$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: uZt25ANSRfmsDHjWfeOqP9QDjojlRfjEpoqXIRC6DYc= Subject key identifier: F8:F6:1E:59:3A:FA:A0:A0:71:A5:BE:BC:A5:66:1B:E0:C1:F6:31:3A Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019A3421CE414E5109E216477A6394AC6952 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 1704 Signing time: Thu 30 Oct 2025 08:00:21 +0000 Manifest this update: Thu 30 Oct 2025 08:00:21 +0000 Manifest next update: Fri 31 Oct 2025 08:00:21 +0000 Files and hashes: 1: 1-YLitnkBbXXsQAFgwq_VXNT0JiU.roa (hash: AJ3gimUDCGBcWcTGkG9GHuWdzHVsFaaNIwm4c/UaNKI=) 2: EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa (hash: mjozCBG8d8a1a9rxk2/WXOhv1sAeajKVlJoBmpCTphI=) 3: JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa (hash: MfyInY8zOEg6qrPZH5fZlCQbjzWyB7B/O95gOPgwBK8=) 4: JRPXqjHWLaWnIuSL8g9IeICp1DA.roa (hash: 2iPE1VbPS86vB8xHzmkYPiMJ/2pRuAO+4Eo+0e52CUU=) 5: KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa (hash: v+IFmLklJP0SF039aJ72TNFUXKdUB+t1BQfemj0rrwE=) 6: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: e1oZ+cANJXGyfrPvf+5YzdquJVMHr+j5v2+LvVS655s=) 7: PKP5a34KkATdKIYJt-5YPdlCScc.roa (hash: DIduPrIRFwlPmmTvgmnIOUqFQ2p2Urxx9bdsVWJtVNQ=) 8: URdHpLliQS0f_xW89x43dy03NFM.roa (hash: slk/BTTaKKDTHH1yknm1NTv+Ov77fSUjZtooH73b8sg=) 9: gEEujvRXufmsjgTmstu1Zbbnfs0.roa (hash: P5YHH8ETd3YFKeI8j0ogt9xk/9FEVi5SrSm44Y95yWk=) 10: koANhf94Ms7kfxsa0LrqViexTxU.roa (hash: n1usXJi4k9IdIFnEicQPzyVEwnESkffY6S41/7XDahM=) 11: lsyqD2gTgikkDZqsbqed-AvQOFE.roa (hash: 2f7aOq0K3Z5tB/Bm8elLHTKPwyM1VQt3iTAgGQr0kUA=) 12: m-IIE152ao_pZE4Wt42YO_x1XlM.roa (hash: muFT1Obe9mEevORUc6UEy/Cz3RKhk79/nUEvl5PDZM4=) 13: nZHdV3WJYYopwUGJLwL5bZm3VpI.roa (hash: yZFjAsboNvT9P5DWXdZp8gsxk1AZMOxeZfK2Mq9pQEU=) 14: oJy5Ih3Wi9poj-CApp9bi93q2-8.roa (hash: UiKgdsncZ7pajJ8yDf76t7tbkfWUzikpYtARnAAsGHo=) 15: riI-pOFWNLX8839TKqYFfWOwpZ8.roa (hash: fqG5C98P6l1daY/xcAV9OUvehrdtHt6AHPVOzurPOBw=) 16: sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa (hash: btOhuVo5qzp7IyhUfnRzrwSPzaIUCOIvSAfRoFrawl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 31 Oct 2025 08:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:34:21:ce:41:4e:51:09:e2:16:47:7a:63:94:ac:69:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Oct 30 08:00:21 2025 GMT Not After : Oct 31 08:00:21 2025 GMT Subject: CN=f8f61e593afaa0a071a5bebca5661be0c1f6313a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f3:de:b3:3a:15:fe:8c:6e:be:69:57:9a:70: 69:23:55:3f:eb:18:a3:a1:e4:b4:2e:83:04:0f:ef: ed:35:7a:95:b8:6e:ea:80:f9:6f:ee:9c:9a:ca:f0: e3:41:ef:c2:0d:2a:21:9e:f9:13:93:03:29:87:98: 0a:aa:47:89:c0:14:d2:34:1a:d1:06:2c:26:98:9b: bc:3c:f8:5e:e5:46:ad:77:35:ba:fd:fb:05:35:aa: