$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: ifl3Bhk8JMuYdkUIo38bGTJxaq4SBtOw62UHuJENEVk= Subject key identifier: DE:AC:A5:48:46:17:CF:FA:67:DD:96:B5:6B:84:B1:14:F1:64:5D:FF Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019F85D6A63590AF6AC312930C67EB096513 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 179D Signing time: Tue 21 Jul 2026 18:01:04 +0000 Manifest this update: Tue 21 Jul 2026 18:01:04 +0000 Manifest next update: Wed 22 Jul 2026 18:01:04 +0000 Files and hashes: 1: 7yuAjuHUuBQgI9LKFETDYn_CZ5E.roa (hash: sYMFJLdO959jWZrAYfMJzmtj0yKZjN2K1lebp0gq+TM=) 2: EwdpgIL9FfCy9ehB3BBTCnpWay4.roa (hash: Zd/Fab+TtV6L026SR3m6Lr9zmEU3BY+Tmm5k2jzHBGA=) 3: I-sMHz5KWaJWWHv8LP-cTbLRlhk.roa (hash: ycdqoFMuV7vOqJ6ik/7TLLM1IrEFNQXg4WIcvH+nbTI=) 4: JltXya391JkGSYwvzrVlrXpnF64.roa (hash: UccBxpSpEJUyYr/IQ7pBmDAl22letmtiDRLPjq3VHKY=) 5: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: UX3nonVQ2Kb8w8p/m1NWydKvUtoxBnt92Q1ncWjBZN8=) 6: LjwLBkukbLxUFkuTIfR9w1snMls.roa (hash: 4nFYoBbwhfsOo2OK62wk4BJ40HPGWDvHaokQJOEAsAE=) 7: SxsTTQPpb002U8lLZRV6SRhekS0.roa (hash: W+v+QmlBcUbu1220skf3dGHkJEwkEM6pZN3F3mSoEjA=) 8: ZpWVrlMb2NpY8HHQlSRsYYYBuS4.roa (hash: pkrt/UmdtM08Ahi5VFPpOcMkqFc/0tZBQtexbUjXoVw=) 9: _KBQXB2Ok6DxzjcnIQISyeFSnpM.roa (hash: 9HopsVKQdGio4tWIg9WjN9YxEsegpCgT2SWiuwriul0=) 10: _neEZrmq0Ct3kFL__C5GyRs4mP0.roa (hash: 9kAGb49vKmov+gzr6FaaU1iRQWFt3aVXTbBHFybGSGc=) 11: aKANS_nMhqKQxSqYsTLFAPPf4Ac.roa (hash: uM6jlbx5BEyZgSOnEuqPMeNP3j1cSANjK7c9s23dmCw=) 12: c0F1tCgxfTqqtecEpLhL2Yzgotc.roa (hash: kcc7SOAkVdEZqliKSy982SiY2cxq/54ffuzbxdOylbI=) 13: gZ4dcf6HjqfncGGeENClMefPX_s.roa (hash: 0o7ggVRkzqB00ya5tb+jsy9euf5xB6KFOxp5W1g0pVc=) 14: l8zay_INv7E0VzJhTHR34KyIxYU.roa (hash: Ub/uqiz++gX3geu9vGrvci1ULIu9IKfiqiE2f8mI0lM=) 15: mNhJEg8yYPko26xnMlb5p8FIxE0.roa (hash: w9gg5PUiPe908J5vjI6p+AZZqfbQNUOc9hdSAtqhApM=) 16: q6q4U64HI_-eToYoeUgOUPU3KRE.roa (hash: kxmtIIlqbHTH1qvNoBG2/z96qUIjP2N3zilZLCieN00=) 17: sSe9vjQhLXz0LCDCrOhG3-q5jrA.roa (hash: Ks/R2WS3cda1aUMFkl1JkdwTxi5reAccOsu/QKsp7Og=) 18: sohX7LbuAHcvqGne2pID4PK53cs.roa (hash: pnEuUuyYA2H3GexHsPga00jBAH2t730CNd994bqMDuA=) 19: tqXOVuDrdAyLecpEp2l4AMffHAw.roa (hash: zp13fmxJbku6zhMDC/zXyPJnhXVh8hRoWiN4PFSExOM=) 