$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: jo5veiOVpvM8tJboiG2pZZrcj2UWhiinODGTu9Y77DE= Subject key identifier: 3C:9F:3D:F2:38:A6:E1:05:CD:0C:D0:73:10:D3:DD:C4:61:D8:10:AB Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019CAC4693B4DEFB3077A42CD1B045A7FBDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 184C Signing time: Mon 02 Mar 2026 02:00:32 +0000 Manifest this update: Mon 02 Mar 2026 02:00:32 +0000 Manifest next update: Tue 03 Mar 2026 02:00:32 +0000 Files and hashes: 1: 5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa (hash: vhWvb47xm9ebRAseLYTwnZU0IPiMDqw3uETfxMC4UbA=) 2: 8dwNjvL9MJgQI0OVV7woi3xWYxI.roa (hash: pvzPPY8ueJkU8NUuAq5vy1y2A7mjLuLyMdlQjovqvLI=) 3: 8ob5FLuOujVhWEOwxv-forDA0cY.roa (hash: 84hMVRMPCF3nYrOl11aBzjK0ugOKjdN5OhtUyw9UGLw=) 4: CL2GMWv6pCXR2_356vc3PKuWXvs.roa (hash: y/dr783gs6j/tPotjhEDFZBriQQscWgnNMDkVNhcMXA=) 5: DUZOtNSDDHj7cC86OP1fzZHoD1Q.roa (hash: sq3RafP/g4VzkIenR5pfY7s3somV9YUfAd4xuK9GhSA=) 6: IebEbuAN9nRUPZFdRs-e4w7Fg5E.roa (hash: jIR1b9upXq/6crre8hwOSTG4cOP8nIdGvBsMPe2V/Ko=) 7: KywvzoRGSfaFf4crg97cyBzKoQg.roa (hash: +zmajVZk3ZJyJBrTV2gOa41M7zLT4z26iJSomfXlFX0=) 8: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: H4uLFl9vdNU4nu3lt+PQ9tFDjsOCahPmPqEmwMxKcwI=) 9: T6201kaKz2wAhM6zPCN8a023mG8.roa (hash: ahv8z1IDEiRyXew3YyCL7x/GOhwD7Uqtn910nunK2U4=) 10: YOa6NQaDPDJlsrbtADynIa_NyaU.roa (hash: FoktoHEULMwMUIjsscghqSvVAsZbXr6CN7lF5ijkARc=) 11: Zp9zRiO75kWzExNlPmmXxiSiVB8.roa (hash: v83of7u5H6aL+AuW3nStEeiW6yeJITq4WVe1dcQEc/8=) 12: ezMcKD1ocdQnV8_lR3eRy32z5zk.roa (hash: fTetUR020tv6nBRIK7MCA4dwzA33cRIz7jgKMOHo3p8=) 13: gP563nxVMA_mNyBlWZLFCY-wLxE.roa (hash: aJwn1metHDcgL3IPWwXXHA6UIOyTz7dqDhcJZeynSIg=) 14: j2oK7garGa64vPG9Zj-3eHhby28.roa (hash: ZAX94OS32a4+/IR5q/bXkVHeXAeY+w7FlOE25hmdqL0=) 15: n149pV6YzpfmUFYDEF8Zv2819ak.roa (hash: HIRhwpgdeu7PD7ku5LyNlYKbvqN+PW+zocaMcV3HnPg=) 16: yVxkpnNWNPmfLM8KiJbpmmzhscw.roa (hash: wqxbIcyfrK8aJMxY/yMeGWSpob5ZYuT+6YYKdi4r/Pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 02:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:46:93:b4:de:fb:30:77:a4:2c:d1:b0:45:a7:fb:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Mar 2 02:00:32 2026 GMT Not After : Mar 3 02:00:32 2026 GMT Subject: CN=3c9f3df238a6e105cd0cd07310d3ddc461d810ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e7:5b:bc:8b:ea:a6:e8:5d:f7:ee:15:89:78: 64:91:93:14:7e:90:ec:93:63:da:1a:4c:61:f3:97: 9e:da:b3:ca:50:20:5c:ef:aa:9e:da:22:3c:a5:f6: 7d:16:6e:35:9a:61:56:f0:6c:ad:00:1e:2b:c4:d9: f6:fb:a7:dc:bd:13:af:fb:5e:ac:4e:19:cd:2f:ed: 90:7b:5c:9c:66:a5:3f:e1:80:ee:75:5e:87:cc:2b: 5f:2e:14:95:84:5f:87:47:00:a3:e7:49:fb:a3:9c: 