$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: F+iRK25LDMjDhWsAF3pUWeYFcxDA/GXw5X3PYc71wgA= Subject key identifier: BB:16:D5:22:1A:BD:E9:8D:49:A3:19:9F:B1:C3:35:39:F8:35:93:65 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019D97E168044E21B2048A65345816FB242A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 169D Signing time: Thu 16 Apr 2026 20:00:24 +0000 Manifest this update: Thu 16 Apr 2026 20:00:24 +0000 Manifest next update: Fri 17 Apr 2026 20:00:24 +0000 Files and hashes: 1: EwdpgIL9FfCy9ehB3BBTCnpWay4.roa (hash: Zd/Fab+TtV6L026SR3m6Lr9zmEU3BY+Tmm5k2jzHBGA=) 2: I-sMHz5KWaJWWHv8LP-cTbLRlhk.roa (hash: ycdqoFMuV7vOqJ6ik/7TLLM1IrEFNQXg4WIcvH+nbTI=) 3: JltXya391JkGSYwvzrVlrXpnF64.roa (hash: UccBxpSpEJUyYr/IQ7pBmDAl22letmtiDRLPjq3VHKY=) 4: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: iU12xThDelRA+tU9MJ2UOB1+j30+G3cmD2WkKlxC/v8=) 5: LjwLBkukbLxUFkuTIfR9w1snMls.roa (hash: 4nFYoBbwhfsOo2OK62wk4BJ40HPGWDvHaokQJOEAsAE=) 6: SxsTTQPpb002U8lLZRV6SRhekS0.roa (hash: W+v+QmlBcUbu1220skf3dGHkJEwkEM6pZN3F3mSoEjA=) 7: ZpWVrlMb2NpY8HHQlSRsYYYBuS4.roa (hash: pkrt/UmdtM08Ahi5VFPpOcMkqFc/0tZBQtexbUjXoVw=) 8: _KBQXB2Ok6DxzjcnIQISyeFSnpM.roa (hash: 9HopsVKQdGio4tWIg9WjN9YxEsegpCgT2SWiuwriul0=) 9: _neEZrmq0Ct3kFL__C5GyRs4mP0.roa (hash: 9kAGb49vKmov+gzr6FaaU1iRQWFt3aVXTbBHFybGSGc=) 10: aKANS_nMhqKQxSqYsTLFAPPf4Ac.roa (hash: uM6jlbx5BEyZgSOnEuqPMeNP3j1cSANjK7c9s23dmCw=) 11: c0F1tCgxfTqqtecEpLhL2Yzgotc.roa (hash: kcc7SOAkVdEZqliKSy982SiY2cxq/54ffuzbxdOylbI=) 12: gZ4dcf6HjqfncGGeENClMefPX_s.roa (hash: 0o7ggVRkzqB00ya5tb+jsy9euf5xB6KFOxp5W1g0pVc=) 13: l8zay_INv7E0VzJhTHR34KyIxYU.roa (hash: Ub/uqiz++gX3geu9vGrvci1ULIu9IKfiqiE2f8mI0lM=) 14: mNhJEg8yYPko26xnMlb5p8FIxE0.roa (hash: w9gg5PUiPe908J5vjI6p+AZZqfbQNUOc9hdSAtqhApM=) 15: q6q4U64HI_-eToYoeUgOUPU3KRE.roa (hash: kxmtIIlqbHTH1qvNoBG2/z96qUIjP2N3zilZLCieN00=) 16: sSe9vjQhLXz0LCDCrOhG3-q5jrA.roa (hash: Ks/R2WS3cda1aUMFkl1JkdwTxi5reAccOsu/QKsp7Og=) 17: sohX7LbuAHcvqGne2pID4PK53cs.roa (hash: pnEuUuyYA2H3GexHsPga00jBAH2t730CNd994bqMDuA=) 18: tqXOVuDrdAyLecpEp2l4AMffHAw.roa (hash: zp13fmxJbku6zhMDC/zXyPJnhXVh8hRoWiN4PFSExOM=) 19: tw6AZDGGpP9NxVAB2it1NsPBTW4.roa (hash: IMxXE5hLU1Mm0BQGKqcA2AkFFX2OTXDF0EUw7x9FubM=) 20: xYkYZOmCV58rTJJEdIAsjdVBGXM.roa (hash: eCJXn/CSFpM/78IXFQ7tMZnEX10POhy3RCQh+Y88gTU=) 21: yJoN1VaNgltdfpP-maVQQcOYy_8.roa (hash: DoE5yzS7wJT/6cfhAeXgd5cw2cfQnuSELoHqvY9h2n8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 20:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:97:e1:68:04:4e:21:b2:04:8a:65:34:58:16:fb:24:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Apr 16 20:00:24 2026 GMT Not After : Apr 17 20:00:24 2026 GMT Subject: CN=bb16d5221abde98d49a3199fb1c33539f8359365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a0:c2:a5:b1:9f:5a:c9:3b:29:3a:cb:21:36: 2d:34:bb:51:e3:1b:86:11:4c:22:fe:6f:23:91:97: 