$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: NxsnR9KIc+9olpsIOAQFSlQ73ZDAMJX8jUMJrp72VK4= Subject key identifier: 98:0B:F8:34:F7:1A:E3:64:FF:2A:D6:03:56:0D:05:2C:8C:A1:B2:F4 Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019D2BBCC55974DB6521FC887ABBE7E6087E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 188E Signing time: Thu 26 Mar 2026 20:01:24 +0000 Manifest this update: Thu 26 Mar 2026 20:01:24 +0000 Manifest next update: Fri 27 Mar 2026 20:01:24 +0000 Files and hashes: 1: 5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa (hash: vhWvb47xm9ebRAseLYTwnZU0IPiMDqw3uETfxMC4UbA=) 2: 8dwNjvL9MJgQI0OVV7woi3xWYxI.roa (hash: pvzPPY8ueJkU8NUuAq5vy1y2A7mjLuLyMdlQjovqvLI=) 3: 8ob5FLuOujVhWEOwxv-forDA0cY.roa (hash: 84hMVRMPCF3nYrOl11aBzjK0ugOKjdN5OhtUyw9UGLw=) 4: CL2GMWv6pCXR2_356vc3PKuWXvs.roa (hash: y/dr783gs6j/tPotjhEDFZBriQQscWgnNMDkVNhcMXA=) 5: DUZOtNSDDHj7cC86OP1fzZHoD1Q.roa (hash: sq3RafP/g4VzkIenR5pfY7s3somV9YUfAd4xuK9GhSA=) 6: IebEbuAN9nRUPZFdRs-e4w7Fg5E.roa (hash: jIR1b9upXq/6crre8hwOSTG4cOP8nIdGvBsMPe2V/Ko=) 7: KywvzoRGSfaFf4crg97cyBzKoQg.roa (hash: +zmajVZk3ZJyJBrTV2gOa41M7zLT4z26iJSomfXlFX0=) 8: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: yQMSZVGJ7FTD5KZI8MMo72UZ8HWdMOep6IjYwuprX1M=) 9: T6201kaKz2wAhM6zPCN8a023mG8.roa (hash: ahv8z1IDEiRyXew3YyCL7x/GOhwD7Uqtn910nunK2U4=) 10: YOa6NQaDPDJlsrbtADynIa_NyaU.roa (hash: FoktoHEULMwMUIjsscghqSvVAsZbXr6CN7lF5ijkARc=) 11: Zp9zRiO75kWzExNlPmmXxiSiVB8.roa (hash: v83of7u5H6aL+AuW3nStEeiW6yeJITq4WVe1dcQEc/8=) 12: ezMcKD1ocdQnV8_lR3eRy32z5zk.roa (hash: fTetUR020tv6nBRIK7MCA4dwzA33cRIz7jgKMOHo3p8=) 13: gP563nxVMA_mNyBlWZLFCY-wLxE.roa (hash: aJwn1metHDcgL3IPWwXXHA6UIOyTz7dqDhcJZeynSIg=) 14: j2oK7garGa64vPG9Zj-3eHhby28.roa (hash: ZAX94OS32a4+/IR5q/bXkVHeXAeY+w7FlOE25hmdqL0=) 15: n149pV6YzpfmUFYDEF8Zv2819ak.roa (hash: HIRhwpgdeu7PD7ku5LyNlYKbvqN+PW+zocaMcV3HnPg=) 16: yVxkpnNWNPmfLM8KiJbpmmzhscw.roa (hash: wqxbIcyfrK8aJMxY/yMeGWSpob5ZYuT+6YYKdi4r/Pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 16:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2b:bc:c5:59:74:db:65:21:fc:88:7a:bb:e7:e6:08:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Mar 26 20:01:24 2026 GMT Not After : Mar 27 20:01:24 2026 GMT Subject: CN=980bf834f71ae364ff2ad603560d052c8ca1b2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5b:d5:23:54:44:bd:20:30:23:c6:77:08:27: 57:a4:fd:d7:de:22:b6:a4:40:07:67:13:ec:73:c1: 0d:11:18:c2:ef:5d:62:26:df:79:ff:7a:02:3a:40: 0a:75:22:4a:75:30:dd:7d:05:b4:79:88:1f:59:18: d4:d2:cd:73:bd:45:d1:69:0c:72:07:42:90:b4:41: e5:41:55:c9:08:bd:86:54:0e:be:71:cc:bd:9a:81: