$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: WcECw7peZqrn2GZk0/I/1QuJhxp0rQhPId2b9Hwa7sA= Subject key identifier: 76:8D:2D:93:85:9E:A5:08:73:05:E0:94:B9:96:03:A3:36:9C:F0:DA Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019873AADB384CE1D30DB4B81183D8C80FEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 13ED Signing time: Mon 04 Aug 2025 06:00:33 +0000 Manifest this update: Mon 04 Aug 2025 06:00:33 +0000 Manifest next update: Tue 05 Aug 2025 06:00:33 +0000 Files and hashes: 1: 3_PU79fuHYEhPlNdsJUuZYubgqE.roa (hash: XJWOGH/fcmWGI7b/RAY8L2wuvZcYBFbJ22ImnM+pQlo=) 2: 6ZciseV0h3pH3lp0hLyZ992TdQQ.roa (hash: sFwBr6Wh0TdrZtVAujkppJqtVxS3U22k/6YTX59vUaI=) 3: 6nGhmoSDQSpfjNNYdXCrQWERlIk.roa (hash: /4N+szUgXgcEHHrQDjyOBrtHm4Pkc7NrFhdRQABicbY=) 4: 7HPt5nannhv2gwbAHwaRC5RFFDM.roa (hash: UBw+74e6x0xFF9XFftGKU2o22p62byiADLv5iJRfz1g=) 5: 8Bl_uVVQOuNTAYB4MJGJvtmHpC0.roa (hash: TlelRdg2AvLDMhtiuqfO42FikSgwVhiKJDAQT7WdJj0=) 6: 8YmL9Ep32a72BjjrjP1j1JO7b5Q.roa (hash: Ht29fppl19fG6SkxbeWiQ7UIPOPKrDH3yWJ3G4r6GG4=) 7: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: ayTgmBdRCDZF2Iq75KpQGPCqlu08RolBSZmCo8AfH5w=) 8: M2zzd8H-Tlg7XAdTwUQjLUYGllY.roa (hash: ETq98V9SXDP0t347M1cA3yCogqTqQCthqQp4LwB/LXQ=) 9: M97ZcKaRZuOa3DTXxLHlO-RLatQ.roa (hash: w0gHLxi0MpSA4Cow6J8TG6Bmoy7AY86PSwg5UsV2kcM=) 10: Qb_xgsenhCkec0NMAq-37FxvC-Q.roa (hash: tOjmdfLGRrXXOfqXX2/nLImlZVzeIuD2NtgFbQbxXvU=) 11: WHIHIqWEsALKLs5d6Q-tOWQCla8.roa (hash: hEIDrElaFaUvEVn72pSS3zv8TkwlJYcJGyPsidxg2tA=) 12: a9iv50ooVHm1APCybq4owIunnG8.roa (hash: phKXw/sbpuIWnctwyonEWyJEOXe+K9H58t2l6qBy6tg=) 13: dVb7hZhGuZRTM--X8lkrhzF2Q7Y.roa (hash: EVPzk1PreoChl9YjAauXazZeGF8twPM0Bys79KZjvx8=) 14: iDsGG6EDS8fs9Hct4p8CitByvws.roa (hash: ch//5WVE7dA9hut4Enr9j7EKe84fcI2Ykg7l+3xy19U=) 15: jX4WFfpxo3HHZpB1YZxC4p_jFpo.roa (hash: HvcFd2uvN4vxiceLP8NW4lHvaK1pmADob7hykxb6+nc=) 16: pGGDoeGnPksdWvYsReZKh3O6puY.roa (hash: xGeOEw9UbAQAfMawzQlzpH9iOWa+z4LqLDy15zn/jN0=) 17: wnaVByUU9rLY0lixJG-AIxAIIKk.roa (hash: uZB4+jtFO740w1LWkNgD8gNKmUM01C7fhf/4nIXCJmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:aa:db:38:4c:e1:d3:0d:b4:b8:11:83:d8:c8:0f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Aug 4 06:00:33 2025 GMT Not After : Aug 5 06:00:33 2025 GMT Subject: CN=768d2d93859ea5087305e094b99603a3369cf0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:47:3e:1c:8d:b0:09:12:ee:09:d9:ee:81:be: 9c:74:d8:16:29:c7:38:70:8d:76:b9:98:d1:39:12: 91:c2:4b:fb:9d:46:e4:ad:e2:78:87:b7:38:aa:b3: ab:04:65:e7:29:77:d0:6b:99:ca:89:21:65:61:e4: 71:25:85:b8:26:b6:2f:ff:45:6f:4f:7d:ae:fe:0e: b2:ab:9a:4a:53:c7:82:a1:c8:ae:72:ec:59:48:ac: 