$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: GJ4ibJ1KLy4kVLMj/KGpCfIDoekSj0TjGBcGaABT8us= Subject key identifier: 91:AD:B5:75:82:01:73:B3:15:89:97:F1:72:5A:73:A3:05:AA:85:5E Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 0199FC214C2BD96DE8F42E740D6082962FB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 16E7 Signing time: Sun 19 Oct 2025 11:01:04 +0000 Manifest this update: Sun 19 Oct 2025 11:01:04 +0000 Manifest next update: Mon 20 Oct 2025 11:01:04 +0000 Files and hashes: 1: 1-YLitnkBbXXsQAFgwq_VXNT0JiU.roa (hash: AJ3gimUDCGBcWcTGkG9GHuWdzHVsFaaNIwm4c/UaNKI=) 2: EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa (hash: mjozCBG8d8a1a9rxk2/WXOhv1sAeajKVlJoBmpCTphI=) 3: JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa (hash: MfyInY8zOEg6qrPZH5fZlCQbjzWyB7B/O95gOPgwBK8=) 4: JRPXqjHWLaWnIuSL8g9IeICp1DA.roa (hash: 2iPE1VbPS86vB8xHzmkYPiMJ/2pRuAO+4Eo+0e52CUU=) 5: KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa (hash: v+IFmLklJP0SF039aJ72TNFUXKdUB+t1BQfemj0rrwE=) 6: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: Ln0iOP2/Shr8ORZUlq8bo9xe/6RypSHJblbj77FlQNA=) 7: PKP5a34KkATdKIYJt-5YPdlCScc.roa (hash: DIduPrIRFwlPmmTvgmnIOUqFQ2p2Urxx9bdsVWJtVNQ=) 8: URdHpLliQS0f_xW89x43dy03NFM.roa (hash: slk/BTTaKKDTHH1yknm1NTv+Ov77fSUjZtooH73b8sg=) 9: gEEujvRXufmsjgTmstu1Zbbnfs0.roa (hash: P5YHH8ETd3YFKeI8j0ogt9xk/9FEVi5SrSm44Y95yWk=) 10: koANhf94Ms7kfxsa0LrqViexTxU.roa (hash: n1usXJi4k9IdIFnEicQPzyVEwnESkffY6S41/7XDahM=) 11: lsyqD2gTgikkDZqsbqed-AvQOFE.roa (hash: 2f7aOq0K3Z5tB/Bm8elLHTKPwyM1VQt3iTAgGQr0kUA=) 12: m-IIE152ao_pZE4Wt42YO_x1XlM.roa (hash: muFT1Obe9mEevORUc6UEy/Cz3RKhk79/nUEvl5PDZM4=) 13: nZHdV3WJYYopwUGJLwL5bZm3VpI.roa (hash: yZFjAsboNvT9P5DWXdZp8gsxk1AZMOxeZfK2Mq9pQEU=) 14: oJy5Ih3Wi9poj-CApp9bi93q2-8.roa (hash: UiKgdsncZ7pajJ8yDf76t7tbkfWUzikpYtARnAAsGHo=) 15: riI-pOFWNLX8839TKqYFfWOwpZ8.roa (hash: fqG5C98P6l1daY/xcAV9OUvehrdtHt6AHPVOzurPOBw=) 16: sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa (hash: btOhuVo5qzp7IyhUfnRzrwSPzaIUCOIvSAfRoFrawl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:4c:2b:d9:6d:e8:f4:2e:74:0d:60:82:96:2f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Oct 19 11:01:04 2025 GMT Not After : Oct 20 11:01:04 2025 GMT Subject: CN=91adb575820173b3158997f1725a73a305aa855e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:33:d3:61:99:99:48:23:ed:48:43:12:b4:cb: c6:bb:7b:f7:ce:38:ac:7b:3f:e0:14:40:6a:46:4c: 1b:4a:c8:a7:d9:07:49:a5:86:62:d3:da:a3:78:aa: 79:4d:0a:72:5a:f5:cc:99:0c:b1:98:60:28:57:ee: 19:13:3a:e5:3e:08:4f:21:ef:09:2c:83:70:a8:e7: 5e:42:46:0b:97:64:d5:c6:0f:71:d0:62:48:c2:eb: 