$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: 5ypbcjBY1qdW+66UDZHnkwPgujnAg712Xm4sUYnzTOI= Subject key identifier: 84:E3:79:F1:24:27:46:7A:45:36:E2:EB:0C:16:1E:D8:00:01:2A:E0 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019835DE6E440088689C63CD3C7ECD588FB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 13CD Signing time: Wed 23 Jul 2025 06:00:26 +0000 Manifest this update: Wed 23 Jul 2025 06:00:26 +0000 Manifest next update: Thu 24 Jul 2025 06:00:26 +0000 Files and hashes: 1: 3_PU79fuHYEhPlNdsJUuZYubgqE.roa (hash: XJWOGH/fcmWGI7b/RAY8L2wuvZcYBFbJ22ImnM+pQlo=) 2: 6ZciseV0h3pH3lp0hLyZ992TdQQ.roa (hash: sFwBr6Wh0TdrZtVAujkppJqtVxS3U22k/6YTX59vUaI=) 3: 6nGhmoSDQSpfjNNYdXCrQWERlIk.roa (hash: /4N+szUgXgcEHHrQDjyOBrtHm4Pkc7NrFhdRQABicbY=) 4: 7HPt5nannhv2gwbAHwaRC5RFFDM.roa (hash: UBw+74e6x0xFF9XFftGKU2o22p62byiADLv5iJRfz1g=) 5: 8Bl_uVVQOuNTAYB4MJGJvtmHpC0.roa (hash: TlelRdg2AvLDMhtiuqfO42FikSgwVhiKJDAQT7WdJj0=) 6: 8YmL9Ep32a72BjjrjP1j1JO7b5Q.roa (hash: Ht29fppl19fG6SkxbeWiQ7UIPOPKrDH3yWJ3G4r6GG4=) 7: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: LECt3fp+saqu2emXPvRwAJ0or7ljO7rf4VL6aeNyuxw=) 8: M2zzd8H-Tlg7XAdTwUQjLUYGllY.roa (hash: ETq98V9SXDP0t347M1cA3yCogqTqQCthqQp4LwB/LXQ=) 9: M97ZcKaRZuOa3DTXxLHlO-RLatQ.roa (hash: w0gHLxi0MpSA4Cow6J8TG6Bmoy7AY86PSwg5UsV2kcM=) 10: Qb_xgsenhCkec0NMAq-37FxvC-Q.roa (hash: tOjmdfLGRrXXOfqXX2/nLImlZVzeIuD2NtgFbQbxXvU=) 11: WHIHIqWEsALKLs5d6Q-tOWQCla8.roa (hash: hEIDrElaFaUvEVn72pSS3zv8TkwlJYcJGyPsidxg2tA=) 12: a9iv50ooVHm1APCybq4owIunnG8.roa (hash: phKXw/sbpuIWnctwyonEWyJEOXe+K9H58t2l6qBy6tg=) 13: dVb7hZhGuZRTM--X8lkrhzF2Q7Y.roa (hash: EVPzk1PreoChl9YjAauXazZeGF8twPM0Bys79KZjvx8=) 14: iDsGG6EDS8fs9Hct4p8CitByvws.roa (hash: ch//5WVE7dA9hut4Enr9j7EKe84fcI2Ykg7l+3xy19U=) 15: jX4WFfpxo3HHZpB1YZxC4p_jFpo.roa (hash: HvcFd2uvN4vxiceLP8NW4lHvaK1pmADob7hykxb6+nc=) 16: pGGDoeGnPksdWvYsReZKh3O6puY.roa (hash: xGeOEw9UbAQAfMawzQlzpH9iOWa+z4LqLDy15zn/jN0=) 17: wnaVByUU9rLY0lixJG-AIxAIIKk.roa (hash: uZB4+jtFO740w1LWkNgD8gNKmUM01C7fhf/4nIXCJmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:35:de:6e:44:00:88:68:9c:63:cd:3c:7e:cd:58:8f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Jul 23 06:00:26 2025 GMT Not After : Jul 24 06:00:26 2025 GMT Subject: CN=84e379f12427467a4536e2eb0c161ed800012ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6e:2a:56:bc:de:c0:75:2a:e0:16:0b:2b:2a: c3:13:4b:c6:ec:51:7d:1c:e2:7b:b7:9d:87:20:64: de:fb:bf:4c:34:90:4e:d2:be:df:ba:34:f3:b7:ff: 67:0a:4c:d7:9b:94:23:5f:df:cd:77:32:e0:cb:4f: 77:42:09:be:b2:0e:30:3b:bc:79:00:a0:49:88:36: a9:47:39:95:fc:30:65:13:2c:40:2c:86:98:8b:a7: 