$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: jujGH+5j6qyqF7QrYtlzYWUFHlPceUZmCw5DIy7r7+s= Subject key identifier: 17:FA:0A:A8:DF:08:F7:36:DD:2A:02:97:8D:B4:79:8F:52:88:81:5B Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 01A0BF556600212E4F40D4D10F9F57C6476F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 1841 Signing time: Sun 20 Sep 2026 15:00:39 +0000 Manifest this update: Sun 20 Sep 2026 15:00:39 +0000 Manifest next update: Mon 21 Sep 2026 15:00:39 +0000 Files and hashes: 1: 5_2f2IG6Ff_Z8Ppp1UYGQdcbpd8.roa (hash: kCO6losb3l4e0pwUvR/y3U7+rbUeZzOuEE/W82Lxfuk=) 2: 7yuAjuHUuBQgI9LKFETDYn_CZ5E.roa (hash: sYMFJLdO959jWZrAYfMJzmtj0yKZjN2K1lebp0gq+TM=) 3: EwdpgIL9FfCy9ehB3BBTCnpWay4.roa (hash: Zd/Fab+TtV6L026SR3m6Lr9zmEU3BY+Tmm5k2jzHBGA=) 4: I-sMHz5KWaJWWHv8LP-cTbLRlhk.roa (hash: ycdqoFMuV7vOqJ6ik/7TLLM1IrEFNQXg4WIcvH+nbTI=) 5: JltXya391JkGSYwvzrVlrXpnF64.roa (hash: UccBxpSpEJUyYr/IQ7pBmDAl22letmtiDRLPjq3VHKY=) 6: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: Vyh1Z9kO2tBtO9ncYn5e72Q/SmvDzfUbecs/qpI8eTw=) 7: LjwLBkukbLxUFkuTIfR9w1snMls.roa (hash: 4nFYoBbwhfsOo2OK62wk4BJ40HPGWDvHaokQJOEAsAE=) 8: SxsTTQPpb002U8lLZRV6SRhekS0.roa (hash: W+v+QmlBcUbu1220skf3dGHkJEwkEM6pZN3F3mSoEjA=) 9: U27renAALZTxH0h-gwjCCnMoHKk.roa (hash: ORyWVmLu5TiTeF6f08kuBMFxVBSVN460MMMTmyam6hc=) 10: ZpWVrlMb2NpY8HHQlSRsYYYBuS4.roa (hash: pkrt/UmdtM08Ahi5VFPpOcMkqFc/0tZBQtexbUjXoVw=) 11: _KBQXB2Ok6DxzjcnIQISyeFSnpM.roa (hash: 9HopsVKQdGio4tWIg9WjN9YxEsegpCgT2SWiuwriul0=) 12: _neEZrmq0Ct3kFL__C5GyRs4mP0.roa (hash: 9kAGb49vKmov+gzr6FaaU1iRQWFt3aVXTbBHFybGSGc=) 13: aKANS_nMhqKQxSqYsTLFAPPf4Ac.roa (hash: uM6jlbx5BEyZgSOnEuqPMeNP3j1cSANjK7c9s23dmCw=) 14: c0F1tCgxfTqqtecEpLhL2Yzgotc.roa (hash: kcc7SOAkVdEZqliKSy982SiY2cxq/54ffuzbxdOylbI=) 15: gZ4dcf6HjqfncGGeENClMefPX_s.roa (hash: 0o7ggVRkzqB00ya5tb+jsy9euf5xB6KFOxp5W1g0pVc=) 16: l8zay_INv7E0VzJhTHR34KyIxYU.roa (hash: Ub/uqiz++gX3geu9vGrvci1ULIu9IKfiqiE2f8mI0lM=) 17: mNhJEg8yYPko26xnMlb5p8FIxE0.roa (hash: w9gg5PUiPe908J5vjI6p+AZZqfbQNUOc9hdSAtqhApM=) 18: q6q4U64HI_-eToYoeUgOUPU3KRE.roa (hash: kxmtIIlqbHTH1qvNoBG2/z96qUIjP2N3zilZLCieN00=) 19: sSe9vjQhLXz0LCDCrOhG3-q5jrA.roa (hash: Ks/R2WS3cda1aUMFkl1JkdwTxi5reAccOsu/QKsp7Og=) 20: sohX7LbuAHcvqGne2pID4PK53cs.roa (hash: pnEuUuyYA2H3GexHsPga00jBAH2t730CNd994bqMDuA=) 21: tqXOVuDrdAyLecpEp2l4AMffHAw.roa (hash: zp13fmxJbku6zhMDC/zXyPJnhXVh8hRoWiN4PFSExOM=) 22: xYkYZOmCV58rTJJEdIAsjdVBGXM.roa (hash: eCJXn/CSFpM/78IXFQ7tMZnEX10POhy3RCQh+Y88gTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:55:66:00:21:2e:4f:40:d4:d1:0f:9f:57:c6:47:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Sep 20 15:00:39 2026 GMT Not After : Sep 21 15:00:39 2026 GMT Subject: CN=17fa0aa8df08f736dd2a02978db4798f5288815b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:22:3a:59:d7:14:8f:78:f3:3a:0b:3f:c9: 4b:b9:f5:f6:25:a8:81:f1:fe:a9:e2:9d:44:b2:bb: c7:84:bd:cc:ba:fa:e1:e4:cb:c2:ee:4a:9b:cc:bc: fc:e4:2f:4a:32:3d:0b:e8:0f:c7:7c:5a:d3:7a:5c: c7:58:ab:bf:5a:f8:07:dc:61:d7:ae:d7:72:f5:d5: ba:a7:99:5b:12:89:36:ba:4b:3b:7b:ea:4d:ee:57: 9d:d9:14:47:51:b5:53:0a:d8:8b:ba:63:8f:51:28: b9:19:82:69:1f:47:8a:27:46:67:5a:e5:e4:4c:eb: 76:70:47:b1:34:b1:b6:8e:e8:25:8e:12:6c:18:22: 44:88:50:86:0d:e1:8f:7a:91:bd:bf:80:41:88:a2: 96:05:88:61:8d:40:a2:7f:96:aa:59:d8:df:29:1a: 9d:9d:48:8a:23:6b:01:ef:72:6e:08:53:26:54:59: 80:8d:f1:37:d8:ec:03:d1:9a:46:56:ba:17:8e:d5: ed:84:82:48:c6:02:a2:45:66:0c:e8:af:44:2e:0f: 9b:dd:08:6f:6e:eb:fe:7e:3c:98:20:fc:18:60:28: 83:90:28:45:11:a0:24:a5:35:82:e4:d8:79:8b:ac: 30:9b:f1:47:fe:db:86:b3:07:85:ef:94:31:5a:65: 2d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FA:0A:A8:DF:08:F7:36:DD:2A:02:97:8D:B4:79:8F:52:88:81:5B X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:66:2e:2d:20:df:1d:4d:c9:29:97:38:e8:67:b5:ce:15:36: 33:20:9c:63:9b:9a:4c:f3:50:f6:77:48:dc:0b:ee:6b:bd:28: 21:2b:45:db:d0:83:41:7a:bd:09:83:f7:b7:7d:28:f0:dc:cc: 9f:74:e4:a5:e1:9f:e8:f5:34:6f:c1:36:09:95:8f:34:5f:18: 21:ea:25:cb:53:90:d8:b9:35:ff:d5:fc:4b:bd:22:08:65:4f: 8f:b6:17:1e:fe:8a:52:6f:9e:f8:54:20:cd:92:47:a5:b1:aa: 0a:86:80:4b:41:aa:5e:56:3a:3d:15:4e:7a:7f:aa:57:e6:e2: 71:0b:bb:a8:c4:1f:67:bd:68:06:25:e6:09:44:a8:55:cd:8c: d9:79:0e:99:c0:34:07:68:15:08:0b:63:ce:48:fa:dc:5d:ca: cc:18:44:4e:c2:6f:39:d9:b3:e4:4d:22:92:3d:77:5c:18:29: 33:b3:9b:30:e1:71:fa:21:b7:29:c0:c1:3d:9a:a2:47:f1:cd: d2:5b:7e:0e:fa:55:04:d8:44:54:4b:81:08:cf:c8:e9:df:1e: 45:db:7e:af:4c:d5:33:77:90:03:00:54:33:e6:62:55:38:de: 5d:60:b3:d4:2f:4e:71:d0:fb:03:59:74:9f:8c:69:d5:11:99: 7d:a6:3b:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/VWYAIS5PQNTRD59XxkdvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjYwOTIwMTUwMDM5WhcNMjYwOTIxMTUwMDM5WjAzMTEwLwYDVQQD EygxN2ZhMGFhOGRmMDhmNzM2ZGQyYTAyOTc4ZGI0Nzk4ZjUyODg4MTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG8iOlnXFI948zoLP8lLufX2JaiB 8f6p4p1EsrvHhL3Muvrh5MvC7kqbzLz85C9KMj0L6A/HfFrTelzHWKu/WvgH3GHX rtdy9dW6p5lbEok2uks7e+pN7led2RRHUbVTCtiLumOPUSi5GYJpH0eKJ0ZnWuXk TOt2cEexNLG2jugljhJsGCJEiFCGDeGPepG9v4BBiKKWBYhhjUCif5aqWdjfKRqd nUiKI2sB73JuCFMmVFmAjfE32OwD0ZpGVroXjtXthIJIxgKiRWYM6K9ELg+b3Qhv buv+fjyYIPwYYCiDkChFEaAkpTWC5Nh5i6wwm/FH/tuGsweF75QxWmUt4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBf6CqjfCPc23SoCl420eY9SiIFbMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2YuLSDf HU3JKZc46Ge1zhU2MyCcY5uaTPNQ9ndI3Avua70oIStF29CDQXq9CYP3t30o8NzM n3TkpeGf6PU0b8E2CZWPNF8YIeoly1OQ2Lk1/9X8S70iCGVPj7YXHv6KUm+e+FQg zZJHpbGqCoaAS0GqXlY6PRVOen+qV+bicQu7qMQfZ71oBiXmCUSoVc2M2XkOmcA0 B2gVCAtjzkj63F3KzBhETsJvOdmz5E0ikj13XBgpM7ObMOFx+iG3KcDBPZqiR/HN 0lt+DvpVBNhEVEuBCM/I6d8eRdt+r0zVM3eQAwBUM+ZiVTjeXWCz1C9OcdD7A1l0 n4xp1RGZfaY7MA== -----END CERTIFICATE-----Generated at Sun Sep 20 19:34:24 2026 by rpki-client