$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: jgv5DDhyWJwccUqbyQg2lUqJOjjXLjfn3eVajCugehQ= Subject key identifier: 78:D4:1D:AD:0B:7A:4D:0D:24:9E:16:73:E4:97:3A:B8:E6:EC:74:AE Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 01A001DDA4C77E70581AFB31F895C3875AFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 1A06 Signing time: Fri 14 Aug 2026 20:01:37 +0000 Manifest this update: Fri 14 Aug 2026 20:01:37 +0000 Manifest next update: Sat 15 Aug 2026 20:01:37 +0000 Files and hashes: 1: 5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa (hash: vhWvb47xm9ebRAseLYTwnZU0IPiMDqw3uETfxMC4UbA=) 2: 8dwNjvL9MJgQI0OVV7woi3xWYxI.roa (hash: pvzPPY8ueJkU8NUuAq5vy1y2A7mjLuLyMdlQjovqvLI=) 3: 8ob5FLuOujVhWEOwxv-forDA0cY.roa (hash: 84hMVRMPCF3nYrOl11aBzjK0ugOKjdN5OhtUyw9UGLw=) 4: CL2GMWv6pCXR2_356vc3PKuWXvs.roa (hash: y/dr783gs6j/tPotjhEDFZBriQQscWgnNMDkVNhcMXA=) 5: DUZOtNSDDHj7cC86OP1fzZHoD1Q.roa (hash: sq3RafP/g4VzkIenR5pfY7s3somV9YUfAd4xuK9GhSA=) 6: IebEbuAN9nRUPZFdRs-e4w7Fg5E.roa (hash: jIR1b9upXq/6crre8hwOSTG4cOP8nIdGvBsMPe2V/Ko=) 7: KywvzoRGSfaFf4crg97cyBzKoQg.roa (hash: +zmajVZk3ZJyJBrTV2gOa41M7zLT4z26iJSomfXlFX0=) 8: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: GAgtwirm5CrbmPrP5PY8+D6qzOApqSRHhqXKDMK9QNk=) 9: T6201kaKz2wAhM6zPCN8a023mG8.roa (hash: ahv8z1IDEiRyXew3YyCL7x/GOhwD7Uqtn910nunK2U4=) 10: YOa6NQaDPDJlsrbtADynIa_NyaU.roa (hash: FoktoHEULMwMUIjsscghqSvVAsZbXr6CN7lF5ijkARc=) 11: Zp9zRiO75kWzExNlPmmXxiSiVB8.roa (hash: v83of7u5H6aL+AuW3nStEeiW6yeJITq4WVe1dcQEc/8=) 12: ezMcKD1ocdQnV8_lR3eRy32z5zk.roa (hash: fTetUR020tv6nBRIK7MCA4dwzA33cRIz7jgKMOHo3p8=) 13: gP563nxVMA_mNyBlWZLFCY-wLxE.roa (hash: aJwn1metHDcgL3IPWwXXHA6UIOyTz7dqDhcJZeynSIg=) 14: j2oK7garGa64vPG9Zj-3eHhby28.roa (hash: ZAX94OS32a4+/IR5q/bXkVHeXAeY+w7FlOE25hmdqL0=) 15: n149pV6YzpfmUFYDEF8Zv2819ak.roa (hash: HIRhwpgdeu7PD7ku5LyNlYKbvqN+PW+zocaMcV3HnPg=) 16: yVxkpnNWNPmfLM8KiJbpmmzhscw.roa (hash: wqxbIcyfrK8aJMxY/yMeGWSpob5ZYuT+6YYKdi4r/Pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 20:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:01:dd:a4:c7:7e:70:58:1a:fb:31:f8:95:c3:87:5a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Aug 14 20:01:37 2026 GMT Not After : Aug 15 20:01:37 2026 GMT Subject: CN=78d41dad0b7a4d0d249e1673e4973ab8e6ec74ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:94:27:6b:38:bf:f3:c1:e9:33:69:62:ac:60: 75:bb:3e:c5:13:38:cf:f0:7f:3f:aa:e5:e0:08:79: a1:01:d1:9e:72:2f:ad:24:ad:d5:de:4a:0b:79:72: c8:a0:b5:cb:85:f4:40:33:b9:07:56:06:81:d9:5b: 99:ec:88:fe:02:cf:ad:f9:dc:f6:66:1e:86:ec:e3: 24:2e:87:d0:71:7d:15:85:a3:ca:c2:cd:1d:f3:22: 