$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: VqYKeiGy+/wj6SGbgfPzxpNbJJqdF7GxGNGvMsmWh7E= Subject key identifier: CE:6F:F9:CB:C2:F4:2B:D3:E1:46:3B:B5:8D:F1:59:FE:BF:2D:01:F7 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 01A15DB0EA09756332F8E8BD18007E902E18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 1893 Signing time: Wed 21 Oct 2026 09:00:37 +0000 Manifest this update: Wed 21 Oct 2026 09:00:37 +0000 Manifest next update: Thu 22 Oct 2026 09:00:37 +0000 Files and hashes: 1: 5_2f2IG6Ff_Z8Ppp1UYGQdcbpd8.roa (hash: kCO6losb3l4e0pwUvR/y3U7+rbUeZzOuEE/W82Lxfuk=) 2: 7yuAjuHUuBQgI9LKFETDYn_CZ5E.roa (hash: sYMFJLdO959jWZrAYfMJzmtj0yKZjN2K1lebp0gq+TM=) 3: EwdpgIL9FfCy9ehB3BBTCnpWay4.roa (hash: Zd/Fab+TtV6L026SR3m6Lr9zmEU3BY+Tmm5k2jzHBGA=) 4: I-sMHz5KWaJWWHv8LP-cTbLRlhk.roa (hash: ycdqoFMuV7vOqJ6ik/7TLLM1IrEFNQXg4WIcvH+nbTI=) 5: JltXya391JkGSYwvzrVlrXpnF64.roa (hash: UccBxpSpEJUyYr/IQ7pBmDAl22letmtiDRLPjq3VHKY=) 6: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: /Jlq6/kVgWoK7HP08gr2uH6RcWcgnTDp9aOR/wx+MWQ=) 7: LjwLBkukbLxUFkuTIfR9w1snMls.roa (hash: 4nFYoBbwhfsOo2OK62wk4BJ40HPGWDvHaokQJOEAsAE=) 8: SxsTTQPpb002U8lLZRV6SRhekS0.roa (hash: W+v+QmlBcUbu1220skf3dGHkJEwkEM6pZN3F3mSoEjA=) 9: U27renAALZTxH0h-gwjCCnMoHKk.roa (hash: ORyWVmLu5TiTeF6f08kuBMFxVBSVN460MMMTmyam6hc=) 10: ZpWVrlMb2NpY8HHQlSRsYYYBuS4.roa (hash: pkrt/UmdtM08Ahi5VFPpOcMkqFc/0tZBQtexbUjXoVw=) 11: _KBQXB2Ok6DxzjcnIQISyeFSnpM.roa (hash: 9HopsVKQdGio4tWIg9WjN9YxEsegpCgT2SWiuwriul0=) 12: _neEZrmq0Ct3kFL__C5GyRs4mP0.roa (hash: 9kAGb49vKmov+gzr6FaaU1iRQWFt3aVXTbBHFybGSGc=) 13: aKANS_nMhqKQxSqYsTLFAPPf4Ac.roa (hash: uM6jlbx5BEyZgSOnEuqPMeNP3j1cSANjK7c9s23dmCw=) 14: c0F1tCgxfTqqtecEpLhL2Yzgotc.roa (hash: kcc7SOAkVdEZqliKSy982SiY2cxq/54ffuzbxdOylbI=) 15: gZ4dcf6HjqfncGGeENClMefPX_s.roa (hash: 0o7ggVRkzqB00ya5tb+jsy9euf5xB6KFOxp5W1g0pVc=) 16: l8zay_INv7E0VzJhTHR34KyIxYU.roa (hash: Ub/uqiz++gX3geu9vGrvci1ULIu9IKfiqiE2f8mI0lM=) 17: mNhJEg8yYPko26xnMlb5p8FIxE0.roa (hash: w9gg5PUiPe908J5vjI6p+AZZqfbQNUOc9hdSAtqhApM=) 18: q6q4U64HI_-eToYoeUgOUPU3KRE.roa (hash: kxmtIIlqbHTH1qvNoBG2/z96qUIjP2N3zilZLCieN00=) 19: sSe9vjQhLXz0LCDCrOhG3-q5jrA.roa (hash: Ks/R2WS3cda1aUMFkl1JkdwTxi5reAccOsu/QKsp7Og=) 20: sohX7LbuAHcvqGne2pID4PK53cs.roa (hash: pnEuUuyYA2H3GexHsPga00jBAH2t730CNd994bqMDuA=) 21: tqXOVuDrdAyLecpEp2l4AMffHAw.roa (hash: zp13fmxJbku6zhMDC/zXyPJnhXVh8hRoWiN4PFSExOM=) 22: xYkYZOmCV58rTJJEdIAsjdVBGXM.roa (hash: eCJXn/CSFpM/78IXFQ7tMZnEX10POhy3RCQh+Y88gTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 02:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:5d:b0:ea:09:75:63:32:f8:e8:bd:18:00:7e:90:2e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Oct 21 09:00:37 2026 GMT Not After : Oct 22 09:00:37 2026 GMT Subject: CN=ce6ff9cbc2f42bd3e1463bb58df159febf2d01f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fb:d3:76:fe:e4:a0:d1:5a:6b:13:53:f4:26: 