$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: lWQOQSL3Frs1oU5+WbZ+OKHB4sYkblyoK0NvaJO7q2A= Subject key identifier: E6:39:E3:AB:58:F8:00:78:27:82:DD:C1:23:B5:1F:52:D2:B6:5E:68 Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 01987BD2DCBADC5A409F811583D29B304819 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 1620 Signing time: Tue 05 Aug 2025 20:01:13 +0000 Manifest this update: Tue 05 Aug 2025 20:01:13 +0000 Manifest next update: Wed 06 Aug 2025 20:01:13 +0000 Files and hashes: 1: 1-YLitnkBbXXsQAFgwq_VXNT0JiU.roa (hash: AJ3gimUDCGBcWcTGkG9GHuWdzHVsFaaNIwm4c/UaNKI=) 2: EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa (hash: mjozCBG8d8a1a9rxk2/WXOhv1sAeajKVlJoBmpCTphI=) 3: JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa (hash: MfyInY8zOEg6qrPZH5fZlCQbjzWyB7B/O95gOPgwBK8=) 4: JRPXqjHWLaWnIuSL8g9IeICp1DA.roa (hash: 2iPE1VbPS86vB8xHzmkYPiMJ/2pRuAO+4Eo+0e52CUU=) 5: KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa (hash: v+IFmLklJP0SF039aJ72TNFUXKdUB+t1BQfemj0rrwE=) 6: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: xjTELJWzW4t+8T8OQXHGs6lKbAGBX8Hsu4w+5n+GUHg=) 7: PKP5a34KkATdKIYJt-5YPdlCScc.roa (hash: DIduPrIRFwlPmmTvgmnIOUqFQ2p2Urxx9bdsVWJtVNQ=) 8: URdHpLliQS0f_xW89x43dy03NFM.roa (hash: slk/BTTaKKDTHH1yknm1NTv+Ov77fSUjZtooH73b8sg=) 9: gEEujvRXufmsjgTmstu1Zbbnfs0.roa (hash: P5YHH8ETd3YFKeI8j0ogt9xk/9FEVi5SrSm44Y95yWk=) 10: koANhf94Ms7kfxsa0LrqViexTxU.roa (hash: n1usXJi4k9IdIFnEicQPzyVEwnESkffY6S41/7XDahM=) 11: lsyqD2gTgikkDZqsbqed-AvQOFE.roa (hash: 2f7aOq0K3Z5tB/Bm8elLHTKPwyM1VQt3iTAgGQr0kUA=) 12: m-IIE152ao_pZE4Wt42YO_x1XlM.roa (hash: muFT1Obe9mEevORUc6UEy/Cz3RKhk79/nUEvl5PDZM4=) 13: nZHdV3WJYYopwUGJLwL5bZm3VpI.roa (hash: yZFjAsboNvT9P5DWXdZp8gsxk1AZMOxeZfK2Mq9pQEU=) 14: oJy5Ih3Wi9poj-CApp9bi93q2-8.roa (hash: UiKgdsncZ7pajJ8yDf76t7tbkfWUzikpYtARnAAsGHo=) 15: riI-pOFWNLX8839TKqYFfWOwpZ8.roa (hash: fqG5C98P6l1daY/xcAV9OUvehrdtHt6AHPVOzurPOBw=) 16: sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa (hash: btOhuVo5qzp7IyhUfnRzrwSPzaIUCOIvSAfRoFrawl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 20:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7b:d2:dc:ba:dc:5a:40:9f:81:15:83:d2:9b:30:48:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Aug 5 20:01:13 2025 GMT Not After : Aug 6 20:01:13 2025 GMT Subject: CN=e639e3ab58f800782782ddc123b51f52d2b65e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a5:35:83:b5:f3:5c:d7:14:a7:c3:62:33:b9: 01:14:1f:6c:1a:ca:73:c0:3d:0c:fa:8e:97:13:da: 39:60:d2:b3:af:7f:b3:d9:ef:77:e3:ab:00:11:fb: c9:be:06:f1:cd:fb:3e:e5:90:4f:02:1d:13:9d:a9: 8e:99:ba:07:75:48:f3:57:4f:81:11:ec:0e:1d:3f: 9b:1b:b6:18:bb:29:db:38:5f:18:37:b9:82:8e:4c: