$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: Af19Dc2NSlj4Qr8fChsvMwfluSRdSr8+u9iZBXGO7h8= Subject key identifier: 28:80:E8:D0:01:C2:26:94:5F:CE:86:5A:C1:D8:6C:97:28:00:DB:E6 Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 01976997E9633DF7105FFBF5D4A3E46AC7E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 1592 Signing time: Fri 13 Jun 2025 14:00:52 +0000 Manifest this update: Fri 13 Jun 2025 14:00:52 +0000 Manifest next update: Sat 14 Jun 2025 14:00:52 +0000 Files and hashes: 1: 1-YLitnkBbXXsQAFgwq_VXNT0JiU.roa (hash: AJ3gimUDCGBcWcTGkG9GHuWdzHVsFaaNIwm4c/UaNKI=) 2: EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa (hash: mjozCBG8d8a1a9rxk2/WXOhv1sAeajKVlJoBmpCTphI=) 3: JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa (hash: MfyInY8zOEg6qrPZH5fZlCQbjzWyB7B/O95gOPgwBK8=) 4: JRPXqjHWLaWnIuSL8g9IeICp1DA.roa (hash: 2iPE1VbPS86vB8xHzmkYPiMJ/2pRuAO+4Eo+0e52CUU=) 5: KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa (hash: v+IFmLklJP0SF039aJ72TNFUXKdUB+t1BQfemj0rrwE=) 6: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: YlZXf95Yb/lXOU1sTFqQIlousuFrYfv551YCtEAoPDs=) 7: PKP5a34KkATdKIYJt-5YPdlCScc.roa (hash: DIduPrIRFwlPmmTvgmnIOUqFQ2p2Urxx9bdsVWJtVNQ=) 8: URdHpLliQS0f_xW89x43dy03NFM.roa (hash: slk/BTTaKKDTHH1yknm1NTv+Ov77fSUjZtooH73b8sg=) 9: gEEujvRXufmsjgTmstu1Zbbnfs0.roa (hash: P5YHH8ETd3YFKeI8j0ogt9xk/9FEVi5SrSm44Y95yWk=) 10: koANhf94Ms7kfxsa0LrqViexTxU.roa (hash: n1usXJi4k9IdIFnEicQPzyVEwnESkffY6S41/7XDahM=) 11: lsyqD2gTgikkDZqsbqed-AvQOFE.roa (hash: 2f7aOq0K3Z5tB/Bm8elLHTKPwyM1VQt3iTAgGQr0kUA=) 12: m-IIE152ao_pZE4Wt42YO_x1XlM.roa (hash: muFT1Obe9mEevORUc6UEy/Cz3RKhk79/nUEvl5PDZM4=) 13: nZHdV3WJYYopwUGJLwL5bZm3VpI.roa (hash: yZFjAsboNvT9P5DWXdZp8gsxk1AZMOxeZfK2Mq9pQEU=) 14: oJy5Ih3Wi9poj-CApp9bi93q2-8.roa (hash: UiKgdsncZ7pajJ8yDf76t7tbkfWUzikpYtARnAAsGHo=) 15: riI-pOFWNLX8839TKqYFfWOwpZ8.roa (hash: fqG5C98P6l1daY/xcAV9OUvehrdtHt6AHPVOzurPOBw=) 16: sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa (hash: btOhuVo5qzp7IyhUfnRzrwSPzaIUCOIvSAfRoFrawl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 13:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:69:97:e9:63:3d:f7:10:5f:fb:f5:d4:a3:e4:6a:c7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Jun 13 14:00:52 2025 GMT Not After : Jun 14 14:00:52 2025 GMT Subject: CN=2880e8d001c226945fce865ac1d86c972800dbe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:59:d6:97:57:68:31:46:11:52:2a:ca:3d:57: 20:29:ce:46:2f:2b:05:a6:10:a8:04:49:db:c7:6a: 45:3c:eb:2c:d8:b3:79:42:9d:91:73:f4:f5:5d:d0: f3:c8:9c:41:77:91:b0:a4:bc:a6:0d:30:dc:f7:1e: c3:70:09:7f:24:2a:8a:68:ef:eb:54:eb:74:11:a7: 59:ec:51:b2:04:fd:41:6f:56:22:fc:86:d2:40:0a: 