$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: eotg8Pi6f6ES2pzHLFA3EXBjjCdquS22Ik7mjnuktDQ= Subject key identifier: F0:33:A0:B4:55:0F:34:CE:52:68:6D:12:36:62:A9:F4:B7:38:AE:0A Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 0199353719148798BBA42293D021D55DF729 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 1680 Signing time: Wed 10 Sep 2025 20:00:27 +0000 Manifest this update: Wed 10 Sep 2025 20:00:27 +0000 Manifest next update: Thu 11 Sep 2025 20:00:27 +0000 Files and hashes: 1: 1-YLitnkBbXXsQAFgwq_VXNT0JiU.roa (hash: AJ3gimUDCGBcWcTGkG9GHuWdzHVsFaaNIwm4c/UaNKI=) 2: EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa (hash: mjozCBG8d8a1a9rxk2/WXOhv1sAeajKVlJoBmpCTphI=) 3: JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa (hash: MfyInY8zOEg6qrPZH5fZlCQbjzWyB7B/O95gOPgwBK8=) 4: JRPXqjHWLaWnIuSL8g9IeICp1DA.roa (hash: 2iPE1VbPS86vB8xHzmkYPiMJ/2pRuAO+4Eo+0e52CUU=) 5: KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa (hash: v+IFmLklJP0SF039aJ72TNFUXKdUB+t1BQfemj0rrwE=) 6: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: WzH3L5wKOp457SWXXyzFicf8nZREeMfveqJKo9lSkOw=) 7: PKP5a34KkATdKIYJt-5YPdlCScc.roa (hash: DIduPrIRFwlPmmTvgmnIOUqFQ2p2Urxx9bdsVWJtVNQ=) 8: URdHpLliQS0f_xW89x43dy03NFM.roa (hash: slk/BTTaKKDTHH1yknm1NTv+Ov77fSUjZtooH73b8sg=) 9: gEEujvRXufmsjgTmstu1Zbbnfs0.roa (hash: P5YHH8ETd3YFKeI8j0ogt9xk/9FEVi5SrSm44Y95yWk=) 10: koANhf94Ms7kfxsa0LrqViexTxU.roa (hash: n1usXJi4k9IdIFnEicQPzyVEwnESkffY6S41/7XDahM=) 11: lsyqD2gTgikkDZqsbqed-AvQOFE.roa (hash: 2f7aOq0K3Z5tB/Bm8elLHTKPwyM1VQt3iTAgGQr0kUA=) 12: m-IIE152ao_pZE4Wt42YO_x1XlM.roa (hash: muFT1Obe9mEevORUc6UEy/Cz3RKhk79/nUEvl5PDZM4=) 13: nZHdV3WJYYopwUGJLwL5bZm3VpI.roa (hash: yZFjAsboNvT9P5DWXdZp8gsxk1AZMOxeZfK2Mq9pQEU=) 14: oJy5Ih3Wi9poj-CApp9bi93q2-8.roa (hash: UiKgdsncZ7pajJ8yDf76t7tbkfWUzikpYtARnAAsGHo=) 15: riI-pOFWNLX8839TKqYFfWOwpZ8.roa (hash: fqG5C98P6l1daY/xcAV9OUvehrdtHt6AHPVOzurPOBw=) 16: sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa (hash: btOhuVo5qzp7IyhUfnRzrwSPzaIUCOIvSAfRoFrawl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 20:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:35:37:19:14:87:98:bb:a4:22:93:d0:21:d5:5d:f7:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Sep 10 20:00:27 2025 GMT Not After : Sep 11 20:00:27 2025 GMT Subject: CN=f033a0b4550f34ce52686d123662a9f4b738ae0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1d:7c:63:bf:df:56:41:f6:9b:f9:4c:f7:df: 4e:f2:cd:71:83:71:78:14:e7:3a:cb:e6:e9:8b:90: 45:0a:00:de:e7:b6:40:6a:9b:44:1c:83:fb:7b:c0: bc:78:0e:84:53:66:ff:b7:dc:0a:9c:f3:87:d5:b0: e4:62:f7:cc:eb:83:47:4a:b4:8c:a0:f2:d1:9c:b2: 50:f3:e9:af:81:b2:a3:3f:e3:15:5d:22:49:91:d8: 