$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: DiyNp2oBhioqunlXO5CSrh7j/LK9vikTTW0O44Qi9Qs= Subject key identifier: 07:65:8B:58:2F:84:6E:93:C7:2A:AC:DD:9B:57:50:71:D7:AA:70:85 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019DB2EBB92CE1D12EA0314A03CEF806A037 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 16AB Signing time: Wed 22 Apr 2026 02:01:25 +0000 Manifest this update: Wed 22 Apr 2026 02:01:25 +0000 Manifest next update: Thu 23 Apr 2026 02:01:25 +0000 Files and hashes: 1: EwdpgIL9FfCy9ehB3BBTCnpWay4.roa (hash: Zd/Fab+TtV6L026SR3m6Lr9zmEU3BY+Tmm5k2jzHBGA=) 2: I-sMHz5KWaJWWHv8LP-cTbLRlhk.roa (hash: ycdqoFMuV7vOqJ6ik/7TLLM1IrEFNQXg4WIcvH+nbTI=) 3: JltXya391JkGSYwvzrVlrXpnF64.roa (hash: UccBxpSpEJUyYr/IQ7pBmDAl22letmtiDRLPjq3VHKY=) 4: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: 6pZ2AvM106Ay3v56wvbR+Rmov27bcdcE61hluYgtx0o=) 5: LjwLBkukbLxUFkuTIfR9w1snMls.roa (hash: 4nFYoBbwhfsOo2OK62wk4BJ40HPGWDvHaokQJOEAsAE=) 6: SxsTTQPpb002U8lLZRV6SRhekS0.roa (hash: W+v+QmlBcUbu1220skf3dGHkJEwkEM6pZN3F3mSoEjA=) 7: ZpWVrlMb2NpY8HHQlSRsYYYBuS4.roa (hash: pkrt/UmdtM08Ahi5VFPpOcMkqFc/0tZBQtexbUjXoVw=) 8: _KBQXB2Ok6DxzjcnIQISyeFSnpM.roa (hash: 9HopsVKQdGio4tWIg9WjN9YxEsegpCgT2SWiuwriul0=) 9: _neEZrmq0Ct3kFL__C5GyRs4mP0.roa (hash: 9kAGb49vKmov+gzr6FaaU1iRQWFt3aVXTbBHFybGSGc=) 10: aKANS_nMhqKQxSqYsTLFAPPf4Ac.roa (hash: uM6jlbx5BEyZgSOnEuqPMeNP3j1cSANjK7c9s23dmCw=) 11: c0F1tCgxfTqqtecEpLhL2Yzgotc.roa (hash: kcc7SOAkVdEZqliKSy982SiY2cxq/54ffuzbxdOylbI=) 12: gZ4dcf6HjqfncGGeENClMefPX_s.roa (hash: 0o7ggVRkzqB00ya5tb+jsy9euf5xB6KFOxp5W1g0pVc=) 13: l8zay_INv7E0VzJhTHR34KyIxYU.roa (hash: Ub/uqiz++gX3geu9vGrvci1ULIu9IKfiqiE2f8mI0lM=) 14: mNhJEg8yYPko26xnMlb5p8FIxE0.roa (hash: w9gg5PUiPe908J5vjI6p+AZZqfbQNUOc9hdSAtqhApM=) 15: q6q4U64HI_-eToYoeUgOUPU3KRE.roa (hash: kxmtIIlqbHTH1qvNoBG2/z96qUIjP2N3zilZLCieN00=) 16: sSe9vjQhLXz0LCDCrOhG3-q5jrA.roa (hash: Ks/R2WS3cda1aUMFkl1JkdwTxi5reAccOsu/QKsp7Og=) 17: sohX7LbuAHcvqGne2pID4PK53cs.roa (hash: pnEuUuyYA2H3GexHsPga00jBAH2t730CNd994bqMDuA=) 18: tqXOVuDrdAyLecpEp2l4AMffHAw.roa (hash: zp13fmxJbku6zhMDC/zXyPJnhXVh8hRoWiN4PFSExOM=) 19: tw6AZDGGpP9NxVAB2it1NsPBTW4.roa (hash: IMxXE5hLU1Mm0BQGKqcA2AkFFX2OTXDF0EUw7x9FubM=) 20: xYkYZOmCV58rTJJEdIAsjdVBGXM.roa (hash: eCJXn/CSFpM/78IXFQ7tMZnEX10POhy3RCQh+Y88gTU=) 21: yJoN1VaNgltdfpP-maVQQcOYy_8.roa (hash: DoE5yzS7wJT/6cfhAeXgd5cw2cfQnuSELoHqvY9h2n8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 21:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:b2:eb:b9:2c:e1:d1:2e:a0:31:4a:03:ce:f8:06:a0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Apr 22 02:01:25 2026 GMT Not After : Apr 23 02:01:25 2026 GMT Subject: CN=07658b582f846e93c72aacdd9b575071d7aa7085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1c:ff:c5:b9:f3:71:79:ba:80:81:52:71:c8: b5:aa:85:ba:bb:5d:83:9b:f4:f2:eb:42:80:2b:e6: 