$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: NAOpqk9/L1GYca00XwdyaIWKTDIDaKBBFotYVf5hNTg= Subject key identifier: 2B:06:CE:31:EF:E3:E8:45:D8:A2:D6:A3:45:39:6F:2B:EA:EC:E8:38 Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 0197BE90D0FABAE4CB6D5D9448097D9DBD9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 15BE Signing time: Mon 30 Jun 2025 02:00:50 +0000 Manifest this update: Mon 30 Jun 2025 02:00:50 +0000 Manifest next update: Tue 01 Jul 2025 02:00:50 +0000 Files and hashes: 1: 1-YLitnkBbXXsQAFgwq_VXNT0JiU.roa (hash: AJ3gimUDCGBcWcTGkG9GHuWdzHVsFaaNIwm4c/UaNKI=) 2: EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa (hash: mjozCBG8d8a1a9rxk2/WXOhv1sAeajKVlJoBmpCTphI=) 3: JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa (hash: MfyInY8zOEg6qrPZH5fZlCQbjzWyB7B/O95gOPgwBK8=) 4: JRPXqjHWLaWnIuSL8g9IeICp1DA.roa (hash: 2iPE1VbPS86vB8xHzmkYPiMJ/2pRuAO+4Eo+0e52CUU=) 5: KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa (hash: v+IFmLklJP0SF039aJ72TNFUXKdUB+t1BQfemj0rrwE=) 6: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: OiSlH3nritFgu5kS2qwoRHQY6WRQ3QETER5tyMB/Z4Y=) 7: PKP5a34KkATdKIYJt-5YPdlCScc.roa (hash: DIduPrIRFwlPmmTvgmnIOUqFQ2p2Urxx9bdsVWJtVNQ=) 8: URdHpLliQS0f_xW89x43dy03NFM.roa (hash: slk/BTTaKKDTHH1yknm1NTv+Ov77fSUjZtooH73b8sg=) 9: gEEujvRXufmsjgTmstu1Zbbnfs0.roa (hash: P5YHH8ETd3YFKeI8j0ogt9xk/9FEVi5SrSm44Y95yWk=) 10: koANhf94Ms7kfxsa0LrqViexTxU.roa (hash: n1usXJi4k9IdIFnEicQPzyVEwnESkffY6S41/7XDahM=) 11: lsyqD2gTgikkDZqsbqed-AvQOFE.roa (hash: 2f7aOq0K3Z5tB/Bm8elLHTKPwyM1VQt3iTAgGQr0kUA=) 12: m-IIE152ao_pZE4Wt42YO_x1XlM.roa (hash: muFT1Obe9mEevORUc6UEy/Cz3RKhk79/nUEvl5PDZM4=) 13: nZHdV3WJYYopwUGJLwL5bZm3VpI.roa (hash: yZFjAsboNvT9P5DWXdZp8gsxk1AZMOxeZfK2Mq9pQEU=) 14: oJy5Ih3Wi9poj-CApp9bi93q2-8.roa (hash: UiKgdsncZ7pajJ8yDf76t7tbkfWUzikpYtARnAAsGHo=) 15: riI-pOFWNLX8839TKqYFfWOwpZ8.roa (hash: fqG5C98P6l1daY/xcAV9OUvehrdtHt6AHPVOzurPOBw=) 16: sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa (hash: btOhuVo5qzp7IyhUfnRzrwSPzaIUCOIvSAfRoFrawl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:be:90:d0:fa:ba:e4:cb:6d:5d:94:48:09:7d:9d:bd:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Jun 30 02:00:50 2025 GMT Not After : Jul 1 02:00:50 2025 GMT Subject: CN=2b06ce31efe3e845d8a2d6a345396f2beaece838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a1:28:52:63:93:e2:2d:d4:f3:0f:22:45:09: 13:6c:95:21:6b:29:ee:1b:0e:14:2a:32:27:6b:55: dd:d4:ea:0d:6a:9b:11:ad:cf:f4:80:6e:7b:52:12: b5:74:13:74:4b:f3:37:36:fe:f4:a2:0b:9d:8a:3c: e0:42:b3:b1:89:4a:fd:b3:db:0d:2d:8f:97:9f:79: 11:7b:13:aa:48:10:72:d1:b6:cd:56:b0:13:e8:29: 