8c:5e:b2:6a:5f:f2:72:b6:11:3c:63:ca:29:51:0e: b8:02:71:31:ff:a4:b5:42:8c:a0:ad:7f:f0:e2:04: d7:6d:85:fc:96:c3:5b:d2:2e:5f:e1:69:59:31:2b: 18:fb:b2:bd:c8:23:68:40:b9:cf:54:a7:29:ce:4b: 0e:2b:9b:e9:4f:2b:9c:93:e5:c7:57:2f:f0:9b:d5: e9:e8:29:08:99:a7:d2:cf:6d:86:f8:8a:46:44:03: 0c:81:8c:38:4f:94:01:3b:1c:49:5a:c4:5e:4c:f1: 10:7f:fb:b0:34:7a:3d:45:1e:8e:c0:96:e8:56:24: f5:c8:87:08:ea:26:cc:da:05:d3:01:2d:d1:d6:0d: 24:f5:e5:87:45:fd:65:9b:a2:57:a8:38:53:59:e2: a3:3a:13:b9:33:d2:d8:26:47:83:d9:b6:0a:16:2c: 8e:2c:52:52:a7:14:56:01:05:81:5a:95:e4:a5:38: 94:15:b1:f2:a4:97:99:d1:cf:4c:94:9e:3a:4e:c7: 86:6a:ad:7c:2a:c7:18:7d:93:87:f2:40:7c:3e:89: 1a:7b:17:c8:69:f2:27:7d:c0:1d:33:99:b6:21:b5: 6f:b4:83:93:85:33:78:c6:ad:f5:2b:6f:b3:43:28: 18:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6F:F9:CB:C2:F4:2B:D3:E1:46:3B:B5:8D:F1:59:FE:BF:2D:01:F7 X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:82:15:ae:cf:6d:ee:ef:b1:dc:db:17:db:8c:21:b8:48:4e: a8:73:17:72:e1:b6:19:b2:3e:da:ae:1c:bc:d0:72:75:27:ac: 36:63:f7:16:90:b9:c1:b1:e8:76:8f:8f:0b:f3:1f:6a:35:e9: a4:4c:31:af:98:44:a8:ed:08:08:fc:39:74:79:38:ab:78:e6: cf:00:0e:53:0a:f0:d2:ac:2f:48:05:cf:b2:c8:a5:df:7f:8f: 85:56:30:f8:a0:c6:a8:44:be:72:59:7f:2d:51:38:2d:b6:a2: b3:38:ca:ca:83:49:68:0f:92:f9:35:46:e6:5c:fa:2b:d8:9f: 85:d3:ac:2d:2d:31:52:19:9c:44:dd:af:01:3f:14:cf:24:d6: 17:8d:87:e4:4d:5a:76:43:4f:8c:b5:40:69:83:90:de:1c:80: 24:34:30:5c:ba:80:08:b0:fc:eb:1e:d6:9f:7a:e8:7e:e0:d4: 9b:2a:2b:07:6e:28:2a:f1:28:2e:d3:2f:ca:8b:3f:fc:fc:77: f3:59:9c:bb:98:f6:ee:b8:a5:d9:04:c7:45:2d:c1:8d:b3:df: 91:8a:ca:2c:ff:6c:e0:e3:db:a7:a7:92:b4:5b:59:1b:b1:59: 28:e7:72:e3:c5:6c:4d:fa:3b:e8:19:33:45:15:23:75:19:6e: 4f:82:1d:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFdsOoJdWMy+Oi9GAB+kC4YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjYxMDIxMDkwMDM3WhcNMjYxMDIyMDkwMDM3WjAzMTEwLwYDVQQD EyhjZTZmZjljYmMyZjQyYmQzZTE0NjNiYjU4ZGYxNTlmZWJmMmQwMWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovvTdv7koNFaaxNT9CaMXrJqX/Jy thE8Y8opUQ64AnEx/6S1QoygrX/w4gTXbYX8lsNb0i5f4WlZMSsY+7K9yCNoQLnP VKcpzksOK5vpTyuck+XHVy/wm9Xp6CkImafSz22G+IpGRAMMgYw4T5QBOxxJWsRe TPEQf/uwNHo9RR6OwJboViT1yIcI6ibM2gXTAS3R1g0k9eWHRf1lm6JXqDhTWeKj OhO5M9LYJkeD2bYKFiyOLFJSpxRWAQWBWpXkpTiUFbHypJeZ0c9MlJ46TseGaq18 KscYfZOH8kB8PokaexfIafInfcAdM5m2IbVvtIOThTN4xq31K2+zQygYlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5v+cvC9CvT4UY7tY3xWf6/LQH3MB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoIVrs9t 7u+x3NsX24whuEhOqHMXcuG2GbI+2q4cvNBydSesNmP3FpC5wbHodo+PC/MfajXp pEwxr5hEqO0ICPw5dHk4q3jmzwAOUwrw0qwvSAXPssil33+PhVYw+KDGqES+cll/ LVE4LbaiszjKyoNJaA+S+TVG5lz6K9ifhdOsLS0xUhmcRN2vAT8UzyTWF42H5E1a dkNPjLVAaYOQ3hyAJDQwXLqACLD86x7Wn3rofuDUmyorB24oKvEoLtMvyos//Px3 81mcu5j27ril2QTHRS3BjbPfkYrKLP9s4OPbp6eStFtZG7FZKOdy48VsTfo76Bkz RRUjdRluT4Idpg== -----END CERTIFICATE-----Generated at Wed Oct 21 14:49:33 2026 by rpki-client