9b:58:ba:26:bc:6a:22:68:65:af:93:83:a7:40:76: e9:2e:44:56:c3:fc:23:b1:6e:93:69:94:3d:1e:b9: 1b:be:da:56:01:c0:1e:b4:2e:bf:81:d2:db:f8:fe: d6:6c:5e:82:d1:ca:1c:13:d0:ca:b9:7d:55:17:20: 89:82:f1:9a:d6:d6:81:c0:b4:6c:ee:c8:c8:52:39: 89:5e:b9:d9:19:48:97:13:7f:93:63:ba:c7:a0:fd: 60:b0:44:56:c5:df:61:84:df:7e:8c:4e:14:85:c3: 16:74:df:f4:a4:fa:59:1f:ed:f8:87:ac:c7:f5:db: a9:78:d1:31:f5:b3:ce:94:76:eb:c5:2a:55:cc:21: 56:d4:03:cc:85:76:ab:7b:de:a0:c6:2e:d0:2b:e9: a8:73:39:a4:d8:54:c2:fb:35:e7:52:44:43:1f:b3: 15:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:80:E8:D0:01:C2:26:94:5F:CE:86:5A:C1:D8:6C:97:28:00:DB:E6 X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:68:ab:1a:89:7c:6e:96:f4:ac:14:e0:b6:7c:61:8a:9a:4d: 60:d1:9e:b3:1f:2c:9c:c9:41:25:d9:ea:84:9e:c5:39:a3:91: de:56:32:82:93:78:d1:79:a7:ea:5a:81:25:df:43:83:ed:ad: ce:2a:69:22:9b:c8:da:f5:ac:12:65:45:c0:75:9b:0e:82:00: 44:35:43:8b:fa:e8:ff:40:c9:1b:b5:a7:8e:dc:25:f0:a9:54: 4c:e0:b3:25:32:8b:66:c5:f8:3b:00:a3:b2:7d:17:fe:4b:d4: 10:23:12:7f:26:90:97:18:54:fc:db:9b:b7:31:9d:be:86:82: c4:25:d0:13:cb:4a:18:e2:32:25:f2:cb:21:67:5f:cc:af:85: 99:41:97:9e:44:41:69:d9:dd:8a:aa:e4:af:dd:98:02:99:54: 7e:87:e7:44:90:46:0f:27:f5:e3:4e:c0:80:12:10:76:8b:22: 96:02:8b:df:a7:74:eb:61:96:c5:79:6c:15:3b:ec:ae:83:10: 3d:2b:73:6e:ef:80:fb:b1:ee:18:dc:2c:a7:14:48:4d:d0:db: 4c:06:32:8b:bc:e8:8e:c7:81:e8:1d:7c:0b:5c:62:5d:92:fe: 66:0a:ab:2a:32:3e:2f:f9:08:31:21:c2:bf:b1:db:9e:d4:a0: 2c:df:a8:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdpl+ljPfcQX/v11KPkasfgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjUwNjEzMTQwMDUyWhcNMjUwNjE0MTQwMDUyWjAzMTEwLwYDVQQD EygyODgwZThkMDAxYzIyNjk0NWZjZTg2NWFjMWQ4NmM5NzI4MDBkYmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FnWl1doMUYRUirKPVcgKc5GLysF phCoBEnbx2pFPOss2LN5Qp2Rc/T1XdDzyJxBd5GwpLymDTDc9x7DcAl/JCqKaO/r VOt0EadZ7FGyBP1Bb1Yi/IbSQAqbWLomvGoiaGWvk4OnQHbpLkRWw/wjsW6TaZQ9 HrkbvtpWAcAetC6/gdLb+P7WbF6C0cocE9DKuX1VFyCJgvGa1taBwLRs7sjIUjmJ XrnZGUiXE3+TY7rHoP1gsERWxd9hhN9+jE4UhcMWdN/0pPpZH+34h6zH9dupeNEx 9bPOlHbrxSpVzCFW1APMhXare96gxi7QK+moczmk2FTC+zXnUkRDH7MVJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiA6NABwiaUX86GWsHYbJcoANvmMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2irGol8 bpb0rBTgtnxhippNYNGesx8snMlBJdnqhJ7FOaOR3lYygpN40Xmn6lqBJd9Dg+2t zippIpvI2vWsEmVFwHWbDoIARDVDi/ro/0DJG7Wnjtwl8KlUTOCzJTKLZsX4OwCj sn0X/kvUECMSfyaQlxhU/NubtzGdvoaCxCXQE8tKGOIyJfLLIWdfzK+FmUGXnkRB adndiqrkr92YAplUfofnRJBGDyf1407AgBIQdosilgKL36d062GWxXlsFTvsroMQ PStzbu+A+7HuGNwspxRITdDbTAYyi7zojseB6B18C1xiXZL+ZgqrKjI+L/kIMSHC v7HbntSgLN+ofQ== -----END CERTIFICATE-----Generated at Fri Jun 13 19:31:56 2025 by rpki-client