$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: PCu7w7y59o+1WIRDbMqpmaeyzySaarec1NBWsd+Y4Zc= Subject key identifier: B9:0E:75:EC:44:72:52:CA:FD:BE:8F:69:1E:64:CC:9A:4E:6D:F8:DE Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019CC8D18ECF4385502FC2ACFBB71904BEDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 1631 Signing time: Sat 07 Mar 2026 15:01:42 +0000 Manifest this update: Sat 07 Mar 2026 15:01:42 +0000 Manifest next update: Sun 08 Mar 2026 15:01:42 +0000 Files and hashes: 1: EwdpgIL9FfCy9ehB3BBTCnpWay4.roa (hash: Zd/Fab+TtV6L026SR3m6Lr9zmEU3BY+Tmm5k2jzHBGA=) 2: I-sMHz5KWaJWWHv8LP-cTbLRlhk.roa (hash: ycdqoFMuV7vOqJ6ik/7TLLM1IrEFNQXg4WIcvH+nbTI=) 3: JltXya391JkGSYwvzrVlrXpnF64.roa (hash: UccBxpSpEJUyYr/IQ7pBmDAl22letmtiDRLPjq3VHKY=) 4: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: Zn7Emji516/vRYW5ITwl8G6BdQ0aDf4hiAtvXjXwpdg=) 5: LjwLBkukbLxUFkuTIfR9w1snMls.roa (hash: 4nFYoBbwhfsOo2OK62wk4BJ40HPGWDvHaokQJOEAsAE=) 6: ObD_iT1UqS396-qKzynzvOWcYVE.roa (hash: MME3dtO0blR3+hlzFcjbnhAzp7Vz9ov/p94b+hvW8jw=) 7: SxsTTQPpb002U8lLZRV6SRhekS0.roa (hash: W+v+QmlBcUbu1220skf3dGHkJEwkEM6pZN3F3mSoEjA=) 8: ZpWVrlMb2NpY8HHQlSRsYYYBuS4.roa (hash: pkrt/UmdtM08Ahi5VFPpOcMkqFc/0tZBQtexbUjXoVw=) 9: _KBQXB2Ok6DxzjcnIQISyeFSnpM.roa (hash: 9HopsVKQdGio4tWIg9WjN9YxEsegpCgT2SWiuwriul0=) 10: _neEZrmq0Ct3kFL__C5GyRs4mP0.roa (hash: 9kAGb49vKmov+gzr6FaaU1iRQWFt3aVXTbBHFybGSGc=) 11: aKANS_nMhqKQxSqYsTLFAPPf4Ac.roa (hash: uM6jlbx5BEyZgSOnEuqPMeNP3j1cSANjK7c9s23dmCw=) 12: c0F1tCgxfTqqtecEpLhL2Yzgotc.roa (hash: kcc7SOAkVdEZqliKSy982SiY2cxq/54ffuzbxdOylbI=) 13: gZ4dcf6HjqfncGGeENClMefPX_s.roa (hash: 0o7ggVRkzqB00ya5tb+jsy9euf5xB6KFOxp5W1g0pVc=) 14: l8zay_INv7E0VzJhTHR34KyIxYU.roa (hash: Ub/uqiz++gX3geu9vGrvci1ULIu9IKfiqiE2f8mI0lM=) 15: mNhJEg8yYPko26xnMlb5p8FIxE0.roa (hash: w9gg5PUiPe908J5vjI6p+AZZqfbQNUOc9hdSAtqhApM=) 16: q6q4U64HI_-eToYoeUgOUPU3KRE.roa (hash: kxmtIIlqbHTH1qvNoBG2/z96qUIjP2N3zilZLCieN00=) 17: sSe9vjQhLXz0LCDCrOhG3-q5jrA.roa (hash: Ks/R2WS3cda1aUMFkl1JkdwTxi5reAccOsu/QKsp7Og=) 18: sohX7LbuAHcvqGne2pID4PK53cs.roa (hash: pnEuUuyYA2H3GexHsPga00jBAH2t730CNd994bqMDuA=) 19: tqXOVuDrdAyLecpEp2l4AMffHAw.roa (hash: zp13fmxJbku6zhMDC/zXyPJnhXVh8hRoWiN4PFSExOM=) 20: tw6AZDGGpP9NxVAB2it1NsPBTW4.roa (hash: IMxXE5hLU1Mm0BQGKqcA2AkFFX2OTXDF0EUw7x9FubM=) 21: xYkYZOmCV58rTJJEdIAsjdVBGXM.roa (hash: eCJXn/CSFpM/78IXFQ7tMZnEX10POhy3RCQh+Y88gTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Mar 2026 15:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:c8:d1:8e:cf:43:85:50:2f:c2:ac:fb:b7:19:04:be:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Mar 7 15:01:42 2026 GMT Not After : Mar 8 15:01:42 2026 GMT Subject: CN=b90e75ec447252cafdbe8f691e64cc9a4e6df8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4e:6d:51:a4:54:20:e7:31:4a:cf:59:af:a3: c4:64:06:df:65:9c:77:fb:dd:1c:b4:1d:df:11:63: 