf76t7tbkfWUzikpYtARnAAsGHo=) 15: riI-pOFWNLX8839TKqYFfWOwpZ8.roa (hash: fqG5C98P6l1daY/xcAV9OUvehrdtHt6AHPVOzurPOBw=) 16: sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa (hash: btOhuVo5qzp7IyhUfnRzrwSPzaIUCOIvSAfRoFrawl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:08:60:40:05:2c:02:e8:41:99:90:94:d1:d2:38:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Nov 5 08:00:49 2025 GMT Not After : Nov 6 08:00:49 2025 GMT Subject: CN=2b7586e4509f9d377ebbae1dbc66a0961f0a2ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ee:23:d1:4a:ea:85:8e:17:39:2e:23:8f:76: f5:34:a8:1c:c4:e7:09:9e:d1:8c:65:76:75:b6:32: 9e:da:7f:b6:82:44:22:da:4d:0e:f5:03:17:c9:34: b1:1a:c6:27:76:96:d2:9b:bf:7f:5f:4e:41:49:91: d0:77:76:8d:b5:84:09:91:23:5c:30:0c:d8:e3:8e: e0:c8:e8:14:6b:ab:fd:0f:00:86:04:ad:61:a9:af: b2:65:b5:1b:bf:dd:69:2e:29:ca:97:a6:15:50:c1: c9:a4:62:48:65:17:fa:4f:d8:12:cd:ef:1c:fb:a3: 0a:2f:e6:8a:29:32:f0:ee:d8:db:b6:84:97:c6:d9: af:63:5c:23:0c:72:3f:5c:16:8a:b1:76:82:a5:1d: a7:a3:8b:8a:c5:5a:b0:eb:96:d3:3e:7a:50:28:f2: 7f:f9:49:ad:62:9f:af:01:80:d7:f8:ee:a4:4c:31: 1d:f5:e5:a2:0f:dd:f9:02:f0:d3:94:91:c3:0c:92: b8:d1:af:3c:42:45:67:0a:59:1c:4f:04:44:6e:f5: 63:98:83:30:c8:9b:65:d9:4e:dd:0a:f7:7f:08:22: ea:4b:72:7d:ed:43:d0:62:a5:7d:76:a7:29:a2:08: 8d:b4:95:72:39:a6:68:5c:ca:8d:e9:2b:2f:47:45: 0e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:75:86:E4:50:9F:9D:37:7E:BB:AE:1D:BC:66:A0:96:1F:0A:2C:A5 X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:4d:bf:65:d2:37:dd:a9:46:56:6c:5f:2c:c3:d4:84:02:bf: 58:ae:eb:2b:49:b4:70:b0:5f:49:cf:02:38:32:c0:27:2f:a4: 8e:28:51:ef:fc:0c:3e:f1:84:12:3c:04:9b:32:ab:74:45:d5: c4:c0:85:d0:04:63:d5:6a:e4:29:64:2b:16:b2:c3:0d:ef:3e: 73:74:78:48:23:61:d9:77:5b:07:6c:fe:86:15:a2:f3:c3:6d: 99:a9:7b:d6:85:e4:21:16:af:d6:39:93:1a:33:67:f0:6e:c9: 40:9a:5a:a3:56:a4:8e:96:8a:d9:50:31:c8:27:ea:fa:2f:b0: ca:be:ff:38:54:50:34:94:49:38:0e:7e:7c:17:2b:e4:31:c3: 7e:e3:1c:3b:a9:bc:81:b6:99:29:90:f3:98:52:45:dc:8b:7f: 0f:ec:a6:64:d7:8d:eb:7f:96:7b:05:34:38:da:8b:cf:80:fc: 07:47:4a:0a:9d:69:2e:38:1d:7f:1d:f2:09:55:3f:6c:b0:f5: 83:60:fb:7b:bd:89:34:6a:13:41:29:76:e3:fc:37:4c:72:5f: 05:16:62:fd:3e:35:08:02:f9:b8:38:a6:db:20:c1:a7:e6:e9: 82:97:1c:3f:ef:ba:80:b8:52:01:ce:34:a8:76:10:ee:bb:72: 1f:58:39:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpTCGBABSwC6EGZkJTR0jjPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjUxMTA1MDgwMDQ5WhcNMjUxMTA2MDgwMDQ5WjAzMTEwLwYDVQQD EygyYjc1ODZlNDUwOWY5ZDM3N2ViYmFlMWRiYzY2YTA5NjFmMGEyY2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+4j0UrqhY4XOS4jj3b1NKgcxOcJ ntGMZXZ1tjKe2n+2gkQi2k0O9QMXyTSxGsYndpbSm79/X05BSZHQd3aNtYQJkSNc MAzY447gyOgUa6v9DwCGBK1hqa+yZbUbv91pLinKl6YVUMHJpGJIZRf6T9gSze8c +6MKL+aKKTLw7tjbtoSXxtmvY1wjDHI/XBaKsXaCpR2no4uKxVqw65bTPnpQKPJ/ +UmtYp+vAYDX+O6kTDEd9eWiD935AvDTlJHDDJK40a88QkVnClkcTwREbvVjmIMw yJtl2U7dCvd/CCLqS3J97UPQYqV9dqcpogiNtJVyOaZoXMqN6SsvR0UOSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCt1huRQn503fruuHbxmoJYfCiylMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAME2/ZdI3 3alGVmxfLMPUhAK/WK7rK0m0cLBfSc8CODLAJy+kjihR7/wMPvGEEjwEmzKrdEXV xMCF0ARj1WrkKWQrFrLDDe8+c3R4SCNh2XdbB2z+hhWi88Ntmal71oXkIRav1jmT GjNn8G7JQJpao1akjpaK2VAxyCfq+i+wyr7/OFRQNJRJOA5+fBcr5DHDfuMcO6m8 gbaZKZDzmFJF3It/D+ymZNeN63+WewU0ONqLz4D8B0dKCp1pLjgdfx3yCVU/bLD1 g2D7e72JNGoTQSl24/w3THJfBRZi/T41CAL5uDim2yDBp+bpgpccP++6gLhSAc40 qHYQ7rtyH1g50Q== -----END CERTIFICATE-----Generated at Wed Nov 5 14:59:18 2025 by rpki-client