$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: YbydmRnh9C6KcJcDz8i4VeYezkww0k7YdqIv2LSeOvg= Subject key identifier: 86:B8:5B:A4:B7:0C:8D:7C:9E:BE:32:8D:01:41:1F:92:91:3F:99:DD Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019F1A1F3219438835964BB60FA0D73BA145 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 198E Signing time: Tue 30 Jun 2026 20:01:19 +0000 Manifest this update: Tue 30 Jun 2026 20:01:19 +0000 Manifest next update: Wed 01 Jul 2026 20:01:19 +0000 Files and hashes: 1: 5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa (hash: vhWvb47xm9ebRAseLYTwnZU0IPiMDqw3uETfxMC4UbA=) 2: 8dwNjvL9MJgQI0OVV7woi3xWYxI.roa (hash: pvzPPY8ueJkU8NUuAq5vy1y2A7mjLuLyMdlQjovqvLI=) 3: 8ob5FLuOujVhWEOwxv-forDA0cY.roa (hash: 84hMVRMPCF3nYrOl11aBzjK0ugOKjdN5OhtUyw9UGLw=) 4: CL2GMWv6pCXR2_356vc3PKuWXvs.roa (hash: y/dr783gs6j/tPotjhEDFZBriQQscWgnNMDkVNhcMXA=) 5: DUZOtNSDDHj7cC86OP1fzZHoD1Q.roa (hash: sq3RafP/g4VzkIenR5pfY7s3somV9YUfAd4xuK9GhSA=) 6: IebEbuAN9nRUPZFdRs-e4w7Fg5E.roa (hash: jIR1b9upXq/6crre8hwOSTG4cOP8nIdGvBsMPe2V/Ko=) 7: KywvzoRGSfaFf4crg97cyBzKoQg.roa (hash: +zmajVZk3ZJyJBrTV2gOa41M7zLT4z26iJSomfXlFX0=) 8: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: KOihWvFLreUx94b2Ch16CF6nXc2vNVTUWg3pTtr7HNo=) 9: T6201kaKz2wAhM6zPCN8a023mG8.roa (hash: ahv8z1IDEiRyXew3YyCL7x/GOhwD7Uqtn910nunK2U4=) 10: YOa6NQaDPDJlsrbtADynIa_NyaU.roa (hash: FoktoHEULMwMUIjsscghqSvVAsZbXr6CN7lF5ijkARc=) 11: Zp9zRiO75kWzExNlPmmXxiSiVB8.roa (hash: v83of7u5H6aL+AuW3nStEeiW6yeJITq4WVe1dcQEc/8=) 12: ezMcKD1ocdQnV8_lR3eRy32z5zk.roa (hash: fTetUR020tv6nBRIK7MCA4dwzA33cRIz7jgKMOHo3p8=) 13: gP563nxVMA_mNyBlWZLFCY-wLxE.roa (hash: aJwn1metHDcgL3IPWwXXHA6UIOyTz7dqDhcJZeynSIg=) 14: j2oK7garGa64vPG9Zj-3eHhby28.roa (hash: ZAX94OS32a4+/IR5q/bXkVHeXAeY+w7FlOE25hmdqL0=) 15: n149pV6YzpfmUFYDEF8Zv2819ak.roa (hash: HIRhwpgdeu7PD7ku5LyNlYKbvqN+PW+zocaMcV3HnPg=) 16: yVxkpnNWNPmfLM8KiJbpmmzhscw.roa (hash: wqxbIcyfrK8aJMxY/yMeGWSpob5ZYuT+6YYKdi4r/Pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 Jul 2026 14:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:1a:1f:32:19:43:88:35:96:4b:b6:0f:a0:d7:3b:a1:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Jun 30 20:01:19 2026 GMT Not After : Jul 1 20:01:19 2026 GMT Subject: CN=86b85ba4b70c8d7c9ebe328d01411f92913f99dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:ac:28:4d:38:78:76:9b:d9:34:95:ca:28: 19:8e:22:d6:24:2f:50:f4:62:4a:49:9d:73:48:7d: f8:fd:f0:50:60:a8:e9:d0:32:89:87:19:5f:f2:a3: 97:1a:95:02:bf:88:38:3e:de:88:96:ee:e5:1e:3f: 6f:0f:a1:18:c6:d0:c6:a6:00:67:05:03:36:e6:84: 25:b1:8e:25:a3:f0:4b:c6:b4:c3:34:1a:5e:76:31: 