$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: IUhajridHU9pVnGvb0rQt+Rjy3DxjhnLeC9sLeHmzVo= Subject key identifier: 9C:3A:27:40:93:82:9A:77:42:E1:EB:11:B7:9B:E4:8F:05:AA:A7:EB Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019A533F3E4796B0273D180DA983F40DF92C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 14E7 Signing time: Wed 05 Nov 2025 09:00:44 +0000 Manifest this update: Wed 05 Nov 2025 09:00:44 +0000 Manifest next update: Thu 06 Nov 2025 09:00:44 +0000 Files and hashes: 1: 3_PU79fuHYEhPlNdsJUuZYubgqE.roa (hash: XJWOGH/fcmWGI7b/RAY8L2wuvZcYBFbJ22ImnM+pQlo=) 2: 6ZciseV0h3pH3lp0hLyZ992TdQQ.roa (hash: sFwBr6Wh0TdrZtVAujkppJqtVxS3U22k/6YTX59vUaI=) 3: 6nGhmoSDQSpfjNNYdXCrQWERlIk.roa (hash: /4N+szUgXgcEHHrQDjyOBrtHm4Pkc7NrFhdRQABicbY=) 4: 7HPt5nannhv2gwbAHwaRC5RFFDM.roa (hash: UBw+74e6x0xFF9XFftGKU2o22p62byiADLv5iJRfz1g=) 5: DPb0eUvagL5PN3xJtBrhYPAa1oM.roa (hash: 78CCGO3BfamB/jJjL779FD3c7gVdk/c3m8G0P9v/MMg=) 6: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: yP5rSWhzrGzkVWYDgwkeo0k3SaXO8iif8sf6X24ePJ0=) 7: M2zzd8H-Tlg7XAdTwUQjLUYGllY.roa (hash: ETq98V9SXDP0t347M1cA3yCogqTqQCthqQp4LwB/LXQ=) 8: M97ZcKaRZuOa3DTXxLHlO-RLatQ.roa (hash: w0gHLxi0MpSA4Cow6J8TG6Bmoy7AY86PSwg5UsV2kcM=) 9: Msw5lWLcMEnYB6JQ72VGTubuEUo.roa (hash: j3iVppScPPj4RkIHmOn6ItOKTBT6owq12o7XbsNpt4A=) 10: WHIHIqWEsALKLs5d6Q-tOWQCla8.roa (hash: hEIDrElaFaUvEVn72pSS3zv8TkwlJYcJGyPsidxg2tA=) 11: a9iv50ooVHm1APCybq4owIunnG8.roa (hash: phKXw/sbpuIWnctwyonEWyJEOXe+K9H58t2l6qBy6tg=) 12: dVb7hZhGuZRTM--X8lkrhzF2Q7Y.roa (hash: EVPzk1PreoChl9YjAauXazZeGF8twPM0Bys79KZjvx8=) 13: exrTmGvOj2xClhDCfcsldQif4Z4.roa (hash: 3LtdjnhF9ISRLFDfrOGup/m3oOMZq8ll2E/u+2tZH4g=) 14: iDsGG6EDS8fs9Hct4p8CitByvws.roa (hash: ch//5WVE7dA9hut4Enr9j7EKe84fcI2Ykg7l+3xy19U=) 15: jX4WFfpxo3HHZpB1YZxC4p_jFpo.roa (hash: HvcFd2uvN4vxiceLP8NW4lHvaK1pmADob7hykxb6+nc=) 16: pGGDoeGnPksdWvYsReZKh3O6puY.roa (hash: xGeOEw9UbAQAfMawzQlzpH9iOWa+z4LqLDy15zn/jN0=) 17: twUoAYIDxxz7pVRzmoXEDn0ILmQ.roa (hash: scNDvSxhDrXf+mMVLro28z2a3BViZ0313Eo0E/T7pyc=) 18: wnaVByUU9rLY0lixJG-AIxAIIKk.roa (hash: uZB4+jtFO740w1LWkNgD8gNKmUM01C7fhf/4nIXCJmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:3f:3e:47:96:b0:27:3d:18:0d:a9:83:f4:0d:f9:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Nov 5 09:00:44 2025 GMT Not After : Nov 6 09:00:44 2025 GMT Subject: CN=9c3a274093829a7742e1eb11b79be48f05aaa7eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c8:53:dd:c0:78:cb:6e:f7:58:13:8b:0c:89: 84:49:94:67:25:df:91:c7:42:d0:3e:4c:02:6f:b8: 00:b3:a5:26:1b:81:b4:92:68:b5:b8:2b:d5:f9:8d: 8f:69:14:cc:c7:cd:73:09:0b:5a:28:e9:39:f3:ce: 18:10:0f:5d:ee:35:7d:8d:1e:68:47:ca:e7:68:10: cd:6f:fd:df:92:b4:4a:9a:48:da:cc:48:eb:6a:87: 