$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: zcjvlMqNhByBMiTVsI6XkbDiSSqmiNcCcNWebdJANos= Subject key identifier: E8:9D:44:63:BA:57:B8:7B:2B:E6:83:AE:6B:E1:62:14:F3:F1:F1:3C Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019ED2AB9A4380BF8416F91B0F0095E2A954 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 1740 Signing time: Tue 16 Jun 2026 23:02:01 +0000 Manifest this update: Tue 16 Jun 2026 23:02:01 +0000 Manifest next update: Wed 17 Jun 2026 23:02:01 +0000 Files and hashes: 1: EwdpgIL9FfCy9ehB3BBTCnpWay4.roa (hash: Zd/Fab+TtV6L026SR3m6Lr9zmEU3BY+Tmm5k2jzHBGA=) 2: I-sMHz5KWaJWWHv8LP-cTbLRlhk.roa (hash: ycdqoFMuV7vOqJ6ik/7TLLM1IrEFNQXg4WIcvH+nbTI=) 3: JltXya391JkGSYwvzrVlrXpnF64.roa (hash: UccBxpSpEJUyYr/IQ7pBmDAl22letmtiDRLPjq3VHKY=) 4: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: 72BJb3yskYvB7wL/XjZACHxYS+htu+Iu6R56Y3VKaIg=) 5: LjwLBkukbLxUFkuTIfR9w1snMls.roa (hash: 4nFYoBbwhfsOo2OK62wk4BJ40HPGWDvHaokQJOEAsAE=) 6: SxsTTQPpb002U8lLZRV6SRhekS0.roa (hash: W+v+QmlBcUbu1220skf3dGHkJEwkEM6pZN3F3mSoEjA=) 7: ZpWVrlMb2NpY8HHQlSRsYYYBuS4.roa (hash: pkrt/UmdtM08Ahi5VFPpOcMkqFc/0tZBQtexbUjXoVw=) 8: _KBQXB2Ok6DxzjcnIQISyeFSnpM.roa (hash: 9HopsVKQdGio4tWIg9WjN9YxEsegpCgT2SWiuwriul0=) 9: _neEZrmq0Ct3kFL__C5GyRs4mP0.roa (hash: 9kAGb49vKmov+gzr6FaaU1iRQWFt3aVXTbBHFybGSGc=) 10: aKANS_nMhqKQxSqYsTLFAPPf4Ac.roa (hash: uM6jlbx5BEyZgSOnEuqPMeNP3j1cSANjK7c9s23dmCw=) 11: c0F1tCgxfTqqtecEpLhL2Yzgotc.roa (hash: kcc7SOAkVdEZqliKSy982SiY2cxq/54ffuzbxdOylbI=) 12: gZ4dcf6HjqfncGGeENClMefPX_s.roa (hash: 0o7ggVRkzqB00ya5tb+jsy9euf5xB6KFOxp5W1g0pVc=) 13: l8zay_INv7E0VzJhTHR34KyIxYU.roa (hash: Ub/uqiz++gX3geu9vGrvci1ULIu9IKfiqiE2f8mI0lM=) 14: mNhJEg8yYPko26xnMlb5p8FIxE0.roa (hash: w9gg5PUiPe908J5vjI6p+AZZqfbQNUOc9hdSAtqhApM=) 15: q6q4U64HI_-eToYoeUgOUPU3KRE.roa (hash: kxmtIIlqbHTH1qvNoBG2/z96qUIjP2N3zilZLCieN00=) 16: sSe9vjQhLXz0LCDCrOhG3-q5jrA.roa (hash: Ks/R2WS3cda1aUMFkl1JkdwTxi5reAccOsu/QKsp7Og=) 17: sohX7LbuAHcvqGne2pID4PK53cs.roa (hash: pnEuUuyYA2H3GexHsPga00jBAH2t730CNd994bqMDuA=) 18: tqXOVuDrdAyLecpEp2l4AMffHAw.roa (hash: zp13fmxJbku6zhMDC/zXyPJnhXVh8hRoWiN4PFSExOM=) 19: tw6AZDGGpP9NxVAB2it1NsPBTW4.roa (hash: IMxXE5hLU1Mm0BQGKqcA2AkFFX2OTXDF0EUw7x9FubM=) 20: xYkYZOmCV58rTJJEdIAsjdVBGXM.roa (hash: eCJXn/CSFpM/78IXFQ7tMZnEX10POhy3RCQh+Y88gTU=) 21: yJoN1VaNgltdfpP-maVQQcOYy_8.roa (hash: DoE5yzS7wJT/6cfhAeXgd5cw2cfQnuSELoHqvY9h2n8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:d2:ab:9a:43:80:bf:84:16:f9:1b:0f:00:95:e2:a9:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Jun 16 23:02:01 2026 GMT Not After : Jun 17 23:02:01 2026 GMT Subject: CN=e89d4463ba57b87b2be683ae6be16214f3f1f13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b7:ea:b1:29:5c:51:81:9f:f0:97:bc:8b:93: 6c:7d:9c:d2:93:6e:ab:95:15:a5:21:fe:5f:00:1e: 10:74:9a:f4:c7:a7:10:f6:b1:f1:2d:df:8a:a1:f9: