$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: DIbGtYhbZxyEEEH4ExNL+XqTEfwiziF+JfL9ihR1xDY= Subject key identifier: F0:34:33:F4:A4:B0:2C:4A:07:1E:14:AC:AE:E1:45:00:69:B8:BA:65 Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019A4F2B2EF2011A985F0068EC03BE3EBF9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 1712 Signing time: Tue 04 Nov 2025 14:00:21 +0000 Manifest this update: Tue 04 Nov 2025 14:00:21 +0000 Manifest next update: Wed 05 Nov 2025 14:00:21 +0000 Files and hashes: 1: 1-YLitnkBbXXsQAFgwq_VXNT0JiU.roa (hash: AJ3gimUDCGBcWcTGkG9GHuWdzHVsFaaNIwm4c/UaNKI=) 2: EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa (hash: mjozCBG8d8a1a9rxk2/WXOhv1sAeajKVlJoBmpCTphI=) 3: JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa (hash: MfyInY8zOEg6qrPZH5fZlCQbjzWyB7B/O95gOPgwBK8=) 4: JRPXqjHWLaWnIuSL8g9IeICp1DA.roa (hash: 2iPE1VbPS86vB8xHzmkYPiMJ/2pRuAO+4Eo+0e52CUU=) 5: KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa (hash: v+IFmLklJP0SF039aJ72TNFUXKdUB+t1BQfemj0rrwE=) 6: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: 4pcZ9Ucn8dS+I6NIIfJ105a+rTdnUu8Z0QYaj5+VlJg=) 7: PKP5a34KkATdKIYJt-5YPdlCScc.roa (hash: DIduPrIRFwlPmmTvgmnIOUqFQ2p2Urxx9bdsVWJtVNQ=) 8: URdHpLliQS0f_xW89x43dy03NFM.roa (hash: slk/BTTaKKDTHH1yknm1NTv+Ov77fSUjZtooH73b8sg=) 9: gEEujvRXufmsjgTmstu1Zbbnfs0.roa (hash: P5YHH8ETd3YFKeI8j0ogt9xk/9FEVi5SrSm44Y95yWk=) 10: koANhf94Ms7kfxsa0LrqViexTxU.roa (hash: n1usXJi4k9IdIFnEicQPzyVEwnESkffY6S41/7XDahM=) 11: lsyqD2gTgikkDZqsbqed-AvQOFE.roa (hash: 2f7aOq0K3Z5tB/Bm8elLHTKPwyM1VQt3iTAgGQr0kUA=) 12: m-IIE152ao_pZE4Wt42YO_x1XlM.roa (hash: muFT1Obe9mEevORUc6UEy/Cz3RKhk79/nUEvl5PDZM4=) 13: nZHdV3WJYYopwUGJLwL5bZm3VpI.roa (hash: yZFjAsboNvT9P5DWXdZp8gsxk1AZMOxeZfK2Mq9pQEU=) 14: oJy5Ih3Wi9poj-CApp9bi93q2-8.roa (hash: UiKgdsncZ7pajJ8yDf76t7tbkfWUzikpYtARnAAsGHo=) 15: riI-pOFWNLX8839TKqYFfWOwpZ8.roa (hash: fqG5C98P6l1daY/xcAV9OUvehrdtHt6AHPVOzurPOBw=) 16: sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa (hash: btOhuVo5qzp7IyhUfnRzrwSPzaIUCOIvSAfRoFrawl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 14:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:2b:2e:f2:01:1a:98:5f:00:68:ec:03:be:3e:bf:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Nov 4 14:00:21 2025 GMT Not After : Nov 5 14:00:21 2025 GMT Subject: CN=f03433f4a4b02c4a071e14acaee1450069b8ba65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5b:b7:b9:7f:a7:4a:c4:f9:89:66:57:af:90: 29:a7:4e:a7:da:71:41:01:a2:3a:c4:a7:37:9e:88: a8:ac:34:9e:64:46:60:cb:b0:fc:bf:f5:ed:10:f6: 05:70:4a:b4:8b:04:01:a3:0e:4e:96:8c:d2:c2:44: 3d:08:66:f1:ee:a8:a1:a8:2d:8f:d1:d5:ad:e4:b8: ba:71:1b:92:fb:11:18:f7:49:27:8b:ae:77:26:55: