$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: VuVugcKHW5KCCkJUQrMAAKl3U1efYWfHymfw68iki+E= Subject key identifier: 0D:D7:31:0D:00:05:C6:3F:9A:36:4B:2F:53:82:CD:F6:12:9D:C0:FB Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 0198499C1A2161A8F802F56B19A97F231AA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 1606 Signing time: Sun 27 Jul 2025 02:00:23 +0000 Manifest this update: Sun 27 Jul 2025 02:00:23 +0000 Manifest next update: Mon 28 Jul 2025 02:00:23 +0000 Files and hashes: 1: 1-YLitnkBbXXsQAFgwq_VXNT0JiU.roa (hash: AJ3gimUDCGBcWcTGkG9GHuWdzHVsFaaNIwm4c/UaNKI=) 2: EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa (hash: mjozCBG8d8a1a9rxk2/WXOhv1sAeajKVlJoBmpCTphI=) 3: JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa (hash: MfyInY8zOEg6qrPZH5fZlCQbjzWyB7B/O95gOPgwBK8=) 4: JRPXqjHWLaWnIuSL8g9IeICp1DA.roa (hash: 2iPE1VbPS86vB8xHzmkYPiMJ/2pRuAO+4Eo+0e52CUU=) 5: KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa (hash: v+IFmLklJP0SF039aJ72TNFUXKdUB+t1BQfemj0rrwE=) 6: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: wBwxjnuIPTajzcSouXsIwDM+OMAHa5mgz7t8T52r5c4=) 7: PKP5a34KkATdKIYJt-5YPdlCScc.roa (hash: DIduPrIRFwlPmmTvgmnIOUqFQ2p2Urxx9bdsVWJtVNQ=) 8: URdHpLliQS0f_xW89x43dy03NFM.roa (hash: slk/BTTaKKDTHH1yknm1NTv+Ov77fSUjZtooH73b8sg=) 9: gEEujvRXufmsjgTmstu1Zbbnfs0.roa (hash: P5YHH8ETd3YFKeI8j0ogt9xk/9FEVi5SrSm44Y95yWk=) 10: koANhf94Ms7kfxsa0LrqViexTxU.roa (hash: n1usXJi4k9IdIFnEicQPzyVEwnESkffY6S41/7XDahM=) 11: lsyqD2gTgikkDZqsbqed-AvQOFE.roa (hash: 2f7aOq0K3Z5tB/Bm8elLHTKPwyM1VQt3iTAgGQr0kUA=) 12: m-IIE152ao_pZE4Wt42YO_x1XlM.roa (hash: muFT1Obe9mEevORUc6UEy/Cz3RKhk79/nUEvl5PDZM4=) 13: nZHdV3WJYYopwUGJLwL5bZm3VpI.roa (hash: yZFjAsboNvT9P5DWXdZp8gsxk1AZMOxeZfK2Mq9pQEU=) 14: oJy5Ih3Wi9poj-CApp9bi93q2-8.roa (hash: UiKgdsncZ7pajJ8yDf76t7tbkfWUzikpYtARnAAsGHo=) 15: riI-pOFWNLX8839TKqYFfWOwpZ8.roa (hash: fqG5C98P6l1daY/xcAV9OUvehrdtHt6AHPVOzurPOBw=) 16: sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa (hash: btOhuVo5qzp7IyhUfnRzrwSPzaIUCOIvSAfRoFrawl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 00:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:49:9c:1a:21:61:a8:f8:02:f5:6b:19:a9:7f:23:1a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Jul 27 02:00:23 2025 GMT Not After : Jul 28 02:00:23 2025 GMT Subject: CN=0dd7310d0005c63f9a364b2f5382cdf6129dc0fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f0:2d:c7:6a:ea:21:a3:03:0d:f1:aa:0c:d9: fe:5c:44:af:56:d9:02:56:e6:8d:94:be:00:b5:b3: 6f:2c:3e:e6:fd:14:af:e9:49:c2:cf:9f:70:8f:7e: f6:0f:f9:d1:45:ee:f0:25:ed:9c:6b:6c:5d:48:69: 5c:bb:79:70:74:d3:1c:bf:8d:16:9a:ff:79:e5:0e: f9:77:ac:0d:25:fe:f9:54:09:98:a2:b5:3b:7f:51: 