19:9d:0f:72:8f:f6:9a:f1:45:77:16:69:fc:b7:13: dd:80:96:55:8c:4c:38:1d:74:01:3c:e2:5d:3c:1c: 98:fc:10:1c:f0:e6:17:3e:48:fe:46:bb:20:d0:8d: a0:b5:e7:6b:5e:f2:b2:ae:46:50:60:cd:ac:5e:22: b0:b0:71:b8:7e:77:e0:5e:4d:fe:36:4a:fb:01:db: e5:09:91:3c:e4:a5:78:8c:39:93:c6:de:bb:76:26: ed:e3:52:a2:d5:c2:08:39:0e:82:e6:52:fa:c4:3a: 76:fb:63:84:eb:66:c1:59:a5:97:a9:b1:29:79:d8: 2c:a9:4e:d0:7a:e8:b0:3f:eb:f5:2e:5d:56:2e:a7: db:0f:6c:43:26:c6:76:8b:b0:09:21:53:93:46:6c: da:09:49:8d:09:e5:d9:80:46:9c:a9:18:06:55:af: 76:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3A:27:40:93:82:9A:77:42:E1:EB:11:B7:9B:E4:8F:05:AA:A7:EB X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:1d:13:1a:11:7b:4a:28:55:d1:12:f3:26:96:42:61:93:ec: d1:36:b6:a3:a1:a3:44:13:15:5d:57:65:07:2c:89:ed:59:c1: 23:70:64:98:1e:0d:8f:24:08:70:2f:8e:80:ff:66:5b:1a:de: 90:3c:bd:a3:7b:d3:20:49:d9:71:86:0f:3e:76:4a:2a:6d:82: 98:8b:80:15:31:6c:71:c9:b3:57:77:c0:20:d5:d1:98:ed:ca: 5a:9b:37:bb:d0:b9:a0:87:b7:bd:00:87:0d:af:f3:c0:6f:a8: 33:4f:f8:5c:57:26:f3:0d:47:cb:21:df:ba:c1:1c:92:25:0c: 1b:d8:f9:4e:aa:99:d1:04:2b:a4:d5:0a:a0:3c:6c:19:63:db: 08:47:09:f4:d0:ac:4c:3a:7d:a0:b2:da:56:1c:9b:6f:b1:39: 36:f5:5c:5d:9c:c9:27:98:2e:33:fc:a2:ab:df:e4:32:d4:dc: 5c:95:a4:7d:79:a7:57:b9:84:9b:0f:c3:9a:ed:dc:41:68:42: 9f:9e:6a:81:8e:d2:69:5a:fa:ff:b4:1c:b8:3e:58:a6:79:80: b0:04:72:3d:90:43:8b:95:c5:bb:83:11:a2:19:86:75:99:2a: ca:24:15:d4:f8:36:85:cb:17:48:cf:f6:94:73:4c:98:e6:87: 02:3b:fe:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpTPz5HlrAnPRgNqYP0DfksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjUxMTA1MDkwMDQ0WhcNMjUxMTA2MDkwMDQ0WjAzMTEwLwYDVQQD Eyg5YzNhMjc0MDkzODI5YTc3NDJlMWViMTFiNzliZTQ4ZjA1YWFhN2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0shT3cB4y273WBOLDImESZRnJd+R x0LQPkwCb7gAs6UmG4G0kmi1uCvV+Y2PaRTMx81zCQtaKOk5884YEA9d7jV9jR5o R8rnaBDNb/3fkrRKmkjazEjraocZnQ9yj/aa8UV3Fmn8txPdgJZVjEw4HXQBPOJd PByY/BAc8OYXPkj+Rrsg0I2gtedrXvKyrkZQYM2sXiKwsHG4fnfgXk3+Nkr7Advl CZE85KV4jDmTxt67dibt41Ki1cIIOQ6C5lL6xDp2+2OE62bBWaWXqbEpedgsqU7Q euiwP+v1Ll1WLqfbD2xDJsZ2i7AJIVOTRmzaCUmNCeXZgEacqRgGVa92WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJw6J0CTgpp3QuHrEbeb5I8FqqfrMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANR0TGhF7 SihV0RLzJpZCYZPs0Ta2o6GjRBMVXVdlByyJ7VnBI3BkmB4NjyQIcC+OgP9mWxre kDy9o3vTIEnZcYYPPnZKKm2CmIuAFTFsccmzV3fAINXRmO3KWps3u9C5oIe3vQCH Da/zwG+oM0/4XFcm8w1HyyHfusEckiUMG9j5TqqZ0QQrpNUKoDxsGWPbCEcJ9NCs TDp9oLLaVhybb7E5NvVcXZzJJ5guM/yiq9/kMtTcXJWkfXmnV7mEmw/Dmu3cQWhC n55qgY7SaVr6/7QcuD5YpnmAsARyPZBDi5XFu4MRohmGdZkqyiQV1Pg2hcsXSM/2 lHNMmOaHAjv+6g== -----END CERTIFICATE-----Generated at Wed Nov 5 11:32:52 2025 by rpki-client