$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: +YOcdHWvcAe1tHtdUoqiO/oWmAPmtZjCRQuvmKmtdaM= Subject key identifier: 93:A0:53:F4:6A:EC:B4:78:70:C0:7A:15:BB:10:92:CE:B0:8E:64:F2 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 01A1A9025B15D2AA0F53B4EB5042E9F514C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 18BA Signing time: Thu 05 Nov 2026 00:01:06 +0000 Manifest this update: Thu 05 Nov 2026 00:01:06 +0000 Manifest next update: Fri 06 Nov 2026 00:01:06 +0000 Files and hashes: 1: 5_2f2IG6Ff_Z8Ppp1UYGQdcbpd8.roa (hash: kCO6losb3l4e0pwUvR/y3U7+rbUeZzOuEE/W82Lxfuk=) 2: 7yuAjuHUuBQgI9LKFETDYn_CZ5E.roa (hash: sYMFJLdO959jWZrAYfMJzmtj0yKZjN2K1lebp0gq+TM=) 3: EwdpgIL9FfCy9ehB3BBTCnpWay4.roa (hash: Zd/Fab+TtV6L026SR3m6Lr9zmEU3BY+Tmm5k2jzHBGA=) 4: I-sMHz5KWaJWWHv8LP-cTbLRlhk.roa (hash: ycdqoFMuV7vOqJ6ik/7TLLM1IrEFNQXg4WIcvH+nbTI=) 5: JltXya391JkGSYwvzrVlrXpnF64.roa (hash: UccBxpSpEJUyYr/IQ7pBmDAl22letmtiDRLPjq3VHKY=) 6: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: +FuDl5UFEp+tKXWrzcqVzjElXQHo0guD1chLhvlJV80=) 7: LjwLBkukbLxUFkuTIfR9w1snMls.roa (hash: 4nFYoBbwhfsOo2OK62wk4BJ40HPGWDvHaokQJOEAsAE=) 8: SxsTTQPpb002U8lLZRV6SRhekS0.roa (hash: W+v+QmlBcUbu1220skf3dGHkJEwkEM6pZN3F3mSoEjA=) 9: U27renAALZTxH0h-gwjCCnMoHKk.roa (hash: ORyWVmLu5TiTeF6f08kuBMFxVBSVN460MMMTmyam6hc=) 10: ZpWVrlMb2NpY8HHQlSRsYYYBuS4.roa (hash: pkrt/UmdtM08Ahi5VFPpOcMkqFc/0tZBQtexbUjXoVw=) 11: _KBQXB2Ok6DxzjcnIQISyeFSnpM.roa (hash: 9HopsVKQdGio4tWIg9WjN9YxEsegpCgT2SWiuwriul0=) 12: _neEZrmq0Ct3kFL__C5GyRs4mP0.roa (hash: 9kAGb49vKmov+gzr6FaaU1iRQWFt3aVXTbBHFybGSGc=) 13: aKANS_nMhqKQxSqYsTLFAPPf4Ac.roa (hash: uM6jlbx5BEyZgSOnEuqPMeNP3j1cSANjK7c9s23dmCw=) 14: c0F1tCgxfTqqtecEpLhL2Yzgotc.roa (hash: kcc7SOAkVdEZqliKSy982SiY2cxq/54ffuzbxdOylbI=) 15: gZ4dcf6HjqfncGGeENClMefPX_s.roa (hash: 0o7ggVRkzqB00ya5tb+jsy9euf5xB6KFOxp5W1g0pVc=) 16: l8zay_INv7E0VzJhTHR34KyIxYU.roa (hash: Ub/uqiz++gX3geu9vGrvci1ULIu9IKfiqiE2f8mI0lM=) 17: mNhJEg8yYPko26xnMlb5p8FIxE0.roa (hash: w9gg5PUiPe908J5vjI6p+AZZqfbQNUOc9hdSAtqhApM=) 18: q6q4U64HI_-eToYoeUgOUPU3KRE.roa (hash: kxmtIIlqbHTH1qvNoBG2/z96qUIjP2N3zilZLCieN00=) 19: sSe9vjQhLXz0LCDCrOhG3-q5jrA.roa (hash: Ks/R2WS3cda1aUMFkl1JkdwTxi5reAccOsu/QKsp7Og=) 20: sohX7LbuAHcvqGne2pID4PK53cs.roa (hash: pnEuUuyYA2H3GexHsPga00jBAH2t730CNd994bqMDuA=) 21: tqXOVuDrdAyLecpEp2l4AMffHAw.roa (hash: zp13fmxJbku6zhMDC/zXyPJnhXVh8hRoWiN4PFSExOM=) 22: xYkYZOmCV58rTJJEdIAsjdVBGXM.roa (hash: eCJXn/CSFpM/78IXFQ7tMZnEX10POhy3RCQh+Y88gTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 00:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:a9:02:5b:15:d2:aa:0f:53:b4:eb:50:42:e9:f5:14:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Nov 5 00:01:06 2026 GMT Not After : Nov 6 00:01:06 2026 GMT Subject: CN=93a053f46aecb47870c07a15bb1092ceb08e64f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0a:8c:68:fc:81:c0:27:44:0c:0b:9b:59:eb: f5:46:14:c9:41:e2:5e:2f:0d:1a:f5:a2:b8:f3:a6: 37:6f:dd:ca:c0:dc:c6:8f:41:4a:3c:29:3d:bf:90: a4:f1:7d:77:7e:29:a5:5c:05:75:c3:c5:df:45:3b: 34:29:21:67:f4:19:e4:17:b0:bd:44:a7:f2:d4:47: f6:12:0b:9b:b3:20:1b:c5:64:90:6e:f0:11:4f:50: 2e:af:7c:c4:a0:e9:fd:45:47:7d:b6:c8:11:ad:70: 70:96:f6:3a:4d:db:81:e6:91:56:c9:a5:91:4b:f5: 8c:75:86:30:6d:92:11:32:f2:d8:d9:e1:c8:a9:02: 01:10:c5:53:93:52:6b:53:49:ca:f5:c0:10:9d:cd: b5:a2:d8:77:90:00:19:d1:d3:b4:94:be:67:b1:1b: 6d:5a:06:af:58:7c:01:b1:d0:d1:39:db:30:36:41: 6d:05:7c:0b:ce:7d:b7:fa:02:cf:b8:44:cd:2b:04: 44:6b:c1:a7:9b:54:9e:c7:9c:9c:f1:58:49:d2:2a: 37:07:89:ee:ba:68:12:b6:f3:1c:06:2b:69:83:1f: a0:ee:1c:be:31:12:aa:d2:41:ad:4a:4f:17:da:22: 06:90:a2:58:5d:76:02:83:15:12:cf:5b:d0:ef:ed: c3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A0:53:F4:6A:EC:B4:78:70:C0:7A:15:BB:10:92:CE:B0:8E:64:F2 X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:5f:fe:a0:2c:09:d7:a1:8a:c9:f2:96:46:29:46:20:46:dd: 8e:18:9e:95:4a:04:05:9f:22:ff:f2:93:ac:c4:69:1a:3b:6e: 8a:f3:c2:d0:90:ed:a3:48:5a:28:15:9e:4e:ec:3b:00:81:ce: 6d:ba:3b:d0:05:b2:f4:36:6f:af:ab:27:2c:4b:96:c6:e9:c1: bd:42:42:d3:2c:bd:35:b2:19:35:ab:5b:d8:95:c6:b1:2a:b2: 93:bd:37:69:cd:42:90:d2:db:9c:19:ad:d1:4a:0e:08:01:ad: e2:a5:cc:3b:4a:83:d7:38:dd:00:34:d5:b8:4a:1f:dc:1c:00: 83:16:f7:31:4b:e2:10:2b:b3:da:13:94:3b:53:c2:eb:31:d0: 8d:15:d4:c0:22:96:4f:53:bb:0d:d3:43:91:e8:40:1e:3e:f5: 76:29:0b:03:9b:7f:23:29:73:79:da:03:ff:ec:6e:89:67:18: d7:2d:dd:eb:e4:9c:1c:e1:c0:1d:61:8b:a7:ee:79:87:e8:27: 91:ff:cb:0b:47:c2:00:9b:bf:d6:f2:b7:3d:16:aa:44:49:4d: a4:e5:f3:f9:87:c6:74:66:f1:8e:b6:45:47:f5:81:f0:1f:ec: e0:0e:c4:4b:76:b3:3a:ee:7e:91:47:13:ce:b4:af:75:a2:39: 67:10:fc:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGpAlsV0qoPU7TrUELp9RTBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjYxMTA1MDAwMTA2WhcNMjYxMTA2MDAwMTA2WjAzMTEwLwYDVQQD Eyg5M2EwNTNmNDZhZWNiNDc4NzBjMDdhMTViYjEwOTJjZWIwOGU2NGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAqMaPyBwCdEDAubWev1RhTJQeJe Lw0a9aK486Y3b93KwNzGj0FKPCk9v5Ck8X13fimlXAV1w8XfRTs0KSFn9BnkF7C9 RKfy1Ef2EgubsyAbxWSQbvART1Aur3zEoOn9RUd9tsgRrXBwlvY6TduB5pFWyaWR S/WMdYYwbZIRMvLY2eHIqQIBEMVTk1JrU0nK9cAQnc21oth3kAAZ0dO0lL5nsRtt WgavWHwBsdDROdswNkFtBXwLzn23+gLPuETNKwREa8Gnm1Sex5yc8VhJ0io3B4nu umgStvMcBitpgx+g7hy+MRKq0kGtSk8X2iIGkKJYXXYCgxUSz1vQ7+3DTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOgU/Rq7LR4cMB6FbsQks6wjmTyMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjF/+oCwJ 16GKyfKWRilGIEbdjhielUoEBZ8i//KTrMRpGjtuivPC0JDto0haKBWeTuw7AIHO bbo70AWy9DZvr6snLEuWxunBvUJC0yy9NbIZNatb2JXGsSqyk703ac1CkNLbnBmt 0UoOCAGt4qXMO0qD1zjdADTVuEof3BwAgxb3MUviECuz2hOUO1PC6zHQjRXUwCKW T1O7DdNDkehAHj71dikLA5t/IylzedoD/+xuiWcY1y3d6+ScHOHAHWGLp+55h+gn kf/LC0fCAJu/1vK3PRaqRElNpOXz+YfGdGbxjrZFR/WB8B/s4A7ES3azOu5+kUcT zrSvdaI5ZxD8Xg== -----END CERTIFICATE-----Generated at Thu Nov 5 11:22:07 2026 by rpki-client