$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: Id+29nr86GqhJmSbr61QVjoKkSadneDMPAbe+aICOCU= Subject key identifier: 5D:DF:FE:F1:0C:26:A5:48:17:6F:20:98:9C:9A:B6:23:69:88:B2:06 Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 0198D4A7BCEDF05D45BEA3A73CBCBA64A4E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 164E Signing time: Sat 23 Aug 2025 02:00:19 +0000 Manifest this update: Sat 23 Aug 2025 02:00:19 +0000 Manifest next update: Sun 24 Aug 2025 02:00:19 +0000 Files and hashes: 1: 1-YLitnkBbXXsQAFgwq_VXNT0JiU.roa (hash: AJ3gimUDCGBcWcTGkG9GHuWdzHVsFaaNIwm4c/UaNKI=) 2: EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa (hash: mjozCBG8d8a1a9rxk2/WXOhv1sAeajKVlJoBmpCTphI=) 3: JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa (hash: MfyInY8zOEg6qrPZH5fZlCQbjzWyB7B/O95gOPgwBK8=) 4: JRPXqjHWLaWnIuSL8g9IeICp1DA.roa (hash: 2iPE1VbPS86vB8xHzmkYPiMJ/2pRuAO+4Eo+0e52CUU=) 5: KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa (hash: v+IFmLklJP0SF039aJ72TNFUXKdUB+t1BQfemj0rrwE=) 6: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: y0ILEeZMJUuPD9x8PyOqFasTzTw1mhpXXfR23tKN3eM=) 7: PKP5a34KkATdKIYJt-5YPdlCScc.roa (hash: DIduPrIRFwlPmmTvgmnIOUqFQ2p2Urxx9bdsVWJtVNQ=) 8: URdHpLliQS0f_xW89x43dy03NFM.roa (hash: slk/BTTaKKDTHH1yknm1NTv+Ov77fSUjZtooH73b8sg=) 9: gEEujvRXufmsjgTmstu1Zbbnfs0.roa (hash: P5YHH8ETd3YFKeI8j0ogt9xk/9FEVi5SrSm44Y95yWk=) 10: koANhf94Ms7kfxsa0LrqViexTxU.roa (hash: n1usXJi4k9IdIFnEicQPzyVEwnESkffY6S41/7XDahM=) 11: lsyqD2gTgikkDZqsbqed-AvQOFE.roa (hash: 2f7aOq0K3Z5tB/Bm8elLHTKPwyM1VQt3iTAgGQr0kUA=) 12: m-IIE152ao_pZE4Wt42YO_x1XlM.roa (hash: muFT1Obe9mEevORUc6UEy/Cz3RKhk79/nUEvl5PDZM4=) 13: nZHdV3WJYYopwUGJLwL5bZm3VpI.roa (hash: yZFjAsboNvT9P5DWXdZp8gsxk1AZMOxeZfK2Mq9pQEU=) 14: oJy5Ih3Wi9poj-CApp9bi93q2-8.roa (hash: UiKgdsncZ7pajJ8yDf76t7tbkfWUzikpYtARnAAsGHo=) 15: riI-pOFWNLX8839TKqYFfWOwpZ8.roa (hash: fqG5C98P6l1daY/xcAV9OUvehrdtHt6AHPVOzurPOBw=) 16: sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa (hash: btOhuVo5qzp7IyhUfnRzrwSPzaIUCOIvSAfRoFrawl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:a7:bc:ed:f0:5d:45:be:a3:a7:3c:bc:ba:64:a4:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Aug 23 02:00:19 2025 GMT Not After : Aug 24 02:00:19 2025 GMT Subject: CN=5ddffef10c26a548176f20989c9ab6236988b206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dd:25:d6:48:94:9d:89:8c:c1:20:b3:88:07: 97:c1:05:2a:0b:13:88:c9:5a:13:fb:d8:bd:15:0e: 6e:ff:46:29:6b:2a:98:0e:c9:6c:cc:24:c3:8c:d8: ec:77:c6:ac:eb:d8:45:a5:5f:c4:99:64:ab:68:de: 2c:1e:ed:8a:a0:2c:25:a5:fd:be:94:be:64:dd:ee: e5:c1:03:35:68:0d:d6:e9:a6:db:b2:fe:c7:c3:6b: c0:ed:c4:93:67:6d:05:f7:46:64:80:7e:f9:7c:5d: be:7c:5b:26:b1:cc:03:23:c7:e3:4e:22:c7:74:a3: c5:71:35:9e:c7:2a:c4:1c:dd:7d:d9:6e:b4:4e:ac: 23:5f:ff:fe:eb:b4:1a:79:0a:d6:3c:0d:25:b9:9d: 5d:be:a4:8d:96:03:b0:fb:ff:58:46:e9:14:bc:87: 60:40:ec:eb:38:1d:75:19:8d:31:c2:4c:4b:d6:ea: 25:f2:3e:c6:9b:3b:65:7e:ee:c5:7a:29:56:d2:ff: 53:c6:4c:38:1d:e7:19:6c:85:0b:d0:1f:19:68:c3: 7d:7a:85:2e:b7:0f:3e:49:8c:bf:55:b9:f6:7d:e6: 9d:f5:bc:51:f9:00:43:4d:63:6d:00:d7:8a:5c:6d: 01:ef:93:45:a5:52:00:27:08:48:ea:be:a4:5a:d5: a2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DF:FE:F1:0C:26:A5:48:17:6F:20:98:9C:9A:B6:23:69:88:B2:06 X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f6:d8:7e:e4:69:b0:7a:24:88:21:6b:28:57:9e:97:d8:b9: c4:32:2c:58:58:7c:4d:d0:26:0e:9e:17:4d:e5:4d:3e:d1:a1: ad:d3:7c:b3:48:95:ea:88:58:af:93:3d:d8:8a:79:c1:3d:d3: 08:1b:a1:6b:a3:a7:37:38:47:3a:19:57:68:11:5c:7e:e0:f3: 31:72:cb:77:ba:4a:ae:da:4d:cb:c7:41:1a:fb:94:41:3f:7e: 89:40:c0:62:3a:7e:d8:c7:f1:30:37:cf:ac:f7:d5:69:79:87: 17:13:84:ac:bd:71:9a:c1:01:0e:ef:70:05:b2:03:f7:98:e4: f8:82:2f:ae:cf:56:65:c8:ad:4c:4f:37:7c:56:01:f5:38:48: 5f:71:cb:30:fa:8e:63:c3:16:f1:ba:81:ee:43:6c:c2:9b:e6: 62:d2:00:d8:f4:c7:f4:11:fc:5f:d5:57:30:4d:b7:8e:5c:8f: e2:20:99:90:8a:9a:c1:01:7a:8f:db:b1:93:2d:12:bf:d0:28: 72:93:00:8b:f4:7e:0c:79:b3:9c:6f:a4:3a:db:bd:17:e2:e0: bc:32:8e:14:9f:0d:f6:c4:74:27:9d:47:2d:8c:71:ae:73:6c: 94:dc:1a:66:7b:77:23:ac:ce:3e:85:1a:14:aa:35:29:70:0b: 6b:3a:ad:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUp7zt8F1FvqOnPLy6ZKTmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjUwODIzMDIwMDE5WhcNMjUwODI0MDIwMDE5WjAzMTEwLwYDVQQD Eyg1ZGRmZmVmMTBjMjZhNTQ4MTc2ZjIwOTg5YzlhYjYyMzY5ODhiMjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd0l1kiUnYmMwSCziAeXwQUqCxOI yVoT+9i9FQ5u/0YpayqYDslszCTDjNjsd8as69hFpV/EmWSraN4sHu2KoCwlpf2+ lL5k3e7lwQM1aA3W6abbsv7Hw2vA7cSTZ20F90ZkgH75fF2+fFsmscwDI8fjTiLH dKPFcTWexyrEHN192W60TqwjX//+67QaeQrWPA0luZ1dvqSNlgOw+/9YRukUvIdg QOzrOB11GY0xwkxL1uol8j7Gmztlfu7FeilW0v9Txkw4HecZbIUL0B8ZaMN9eoUu tw8+SYy/Vbn2fead9bxR+QBDTWNtANeKXG0B75NFpVIAJwhI6r6kWtWi2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3f/vEMJqVIF28gmJyatiNpiLIGMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPbYfuRp sHokiCFrKFeel9i5xDIsWFh8TdAmDp4XTeVNPtGhrdN8s0iV6ohYr5M92Ip5wT3T CBuha6OnNzhHOhlXaBFcfuDzMXLLd7pKrtpNy8dBGvuUQT9+iUDAYjp+2MfxMDfP rPfVaXmHFxOErL1xmsEBDu9wBbID95jk+IIvrs9WZcitTE83fFYB9ThIX3HLMPqO Y8MW8bqB7kNswpvmYtIA2PTH9BH8X9VXME23jlyP4iCZkIqawQF6j9uxky0Sv9Ao cpMAi/R+DHmznG+kOtu9F+LgvDKOFJ8N9sR0J51HLYxxrnNslNwaZnt3I6zOPoUa FKo1KXALazqtQw== -----END CERTIFICATE-----Generated at Sat Aug 23 08:17:09 2025 by rpki-client