$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: PR/L9wFLBtWzO2lJnSJX0zJUZkyRWh+KuA6ktRu/dtI= Subject key identifier: 2D:69:79:C0:80:D0:50:6D:E3:59:EE:6D:5B:DB:39:F3:2F:73:F1:1F Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 0199228C6DDEFE3F2E3B577FD2D4B4E5E86D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 1448 Signing time: Sun 07 Sep 2025 05:00:52 +0000 Manifest this update: Sun 07 Sep 2025 05:00:52 +0000 Manifest next update: Mon 08 Sep 2025 05:00:52 +0000 Files and hashes: 1: 3_PU79fuHYEhPlNdsJUuZYubgqE.roa (hash: XJWOGH/fcmWGI7b/RAY8L2wuvZcYBFbJ22ImnM+pQlo=) 2: 6ZciseV0h3pH3lp0hLyZ992TdQQ.roa (hash: sFwBr6Wh0TdrZtVAujkppJqtVxS3U22k/6YTX59vUaI=) 3: 6nGhmoSDQSpfjNNYdXCrQWERlIk.roa (hash: /4N+szUgXgcEHHrQDjyOBrtHm4Pkc7NrFhdRQABicbY=) 4: 7HPt5nannhv2gwbAHwaRC5RFFDM.roa (hash: UBw+74e6x0xFF9XFftGKU2o22p62byiADLv5iJRfz1g=) 5: 8Bl_uVVQOuNTAYB4MJGJvtmHpC0.roa (hash: TlelRdg2AvLDMhtiuqfO42FikSgwVhiKJDAQT7WdJj0=) 6: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: cvbC9pi/vTRuGgLWZN5msBR1IyS/sIGg3sFdpAUU9hk=) 7: M2zzd8H-Tlg7XAdTwUQjLUYGllY.roa (hash: ETq98V9SXDP0t347M1cA3yCogqTqQCthqQp4LwB/LXQ=) 8: M97ZcKaRZuOa3DTXxLHlO-RLatQ.roa (hash: w0gHLxi0MpSA4Cow6J8TG6Bmoy7AY86PSwg5UsV2kcM=) 9: Qb_xgsenhCkec0NMAq-37FxvC-Q.roa (hash: tOjmdfLGRrXXOfqXX2/nLImlZVzeIuD2NtgFbQbxXvU=) 10: WHIHIqWEsALKLs5d6Q-tOWQCla8.roa (hash: hEIDrElaFaUvEVn72pSS3zv8TkwlJYcJGyPsidxg2tA=) 11: a9iv50ooVHm1APCybq4owIunnG8.roa (hash: phKXw/sbpuIWnctwyonEWyJEOXe+K9H58t2l6qBy6tg=) 12: dVb7hZhGuZRTM--X8lkrhzF2Q7Y.roa (hash: EVPzk1PreoChl9YjAauXazZeGF8twPM0Bys79KZjvx8=) 13: iDsGG6EDS8fs9Hct4p8CitByvws.roa (hash: ch//5WVE7dA9hut4Enr9j7EKe84fcI2Ykg7l+3xy19U=) 14: jX4WFfpxo3HHZpB1YZxC4p_jFpo.roa (hash: HvcFd2uvN4vxiceLP8NW4lHvaK1pmADob7hykxb6+nc=) 15: pGGDoeGnPksdWvYsReZKh3O6puY.roa (hash: xGeOEw9UbAQAfMawzQlzpH9iOWa+z4LqLDy15zn/jN0=) 16: wnaVByUU9rLY0lixJG-AIxAIIKk.roa (hash: uZB4+jtFO740w1LWkNgD8gNKmUM01C7fhf/4nIXCJmw=) 17: ybngJ4bltqGaCJZ0PyEHE7kdYc8.roa (hash: HpM50WuhG0t+PfyJWJJeovM9AbhjDbCj5u+lO3n/X0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 05:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:22:8c:6d:de:fe:3f:2e:3b:57:7f:d2:d4:b4:e5:e8:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Sep 7 05:00:52 2025 GMT Not After : Sep 8 05:00:52 2025 GMT Subject: CN=2d6979c080d0506de359ee6d5bdb39f32f73f11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d6:e7:2e:f3:d9:96:89:10:52:9a:90:e5:9d: c1:2a:db:03:d3:cf:d2:3b:45:1d:8b:a4:da:42:5e: 41:14:30:7e:bb:90:5c:11:83:34:18:be:c3:0f:cd: ad:fd:f4:93:60:10:66:ff:38:0a:c7:56:af:4f:5e: fd:05:b5:e1:d0:61:61:66:fc:68:36:2b:6c:b4:52: cb:66:bc:23:83:4e:36:fb:5c:9a:16:fb:cd:43:3c: 