46:fa:9d:df:92:98:33:2b:92:8d:ea:70:d3:9c:c7: 4b:45:22:e6:36:e1:5d:e4:4d:74:40:b3:38:64:c1: 8d:5d:1c:a6:6e:56:76:22:b7:3c:7b:e9:d3:42:30: 31:52:80:06:24:75:5a:c9:cb:f0:8a:73:77:f2:ab: 3d:32:47:96:bb:9b:ab:aa:2f:68:9b:52:05:a7:fc: 1b:97:f4:3a:51:84:3d:c0:32:ae:26:1a:40:6c:5b: 69:42:28:56:d0:bd:b6:9f:db:97:2d:ba:25:6e:b0: 16:10:97:72:0d:41:ee:a6:5f:90:e1:b5:02:42:85: d1:d0:9f:49:bd:d0:ec:f2:66:65:c4:c7:71:9d:80: 93:d4:ab:91:15:cc:60:59:fe:fb:95:55:5f:23:34: 59:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9F:3D:F2:38:A6:E1:05:CD:0C:D0:73:10:D3:DD:C4:61:D8:10:AB X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:82:4b:08:d9:66:32:f1:99:bf:66:ae:c2:97:93:7b:d9:f3: 62:09:27:2d:98:5a:48:a7:24:0e:f1:0b:a0:1d:67:3f:04:68: 4d:5d:49:d6:05:a5:29:fa:68:ce:3b:e6:03:a9:e9:ed:d7:53: b0:9a:29:6d:68:f2:13:7e:d2:e6:d5:1d:fb:cf:84:fc:17:ab: a5:6b:2d:ae:e4:ad:73:8f:71:09:f5:2d:c6:23:d2:7a:65:eb: 8b:fd:5f:5b:6e:66:a2:e1:bc:f9:2f:1f:dc:d2:e4:2c:be:c3: 1a:83:dd:75:a8:fc:39:ee:62:74:93:91:ce:7f:8c:e7:ef:e9: c9:52:6e:74:f3:31:9c:30:38:8a:1e:c6:27:bc:18:ab:6c:58: 75:76:db:f9:01:fe:7a:2d:77:f6:23:6b:ab:e0:49:c6:e0:5e: f4:0b:c8:57:54:3f:45:96:7f:76:25:e4:51:ab:f8:13:57:f8: 8d:be:59:6d:6f:52:c9:b9:65:49:ff:2d:e9:68:6b:f6:5c:21: ff:b8:1c:99:b2:e0:1d:62:21:65:29:e8:8c:99:68:9a:7e:26: b0:02:f4:42:1d:1b:04:e4:f3:f2:75:af:0f:9b:ca:87:6e:2f: 7d:42:9b:ff:25:bf:75:85:3a:85:0f:2d:56:42:a2:91:f7:d0: 73:18:9b:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZysRpO03vswd6Qs0bBFp/vcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYwMzAyMDIwMDMyWhcNMjYwMzAzMDIwMDMyWjAzMTEwLwYDVQQD EygzYzlmM2RmMjM4YTZlMTA1Y2QwY2QwNzMxMGQzZGRjNDYxZDgxMGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApedbvIvqpuhd9+4ViXhkkZMUfpDs k2PaGkxh85ee2rPKUCBc76qe2iI8pfZ9Fm41mmFW8GytAB4rxNn2+6fcvROv+16s ThnNL+2Qe1ycZqU/4YDudV6HzCtfLhSVhF+HRwCj50n7o5xG+p3fkpgzK5KN6nDT nMdLRSLmNuFd5E10QLM4ZMGNXRymblZ2Irc8e+nTQjAxUoAGJHVaycvwinN38qs9 MkeWu5urqi9om1IFp/wbl/Q6UYQ9wDKuJhpAbFtpQihW0L22n9uXLbolbrAWEJdy DUHupl+Q4bUCQoXR0J9JvdDs8mZlxMdxnYCT1KuRFcxgWf77lVVfIzRZmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyfPfI4puEFzQzQcxDT3cRh2BCrMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYJLCNlm MvGZv2auwpeTe9nzYgknLZhaSKckDvELoB1nPwRoTV1J1gWlKfpozjvmA6np7ddT sJopbWjyE37S5tUd+8+E/BerpWstruStc49xCfUtxiPSemXri/1fW25mouG8+S8f 3NLkLL7DGoPddaj8Oe5idJORzn+M5+/pyVJudPMxnDA4ih7GJ7wYq2xYdXbb+QH+ ei139iNrq+BJxuBe9AvIV1Q/RZZ/diXkUav4E1f4jb5ZbW9SybllSf8t6Whr9lwh /7gcmbLgHWIhZSnojJlomn4msAL0Qh0bBOTz8nWvD5vKh24vfUKb/yW/dYU6hQ8t VkKikffQcxibnQ== -----END CERTIFICATE-----Generated at Mon Mar 2 13:22:05 2026 by rpki-client