63:f4:ec:dd:c3:da:bf:24:3a:86:25:bf:28:90:7f: 40:5b:46:78:54:a3:53:1c:7a:18:27:04:95:4e:79: 68:b3:73:d2:f3:07:62:56:59:0c:a3:d5:fb:00:eb: 0b:a5:3b:af:86:26:20:a7:0a:fe:7a:7a:f1:4f:7a: e4:56:a5:75:a5:a5:b4:26:4e:ef:10:7b:29:5e:26: 0f:61:a2:29:43:84:dd:63:22:17:15:4e:05:db:05: 84:1a:77:0e:05:2c:ab:9c:ec:48:94:f1:0c:e4:ce: 32:86:4d:a0:e7:70:a5:91:ec:4e:e0:3c:84:af:1c: 74:a1:8a:34:0f:6f:f1:2c:7a:c9:66:01:76:f4:52: 9d:4b:59:bd:0e:62:58:09:42:92:47:3c:ad:bb:dd: 8b:f1:b7:27:cd:cb:ca:06:8d:bc:5d:9e:d2:aa:ee: aa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AD:B5:75:82:01:73:B3:15:89:97:F1:72:5A:73:A3:05:AA:85:5E X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:b4:3e:75:10:50:d4:f0:db:c3:90:08:88:46:c0:b6:7e:28: d7:7e:1c:5d:27:02:02:e7:cd:90:16:e7:c0:0f:f4:d0:87:12: de:03:82:42:6b:21:de:f7:c5:78:79:bc:9c:8c:f1:3b:b4:20: 2e:a1:ce:47:6e:31:20:ee:5b:17:ee:a2:dd:da:60:10:f3:10: 46:6b:be:de:03:07:ba:7a:c8:fd:52:17:20:a1:74:5e:ab:18: 6f:06:c3:ec:ca:11:66:9b:58:90:05:7a:7e:ba:73:c6:01:a5: ed:de:af:0e:6a:ce:6b:cc:de:5e:17:c0:10:db:b5:94:f4:b2: b1:32:de:c1:9e:b6:46:49:41:e9:7a:4e:05:0e:20:0a:70:a1: 9f:c7:13:14:c8:3d:2f:5f:0e:72:f4:6e:39:af:51:70:e1:fb: 1f:f5:fa:ad:ae:25:00:6e:47:42:41:41:08:6d:57:ad:28:48: 21:b8:a4:34:b7:4a:7d:71:28:bc:af:02:36:48:f6:7d:f1:3e: ed:8a:2b:be:87:ee:ec:cc:32:1e:85:9d:08:a9:af:df:d8:f6: 11:bb:c8:3a:02:17:48:3d:13:01:26:44:ab:f6:8f:fa:24:fc: 60:d5:c0:8a:2e:bb:f9:6b:eb:d8:7a:01:51:7a:c4:08:17:65: 40:ee:85:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IUwr2W3o9C50DWCCli+1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjUxMDE5MTEwMTA0WhcNMjUxMDIwMTEwMTA0WjAzMTEwLwYDVQQD Eyg5MWFkYjU3NTgyMDE3M2IzMTU4OTk3ZjE3MjVhNzNhMzA1YWE4NTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjPTYZmZSCPtSEMStMvGu3v3zjis ez/gFEBqRkwbSsin2QdJpYZi09qjeKp5TQpyWvXMmQyxmGAoV+4ZEzrlPghPIe8J LINwqOdeQkYLl2TVxg9x0GJIwutj9Ozdw9q/JDqGJb8okH9AW0Z4VKNTHHoYJwSV Tnlos3PS8wdiVlkMo9X7AOsLpTuvhiYgpwr+enrxT3rkVqV1paW0Jk7vEHspXiYP YaIpQ4TdYyIXFU4F2wWEGncOBSyrnOxIlPEM5M4yhk2g53ClkexO4DyErxx0oYo0 D2/xLHrJZgF29FKdS1m9DmJYCUKSRzytu92L8bcnzcvKBo28XZ7Squ6q+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGttXWCAXOzFYmX8XJac6MFqoVeMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibQ+dRBQ 1PDbw5AIiEbAtn4o134cXScCAufNkBbnwA/00IcS3gOCQmsh3vfFeHm8nIzxO7Qg LqHOR24xIO5bF+6i3dpgEPMQRmu+3gMHunrI/VIXIKF0XqsYbwbD7MoRZptYkAV6 frpzxgGl7d6vDmrOa8zeXhfAENu1lPSysTLewZ62RklB6XpOBQ4gCnChn8cTFMg9 L18OcvRuOa9RcOH7H/X6ra4lAG5HQkFBCG1XrShIIbikNLdKfXEovK8CNkj2ffE+ 7Yorvofu7MwyHoWdCKmv39j2EbvIOgIXSD0TASZEq/aP+iT8YNXAii67+Wvr2HoB UXrECBdlQO6FXA== -----END CERTIFICATE-----Generated at Sun Oct 19 20:31:40 2025 by rpki-client