96:37:10:a0:65:26:9e:ee:cb:51:d1:f5:a4:1d:c7: f3:29:1a:11:01:3e:03:30:c6:a4:9e:3c:fc:6d:09: 4b:fe:2a:61:12:9e:fb:7a:d7:27:4b:17:82:6d:04: 95:9f:8e:46:ee:62:bd:40:3c:24:50:05:dd:6d:dc: a5:b9:d3:a7:69:60:98:3e:fe:be:c6:14:8e:9a:35: 4b:4c:6c:ae:7e:7f:d9:4e:37:e7:ff:d4:57:f4:2e: 5c:67:70:7f:38:e2:7c:8d:10:0d:42:91:6b:37:f7: fe:98:d6:5e:53:13:73:fb:b0:ef:b1:8e:66:36:fa: 18:33:37:f8:41:db:42:9d:10:bc:74:7f:9d:1c:73: 30:d7:4a:0c:c8:b2:c1:96:e0:27:2d:ae:77:49:da: e4:54:c4:23:e6:f1:c5:46:89:37:b8:c7:18:5e:65: a2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E3:79:F1:24:27:46:7A:45:36:E2:EB:0C:16:1E:D8:00:01:2A:E0 X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:75:d0:8b:9b:e6:a4:e5:c9:b2:d0:07:6c:d6:80:a8:7c:96: 3e:04:ec:3f:f5:2d:6b:18:5f:a5:15:e2:0e:8b:38:e3:9d:93: 4c:1f:46:63:1b:91:c1:06:4b:bd:12:7c:d1:a4:b9:03:0e:60: 1f:fc:85:69:f3:e7:1f:fa:01:76:25:64:ad:0f:a9:0d:57:9d: 71:aa:37:c8:4d:17:a9:e7:58:d9:0e:4f:44:f6:5b:ba:c5:58: 6a:e0:77:dd:0c:93:3f:d1:aa:a9:7f:07:18:3c:d0:7a:ad:f1: 3b:1c:70:2a:5e:61:13:30:a9:0b:b5:a2:68:c1:f1:b5:d0:f5: 96:4c:31:57:b8:d0:00:73:71:88:d4:c1:05:1e:39:b0:b0:29: 13:a9:f6:c5:92:ee:78:76:09:44:c1:2f:f3:94:1a:5e:e8:78: bc:f8:4e:6d:d8:96:49:bd:0f:7e:3e:4b:54:08:f8:72:cd:a1: be:f2:93:d8:78:d0:9e:4f:27:79:41:f6:f7:61:28:6d:28:7d: 5d:0c:c5:58:b3:18:f9:43:f7:f7:97:4a:84:4f:4f:93:e6:94: fe:3e:82:aa:9b:cf:ee:45:05:3c:30:b2:31:81:89:7a:45:ca: 25:11:e3:78:a6:f3:bf:b5:bd:f4:8e:ba:12:74:ec:c9:c1:4a: ef:d8:4d:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg13m5EAIhonGPNPH7NWI+4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjUwNzIzMDYwMDI2WhcNMjUwNzI0MDYwMDI2WjAzMTEwLwYDVQQD Eyg4NGUzNzlmMTI0Mjc0NjdhNDUzNmUyZWIwYzE2MWVkODAwMDEyYWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs24qVrzewHUq4BYLKyrDE0vG7FF9 HOJ7t52HIGTe+79MNJBO0r7fujTzt/9nCkzXm5QjX9/NdzLgy093Qgm+sg4wO7x5 AKBJiDapRzmV/DBlEyxALIaYi6eWNxCgZSae7stR0fWkHcfzKRoRAT4DMMaknjz8 bQlL/iphEp77etcnSxeCbQSVn45G7mK9QDwkUAXdbdyludOnaWCYPv6+xhSOmjVL TGyufn/ZTjfn/9RX9C5cZ3B/OOJ8jRANQpFrN/f+mNZeUxNz+7DvsY5mNvoYMzf4 QdtCnRC8dH+dHHMw10oMyLLBluAnLa53SdrkVMQj5vHFRok3uMcYXmWicwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITjefEkJ0Z6RTbi6wwWHtgAASrgMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHXQi5vm pOXJstAHbNaAqHyWPgTsP/UtaxhfpRXiDos4452TTB9GYxuRwQZLvRJ80aS5Aw5g H/yFafPnH/oBdiVkrQ+pDVedcao3yE0XqedY2Q5PRPZbusVYauB33QyTP9GqqX8H GDzQeq3xOxxwKl5hEzCpC7WiaMHxtdD1lkwxV7jQAHNxiNTBBR45sLApE6n2xZLu eHYJRMEv85QaXuh4vPhObdiWSb0Pfj5LVAj4cs2hvvKT2HjQnk8neUH292EobSh9 XQzFWLMY+UP395dKhE9Pk+aU/j6CqpvP7kUFPDCyMYGJekXKJRHjeKbzv7W99I66 EnTsycFK79hNvg== -----END CERTIFICATE-----Generated at Wed Jul 23 07:42:24 2025 by rpki-client