1a:17:d6:dc:f1:3e:21:5e:46:8a:b5:d4:66:8f:b0: a4:23:10:d5:53:71:4d:26:67:43:a0:93:ca:1c:0e: 26:f8:63:66:10:9c:9b:a4:79:e7:18:19:3c:c0:fe: b4:60:20:b4:df:7c:3a:e2:7e:af:92:a3:06:dd:29: 27:31:f0:18:da:cf:5e:21:04:ff:3e:14:e2:c1:df: 6e:23:de:91:3c:98:f4:82:e9:bf:74:98:eb:51:fc: b9:43:91:78:19:99:f4:bd:b0:8c:bb:bd:13:ae:1f: ec:1b:6a:b0:be:a3:19:59:78:ab:01:a6:e8:fd:96: 5e:07:73:8e:78:bb:54:32:c0:7b:f5:8f:50:72:1e: 26:e6:c6:7a:21:f3:32:94:c6:47:dd:23:94:2a:bc: 39:ef:5b:51:86:12:b5:6f:08:74:d5:83:94:99:f6: 7a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B8:5B:A4:B7:0C:8D:7C:9E:BE:32:8D:01:41:1F:92:91:3F:99:DD X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:10:ac:7c:b2:b2:0f:a8:94:d5:3e:ce:2a:03:bf:86:c2:d4: 6f:4f:b1:b0:cc:d5:c1:35:0a:d2:52:94:40:62:7b:59:8f:5d: 03:c0:03:c5:6b:57:53:2a:a3:9f:ed:da:57:09:3e:4c:47:b9: 84:d5:a5:17:19:eb:e9:a3:50:f6:aa:ec:1a:4d:25:e6:89:1e: 2e:74:28:86:5d:00:b0:e8:5b:42:81:0a:61:30:03:72:73:aa: 55:fe:f9:49:2f:2b:0f:a5:50:57:5b:da:72:46:d7:17:b2:d2: cb:9c:44:80:15:a7:43:22:45:69:ed:90:63:13:ae:43:fd:82: 82:e7:1e:aa:b6:88:f5:c0:33:da:c0:f0:db:85:9b:ff:55:bf: 6b:15:d3:bb:b1:d1:8b:c3:e8:b5:4a:5f:4b:76:cd:f6:0a:a3: 19:3a:a8:d6:76:12:c1:7d:1d:26:10:9e:4b:aa:1d:70:dd:5b: 32:20:a8:35:b6:f8:62:32:55:04:02:bb:94:65:b1:e9:a8:7a: 8e:8b:f8:a6:bc:fa:1e:a2:14:f5:bd:7a:ce:cf:3d:1d:0f:4a: 7d:5a:7a:0f:28:cb:79:93:af:19:cc:93:e6:fa:f9:a7:99:80: 1e:28:57:0c:bc:5e:a0:48:8a:c8:67:0d:f1:66:bc:27:4e:a3: 35:11:13:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8aHzIZQ4g1lku2D6DXO6FFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYwNjMwMjAwMTE5WhcNMjYwNzAxMjAwMTE5WjAzMTEwLwYDVQQD Eyg4NmI4NWJhNGI3MGM4ZDdjOWViZTMyOGQwMTQxMWY5MjkxM2Y5OWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiysKE04eHab2TSVyigZjiLWJC9Q 9GJKSZ1zSH34/fBQYKjp0DKJhxlf8qOXGpUCv4g4Pt6Ilu7lHj9vD6EYxtDGpgBn BQM25oQlsY4lo/BLxrTDNBpedjEaF9bc8T4hXkaKtdRmj7CkIxDVU3FNJmdDoJPK HA4m+GNmEJybpHnnGBk8wP60YCC033w64n6vkqMG3SknMfAY2s9eIQT/PhTiwd9u I96RPJj0gum/dJjrUfy5Q5F4GZn0vbCMu70Trh/sG2qwvqMZWXirAabo/ZZeB3OO eLtUMsB79Y9Qch4m5sZ6IfMylMZH3SOUKrw571tRhhK1bwh01YOUmfZ6aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIa4W6S3DI18nr4yjQFBH5KRP5ndMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRCsfLKy D6iU1T7OKgO/hsLUb0+xsMzVwTUK0lKUQGJ7WY9dA8ADxWtXUyqjn+3aVwk+TEe5 hNWlFxnr6aNQ9qrsGk0l5okeLnQohl0AsOhbQoEKYTADcnOqVf75SS8rD6VQV1va ckbXF7LSy5xEgBWnQyJFae2QYxOuQ/2CguceqraI9cAz2sDw24Wb/1W/axXTu7HR i8PotUpfS3bN9gqjGTqo1nYSwX0dJhCeS6odcN1bMiCoNbb4YjJVBAK7lGWx6ah6 jov4prz6HqIU9b16zs89HQ9KfVp6DyjLeZOvGcyT5vr5p5mAHihXDLxeoEiKyGcN 8Wa8J06jNREThw== -----END CERTIFICATE-----Generated at Tue Jun 30 22:23:04 2026 by rpki-client