$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: RGnqy4DLVtaz5Mi/cDUR27BiiEUxAj7LVaBtHTnUQfs= Subject key identifier: 0E:1F:04:15:FD:79:02:62:4B:1C:23:F5:CF:29:24:4F:84:9B:63:FF Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019748C33C063F3BC87F26E484E49A736E56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 1581 Signing time: Sat 07 Jun 2025 05:00:43 +0000 Manifest this update: Sat 07 Jun 2025 05:00:43 +0000 Manifest next update: Sun 08 Jun 2025 05:00:43 +0000 Files and hashes: 1: 1-YLitnkBbXXsQAFgwq_VXNT0JiU.roa (hash: AJ3gimUDCGBcWcTGkG9GHuWdzHVsFaaNIwm4c/UaNKI=) 2: EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa (hash: mjozCBG8d8a1a9rxk2/WXOhv1sAeajKVlJoBmpCTphI=) 3: JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa (hash: MfyInY8zOEg6qrPZH5fZlCQbjzWyB7B/O95gOPgwBK8=) 4: JRPXqjHWLaWnIuSL8g9IeICp1DA.roa (hash: 2iPE1VbPS86vB8xHzmkYPiMJ/2pRuAO+4Eo+0e52CUU=) 5: KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa (hash: v+IFmLklJP0SF039aJ72TNFUXKdUB+t1BQfemj0rrwE=) 6: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: n50SOZEB/JvVW8LNAtf5FutI1RXSsY2NMhH3w+O/jHI=) 7: PKP5a34KkATdKIYJt-5YPdlCScc.roa (hash: DIduPrIRFwlPmmTvgmnIOUqFQ2p2Urxx9bdsVWJtVNQ=) 8: URdHpLliQS0f_xW89x43dy03NFM.roa (hash: slk/BTTaKKDTHH1yknm1NTv+Ov77fSUjZtooH73b8sg=) 9: gEEujvRXufmsjgTmstu1Zbbnfs0.roa (hash: P5YHH8ETd3YFKeI8j0ogt9xk/9FEVi5SrSm44Y95yWk=) 10: koANhf94Ms7kfxsa0LrqViexTxU.roa (hash: n1usXJi4k9IdIFnEicQPzyVEwnESkffY6S41/7XDahM=) 11: lsyqD2gTgikkDZqsbqed-AvQOFE.roa (hash: 2f7aOq0K3Z5tB/Bm8elLHTKPwyM1VQt3iTAgGQr0kUA=) 12: m-IIE152ao_pZE4Wt42YO_x1XlM.roa (hash: muFT1Obe9mEevORUc6UEy/Cz3RKhk79/nUEvl5PDZM4=) 13: nZHdV3WJYYopwUGJLwL5bZm3VpI.roa (hash: yZFjAsboNvT9P5DWXdZp8gsxk1AZMOxeZfK2Mq9pQEU=) 14: oJy5Ih3Wi9poj-CApp9bi93q2-8.roa (hash: UiKgdsncZ7pajJ8yDf76t7tbkfWUzikpYtARnAAsGHo=) 15: riI-pOFWNLX8839TKqYFfWOwpZ8.roa (hash: fqG5C98P6l1daY/xcAV9OUvehrdtHt6AHPVOzurPOBw=) 16: sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa (hash: btOhuVo5qzp7IyhUfnRzrwSPzaIUCOIvSAfRoFrawl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:48:c3:3c:06:3f:3b:c8:7f:26:e4:84:e4:9a:73:6e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Jun 7 05:00:43 2025 GMT Not After : Jun 8 05:00:43 2025 GMT Subject: CN=0e1f0415fd7902624b1c23f5cf29244f849b63ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1b:c2:d0:88:31:66:0c:4b:6f:02:bc:ac:66: e4:3e:0a:b4:3e:cb:ea:84:6f:49:e4:4b:8c:67:90: ad:92:9e:71:9a:d1:cc:5a:3b:01:f0:07:68:28:4a: 29:0f:12:f5:74:06:10:22:8e:f7:a8:ce:1e:61:45: fe:41:ff:7e:bc:65:69:9b:71:ab:8d:d4:0b:c4:4b: 3a:f6:7f:61:d3:d0:ae:c8:df:fc:c9:de:12:73:0e: 