2f:b6:b4:b2:d8:54:64:5a:7e:00:b8:38:af:ea:11: 17:5c:7c:4c:5c:e7:78:44:61:4f:f9:9a:9f:c5:46: f6:fd:e0:2a:3e:f4:17:7b:c3:63:c7:56:7b:aa:48: 79:92:2a:7e:7a:a5:af:53:00:16:aa:d3:38:a2:6a: aa:4c:32:a1:9a:43:f5:0f:fa:51:f0:04:99:cd:0b: 61:f0:a5:5d:15:5b:31:96:22:57:3f:6a:53:a1:d0: a8:f9:ad:4d:a2:4a:3e:42:6a:f7:46:49:8e:5c:e5: 8a:19:9d:fb:ae:1b:f3:6e:db:da:fb:89:96:ae:5e: 17:3f:02:45:13:9b:bf:ee:ce:e1:a8:19:1f:43:4e: 7d:70:a9:3a:17:35:a3:79:86:c6:97:05:fe:58:7b: 9f:84:69:34:52:d4:c2:56:0b:08:fb:b7:1a:57:42: a1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D4:1D:AD:0B:7A:4D:0D:24:9E:16:73:E4:97:3A:B8:E6:EC:74:AE X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:87:89:9e:39:47:9b:9b:23:41:8d:e3:1b:e7:b8:dd:f3:43: 3f:53:00:41:25:31:18:82:ad:aa:03:3a:38:82:c9:30:43:51: 9a:d7:2f:3e:e6:3f:01:a0:19:92:24:4c:c3:61:0e:c1:04:9e: 9f:24:e8:27:39:cb:80:d7:18:5f:9b:04:2c:b7:a4:5f:ed:98: 01:7f:47:41:24:0d:25:07:67:24:79:1b:5c:0f:7b:17:6d:9d: a9:f6:e9:87:73:80:84:c2:e3:fc:b0:b3:8c:e4:98:7e:1b:6b: 8b:14:ee:27:af:e4:f1:10:4b:b7:9e:ed:e2:5a:6c:82:ad:88: cf:b4:2a:6b:4d:44:22:0b:02:29:f9:be:94:08:3c:2f:c7:b7: 4d:dd:12:0b:b2:3c:7e:e8:1f:f5:9e:ca:73:ae:01:09:53:ab: 82:4e:46:63:a8:66:f6:b3:7c:05:69:18:9b:86:31:b9:42:39: 47:03:48:e0:58:aa:d3:c5:79:26:63:18:80:52:56:b9:af:05: 4a:ca:93:70:da:06:f9:82:73:0c:d1:46:b1:09:27:64:b9:1c: 4d:58:98:e2:5f:60:42:ac:5a:79:75:73:4e:1c:bc:ed:9c:c0: f6:27:01:59:2e:e4:42:f3:99:d5:46:09:de:a7:e7:c1:91:da: 2a:52:af:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAB3aTHfnBYGvsx+JXDh1r/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYwODE0MjAwMTM3WhcNMjYwODE1MjAwMTM3WjAzMTEwLwYDVQQD Eyg3OGQ0MWRhZDBiN2E0ZDBkMjQ5ZTE2NzNlNDk3M2FiOGU2ZWM3NGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpQnazi/88HpM2lirGB1uz7FEzjP 8H8/quXgCHmhAdGeci+tJK3V3koLeXLIoLXLhfRAM7kHVgaB2VuZ7Ij+As+t+dz2 Zh6G7OMkLofQcX0VhaPKws0d8yIvtrSy2FRkWn4AuDiv6hEXXHxMXOd4RGFP+Zqf xUb2/eAqPvQXe8Njx1Z7qkh5kip+eqWvUwAWqtM4omqqTDKhmkP1D/pR8ASZzQth 8KVdFVsxliJXP2pTodCo+a1Noko+Qmr3RkmOXOWKGZ37rhvzbtva+4mWrl4XPwJF E5u/7s7hqBkfQ059cKk6FzWjeYbGlwX+WHufhGk0UtTCVgsI+7caV0KhbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjUHa0Lek0NJJ4Wc+SXOrjm7HSuMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIeJnjlH m5sjQY3jG+e43fNDP1MAQSUxGIKtqgM6OILJMENRmtcvPuY/AaAZkiRMw2EOwQSe nyToJznLgNcYX5sELLekX+2YAX9HQSQNJQdnJHkbXA97F22dqfbph3OAhMLj/LCz jOSYfhtrixTuJ6/k8RBLt57t4lpsgq2Iz7Qqa01EIgsCKfm+lAg8L8e3Td0SC7I8 fugf9Z7Kc64BCVOrgk5GY6hm9rN8BWkYm4YxuUI5RwNI4Fiq08V5JmMYgFJWua8F SsqTcNoG+YJzDNFGsQknZLkcTViY4l9gQqxaeXVzThy87ZzA9icBWS7kQvOZ1UYJ 3qfnwZHaKlKvjw== -----END CERTIFICATE-----Generated at Sat Aug 15 05:23:42 2026 by rpki-client