fa:77:17:e8:99:c3:93:4f:f7:be:dd:38:af:7b:81: b5:09:ab:86:92:8e:5d:c7:60:db:1b:0c:36:c7:3a: 48:87:60:9f:7d:5b:37:12:1d:62:ea:6a:1a:bd:ea: 8e:4b:9d:91:00:83:9b:bd:46:56:00:63:36:ba:b2: f9:bc:a0:d3:d2:d1:a1:b0:a3:ef:98:f4:b3:6f:5a: bd:4f:ce:33:b5:61:a8:48:19:63:38:45:2d:fa:f1: 6c:49:5c:a1:b7:42:90:ac:96:e7:6b:ba:b8:b4:cd: 97:6c:a2:16:0f:85:65:20:e8:c2:29:81:62:ea:8b: b2:09:2d:54:26:04:a5:be:28:b5:39:08:99:c1:c3: f0:15:f8:a4:6c:19:c6:6e:fa:6d:86:a2:1e:02:62: 37:24:ac:d5:fe:19:a3:d2:0e:46:04:37:dc:9a:33: c2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:34:33:F4:A4:B0:2C:4A:07:1E:14:AC:AE:E1:45:00:69:B8:BA:65 X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:11:06:f6:74:c9:e7:44:cb:f9:90:69:a3:2c:96:2c:25:3b: 29:ba:68:85:0b:77:74:47:2a:6a:b6:12:8d:95:8b:23:3b:c3: 89:7c:a9:18:e8:e2:5b:08:8c:58:be:d7:76:06:ba:9d:c5:68: 29:70:25:7f:1c:18:91:f6:25:3c:e3:f1:74:26:2b:1f:47:e7: ab:7d:10:2c:71:7d:37:74:48:12:fa:12:72:8e:0b:35:a0:96: f8:8a:8a:dd:30:99:60:b1:14:d8:a6:af:8f:30:52:3b:ab:7a: 19:a4:93:46:85:5d:72:41:c4:4a:29:62:0d:e0:f4:57:16:ec: 35:6d:bd:d1:82:46:f1:bf:bb:79:ad:91:10:ad:3c:9f:27:46: 15:c4:11:93:3c:02:38:f2:87:8a:98:a4:09:8e:69:d9:6d:60: 29:17:07:7b:c8:50:fc:35:94:99:2c:f7:99:8b:9f:62:9b:af: 6a:4d:09:49:1d:45:96:07:76:44:ba:d0:fd:fe:88:7e:45:6b: 0d:04:2a:9f:13:54:13:90:19:68:24:2f:5a:fc:ca:30:1f:7b: d6:8d:82:83:57:44:91:08:4f:32:36:23:67:35:7f:51:89:ab: f3:0e:4d:e9:97:2c:ad:0b:c3:57:34:67:5c:31:01:67:e1:e0: a5:a1:b4:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPKy7yARqYXwBo7AO+Pr+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjUxMTA0MTQwMDIxWhcNMjUxMTA1MTQwMDIxWjAzMTEwLwYDVQQD EyhmMDM0MzNmNGE0YjAyYzRhMDcxZTE0YWNhZWUxNDUwMDY5YjhiYTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlu3uX+nSsT5iWZXr5App06n2nFB AaI6xKc3noiorDSeZEZgy7D8v/XtEPYFcEq0iwQBow5OlozSwkQ9CGbx7qihqC2P 0dWt5Li6cRuS+xEY90kni653JlX6dxfomcOTT/e+3Tive4G1CauGko5dx2DbGww2 xzpIh2CffVs3Eh1i6moaveqOS52RAIObvUZWAGM2urL5vKDT0tGhsKPvmPSzb1q9 T84ztWGoSBljOEUt+vFsSVyht0KQrJbna7q4tM2XbKIWD4VlIOjCKYFi6ouyCS1U JgSlvii1OQiZwcPwFfikbBnGbvpthqIeAmI3JKzV/hmj0g5GBDfcmjPCKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPA0M/SksCxKBx4UrK7hRQBpuLplMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhEG9nTJ 50TL+ZBpoyyWLCU7KbpohQt3dEcqarYSjZWLIzvDiXypGOjiWwiMWL7Xdga6ncVo KXAlfxwYkfYlPOPxdCYrH0fnq30QLHF9N3RIEvoSco4LNaCW+IqK3TCZYLEU2Kav jzBSO6t6GaSTRoVdckHESiliDeD0VxbsNW290YJG8b+7ea2REK08nydGFcQRkzwC OPKHipikCY5p2W1gKRcHe8hQ/DWUmSz3mYufYpuvak0JSR1Flgd2RLrQ/f6IfkVr DQQqnxNUE5AZaCQvWvzKMB971o2Cg1dEkQhPMjYjZzV/UYmr8w5N6ZcsrQvDVzRn XDEBZ+HgpaG0fA== -----END CERTIFICATE-----Generated at Tue Nov 4 22:47:55 2025 by rpki-client