7e:84:37:61:32:a7:89:f7:a7:7a:b9:f5:76:8f:6b: 50:02:20:0a:d7:0d:4c:f6:1a:96:b5:b9:c4:93:81: 1a:79:93:ce:f1:8b:52:f4:d0:f2:12:83:dd:66:cf: ed:c7:b3:93:58:cc:cb:e9:44:3d:86:b0:97:8d:ee: cf:b8:79:88:a5:fa:a7:7f:26:31:0a:dc:b2:c3:90: 1c:bc:8c:3a:5e:ac:02:6b:39:b7:e8:dc:44:8a:17: ed:6d:06:32:9f:eb:ea:80:14:91:c3:60:31:e6:0f: be:0c:b6:94:59:85:66:f5:80:19:94:d3:d8:41:39: 5a:a0:1c:9f:dd:9f:61:01:33:42:4b:a1:ec:30:a3: b2:bc:2d:3b:fa:60:a7:a3:ea:5d:59:2e:3d:d0:1b: e9:49:2c:5a:43:17:17:63:7e:41:9e:16:c7:e8:9f: de:53:d7:51:24:72:c8:d3:16:8c:45:5c:14:cd:af: bd:8c:07:47:cf:c0:01:a8:21:a0:bc:8b:26:8f:7f: aa:4b:ff:55:69:2d:01:f8:c6:c3:e5:c6:02:c0:2b: d8:21:f2:aa:64:15:89:cf:44:5e:4f:97:6d:7f:ce: 49:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0E:75:EC:44:72:52:CA:FD:BE:8F:69:1E:64:CC:9A:4E:6D:F8:DE X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:9f:d6:87:8e:67:0a:81:26:d7:f6:bd:be:aa:2b:8d:85:19: 2a:ca:7f:f3:b9:cb:89:6b:53:7f:5d:17:3d:47:86:ea:52:61: 40:f1:45:09:ea:60:ce:e4:8d:ee:4f:68:c5:e1:99:32:cc:63: 40:14:0e:6c:94:80:06:7c:1b:be:d6:54:d8:bf:a1:9c:ac:ff: 91:bc:f4:5d:a8:e3:11:0b:95:c9:81:7f:79:41:ae:88:a8:32: d0:ed:da:ba:e9:e3:4c:da:b5:14:23:ac:32:35:59:d9:5e:a5: 95:e9:a8:4f:91:ab:c9:a3:b7:19:d4:8d:e5:b5:cd:21:55:46: 73:60:35:76:a2:9c:58:d5:63:30:db:a7:2c:84:0c:91:b3:b3: e9:dd:12:40:de:87:d6:d9:3b:ae:23:89:a4:25:9f:a5:0a:b6: 6d:2f:85:11:7d:5a:b8:a2:5c:ab:7b:c6:73:bd:74:20:b7:99: 03:4b:64:d8:d9:1c:43:b0:78:74:51:0e:6c:8d:5b:95:d2:b6: 6d:df:ee:46:04:5b:d4:f4:65:d4:b8:c7:bc:e1:2c:ff:04:29: 46:04:9b:00:73:74:f9:1b:0e:3f:7d:8d:55:33:bb:c0:ff:59: e5:ad:68:ee:42:13:e7:d4:54:5a:25:25:c9:4f:fe:3f:34:5d: 45:24:25:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzI0Y7PQ4VQL8Ks+7cZBL7dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjYwMzA3MTUwMTQyWhcNMjYwMzA4MTUwMTQyWjAzMTEwLwYDVQQD EyhiOTBlNzVlYzQ0NzI1MmNhZmRiZThmNjkxZTY0Y2M5YTRlNmRmOGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk5tUaRUIOcxSs9Zr6PEZAbfZZx3 +90ctB3fEWN+hDdhMqeJ96d6ufV2j2tQAiAK1w1M9hqWtbnEk4EaeZPO8YtS9NDy EoPdZs/tx7OTWMzL6UQ9hrCXje7PuHmIpfqnfyYxCtyyw5AcvIw6XqwCazm36NxE ihftbQYyn+vqgBSRw2Ax5g++DLaUWYVm9YAZlNPYQTlaoByf3Z9hATNCS6HsMKOy vC07+mCno+pdWS490BvpSSxaQxcXY35BnhbH6J/eU9dRJHLI0xaMRVwUza+9jAdH z8ABqCGgvIsmj3+qS/9VaS0B+MbD5cYCwCvYIfKqZBWJz0ReT5dtf85JjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkOdexEclLK/b6PaR5kzJpObfjeMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJ/Wh45n CoEm1/a9vqorjYUZKsp/87nLiWtTf10XPUeG6lJhQPFFCepgzuSN7k9oxeGZMsxj QBQObJSABnwbvtZU2L+hnKz/kbz0XajjEQuVyYF/eUGuiKgy0O3auunjTNq1FCOs MjVZ2V6llemoT5GryaO3GdSN5bXNIVVGc2A1dqKcWNVjMNunLIQMkbOz6d0SQN6H 1tk7riOJpCWfpQq2bS+FEX1auKJcq3vGc710ILeZA0tk2NkcQ7B4dFEObI1bldK2 bd/uRgRb1PRl1LjHvOEs/wQpRgSbAHN0+RsOP32NVTO7wP9Z5a1o7kIT59RUWiUl yU/+PzRdRSQlZA== -----END CERTIFICATE-----Generated at Sun Mar 8 00:26:24 2026 by rpki-client