77:d2:d1:26:b8:a6:0d:91:d1:6d:64:be:f9:a0:0a: cf:57:fc:28:d0:a2:d0:12:56:61:1d:2d:69:b5:52: 62:fd:8e:76:05:ed:17:f0:56:e6:84:6c:30:46:76: 7e:ea:0b:25:65:a8:46:04:c1:b8:4d:ab:cc:9b:05: 34:b6:99:f9:b7:d3:e7:88:02:ff:67:dd:8e:33:98: 96:00:26:97:a6:52:98:1d:63:4d:61:02:9d:4a:1c: 48:da:75:4d:a9:e3:44:f3:f2:ae:90:3e:5a:cf:c9: 2a:34:95:d6:81:4d:e2:b6:35:18:d4:0c:4e:b2:77: 84:c9:2d:df:d1:24:7c:44:35:8d:20:03:22:24:b5: ce:ee:df:f6:09:4e:54:07:e7:93:8c:2f:a1:10:ac: b3:9f:12:93:02:22:c3:f5:ee:52:de:d9:03:c6:b3: 32:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8D:2D:93:85:9E:A5:08:73:05:E0:94:B9:96:03:A3:36:9C:F0:DA X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:df:3a:e7:87:51:41:12:87:c9:ab:48:c3:27:ba:c9:98:2e: b5:02:dd:56:39:66:df:7b:66:e2:c7:54:64:89:99:a5:0c:b9: 43:ec:26:e1:a8:91:85:3d:db:99:eb:31:80:15:e7:71:af:c9: a6:69:4a:08:c9:11:16:a0:a9:56:55:8d:b0:5d:21:7e:4e:7c: b9:d7:05:56:b5:21:09:49:d2:0e:88:d8:09:d8:a2:f8:3d:5c: 92:9a:77:ba:82:99:cd:7e:29:51:8c:2f:f6:c3:bc:48:16:6c: ac:e9:97:29:42:8b:2c:73:a9:ca:f0:ac:f1:15:d7:07:df:eb: f5:b7:5b:ff:6f:0a:cc:dd:52:be:14:5f:56:4d:ac:8c:6d:3a: e7:c6:a7:6f:28:35:1b:62:ff:d8:43:6d:31:c2:29:fa:fc:80: f4:31:dd:32:6f:16:0f:18:f3:16:cc:28:63:5e:14:1b:2b:d5: bb:cb:f6:af:3b:dd:a3:e4:df:f4:69:23:98:63:ce:6e:cb:11: 0d:1a:02:27:4f:0c:0f:1e:ec:16:b7:40:ba:73:ca:82:d7:40: e9:62:bb:58:52:67:85:c3:65:42:aa:06:4a:ed:b6:7f:9c:b8: 60:7f:d6:34:7a:1a:36:3b:ae:51:e4:de:65:1b:5a:91:95:07: 88:f7:d4:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhzqts4TOHTDbS4EYPYyA/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjUwODA0MDYwMDMzWhcNMjUwODA1MDYwMDMzWjAzMTEwLwYDVQQD Eyg3NjhkMmQ5Mzg1OWVhNTA4NzMwNWUwOTRiOTk2MDNhMzM2OWNmMGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0c+HI2wCRLuCdnugb6cdNgWKcc4 cI12uZjRORKRwkv7nUbkreJ4h7c4qrOrBGXnKXfQa5nKiSFlYeRxJYW4JrYv/0Vv T32u/g6yq5pKU8eCociucuxZSKx30tEmuKYNkdFtZL75oArPV/wo0KLQElZhHS1p tVJi/Y52Be0X8FbmhGwwRnZ+6gslZahGBMG4TavMmwU0tpn5t9PniAL/Z92OM5iW ACaXplKYHWNNYQKdShxI2nVNqeNE8/KukD5az8kqNJXWgU3itjUY1AxOsneEyS3f 0SR8RDWNIAMiJLXO7t/2CU5UB+eTjC+hEKyznxKTAiLD9e5S3tkDxrMyvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaNLZOFnqUIcwXglLmWA6M2nPDaMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAd8654dR QRKHyatIwye6yZgutQLdVjlm33tm4sdUZImZpQy5Q+wm4aiRhT3bmesxgBXnca/J pmlKCMkRFqCpVlWNsF0hfk58udcFVrUhCUnSDojYCdii+D1ckpp3uoKZzX4pUYwv 9sO8SBZsrOmXKUKLLHOpyvCs8RXXB9/r9bdb/28KzN1SvhRfVk2sjG0658anbyg1 G2L/2ENtMcIp+vyA9DHdMm8WDxjzFswoY14UGyvVu8v2rzvdo+Tf9GkjmGPObssR DRoCJ08MDx7sFrdAunPKgtdA6WK7WFJnhcNlQqoGSu22f5y4YH/WNHoaNjuuUeTe ZRtakZUHiPfUxQ== -----END CERTIFICATE-----Generated at Mon Aug 4 11:09:21 2025 by rpki-client