71:43:4e:56:a7:01:bc:7c:2c:77:fd:ad:bb:dc:f4: cc:2f:83:6e:c7:b0:82:96:43:5b:21:ce:aa:10:6c: c9:2d:5f:ca:77:65:e1:b7:ec:fe:79:fb:57:ad:90: d9:fa:eb:7d:61:36:51:ce:65:16:0d:dd:8d:6a:13: 2b:16:df:9c:eb:4f:01:c8:b3:d8:fe:44:5d:76:6e: c1:4f:3d:23:a2:f9:d1:e0:31:79:31:f8:1f:cf:ac: 9a:af:b5:77:87:9d:14:95:31:b3:8c:5e:c0:de:04: 9e:09:87:ab:73:7a:7f:ac:63:a4:dc:b7:15:a1:ad: 08:5a:22:d3:1f:d4:02:3e:64:6a:87:f2:15:ae:e4: 4c:e6:a8:ca:1e:6a:61:5c:2f:d8:84:e1:a2:0d:9c: 5f:4e:57:a0:d9:65:74:e3:e3:a9:0a:76:9d:4f:77: 61:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:33:A0:B4:55:0F:34:CE:52:68:6D:12:36:62:A9:F4:B7:38:AE:0A X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:1f:f9:c7:6e:25:cb:ad:5b:9b:b0:c8:42:5f:44:7d:72:8c: d3:01:90:e3:63:1a:d6:f3:a5:5c:19:8d:c6:7d:5e:1e:5c:ad: 69:e1:77:8b:0d:72:2d:ad:96:96:aa:1b:36:91:d9:a1:e7:1e: ff:45:f6:93:f1:0c:dc:70:e0:58:ea:8c:cf:73:06:86:d8:49: 8c:fa:f4:23:68:86:6e:40:5f:a0:3c:2a:a8:54:70:41:75:1f: dc:16:ff:6c:57:05:10:b7:02:5f:25:06:09:44:04:d2:33:5b: 7e:b8:cc:d7:75:56:4c:06:0f:b5:e7:d9:73:26:e3:0f:f1:fe: 47:a3:27:13:40:62:11:32:fa:3d:7a:90:8e:32:f7:6e:42:62: 83:4b:d2:af:b2:4a:3f:ef:19:88:92:95:d6:48:13:9d:ad:ea: e8:96:9f:2b:ea:db:0c:65:9a:51:17:70:03:b7:10:cf:f4:69: 7e:07:91:b9:85:23:60:63:64:b3:40:36:3a:db:7c:a3:7d:ab: 57:40:f5:5a:50:0f:e2:99:23:ec:f7:7e:27:77:20:dc:2a:eb: 42:69:f1:2c:de:e4:b6:54:34:50:79:39:fb:b5:e7:f6:58:9e: 5a:60:0f:25:23:b7:f7:6d:61:ab:06:1b:31:09:a3:3b:bc:56: 93:93:d3:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk1NxkUh5i7pCKT0CHVXfcpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjUwOTEwMjAwMDI3WhcNMjUwOTExMjAwMDI3WjAzMTEwLwYDVQQD EyhmMDMzYTBiNDU1MGYzNGNlNTI2ODZkMTIzNjYyYTlmNGI3MzhhZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4B18Y7/fVkH2m/lM999O8s1xg3F4 FOc6y+bpi5BFCgDe57ZAaptEHIP7e8C8eA6EU2b/t9wKnPOH1bDkYvfM64NHSrSM oPLRnLJQ8+mvgbKjP+MVXSJJkdhxQ05WpwG8fCx3/a273PTML4Nux7CClkNbIc6q EGzJLV/Kd2Xht+z+eftXrZDZ+ut9YTZRzmUWDd2NahMrFt+c608ByLPY/kRddm7B Tz0jovnR4DF5Mfgfz6yar7V3h50UlTGzjF7A3gSeCYerc3p/rGOk3LcVoa0IWiLT H9QCPmRqh/IVruRM5qjKHmphXC/YhOGiDZxfTleg2WV04+OpCnadT3dhOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAzoLRVDzTOUmhtEjZiqfS3OK4KMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAex/5x24l y61bm7DIQl9EfXKM0wGQ42Ma1vOlXBmNxn1eHlytaeF3iw1yLa2WlqobNpHZoece /0X2k/EM3HDgWOqMz3MGhthJjPr0I2iGbkBfoDwqqFRwQXUf3Bb/bFcFELcCXyUG CUQE0jNbfrjM13VWTAYPtefZcybjD/H+R6MnE0BiETL6PXqQjjL3bkJig0vSr7JK P+8ZiJKV1kgTna3q6JafK+rbDGWaURdwA7cQz/RpfgeRuYUjYGNks0A2Ott8o32r V0D1WlAP4pkj7Pd+J3cg3CrrQmnxLN7ktlQ0UHk5+7Xn9lieWmAPJSO3921hqwYb MQmjO7xWk5PT6w== -----END CERTIFICATE-----Generated at Wed Sep 10 23:15:44 2025 by rpki-client