$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: VnkX/Ed6Aq99rSzMVAYF6I4RWMtzIcrcmvf+yobhKx8= Subject key identifier: 42:C5:89:B4:A6:62:52:A2:81:9B:27:3B:D6:8E:A6:78:AF:4E:02:FF Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019F91DB2B9914E1C95AF16040077B6C5C41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 19CC Signing time: Fri 24 Jul 2026 02:01:27 +0000 Manifest this update: Fri 24 Jul 2026 02:01:27 +0000 Manifest next update: Sat 25 Jul 2026 02:01:27 +0000 Files and hashes: 1: 5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa (hash: vhWvb47xm9ebRAseLYTwnZU0IPiMDqw3uETfxMC4UbA=) 2: 8dwNjvL9MJgQI0OVV7woi3xWYxI.roa (hash: pvzPPY8ueJkU8NUuAq5vy1y2A7mjLuLyMdlQjovqvLI=) 3: 8ob5FLuOujVhWEOwxv-forDA0cY.roa (hash: 84hMVRMPCF3nYrOl11aBzjK0ugOKjdN5OhtUyw9UGLw=) 4: CL2GMWv6pCXR2_356vc3PKuWXvs.roa (hash: y/dr783gs6j/tPotjhEDFZBriQQscWgnNMDkVNhcMXA=) 5: DUZOtNSDDHj7cC86OP1fzZHoD1Q.roa (hash: sq3RafP/g4VzkIenR5pfY7s3somV9YUfAd4xuK9GhSA=) 6: IebEbuAN9nRUPZFdRs-e4w7Fg5E.roa (hash: jIR1b9upXq/6crre8hwOSTG4cOP8nIdGvBsMPe2V/Ko=) 7: KywvzoRGSfaFf4crg97cyBzKoQg.roa (hash: +zmajVZk3ZJyJBrTV2gOa41M7zLT4z26iJSomfXlFX0=) 8: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: /ihy8hib+MVWdeuyQ7bBc+Jw2OV3HiX8wm7jUQpcAYU=) 9: T6201kaKz2wAhM6zPCN8a023mG8.roa (hash: ahv8z1IDEiRyXew3YyCL7x/GOhwD7Uqtn910nunK2U4=) 10: YOa6NQaDPDJlsrbtADynIa_NyaU.roa (hash: FoktoHEULMwMUIjsscghqSvVAsZbXr6CN7lF5ijkARc=) 11: Zp9zRiO75kWzExNlPmmXxiSiVB8.roa (hash: v83of7u5H6aL+AuW3nStEeiW6yeJITq4WVe1dcQEc/8=) 12: ezMcKD1ocdQnV8_lR3eRy32z5zk.roa (hash: fTetUR020tv6nBRIK7MCA4dwzA33cRIz7jgKMOHo3p8=) 13: gP563nxVMA_mNyBlWZLFCY-wLxE.roa (hash: aJwn1metHDcgL3IPWwXXHA6UIOyTz7dqDhcJZeynSIg=) 14: j2oK7garGa64vPG9Zj-3eHhby28.roa (hash: ZAX94OS32a4+/IR5q/bXkVHeXAeY+w7FlOE25hmdqL0=) 15: n149pV6YzpfmUFYDEF8Zv2819ak.roa (hash: HIRhwpgdeu7PD7ku5LyNlYKbvqN+PW+zocaMcV3HnPg=) 16: yVxkpnNWNPmfLM8KiJbpmmzhscw.roa (hash: wqxbIcyfrK8aJMxY/yMeGWSpob5ZYuT+6YYKdi4r/Pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 02:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:db:2b:99:14:e1:c9:5a:f1:60:40:07:7b:6c:5c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Jul 24 02:01:27 2026 GMT Not After : Jul 25 02:01:27 2026 GMT Subject: CN=42c589b4a66252a2819b273bd68ea678af4e02ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bb:d4:68:b9:16:5a:77:c2:06:d8:76:f8:f2: 09:3e:1c:cc:e5:a5:fc:e7:b0:46:ee:85:dc:49:ca: 98:be:8d:07:46:1c:f3:74:42:58:b6:35:22:95:aa: 24:47:6f:56:ab:19:ce:bd:02:f6:6b:44:95:98:7b: 93:5b:a6:99:67:1d:c9:02:4c:19:d6:01:c7:b5:5e: bb:5e:bd:c8:ef:c2:ac:b9:ef:01:39:f6:b3:82:31: ee:3f:39:31:dd:96:d5:9d:a2:4d:b2:4f:52:36:59: 