$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: /MvuxUl7zj0AxFsey4N3L6rpP3jyBXyTtb+VzHj2GJ4= Subject key identifier: 78:7E:F6:00:23:8C:D2:4A:8B:C6:6C:D4:70:08:EA:D6:AF:30:82:7A Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 0197432F3F9614B6A25CE577D8FA048F206C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 134E Signing time: Fri 06 Jun 2025 03:00:59 +0000 Manifest this update: Fri 06 Jun 2025 03:00:59 +0000 Manifest next update: Sat 07 Jun 2025 03:00:59 +0000 Files and hashes: 1: 3_PU79fuHYEhPlNdsJUuZYubgqE.roa (hash: XJWOGH/fcmWGI7b/RAY8L2wuvZcYBFbJ22ImnM+pQlo=) 2: 6ZciseV0h3pH3lp0hLyZ992TdQQ.roa (hash: sFwBr6Wh0TdrZtVAujkppJqtVxS3U22k/6YTX59vUaI=) 3: 6nGhmoSDQSpfjNNYdXCrQWERlIk.roa (hash: /4N+szUgXgcEHHrQDjyOBrtHm4Pkc7NrFhdRQABicbY=) 4: 7HPt5nannhv2gwbAHwaRC5RFFDM.roa (hash: UBw+74e6x0xFF9XFftGKU2o22p62byiADLv5iJRfz1g=) 5: KUk-CSFCGROoWRr0bn1g2QgmGDo.roa (hash: UpwZsPUmRF6H+YvfEB2+WDVmprsNudTy1jgLuv//feE=) 6: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: +Ek5i608uEqqg+YoA5fMAiFxEBfeQoVJLFHb7Xf0tiw=) 7: M2zzd8H-Tlg7XAdTwUQjLUYGllY.roa (hash: ETq98V9SXDP0t347M1cA3yCogqTqQCthqQp4LwB/LXQ=) 8: M97ZcKaRZuOa3DTXxLHlO-RLatQ.roa (hash: w0gHLxi0MpSA4Cow6J8TG6Bmoy7AY86PSwg5UsV2kcM=) 9: NZa0gIfmJGTWop9klB_kmws3bBk.roa (hash: EJR++Bc5Re9D8wlLY18Cmifrl1rYRjuKt7sbeibsf5k=) 10: WHIHIqWEsALKLs5d6Q-tOWQCla8.roa (hash: hEIDrElaFaUvEVn72pSS3zv8TkwlJYcJGyPsidxg2tA=) 11: a9iv50ooVHm1APCybq4owIunnG8.roa (hash: phKXw/sbpuIWnctwyonEWyJEOXe+K9H58t2l6qBy6tg=) 12: dVb7hZhGuZRTM--X8lkrhzF2Q7Y.roa (hash: EVPzk1PreoChl9YjAauXazZeGF8twPM0Bys79KZjvx8=) 13: iDsGG6EDS8fs9Hct4p8CitByvws.roa (hash: ch//5WVE7dA9hut4Enr9j7EKe84fcI2Ykg7l+3xy19U=) 14: jX4WFfpxo3HHZpB1YZxC4p_jFpo.roa (hash: HvcFd2uvN4vxiceLP8NW4lHvaK1pmADob7hykxb6+nc=) 15: pGGDoeGnPksdWvYsReZKh3O6puY.roa (hash: xGeOEw9UbAQAfMawzQlzpH9iOWa+z4LqLDy15zn/jN0=) 16: wnaVByUU9rLY0lixJG-AIxAIIKk.roa (hash: uZB4+jtFO740w1LWkNgD8gNKmUM01C7fhf/4nIXCJmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 20:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:43:2f:3f:96:14:b6:a2:5c:e5:77:d8:fa:04:8f:20:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Jun 6 03:00:59 2025 GMT Not After : Jun 7 03:00:59 2025 GMT Subject: CN=787ef600238cd24a8bc66cd47008ead6af30827a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a4:1c:79:d1:a0:de:b9:74:6e:de:de:92:03: b4:97:37:c9:27:cf:a6:92:96:30:a8:67:ff:25:a4: 69:d7:19:ab:fa:64:13:6c:de:39:67:65:ad:2c:86: fb:b2:77:16:a6:2c:fc:62:1f:27:d6:8a:39:8e:66: 46:09:9e:94:16:2b:0f:14:7f:59:e0:10:2c:85:6f: 2e:ba:05:8a:e5:59:f4:2e:9a:94:cc:ca:70:f8:e5: 86:3e:6a:4d:35:18:c2:c2:6b:10:7d:2f:be:2d:eb: 