cd:1f:af:b5:af:81:83:ed:15:14:a2:7a:32:4a:7a: e1:ac:33:b0:3a:a8:21:dd:91:ac:67:7f:bc:68:ff: e7:6b:54:58:a7:c4:22:f6:67:01:ac:e1:7d:d1:b5: ae:39:5b:74:d0:73:f3:b5:88:1b:5a:9d:41:b1:17: 38:58:57:ee:a9:7a:d4:a3:56:ef:20:59:d3:b3:46: 71:9a:17:f3:2c:46:83:74:b5:02:8e:84:6b:0f:67: 33:81:b2:6f:2c:36:17:44:07:5c:f0:dc:3b:4c:88: 11:c9:ec:fd:0f:43:9e:c1:f9:23:52:17:e1:b6:b4: 1e:15:33:17:21:11:f9:7f:c8:f3:a5:c7:0d:6b:cd: 8e:f0:6c:a8:3a:b2:a6:05:a5:ea:b3:c6:15:de:45: a5:2d:d2:f9:ed:67:c1:d0:02:61:a7:6c:04:87:93: 73:89:63:be:13:f5:9b:a5:80:3e:e1:ac:8a:22:6d: ad:77:9d:2f:4b:21:c5:ee:06:3d:03:f9:3c:fb:3a: ad:51:da:60:cb:2e:d8:c3:f7:89:5a:9c:82:7b:ff: f1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9D:44:63:BA:57:B8:7B:2B:E6:83:AE:6B:E1:62:14:F3:F1:F1:3C X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:8a:98:7e:f9:9c:f9:ef:33:a0:3e:62:68:f3:25:6d:cd:d3: e7:25:21:f2:50:10:cc:93:ec:7f:82:7b:a6:e7:ed:ab:e3:6d: 90:b9:cb:e4:42:ac:a8:c9:08:3e:8b:50:9a:6c:f6:18:aa:79: d1:22:69:bb:2e:98:c8:b0:2d:41:dc:9b:22:4a:a0:2c:85:10: 69:77:fc:16:60:b0:5e:f4:ad:0f:ec:19:46:84:7b:45:4a:c1: d5:3e:ac:db:57:67:e9:db:f1:9e:bc:06:71:bd:a2:71:f2:12: bb:94:c1:5a:c4:4e:5b:a8:d1:aa:7c:c8:0f:da:37:38:f7:db: a8:64:fd:60:67:7f:62:84:9e:65:55:2e:ff:bc:29:96:68:24: 01:02:d9:c5:37:1a:83:97:5a:20:9a:12:e0:ca:91:ba:7f:89: 58:5b:35:57:66:dd:e9:45:2f:6e:f0:9d:f0:06:d1:6a:39:9e: f7:0f:8e:a5:e5:f8:0a:4d:25:32:52:46:2d:bf:ab:3b:30:54: eb:ba:a6:38:65:95:57:42:3f:33:41:41:57:1f:f7:12:e0:17: 39:dd:18:55:49:3e:8d:2a:fa:da:c7:06:6f:e0:39:f6:0b:f7: a4:dd:f8:36:fe:a7:5a:55:2c:a4:5a:4e:6b:56:a2:13:e8:d2: 4f:5a:58:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7Sq5pDgL+EFvkbDwCV4qlUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjYwNjE2MjMwMjAxWhcNMjYwNjE3MjMwMjAxWjAzMTEwLwYDVQQD EyhlODlkNDQ2M2JhNTdiODdiMmJlNjgzYWU2YmUxNjIxNGYzZjFmMTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbfqsSlcUYGf8Je8i5NsfZzSk26r lRWlIf5fAB4QdJr0x6cQ9rHxLd+KofnNH6+1r4GD7RUUonoySnrhrDOwOqgh3ZGs Z3+8aP/na1RYp8Qi9mcBrOF90bWuOVt00HPztYgbWp1BsRc4WFfuqXrUo1bvIFnT s0ZxmhfzLEaDdLUCjoRrD2czgbJvLDYXRAdc8Nw7TIgRyez9D0OewfkjUhfhtrQe FTMXIRH5f8jzpccNa82O8GyoOrKmBaXqs8YV3kWlLdL57WfB0AJhp2wEh5NziWO+ E/WbpYA+4ayKIm2td50vSyHF7gY9A/k8+zqtUdpgyy7Yw/eJWpyCe//xtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOidRGO6V7h7K+aDrmvhYhTz8fE8MB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYqYfvmc +e8zoD5iaPMlbc3T5yUh8lAQzJPsf4J7puftq+NtkLnL5EKsqMkIPotQmmz2GKp5 0SJpuy6YyLAtQdybIkqgLIUQaXf8FmCwXvStD+wZRoR7RUrB1T6s21dn6dvxnrwG cb2icfISu5TBWsROW6jRqnzID9o3OPfbqGT9YGd/YoSeZVUu/7wplmgkAQLZxTca g5daIJoS4MqRun+JWFs1V2bd6UUvbvCd8AbRajme9w+OpeX4Ck0lMlJGLb+rOzBU 67qmOGWVV0I/M0FBVx/3EuAXOd0YVUk+jSr62scGb+A59gv3pN34Nv6nWlUspFpO a1aiE+jST1pYFg== -----END CERTIFICATE-----Generated at Wed Jun 17 08:41:34 2026 by rpki-client