3d:7f:5e:27:0c:6d:1e:53:9c:f9:fb:69:e1:ae:8c: 77:d9:25:31:19:80:aa:a3:7d:a9:49:76:54:f5:5a: 48:09:51:ad:8a:6f:2c:1c:f8:ee:db:96:bf:b7:8b: ff:8a:27:3f:5b:cf:85:74:0d:a6:7e:53:e1:48:48: 3d:7e:a6:35:79:42:46:50:0e:03:9f:d0:c5:ef:d1: 9a:0d:2a:4a:9b:aa:47:89:3c:20:b8:b6:7a:b0:5e: 11:43:33:05:ba:83:fc:bb:86:3a:ba:7f:70:8a:e9: a5:f0:8a:e5:31:e1:81:d5:3b:17:62:30:98:56:a5: af:dc:27:34:30:97:05:28:b3:e6:a9:23:7a:05:4b: 4e:80:05:cf:25:15:e3:80:fd:fa:e8:51:80:dd:44: 31:c7:40:b0:27:1a:49:a5:e3:aa:55:75:e0:91:c6: 31:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1F:04:15:FD:79:02:62:4B:1C:23:F5:CF:29:24:4F:84:9B:63:FF X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2f:05:7d:e3:73:cb:51:0c:a5:c7:5b:e2:2a:64:e3:d0:83: e5:00:4b:db:83:e2:2e:dc:97:e7:a7:ba:d9:9d:c9:38:c9:f8: 82:fb:7b:0d:46:fd:7c:c3:89:1c:8e:2a:37:b6:81:3b:5d:ef: f6:5a:23:e4:71:b4:6d:09:55:93:5b:4f:64:c9:1f:a7:f1:a9: c2:40:d3:03:49:23:84:d3:06:9d:43:c2:aa:cf:7b:77:64:62: 28:95:5d:aa:dc:97:4a:8b:2b:c8:56:9d:7a:fa:2d:5e:0a:ed: 9f:74:ea:69:1e:21:dd:46:95:9e:e1:44:ed:bb:1a:57:0f:e0: b1:49:d3:2d:0d:20:9e:08:65:6c:38:19:04:38:fb:e3:5e:88: 2b:dc:7b:97:8f:e0:74:8f:d0:a6:84:be:54:9e:37:1f:24:74: 6c:0c:a4:7b:d3:92:1e:b9:71:6c:9d:67:cd:f0:a6:ef:6a:c7: b3:11:b8:0e:3b:42:c6:2d:61:c0:94:10:3a:50:7d:29:bf:3b: 57:78:b7:c4:59:2f:1b:4c:de:41:be:b4:9e:d7:4b:cc:0d:d0: c3:f2:a7:9c:1c:c4:2e:95:a0:bc:40:a9:47:42:f1:21:5b:a5: fe:aa:5d:cf:ba:3c:ca:4e:df:39:04:44:fb:81:e7:df:10:29: 2f:7d:d0:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdIwzwGPzvIfybkhOSac25WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjUwNjA3MDUwMDQzWhcNMjUwNjA4MDUwMDQzWjAzMTEwLwYDVQQD EygwZTFmMDQxNWZkNzkwMjYyNGIxYzIzZjVjZjI5MjQ0Zjg0OWI2M2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphvC0IgxZgxLbwK8rGbkPgq0Psvq hG9J5EuMZ5Ctkp5xmtHMWjsB8AdoKEopDxL1dAYQIo73qM4eYUX+Qf9+vGVpm3Gr jdQLxEs69n9h09CuyN/8yd4Scw49f14nDG0eU5z5+2nhrox32SUxGYCqo32pSXZU 9VpICVGtim8sHPju25a/t4v/iic/W8+FdA2mflPhSEg9fqY1eUJGUA4Dn9DF79Ga DSpKm6pHiTwguLZ6sF4RQzMFuoP8u4Y6un9wiuml8IrlMeGB1TsXYjCYVqWv3Cc0 MJcFKLPmqSN6BUtOgAXPJRXjgP366FGA3UQxx0CwJxpJpeOqVXXgkcYxcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4fBBX9eQJiSxwj9c8pJE+Em2P/MB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADi8FfeNz y1EMpcdb4ipk49CD5QBL24PiLtyX56e62Z3JOMn4gvt7DUb9fMOJHI4qN7aBO13v 9loj5HG0bQlVk1tPZMkfp/GpwkDTA0kjhNMGnUPCqs97d2RiKJVdqtyXSosryFad evotXgrtn3TqaR4h3UaVnuFE7bsaVw/gsUnTLQ0gnghlbDgZBDj7416IK9x7l4/g dI/QpoS+VJ43HyR0bAyke9OSHrlxbJ1nzfCm72rHsxG4DjtCxi1hwJQQOlB9Kb87 V3i3xFkvG0zeQb60ntdLzA3Qw/KnnBzELpWgvECpR0LxIVul/qpdz7o8yk7fOQRE +4Hn3xApL33QNw== -----END CERTIFICATE-----Generated at Sat Jun 7 08:08:13 2025 by rpki-client