c7:20:f5:fe:35:87:ea:01:9d:dd:98:83:aa:81:f3: 3d:8d:c6:a1:7e:2a:55:e9:f3:df:9d:9f:42:b1:b3: 7a:3f:04:01:a5:4f:03:26:92:2c:88:d8:d2:1f:78: 70:14:8b:4b:cd:81:7b:30:57:6a:3b:7b:1a:6d:bd: 8f:ac:7b:64:4c:80:e1:af:5a:fe:a0:6d:8b:dc:10: fe:78:bb:1b:d8:88:f0:d8:56:14:79:49:56:4b:03: 02:c9:7a:36:aa:48:58:c8:9d:5c:ff:6f:e5:66:5a: b3:ee:24:e7:96:5b:5b:ae:72:7c:0d:d1:85:ca:9e: 99:e8:57:9c:56:2e:35:a3:81:2f:da:5a:5e:17:c6: 84:79:ad:a6:cd:a8:19:18:8e:9b:2c:91:fb:7b:93: a9:47:cf:31:ea:38:b3:e0:7d:b8:18:ff:96:8e:32: 17:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:39:E3:AB:58:F8:00:78:27:82:DD:C1:23:B5:1F:52:D2:B6:5E:68 X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:3f:e0:4c:d3:cc:e0:f8:db:95:0e:5e:62:d2:a0:8f:0a:d0: 20:27:ad:34:3d:5a:60:2b:5c:37:db:aa:e1:7a:d2:49:c6:f5: ab:1c:b3:64:fb:2b:b2:cf:6f:0f:e1:12:37:a8:69:71:61:53: 7d:0c:00:19:6c:05:e4:f6:26:19:73:25:64:74:a5:90:19:10: fa:0c:40:c4:e9:89:d0:98:07:c0:57:d3:38:22:e9:9d:27:77: dc:07:d8:21:b4:dd:06:3d:30:32:21:29:08:e1:ba:c5:ed:a1: fd:0d:c6:9b:bc:7b:d2:d8:d9:4e:8b:00:5a:3d:c9:70:29:43: e7:b5:9d:be:67:cb:75:e0:9b:ca:31:68:51:9e:38:c8:c3:69: 01:50:04:dd:72:8f:b7:a7:c2:9f:a8:0d:a6:ea:35:cd:42:76: 18:e8:c2:28:1e:c1:8c:14:d2:21:c4:b7:d1:52:e2:d2:22:f5: 6b:91:6a:ba:24:55:d7:86:b9:15:6a:31:b0:f9:b4:19:34:81: 55:81:e6:91:16:4d:68:8c:9c:20:b6:62:0d:e5:53:a5:e3:35: 12:2e:05:fe:ef:93:5a:46:85:e9:c6:95:cb:32:a6:df:07:f3: 93:07:4d:f4:0c:eb:16:28:9a:41:96:3a:6b:87:22:2c:71:fc: e4:91:f5:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh70ty63FpAn4EVg9KbMEgZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjUwODA1MjAwMTEzWhcNMjUwODA2MjAwMTEzWjAzMTEwLwYDVQQD EyhlNjM5ZTNhYjU4ZjgwMDc4Mjc4MmRkYzEyM2I1MWY1MmQyYjY1ZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aU1g7XzXNcUp8NiM7kBFB9sGspz wD0M+o6XE9o5YNKzr3+z2e9346sAEfvJvgbxzfs+5ZBPAh0TnamOmboHdUjzV0+B EewOHT+bG7YYuynbOF8YN7mCjkzHIPX+NYfqAZ3dmIOqgfM9jcahfipV6fPfnZ9C sbN6PwQBpU8DJpIsiNjSH3hwFItLzYF7MFdqO3sabb2PrHtkTIDhr1r+oG2L3BD+ eLsb2Ijw2FYUeUlWSwMCyXo2qkhYyJ1c/2/lZlqz7iTnlltbrnJ8DdGFyp6Z6Fec Vi41o4Ev2lpeF8aEea2mzagZGI6bLJH7e5OpR88x6jiz4H24GP+WjjIXTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOY546tY+AB4J4LdwSO1H1LStl5oMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKT/gTNPM 4PjblQ5eYtKgjwrQICetND1aYCtcN9uq4XrSScb1qxyzZPsrss9vD+ESN6hpcWFT fQwAGWwF5PYmGXMlZHSlkBkQ+gxAxOmJ0JgHwFfTOCLpnSd33AfYIbTdBj0wMiEp COG6xe2h/Q3Gm7x70tjZTosAWj3JcClD57WdvmfLdeCbyjFoUZ44yMNpAVAE3XKP t6fCn6gNpuo1zUJ2GOjCKB7BjBTSIcS30VLi0iL1a5FquiRV14a5FWoxsPm0GTSB VYHmkRZNaIycILZiDeVTpeM1Ei4F/u+TWkaF6caVyzKm3wfzkwdN9AzrFiiaQZY6 a4ciLHH85JH1ww== -----END CERTIFICATE-----Generated at Wed Aug 6 06:04:38 2025 by rpki-client