$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: ecUMzz+wHlff44VJg9U5d+vtIuzOs6r2VVvOweSoxqE= Subject key identifier: DB:9A:7A:DF:90:A5:94:D5:AF:5B:08:C2:7F:F7:D6:A7:8E:28:F4:8A Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019769CEFAB8E08B170F49C6FF147DA3B777 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 1362 Signing time: Fri 13 Jun 2025 15:01:01 +0000 Manifest this update: Fri 13 Jun 2025 15:01:01 +0000 Manifest next update: Sat 14 Jun 2025 15:01:01 +0000 Files and hashes: 1: 3_PU79fuHYEhPlNdsJUuZYubgqE.roa (hash: XJWOGH/fcmWGI7b/RAY8L2wuvZcYBFbJ22ImnM+pQlo=) 2: 6ZciseV0h3pH3lp0hLyZ992TdQQ.roa (hash: sFwBr6Wh0TdrZtVAujkppJqtVxS3U22k/6YTX59vUaI=) 3: 6nGhmoSDQSpfjNNYdXCrQWERlIk.roa (hash: /4N+szUgXgcEHHrQDjyOBrtHm4Pkc7NrFhdRQABicbY=) 4: 7HPt5nannhv2gwbAHwaRC5RFFDM.roa (hash: UBw+74e6x0xFF9XFftGKU2o22p62byiADLv5iJRfz1g=) 5: KUk-CSFCGROoWRr0bn1g2QgmGDo.roa (hash: UpwZsPUmRF6H+YvfEB2+WDVmprsNudTy1jgLuv//feE=) 6: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: itjhdtRdAqNjeaYBi+P/E57NrSKAu6Hv6BCtE6YapdQ=) 7: M2zzd8H-Tlg7XAdTwUQjLUYGllY.roa (hash: ETq98V9SXDP0t347M1cA3yCogqTqQCthqQp4LwB/LXQ=) 8: M97ZcKaRZuOa3DTXxLHlO-RLatQ.roa (hash: w0gHLxi0MpSA4Cow6J8TG6Bmoy7AY86PSwg5UsV2kcM=) 9: NZa0gIfmJGTWop9klB_kmws3bBk.roa (hash: EJR++Bc5Re9D8wlLY18Cmifrl1rYRjuKt7sbeibsf5k=) 10: WHIHIqWEsALKLs5d6Q-tOWQCla8.roa (hash: hEIDrElaFaUvEVn72pSS3zv8TkwlJYcJGyPsidxg2tA=) 11: a9iv50ooVHm1APCybq4owIunnG8.roa (hash: phKXw/sbpuIWnctwyonEWyJEOXe+K9H58t2l6qBy6tg=) 12: dVb7hZhGuZRTM--X8lkrhzF2Q7Y.roa (hash: EVPzk1PreoChl9YjAauXazZeGF8twPM0Bys79KZjvx8=) 13: iDsGG6EDS8fs9Hct4p8CitByvws.roa (hash: ch//5WVE7dA9hut4Enr9j7EKe84fcI2Ykg7l+3xy19U=) 14: jX4WFfpxo3HHZpB1YZxC4p_jFpo.roa (hash: HvcFd2uvN4vxiceLP8NW4lHvaK1pmADob7hykxb6+nc=) 15: pGGDoeGnPksdWvYsReZKh3O6puY.roa (hash: xGeOEw9UbAQAfMawzQlzpH9iOWa+z4LqLDy15zn/jN0=) 16: wnaVByUU9rLY0lixJG-AIxAIIKk.roa (hash: uZB4+jtFO740w1LWkNgD8gNKmUM01C7fhf/4nIXCJmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 13:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:69:ce:fa:b8:e0:8b:17:0f:49:c6:ff:14:7d:a3:b7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Jun 13 15:01:01 2025 GMT Not After : Jun 14 15:01:01 2025 GMT Subject: CN=db9a7adf90a594d5af5b08c27ff7d6a78e28f48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e3:d4:2a:cf:17:ae:93:59:f1:d9:b9:89:fe: 7e:4a:80:a5:a8:50:29:5d:cd:45:b6:7d:76:f3:7a: fa:9c:49:44:3e:6c:a8:e0:6e:12:3f:47:d6:6f:4b: ef:c5:3e:19:f1:f3:3f:2c:df:5d:a0:a3:23:10:ba: d3:15:16:17:81:cb:a7:f1:b3:44:34:e5:ac:30:62: 9c:e8:2f:3d:51:dc:82:49:56:aa:89:90:23:ba:65: 14:1e:ee:f0:a9:db:69:b3:ca:dd:19:d3:61:cd:a1: 