a9:b6:a5:f1:1f:24:9c:71:22:24:3a:68:47:d3:7f: 65:36:ed:69:2c:48:69:81:72:69:d2:a4:84:58:1f: fe:fd:ed:10:01:23:c5:7d:02:65:10:91:a3:bb:e8: 5a:53:ed:50:60:00:f1:3a:e5:c0:35:7f:aa:2b:08: 89:86:a1:56:f1:c7:00:25:0a:d1:7a:27:09:7f:7c: 58:ba:85:07:fd:62:6a:ef:01:5d:43:28:22:bd:b3: 62:56:d4:07:28:8e:c7:66:bc:f3:06:b3:df:bb:81: b5:2f:04:1d:be:4a:c3:76:7b:51:4b:77:dc:77:92: cc:d8:c1:fb:86:72:73:fe:8f:06:b3:69:2a:a5:8d: 0d:fe:fa:47:ed:33:6b:2c:eb:d6:0f:34:42:e0:78: 27:38:8e:27:4c:6e:6d:81:3a:97:bc:93:70:6e:a9: d0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0B:F8:34:F7:1A:E3:64:FF:2A:D6:03:56:0D:05:2C:8C:A1:B2:F4 X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:39:d0:d9:a8:b1:5e:c4:ef:30:70:e2:f1:7f:b4:cf:aa:37: e3:2d:65:f1:20:1f:e4:05:5b:2b:fe:82:e7:0d:49:db:c5:1c: 43:91:10:c9:37:99:ed:74:08:d2:24:69:ad:78:5c:b5:18:5a: 67:d5:1e:e9:cf:51:10:ba:19:b8:37:58:67:ca:d7:e7:d9:1d: 8e:21:a5:8d:1d:86:9a:e9:94:d0:92:02:37:7e:b2:4b:1c:31: e5:8b:11:25:93:eb:d2:b6:71:04:26:ee:1e:4c:f3:ef:2c:bb: 1f:4b:d9:ff:d8:6a:71:6f:b1:35:39:d2:78:b8:12:b6:6a:f0: 30:48:ee:ac:fd:d1:a1:70:dc:07:c7:88:f5:af:3e:9c:7c:51: 9b:cc:89:49:dc:0d:7d:f5:e3:90:9f:91:7e:2f:90:9e:71:fb: 52:f5:01:b3:1a:7c:ca:b1:cf:51:53:6d:b4:25:ba:90:67:2d: b5:8e:fa:97:2f:15:64:a7:5c:3e:66:2e:e7:38:a2:54:9e:d5: a9:e5:29:fd:7e:f8:8d:87:b7:05:f8:09:2e:dd:0a:6b:60:74: a7:ba:4f:b7:04:01:32:0c:e7:18:21:99:01:83:cd:df:ed:bd: 44:e5:ad:7f:97:09:be:59:43:15:b3:51:c5:1a:26:2f:c1:a2: f0:27:22:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0rvMVZdNtlIfyIervn5gh+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYwMzI2MjAwMTI0WhcNMjYwMzI3MjAwMTI0WjAzMTEwLwYDVQQD Eyg5ODBiZjgzNGY3MWFlMzY0ZmYyYWQ2MDM1NjBkMDUyYzhjYTFiMmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFvVI1REvSAwI8Z3CCdXpP3X3iK2 pEAHZxPsc8ENERjC711iJt95/3oCOkAKdSJKdTDdfQW0eYgfWRjU0s1zvUXRaQxy B0KQtEHlQVXJCL2GVA6+ccy9moGptqXxHySccSIkOmhH039lNu1pLEhpgXJp0qSE WB/+/e0QASPFfQJlEJGju+haU+1QYADxOuXANX+qKwiJhqFW8ccAJQrReicJf3xY uoUH/WJq7wFdQygivbNiVtQHKI7HZrzzBrPfu4G1LwQdvkrDdntRS3fcd5LM2MH7 hnJz/o8Gs2kqpY0N/vpH7TNrLOvWDzRC4HgnOI4nTG5tgTqXvJNwbqnQwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgL+DT3GuNk/yrWA1YNBSyMobL0MB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjnQ2aix XsTvMHDi8X+0z6o34y1l8SAf5AVbK/6C5w1J28UcQ5EQyTeZ7XQI0iRprXhctRha Z9Ue6c9RELoZuDdYZ8rX59kdjiGljR2GmumU0JICN36ySxwx5YsRJZPr0rZxBCbu Hkzz7yy7H0vZ/9hqcW+xNTnSeLgStmrwMEjurP3RoXDcB8eI9a8+nHxRm8yJSdwN ffXjkJ+Rfi+QnnH7UvUBsxp8yrHPUVNttCW6kGcttY76ly8VZKdcPmYu5ziiVJ7V qeUp/X74jYe3BfgJLt0Ka2B0p7pPtwQBMgznGCGZAYPN3+29ROWtf5cJvllDFbNR xRomL8Gi8CciQQ== -----END CERTIFICATE-----Generated at Thu Mar 26 23:51:48 2026 by rpki-client