b4:55:aa:06:ef:9a:79:f2:37:e2:7f:c0:1b:fd:3a: 88:63:4b:6c:9f:03:2a:02:6f:13:79:3c:2b:fb:c8: 8b:02:44:a0:a4:d0:ac:a1:4c:8c:70:6a:b1:a7:fe: a5:c6:e2:3b:7f:c3:b4:03:21:b2:e5:cb:90:59:ac: 73:3d:f1:18:14:71:e0:57:77:4e:64:2a:02:1d:57: 1c:11:3e:4b:06:65:03:b8:2a:cd:e2:89:0f:fd:12: 43:85:f2:db:7e:53:89:44:7c:f9:a5:7f:29:e6:df: 3e:ef:3d:d2:49:aa:38:f7:a6:13:db:06:a0:7b:26: 81:6c:e6:8e:c5:c7:2f:1b:a4:d7:69:87:bb:fd:3c: d3:d3:b9:1a:44:3b:53:42:10:7b:f5:49:38:d4:f2: f3:b3:bb:89:7b:79:45:f5:08:fe:91:36:bc:51:7e: aa:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F6:1E:59:3A:FA:A0:A0:71:A5:BE:BC:A5:66:1B:E0:C1:F6:31:3A X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f2:b1:58:1d:a9:61:d8:05:69:c5:58:00:76:6b:1b:c5:48: e0:5b:8c:8f:5d:ac:2c:88:41:db:2c:7f:5a:b2:e1:01:dc:63: c8:6f:55:5e:ee:68:78:8f:eb:d5:38:4f:68:cb:9d:6a:ae:14: e7:0e:52:9d:98:68:92:77:ac:ff:83:b4:94:74:b2:53:d7:a7: 6a:1c:e2:0e:6c:dc:b9:85:e6:e2:b1:f4:30:f1:48:bf:77:02: 4e:8a:e1:12:f3:04:b5:d3:4e:4f:9f:6d:c0:b4:9b:e2:80:25: 18:3f:76:9a:54:e2:22:f2:c3:5d:7b:1d:fe:92:7b:ba:cb:ac: 71:66:af:65:ea:65:98:4c:28:53:24:51:a1:fa:43:17:6d:f1: 32:50:64:e4:b8:de:40:c7:15:8f:0f:66:bb:24:07:6b:82:e1: bc:66:b8:d4:13:f6:76:b0:b4:db:a4:f9:17:58:4c:6d:c2:d5: 43:57:5e:b3:49:6e:05:33:57:cd:3e:1b:c2:95:af:31:6e:2e: 02:6c:82:cd:14:ca:82:61:aa:b8:d6:2f:63:75:cf:3a:d7:1d: 11:08:15:6e:68:6e:76:86:a7:a7:4b:47:24:f0:d1:cc:88:1f: a2:8a:06:db:e4:9f:e3:26:8c:6c:df:aa:82:e2:cc:95:a4:75: f8:91:a3:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZo0Ic5BTlEJ4hZHemOUrGlSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjUxMDMwMDgwMDIxWhcNMjUxMDMxMDgwMDIxWjAzMTEwLwYDVQQD EyhmOGY2MWU1OTNhZmFhMGEwNzFhNWJlYmNhNTY2MWJlMGMxZjYzMTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvPeszoV/oxuvmlXmnBpI1U/6xij oeS0LoMED+/tNXqVuG7qgPlv7pyayvDjQe/CDSohnvkTkwMph5gKqkeJwBTSNBrR BiwmmJu8PPhe5UatdzW6/fsFNaq0VaoG75p58jfif8Ab/TqIY0tsnwMqAm8TeTwr +8iLAkSgpNCsoUyMcGqxp/6lxuI7f8O0AyGy5cuQWaxzPfEYFHHgV3dOZCoCHVcc ET5LBmUDuCrN4okP/RJDhfLbflOJRHz5pX8p5t8+7z3SSao496YT2wageyaBbOaO xccvG6TXaYe7/TzT07kaRDtTQhB79Uk41PLzs7uJe3lF9Qj+kTa8UX6qYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPj2Hlk6+qCgcaW+vKVmG+DB9jE6MB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefKxWB2p YdgFacVYAHZrG8VI4FuMj12sLIhB2yx/WrLhAdxjyG9VXu5oeI/r1ThPaMudaq4U 5w5SnZhoknes/4O0lHSyU9enahziDmzcuYXm4rH0MPFIv3cCTorhEvMEtdNOT59t wLSb4oAlGD92mlTiIvLDXXsd/pJ7ususcWavZeplmEwoUyRRofpDF23xMlBk5Lje QMcVjw9muyQHa4LhvGa41BP2drC026T5F1hMbcLVQ1des0luBTNXzT4bwpWvMW4u AmyCzRTKgmGquNYvY3XPOtcdEQgVbmhudoanp0tHJPDRzIgfoooG2+Sf4yaMbN+q guLMlaR1+JGjLg== -----END CERTIFICATE-----Generated at Thu Oct 30 14:59:08 2025 by rpki-client