83:13:9e:c2:72:ca:65:99:87:e1:30:fd:66:a5:7a: 71:d4:7d:53:c7:24:f5:e3:79:50:96:b7:7e:cc:5b: 35:fc:06:8d:bd:33:07:12:8d:56:a8:13:90:74:1f: 9f:62:bd:f3:3c:08:2e:23:5d:98:91:40:f9:47:79: 5a:ab:c0:ad:e0:f3:15:19:10:af:f2:17:b2:68:7e: 44:f7:8f:87:92:2c:97:2a:62:0b:4c:33:9e:4c:06: 16:74:80:38:f3:55:8e:15:67:30:f5:37:78:db:64: 24:b8:64:52:c8:76:70:5b:79:80:d6:92:2b:bc:e4: b1:d1:59:9a:a4:67:a4:18:ab:52:da:51:de:5a:88: 9d:a8:42:63:de:1a:2d:77:97:1d:5d:ab:e2:9f:b6: 7a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C5:89:B4:A6:62:52:A2:81:9B:27:3B:D6:8E:A6:78:AF:4E:02:FF X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:7b:3a:fc:30:7d:c7:8c:81:ad:f3:12:da:be:fe:38:a6:43: a0:df:c2:4c:9b:38:e4:2e:18:20:e4:f4:6d:b5:ee:44:3b:a6: dc:a9:d7:dd:b3:7e:ee:3b:6b:08:3f:dc:06:0a:88:89:f4:04: 3c:64:b6:e5:03:54:2c:5a:12:1e:d8:ee:51:aa:40:84:c1:07: 30:cf:12:aa:a6:2c:2c:93:e5:ea:1d:ea:b2:c9:43:55:16:df: ca:d4:7f:15:cf:0b:13:fb:75:07:df:15:b7:0b:c8:00:21:4b: 6c:68:8d:f1:1a:aa:94:9a:fe:74:53:9e:dd:01:37:b6:e9:af: 44:87:5c:19:5f:09:67:b0:5f:1b:e0:74:ea:8c:30:05:fd:c6: f9:2e:b4:8f:dc:9f:8c:f2:f6:35:03:36:1d:90:f6:6b:79:a8: 0c:39:49:e8:76:67:df:5a:f7:f9:94:43:24:b9:b3:48:a7:85: 5d:fc:bd:6b:2b:08:66:61:fe:52:94:59:a5:3e:be:6a:06:96: e4:69:3a:95:8a:32:90:84:b1:d4:e5:47:5e:15:86:af:5f:f0: 88:41:64:9b:a0:ea:46:6e:23:6e:dc:9c:2f:80:8b:ac:0f:66: 48:df:47:44:5f:84:ec:dd:0f:9e:ca:0b:c9:83:f6:1b:94:5f: 9b:6d:05:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+R2yuZFOHJWvFgQAd7bFxBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYwNzI0MDIwMTI3WhcNMjYwNzI1MDIwMTI3WjAzMTEwLwYDVQQD Eyg0MmM1ODliNGE2NjI1MmEyODE5YjI3M2JkNjhlYTY3OGFmNGUwMmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLvUaLkWWnfCBth2+PIJPhzM5aX8 57BG7oXcScqYvo0HRhzzdEJYtjUilaokR29WqxnOvQL2a0SVmHuTW6aZZx3JAkwZ 1gHHtV67Xr3I78Ksue8BOfazgjHuPzkx3ZbVnaJNsk9SNlmDE57CcsplmYfhMP1m pXpx1H1TxyT143lQlrd+zFs1/AaNvTMHEo1WqBOQdB+fYr3zPAguI12YkUD5R3la q8Ct4PMVGRCv8heyaH5E94+HkiyXKmILTDOeTAYWdIA481WOFWcw9Td422QkuGRS yHZwW3mA1pIrvOSx0VmapGekGKtS2lHeWoidqEJj3hotd5cdXavin7Z69wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELFibSmYlKigZsnO9aOpnivTgL/MB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3s6/DB9 x4yBrfMS2r7+OKZDoN/CTJs45C4YIOT0bbXuRDum3KnX3bN+7jtrCD/cBgqIifQE PGS25QNULFoSHtjuUapAhMEHMM8SqqYsLJPl6h3qsslDVRbfytR/Fc8LE/t1B98V twvIACFLbGiN8RqqlJr+dFOe3QE3tumvRIdcGV8JZ7BfG+B06owwBf3G+S60j9yf jPL2NQM2HZD2a3moDDlJ6HZn31r3+ZRDJLmzSKeFXfy9aysIZmH+UpRZpT6+agaW 5Gk6lYoykISx1OVHXhWGr1/wiEFkm6DqRm4jbtycL4CLrA9mSN9HRF+E7N0PnsoL yYP2G5Rfm20FZw== -----END CERTIFICATE-----Generated at Fri Jul 24 11:56:55 2026 by rpki-client