6d:72:16:45:ce:f5:07:c0:4b:82:f0:28:3a:5c:2a: 07:f8:5c:e0:f1:52:38:05:dc:0a:6f:dd:a5:1a:72: 6e:9f:24:57:de:d9:3e:10:e1:f3:59:b0:b8:bb:cd: b6:5b:1a:17:38:d1:06:b0:0c:b2:c4:dd:f5:6f:54: a8:2a:f7:a8:d7:98:53:a8:ed:cd:92:02:cf:7c:55: d1:77:06:67:8e:4b:1e:4a:35:d6:2f:bb:b6:62:cc: 8d:96:d8:5d:9f:d1:c5:e5:c4:34:66:15:e4:9e:54: 60:55:8d:cb:fa:49:06:b3:b9:c5:31:88:08:73:35: 74:ce:ce:28:ca:cc:8f:f6:fc:1b:f6:37:9c:55:ce: 4d:0b:e0:15:f9:c0:77:7b:b5:4d:25:3b:85:34:ef: 31:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9A:7A:DF:90:A5:94:D5:AF:5B:08:C2:7F:F7:D6:A7:8E:28:F4:8A X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:b1:97:f8:bf:31:fc:95:ad:bc:0e:d9:e2:94:04:6a:98:0c: b9:3f:f2:c4:ad:89:62:bf:69:ae:e5:4a:72:6b:0b:64:55:be: 0e:80:ca:5a:e5:98:87:fc:bb:66:e7:cf:3a:06:d5:d1:a7:15: c5:59:db:b4:73:fc:c7:64:9b:87:c5:ea:df:71:be:94:27:c4: 5b:77:37:18:bd:f2:d4:86:c5:7a:5c:88:47:46:bb:8d:1e:d6: 96:8a:22:83:93:bb:64:13:00:a8:00:c2:c5:06:1a:ab:9f:2b: 8e:08:ff:82:bd:30:32:c4:80:53:10:f7:47:6b:3a:7e:f0:6c: 25:b6:48:8e:db:f0:05:9f:8c:16:63:84:aa:d6:c4:d0:c6:a2: c2:7b:39:86:89:60:cb:e8:f2:c0:f0:3d:f7:62:d3:40:f4:cc: 05:c4:9e:1f:ab:f2:f2:9d:14:8b:8f:50:03:ea:53:20:ae:f0: 42:93:7c:80:22:47:d6:2d:8d:66:a0:0e:a5:5f:1a:cf:27:14: d6:c5:3c:86:da:7c:8c:88:5e:c7:c1:20:49:a7:c4:f3:8d:98: 9e:19:f2:ed:5c:64:57:b2:c0:e9:cc:34:e4:79:ad:e4:8f:56: 64:eb:21:98:6b:ce:6f:e8:4c:0d:c4:5e:68:51:72:75:b7:8a: fa:28:ba:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdpzvq44IsXD0nG/xR9o7d3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjUwNjEzMTUwMTAxWhcNMjUwNjE0MTUwMTAxWjAzMTEwLwYDVQQD EyhkYjlhN2FkZjkwYTU5NGQ1YWY1YjA4YzI3ZmY3ZDZhNzhlMjhmNDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uPUKs8XrpNZ8dm5if5+SoClqFAp Xc1Ftn1283r6nElEPmyo4G4SP0fWb0vvxT4Z8fM/LN9doKMjELrTFRYXgcun8bNE NOWsMGKc6C89UdyCSVaqiZAjumUUHu7wqdtps8rdGdNhzaFtchZFzvUHwEuC8Cg6 XCoH+Fzg8VI4BdwKb92lGnJunyRX3tk+EOHzWbC4u822WxoXONEGsAyyxN31b1So Kveo15hTqO3NkgLPfFXRdwZnjkseSjXWL7u2YsyNlthdn9HF5cQ0ZhXknlRgVY3L +kkGs7nFMYgIczV0zs4oysyP9vwb9jecVc5NC+AV+cB3e7VNJTuFNO8xuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNuaet+QpZTVr1sIwn/31qeOKPSKMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAprGX+L8x /JWtvA7Z4pQEapgMuT/yxK2JYr9pruVKcmsLZFW+DoDKWuWYh/y7ZufPOgbV0acV xVnbtHP8x2Sbh8Xq33G+lCfEW3c3GL3y1IbFelyIR0a7jR7Wlooig5O7ZBMAqADC xQYaq58rjgj/gr0wMsSAUxD3R2s6fvBsJbZIjtvwBZ+MFmOEqtbE0Maiwns5holg y+jywPA992LTQPTMBcSeH6vy8p0Ui49QA+pTIK7wQpN8gCJH1i2NZqAOpV8azycU 1sU8htp8jIhex8EgSafE842Ynhny7VxkV7LA6cw05Hmt5I9WZOshmGvOb+hMDcRe aFFydbeK+ii6RA== -----END CERTIFICATE-----Generated at Fri Jun 13 19:07:09 2025 by rpki-client