00:4b:8f:e3:c9:ee:ba:1a:3b:67:2f:39:39:98:2a: b7:32:e1:f8:fc:f6:bd:98:bc:fa:13:41:fd:c2:80: b1:99:b2:4f:be:2c:c2:c6:34:01:92:7d:9a:f0:94: 40:89:f7:7a:a8:d6:c0:ad:c2:5b:e4:92:e2:6f:b0: 1e:a9:94:24:d2:c2:ea:bb:57:87:9f:94:e1:41:be: 57:cc:d8:5d:d1:81:cc:80:52:02:cd:af:1a:f5:76: 69:97:e0:54:2b:cb:ce:70:02:84:90:91:72:8a:e3: 45:78:72:b0:d6:0e:39:89:4c:aa:d6:6a:76:7f:41: 23:43:ce:f1:ad:d7:c6:74:03:65:4a:95:72:f8:f3: 53:81:20:82:bb:1b:f1:fd:96:88:bb:c2:e6:1d:02: d3:a9:da:79:18:38:b3:58:9d:a8:b7:e7:86:33:4f: df:e7:e9:ef:4e:3a:86:08:26:f9:89:fe:7c:58:2e: ad:e6:e6:c9:c2:49:26:78:a8:8b:87:54:00:0c:d6: 36:39:bb:f1:96:83:7a:fa:00:de:68:d5:ee:b5:55: 56:ad:d9:f9:78:7e:ea:08:e2:6c:ad:44:c8:cb:86: 7e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:16:D5:22:1A:BD:E9:8D:49:A3:19:9F:B1:C3:35:39:F8:35:93:65 X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c8:da:f2:21:62:23:ed:ef:fd:4a:99:3d:fe:a4:21:87:6f: a8:49:57:1b:0f:a3:5d:41:a2:f1:42:90:da:7a:29:7c:c3:1c: c5:6b:b0:03:2e:f4:ef:ab:97:75:3f:ae:27:7f:5d:58:ea:fc: a4:4e:c7:ce:2a:bd:2b:fb:38:fb:4e:84:d0:c7:f8:81:72:b6: 02:d1:8a:a3:6c:af:33:cb:be:4d:dc:8f:74:05:d1:d2:39:65: 6a:b9:dd:d7:a3:5d:f2:a0:a6:6b:e4:39:6e:2a:2f:9f:fd:2a: 51:8f:1e:6d:d9:c7:77:56:a2:f8:4f:99:cb:06:66:63:a1:bb: a8:21:dd:28:07:2f:c7:6a:13:1c:79:66:3e:7f:5a:fc:dc:bd: 94:40:7e:f5:8b:34:b4:2a:20:a1:9b:a9:02:4d:41:44:ff:c5: 6b:90:6a:ff:2f:bf:80:9e:01:4f:d4:33:f8:cd:3d:7a:66:73: 73:41:7e:ed:83:53:aa:25:ae:21:2f:7b:74:2a:27:20:64:b2: e6:32:f5:0e:ca:15:f7:21:d7:f3:6d:c5:9a:9c:d8:d4:bb:f0: f4:22:34:05:9b:20:45:c1:19:f8:66:d5:a3:15:57:30:75:be: 89:d9:f6:89:eb:c7:01:b5:32:7a:a1:f4:12:18:db:71:ab:28: 98:52:51:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2X4WgETiGyBIplNFgW+yQqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjYwNDE2MjAwMDI0WhcNMjYwNDE3MjAwMDI0WjAzMTEwLwYDVQQD EyhiYjE2ZDUyMjFhYmRlOThkNDlhMzE5OWZiMWMzMzUzOWY4MzU5MzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6DCpbGfWsk7KTrLITYtNLtR4xuG EUwi/m8jkZcAS4/jye66GjtnLzk5mCq3MuH4/Pa9mLz6E0H9woCxmbJPvizCxjQB kn2a8JRAifd6qNbArcJb5JLib7AeqZQk0sLqu1eHn5ThQb5XzNhd0YHMgFICza8a 9XZpl+BUK8vOcAKEkJFyiuNFeHKw1g45iUyq1mp2f0EjQ87xrdfGdANlSpVy+PNT gSCCuxvx/ZaIu8LmHQLTqdp5GDizWJ2ot+eGM0/f5+nvTjqGCCb5if58WC6t5ubJ wkkmeKiLh1QADNY2ObvxloN6+gDeaNXutVVWrdn5eH7qCOJsrUTIy4Z+xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsW1SIavemNSaMZn7HDNTn4NZNlMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesja8iFi I+3v/UqZPf6kIYdvqElXGw+jXUGi8UKQ2nopfMMcxWuwAy7076uXdT+uJ39dWOr8 pE7Hziq9K/s4+06E0Mf4gXK2AtGKo2yvM8u+TdyPdAXR0jllarnd16Nd8qCma+Q5 biovn/0qUY8ebdnHd1ai+E+ZywZmY6G7qCHdKAcvx2oTHHlmPn9a/Ny9lEB+9Ys0 tCogoZupAk1BRP/Fa5Bq/y+/gJ4BT9Qz+M09emZzc0F+7YNTqiWuIS97dConIGSy 5jL1DsoV9yHX823FmpzY1Lvw9CI0BZsgRcEZ+GbVoxVXMHW+idn2ievHAbUyeqH0 EhjbcasomFJRlQ== -----END CERTIFICATE-----Generated at Fri Apr 17 06:41:10 2026 by rpki-client