27:33:37:c9:d6:82:a9:33:bb:ea:74:70:4e:8d:1c: 63:4e:15:65:1c:7a:f3:4d:2d:ea:60:a3:78:14:b3: 09:7c:ed:1a:b1:6b:96:b2:32:1d:ec:21:23:48:e6: a8:c5:c0:3b:95:c9:cc:34:33:52:27:74:ce:8a:be: 03:f6:4f:55:8e:9a:37:ae:a4:c4:bd:41:b5:ee:6b: 7f:a4:9e:b8:9d:2c:c1:43:48:0b:b9:0a:bc:d2:e9: c8:e0:de:fc:a2:22:f0:64:24:ff:12:3d:11:92:fd: b7:f5:ea:ae:b9:9c:7e:8d:ae:9c:34:f0:82:86:4d: da:f7:2b:40:7c:54:62:7c:23:39:26:f1:ff:2a:fb: eb:8e:65:bd:d0:e5:07:2d:b8:2f:aa:6d:77:bd:c6: 5f:da:13:d8:93:c6:ee:e7:9c:23:11:c1:de:93:80: 9b:46:a9:08:fc:bc:a9:6d:e9:18:75:22:b8:0e:1c: 9c:7c:20:2e:d9:ee:29:e7:05:d7:3a:55:74:1d:99: 34:aa:3b:9d:08:b0:e3:85:73:97:6f:a9:b7:20:84: af:35:13:b0:27:f1:20:bc:32:b3:ee:c1:ce:de:83: c5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:65:8B:58:2F:84:6E:93:C7:2A:AC:DD:9B:57:50:71:D7:AA:70:85 X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:0f:09:e8:71:09:bf:53:3b:84:b1:6e:72:f5:d1:61:de:bd: 1b:68:1e:87:6e:d1:ab:37:a2:c7:96:8f:d3:7e:cb:4c:fa:90: 25:78:9a:03:6b:01:e3:44:f0:f1:a8:5d:4c:64:c5:0d:5d:cb: d2:26:02:5f:bd:d3:5d:f1:9e:aa:9c:c7:af:23:ff:02:9d:2a: 5c:cb:31:4c:7c:4e:f5:78:c2:cd:bd:fa:ad:da:0e:fd:20:2d: 7a:c2:e2:7f:16:d2:98:a0:31:6d:44:87:16:ae:75:98:36:b1: da:97:93:eb:f7:47:e1:14:96:df:25:5f:fd:58:94:ea:9f:6b: 77:87:e3:e0:77:c1:f9:52:cf:bf:ab:f8:68:fe:db:73:bf:21: bc:f4:ea:60:67:95:2a:92:ea:4f:cd:2e:93:66:bb:35:34:c7: a0:c2:fa:6f:61:f2:c1:60:31:2e:27:11:85:ed:91:a6:84:5a: 90:52:90:dd:9d:28:31:0b:41:0c:16:42:16:87:6d:2b:1a:76: 0a:7f:bf:c3:4f:46:9f:33:d7:e1:6f:be:08:87:4c:2f:0c:6e: 91:ea:25:14:01:52:54:0f:57:94:00:00:58:63:46:10:7b:6b: 11:2d:5e:ef:0e:09:ac:b5:67:11:5d:15:2c:a5:77:bc:f4:a8: 5b:76:a2:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2y67ks4dEuoDFKA874BqA3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjYwNDIyMDIwMTI1WhcNMjYwNDIzMDIwMTI1WjAzMTEwLwYDVQQD EygwNzY1OGI1ODJmODQ2ZTkzYzcyYWFjZGQ5YjU3NTA3MWQ3YWE3MDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxz/xbnzcXm6gIFScci1qoW6u12D m/Ty60KAK+YnMzfJ1oKpM7vqdHBOjRxjThVlHHrzTS3qYKN4FLMJfO0asWuWsjId 7CEjSOaoxcA7lcnMNDNSJ3TOir4D9k9Vjpo3rqTEvUG17mt/pJ64nSzBQ0gLuQq8 0unI4N78oiLwZCT/Ej0Rkv239equuZx+ja6cNPCChk3a9ytAfFRifCM5JvH/Kvvr jmW90OUHLbgvqm13vcZf2hPYk8bu55wjEcHek4CbRqkI/LypbekYdSK4DhycfCAu 2e4p5wXXOlV0HZk0qjudCLDjhXOXb6m3IISvNROwJ/EgvDKz7sHO3oPFLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdli1gvhG6Txyqs3ZtXUHHXqnCFMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQ8J6HEJ v1M7hLFucvXRYd69G2geh27Rqzeix5aP037LTPqQJXiaA2sB40Tw8ahdTGTFDV3L 0iYCX73TXfGeqpzHryP/Ap0qXMsxTHxO9XjCzb36rdoO/SAtesLifxbSmKAxbUSH Fq51mDax2peT6/dH4RSW3yVf/ViU6p9rd4fj4HfB+VLPv6v4aP7bc78hvPTqYGeV KpLqT80uk2a7NTTHoML6b2HywWAxLicRhe2RpoRakFKQ3Z0oMQtBDBZCFodtKxp2 Cn+/w09GnzPX4W++CIdMLwxukeolFAFSVA9XlAAAWGNGEHtrES1e7w4JrLVnEV0V LKV3vPSoW3aiZQ== -----END CERTIFICATE-----Generated at Wed Apr 22 05:18:54 2026 by rpki-client