39:56:a9:cd:cc:fe:5b:20:25:a4:07:c7:58:f7:8c: 0a:06:4c:12:da:3a:08:f9:31:c5:70:db:ea:ac:1c: 3a:50:ca:f1:74:1a:39:34:ad:e3:f6:00:2e:59:57: 4b:f9:cc:86:8f:33:58:41:49:7c:ef:43:fd:53:40: 65:4e:da:2a:9f:08:9d:e1:36:db:9b:2b:4e:4a:8f: af:65:40:af:7a:92:63:04:7d:78:30:ab:ff:df:b5: 00:8e:8e:6b:8a:8c:6c:e0:c6:25:13:d9:95:34:c7: be:7c:1a:d2:cc:fd:b9:ae:59:44:7a:a0:17:dc:7c: b2:42:89:1a:64:71:cc:25:88:72:25:fa:4b:06:da: a3:c1:36:1e:8a:aa:ff:fb:c3:d7:36:72:a5:31:3b: 07:6e:da:82:e6:78:34:19:0c:13:61:5b:b1:01:b0: 15:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:69:79:C0:80:D0:50:6D:E3:59:EE:6D:5B:DB:39:F3:2F:73:F1:1F X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:38:83:89:26:61:03:3b:c9:09:f7:1e:48:5d:ff:03:5b:e3: e4:12:01:01:fa:e9:4c:70:bd:70:d7:83:56:7a:ff:8b:37:35: 4a:2e:60:34:19:a2:bb:2d:33:85:1c:14:73:e4:10:a9:f5:8a: ca:79:62:4b:be:98:53:38:5d:e3:8a:73:85:ed:7c:f0:a3:94: 96:70:fb:bf:0f:5e:70:75:83:b9:81:db:1e:c7:3c:4d:35:cb: 1b:53:c3:0c:8a:1c:5b:ea:65:12:7d:9f:36:65:57:11:7a:20: fd:e5:7c:d4:1a:e1:90:d2:1d:8c:27:e9:d0:1a:58:59:91:ad: a3:63:f2:18:8b:5d:c7:2d:37:a1:e5:1e:02:cb:78:ac:00:be: 29:f6:61:82:4b:37:b1:aa:c3:86:e7:cc:88:7c:39:56:c5:67: dc:22:6e:17:61:bf:12:ab:68:06:43:6e:02:b5:1e:1d:50:3e: a2:75:6b:54:78:88:41:e2:c3:b7:8a:d2:aa:bf:29:09:67:4b: cc:46:49:58:5c:c1:c4:58:9f:1f:f4:08:ee:a4:7c:6f:4d:cd: d1:06:17:3c:5b:39:9e:2b:f0:2c:64:96:fc:3a:66:ff:da:e9: 4c:c1:db:4e:50:5a:9f:03:ce:e6:ab:b8:ad:75:cc:bf:93:be: a5:4e:ef:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkijG3e/j8uO1d/0tS05ehtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjUwOTA3MDUwMDUyWhcNMjUwOTA4MDUwMDUyWjAzMTEwLwYDVQQD EygyZDY5NzljMDgwZDA1MDZkZTM1OWVlNmQ1YmRiMzlmMzJmNzNmMTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29bnLvPZlokQUpqQ5Z3BKtsD08/S O0Udi6TaQl5BFDB+u5BcEYM0GL7DD82t/fSTYBBm/zgKx1avT179BbXh0GFhZvxo NitstFLLZrwjg042+1yaFvvNQzw5VqnNzP5bICWkB8dY94wKBkwS2joI+THFcNvq rBw6UMrxdBo5NK3j9gAuWVdL+cyGjzNYQUl870P9U0BlTtoqnwid4TbbmytOSo+v ZUCvepJjBH14MKv/37UAjo5rioxs4MYlE9mVNMe+fBrSzP25rllEeqAX3HyyQoka ZHHMJYhyJfpLBtqjwTYeiqr/+8PXNnKlMTsHbtqC5ng0GQwTYVuxAbAVvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1pecCA0FBt41nubVvbOfMvc/EfMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTiDiSZh AzvJCfceSF3/A1vj5BIBAfrpTHC9cNeDVnr/izc1Si5gNBmiuy0zhRwUc+QQqfWK ynliS76YUzhd44pzhe188KOUlnD7vw9ecHWDuYHbHsc8TTXLG1PDDIocW+plEn2f NmVXEXog/eV81BrhkNIdjCfp0BpYWZGto2PyGItdxy03oeUeAst4rAC+KfZhgks3 sarDhufMiHw5VsVn3CJuF2G/EqtoBkNuArUeHVA+onVrVHiIQeLDt4rSqr8pCWdL zEZJWFzBxFifH/QI7qR8b03N0QYXPFs5nivwLGSW/Dpm/9rpTMHbTlBanwPO5qu4 rXXMv5O+pU7v4A== -----END CERTIFICATE-----Generated at Sun Sep 7 12:30:50 2025 by rpki-client