89:45:11:5c:1d:6d:20:92:9e:ba:30:9a:a1:77:01: 50:bb:f3:02:f0:c2:41:b9:28:ae:40:91:59:08:04: 61:43:f8:c2:02:8b:88:fe:fa:f6:b5:61:5a:cf:0d: 2d:6b:98:06:1a:01:00:a6:1a:82:68:d9:84:32:0a: 39:5b:f1:ad:07:5b:1a:d0:cd:a1:29:2b:3a:dd:b9: 40:e8:88:0b:de:f5:f1:96:af:bb:f3:06:3d:2f:2f: 60:cf:64:a3:a5:e2:3d:b5:93:14:45:8d:77:d7:0c: b1:9b:c2:2e:c0:1c:b5:19:6a:74:73:43:5d:c3:03: 37:0c:ea:f0:af:08:c0:a7:1c:9b:dc:e5:d8:ab:77: e2:2e:82:38:15:24:c4:96:87:f4:2d:71:d1:e0:1f: c2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7E:F6:00:23:8C:D2:4A:8B:C6:6C:D4:70:08:EA:D6:AF:30:82:7A X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:ae:81:c1:e4:13:bc:f6:70:2c:57:4b:41:0a:e8:91:38:35: 01:39:86:41:15:06:bb:93:62:1c:63:34:84:45:b1:f1:c8:c1: a5:7a:47:ac:44:88:92:bc:a6:36:15:28:b2:3d:1a:9a:e2:dc: a8:9d:71:3b:0e:4a:aa:65:c9:0b:ad:6e:57:51:24:7f:87:37: 72:b3:c4:54:c7:93:79:2e:11:29:be:69:cb:f6:dd:7a:c9:2d: e5:ea:7b:34:0c:5f:5c:5f:cf:3c:48:c9:00:de:5f:b8:34:57: 4e:5d:fd:8a:15:30:fb:c5:fd:d7:34:1b:43:57:93:14:46:ad: 0f:37:81:22:8a:c5:34:2e:11:47:07:ae:fc:a0:7a:c6:83:35: f3:fb:b8:8e:d1:43:f7:5e:92:29:a0:9e:06:e2:b1:f6:9f:2c: 31:d2:41:64:20:37:2d:50:17:81:ca:c1:d9:93:c1:e0:39:48: c2:25:56:93:92:1d:59:89:9f:9f:b4:ee:3a:11:64:af:35:42: 0f:40:86:ac:f9:c5:15:52:6a:63:22:e2:7a:9f:c3:d5:52:57: ef:c7:73:ee:ac:0c:da:a6:21:05:55:c7:a1:b9:89:68:5c:b7: d5:7e:7e:5c:e5:c9:b1:87:7e:f7:01:06:ae:a7:97:5d:38:aa: 6d:51:c3:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdDLz+WFLaiXOV32PoEjyBsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjUwNjA2MDMwMDU5WhcNMjUwNjA3MDMwMDU5WjAzMTEwLwYDVQQD Eyg3ODdlZjYwMDIzOGNkMjRhOGJjNjZjZDQ3MDA4ZWFkNmFmMzA4MjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaQcedGg3rl0bt7ekgO0lzfJJ8+m kpYwqGf/JaRp1xmr+mQTbN45Z2WtLIb7sncWpiz8Yh8n1oo5jmZGCZ6UFisPFH9Z 4BAshW8uugWK5Vn0LpqUzMpw+OWGPmpNNRjCwmsQfS++LeuJRRFcHW0gkp66MJqh dwFQu/MC8MJBuSiuQJFZCARhQ/jCAouI/vr2tWFazw0ta5gGGgEAphqCaNmEMgo5 W/GtB1sa0M2hKSs63blA6IgL3vXxlq+78wY9Ly9gz2SjpeI9tZMURY131wyxm8Iu wBy1GWp0c0NdwwM3DOrwrwjApxyb3OXYq3fiLoI4FSTElof0LXHR4B/CRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHh+9gAjjNJKi8Zs1HAI6tavMIJ6MB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsq6BweQT vPZwLFdLQQrokTg1ATmGQRUGu5NiHGM0hEWx8cjBpXpHrESIkrymNhUosj0amuLc qJ1xOw5KqmXJC61uV1Ekf4c3crPEVMeTeS4RKb5py/bdeskt5ep7NAxfXF/PPEjJ AN5fuDRXTl39ihUw+8X91zQbQ1eTFEatDzeBIorFNC4RRweu/KB6xoM18/u4jtFD 916SKaCeBuKx9p8sMdJBZCA3LVAXgcrB2ZPB4DlIwiVWk5IdWYmfn7TuOhFkrzVC D0CGrPnFFVJqYyLiep/D1VJX78dz7qwM2qYhBVXHobmJaFy31X5+XOXJsYd+9wEG rqeXXTiqbVHDgw== -----END CERTIFICATE-----Generated at Fri Jun 6 04:57:24 2025 by rpki-client