90:03:5e:b4:31:14:64:78:42:f4:ad:59:39:91:5b: 5c:38:b8:4f:0b:c2:8e:c2:02:b4:2f:3f:7e:be:14: 82:2c:c9:62:03:4c:82:d6:f2:ea:89:98:ba:03:54: f1:aa:44:46:83:c1:6f:f4:91:0b:02:2b:c5:f6:de: 6f:37:72:3a:ba:fb:3a:4c:b9:dc:55:36:e7:f5:ff: 3a:2d:17:fe:7a:bd:6a:38:90:fd:35:b7:44:8a:46: 6b:01:97:1e:62:d7:e8:e4:06:df:58:b0:60:2c:70: de:da:29:dc:ab:0a:8e:9b:04:bb:38:64:f2:da:a6: dc:88:94:fa:1c:07:61:8f:e0:90:aa:21:d4:f4:a4: 87:f7:10:37:85:90:bc:23:e6:1a:72:3c:a9:4d:15: 07:e9:32:be:35:85:fd:00:4b:1c:9f:6e:5f:11:ef: a4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D7:31:0D:00:05:C6:3F:9A:36:4B:2F:53:82:CD:F6:12:9D:C0:FB X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:09:f1:bb:c5:68:3b:46:12:2e:80:d9:49:9f:a3:db:28:c2: d7:ea:3b:c5:4e:80:33:c4:a8:a0:48:f4:06:4f:1b:87:b7:a0: 52:32:ae:e1:c6:a7:ca:cd:70:b6:6c:63:27:0f:36:29:8c:ae: 1d:f3:7d:da:85:07:58:a5:5e:f5:f7:c1:7b:e9:37:4e:ba:bf: c6:84:1f:06:bb:cf:9f:4f:2e:f9:21:e2:04:68:7b:02:36:94: 6f:01:65:47:36:c1:22:0b:a7:5d:17:80:06:ee:56:ae:cd:f5: a1:71:41:5b:93:69:db:f1:2f:ed:61:4d:5d:30:2e:ad:14:58: 68:54:26:8d:09:99:47:46:08:e6:0a:61:cd:94:ef:88:d6:49: 54:8b:37:9e:3c:ea:b6:8e:86:44:8a:e9:57:68:3f:08:c5:1f: 04:45:fe:0b:48:ac:e6:30:bb:7a:bb:d2:bc:c2:58:8e:f9:14: 7c:02:14:ed:32:86:07:7e:ab:b5:74:9a:3d:b5:31:a1:b2:f9: 91:0a:b3:92:f6:8f:9e:c2:81:06:35:2f:ba:99:42:db:a5:49: 60:8f:80:e5:eb:e9:f2:07:57:7f:75:00:35:12:e1:45:d2:11: dd:89:fd:79:09:bd:d6:7b:fa:8b:54:a8:c3:03:4b:09:87:01: 8f:c7:fb:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhJnBohYaj4AvVrGal/IxqmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjUwNzI3MDIwMDIzWhcNMjUwNzI4MDIwMDIzWjAzMTEwLwYDVQQD EygwZGQ3MzEwZDAwMDVjNjNmOWEzNjRiMmY1MzgyY2RmNjEyOWRjMGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfAtx2rqIaMDDfGqDNn+XESvVtkC VuaNlL4AtbNvLD7m/RSv6UnCz59wj372D/nRRe7wJe2ca2xdSGlcu3lwdNMcv40W mv955Q75d6wNJf75VAmYorU7f1GQA160MRRkeEL0rVk5kVtcOLhPC8KOwgK0Lz9+ vhSCLMliA0yC1vLqiZi6A1TxqkRGg8Fv9JELAivF9t5vN3I6uvs6TLncVTbn9f86 LRf+er1qOJD9NbdEikZrAZceYtfo5AbfWLBgLHDe2incqwqOmwS7OGTy2qbciJT6 HAdhj+CQqiHU9KSH9xA3hZC8I+YacjypTRUH6TK+NYX9AEscn25fEe+k3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3XMQ0ABcY/mjZLL1OCzfYSncD7MB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQnxu8Vo O0YSLoDZSZ+j2yjC1+o7xU6AM8SooEj0Bk8bh7egUjKu4canys1wtmxjJw82KYyu HfN92oUHWKVe9ffBe+k3Trq/xoQfBrvPn08u+SHiBGh7AjaUbwFlRzbBIgunXReA Bu5Wrs31oXFBW5Np2/Ev7WFNXTAurRRYaFQmjQmZR0YI5gphzZTviNZJVIs3njzq to6GRIrpV2g/CMUfBEX+C0is5jC7ervSvMJYjvkUfAIU7TKGB36rtXSaPbUxobL5 kQqzkvaPnsKBBjUvuplC26VJYI+A5evp8gdXf3UANRLhRdIR3Yn9eQm91nv6i1So wwNLCYcBj8f7nQ== -----END CERTIFICATE-----Generated at Sun Jul 27 08:34:21 2025 by rpki-client