5d:05:cb:6c:87:e6:e4:58:37:06:55:2a:86:c6:69: d1:55:fc:be:d8:94:06:b8:46:26:cf:39:6e:ac:11: 31:1a:61:7e:db:fd:c8:a9:dc:14:4c:70:cc:1c:8e: 88:e6:f6:cd:0c:84:7d:b9:29:a9:56:47:25:5b:d5: 6b:a8:76:91:b2:cf:32:fa:a5:fe:b7:20:cc:dd:70: a2:e4:41:e8:87:a0:77:36:fe:dc:e9:54:01:67:67: 4a:11:a5:a7:8e:50:56:59:ba:ed:ce:50:4f:33:30: 57:b1:0c:42:5a:b5:09:f4:8f:8b:5b:f4:b8:90:6d: ea:f5:55:1b:0a:53:52:21:12:8a:68:fe:d6:5b:10: ae:29:08:54:90:b2:4f:17:d9:0a:f1:60:b0:ae:59: 01:b8:81:29:27:ae:a3:22:b5:35:b0:1e:6d:89:57: 61:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:06:CE:31:EF:E3:E8:45:D8:A2:D6:A3:45:39:6F:2B:EA:EC:E8:38 X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1e:89:77:46:f5:68:54:d9:d8:6c:09:d4:4b:9e:43:74:a9: 4b:96:30:44:e9:6b:5d:99:93:a0:0a:c5:d6:30:96:fb:fa:7e: 32:a6:31:7f:bf:30:0f:01:1c:43:67:8d:5f:da:8e:f9:29:b8: 5c:fe:fd:8d:8b:f2:11:9e:3b:ee:44:6f:b6:70:b1:d2:72:ab: 84:27:a8:82:5c:e9:b4:35:84:4f:4b:6f:b9:6c:8d:69:84:51: e8:68:57:cd:52:1c:f2:fc:be:a3:86:80:39:2e:80:07:be:12: 7d:34:73:e8:40:d8:e9:de:4b:68:18:48:67:fc:bb:de:b5:35: 6c:8f:d5:8a:40:2d:cf:09:3e:2f:94:92:fd:81:b1:05:ae:a6: bf:1f:16:3a:03:c5:0f:db:51:db:67:b4:b4:26:d8:af:ee:ea: 4e:2c:66:7e:f4:dd:32:48:3a:37:fa:c0:52:2c:1a:a4:20:b4: 7d:5a:90:73:5f:9e:4a:88:b5:cd:36:e7:97:1e:ca:04:9e:f4: 26:82:5e:86:bb:9f:1e:48:d3:53:ae:cc:ef:96:32:47:33:85: 6e:64:bd:a1:20:f7:0e:cd:94:25:34:1c:96:40:dd:98:c8:a2: 28:2e:3a:c2:b0:a2:7e:88:ef:49:d8:f2:4a:cc:2e:af:55:ae: 1b:d3:bc:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe+kND6uuTLbV2USAl9nb2eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjUwNjMwMDIwMDUwWhcNMjUwNzAxMDIwMDUwWjAzMTEwLwYDVQQD EygyYjA2Y2UzMWVmZTNlODQ1ZDhhMmQ2YTM0NTM5NmYyYmVhZWNlODM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqEoUmOT4i3U8w8iRQkTbJUhaynu Gw4UKjIna1Xd1OoNapsRrc/0gG57UhK1dBN0S/M3Nv70ogudijzgQrOxiUr9s9sN LY+Xn3kRexOqSBBy0bbNVrAT6CldBctsh+bkWDcGVSqGxmnRVfy+2JQGuEYmzzlu rBExGmF+2/3IqdwUTHDMHI6I5vbNDIR9uSmpVkclW9VrqHaRss8y+qX+tyDM3XCi 5EHoh6B3Nv7c6VQBZ2dKEaWnjlBWWbrtzlBPMzBXsQxCWrUJ9I+LW/S4kG3q9VUb ClNSIRKKaP7WWxCuKQhUkLJPF9kK8WCwrlkBuIEpJ66jIrU1sB5tiVdhXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsGzjHv4+hF2KLWo0U5byvq7Og4MB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADB6Jd0b1 aFTZ2GwJ1EueQ3SpS5YwROlrXZmToArF1jCW+/p+MqYxf78wDwEcQ2eNX9qO+Sm4 XP79jYvyEZ477kRvtnCx0nKrhCeoglzptDWET0tvuWyNaYRR6GhXzVIc8vy+o4aA OS6AB74SfTRz6EDY6d5LaBhIZ/y73rU1bI/VikAtzwk+L5SS/YGxBa6mvx8WOgPF D9tR22e0tCbYr+7qTixmfvTdMkg6N/rAUiwapCC0fVqQc1+eSoi1zTbnlx7KBJ70 JoJehrufHkjTU67M75YyRzOFbmS9oSD3Ds2UJTQclkDdmMiiKC46wrCifojvSdjy Sswur1WuG9O8DQ== -----END CERTIFICATE-----Generated at Mon Jun 30 12:29:41 2025 by rpki-client