20: xYkYZOmCV58rTJJEdIAsjdVBGXM.roa (hash: eCJXn/CSFpM/78IXFQ7tMZnEX10POhy3RCQh+Y88gTU=) 21: yJoN1VaNgltdfpP-maVQQcOYy_8.roa (hash: DoE5yzS7wJT/6cfhAeXgd5cw2cfQnuSELoHqvY9h2n8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:85:d6:a6:35:90:af:6a:c3:12:93:0c:67:eb:09:65:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Jul 21 18:01:04 2026 GMT Not After : Jul 22 18:01:04 2026 GMT Subject: CN=deaca5484617cffa67dd96b56b84b114f1645dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:24:b4:13:79:f4:40:07:52:89:66:ab:fc:e3: f4:52:fc:01:6e:4d:aa:a5:23:70:9e:a6:09:26:74: d1:d1:a2:5f:66:5c:14:f3:40:fc:0c:4a:ac:cb:64: 41:be:17:11:ce:a9:b5:c6:a8:96:c1:4a:60:df:a5: 10:20:56:b9:7d:99:6c:fd:e5:71:6b:1b:40:9b:03: e7:b4:be:45:b2:26:61:14:33:84:d7:3a:1f:97:87: 8a:93:a0:0f:17:aa:e0:ba:e8:8d:f3:02:00:48:ea: 7a:f6:3b:50:a2:4a:83:ec:ae:69:36:7e:eb:b3:c3: ad:15:47:14:30:d9:a6:58:3b:55:fd:aa:69:db:94: 33:f0:5f:e6:aa:02:a9:19:53:a8:e1:c3:96:ca:47: 66:3d:9b:28:d1:9c:ab:b2:05:f1:9f:73:2b:02:60: 6c:19:2b:6f:cd:e8:9c:39:bb:ae:b1:2e:9b:83:c5: 2c:b2:fa:9e:38:87:0e:a3:1d:9d:b9:02:60:b3:0a: 16:7c:4e:e4:fb:c5:77:d6:8a:2d:ba:10:4d:a7:97: c0:bb:2a:db:18:7f:09:5b:c6:37:19:c1:cd:51:87: b3:2e:e1:70:09:e7:c1:7e:86:bc:c6:45:c1:20:a6: a1:db:49:27:35:e7:49:33:f2:7c:9c:49:de:5c:0c: 60:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AC:A5:48:46:17:CF:FA:67:DD:96:B5:6B:84:B1:14:F1:64:5D:FF X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:91:d8:2c:e9:36:fe:41:24:33:06:65:bd:ed:2e:98:4e:f9: c9:91:c8:97:89:9e:8f:38:e6:7c:ce:96:c4:9d:d3:74:bc:f7: b6:ac:3c:dc:c3:2f:32:cc:5e:2a:27:95:d5:10:33:4a:c9:10: 79:57:cf:bf:ac:1b:f3:f3:b4:6a:49:04:2e:1a:4a:35:0e:a8: 2b:7a:20:7f:53:5a:17:60:d8:f1:49:93:09:61:71:a5:4f:21: 06:50:75:0f:de:45:c5:38:d5:4d:4c:87:aa:3c:69:a0:c5:7e: 77:19:42:d8:8b:18:44:1e:5a:f9:e2:7f:e0:25:83:74:1c:65: 98:07:e2:19:8c:40:44:62:1a:71:fc:ab:33:bc:52:21:48:86: 0f:2c:ef:e1:bc:0b:6c:f9:b7:7f:e8:c0:d1:ef:67:d2:e7:7c: 51:f5:8d:ff:70:ce:d6:3c:c6:95:cb:a2:6f:84:19:ec:70:81: 05:e3:6a:bd:39:a0:73:40:69:a8:28:bb:8d:49:51:4d:fb:0b: aa:28:ff:aa:c3:60:18:b6:3c:1b:4e:89:df:29:5b:dd:9c:dd: 87:0e:8c:2c:01:b7:6a:aa:a5:b7:f7:ad:18:a6:15:5d:71:5d: 2a:2d:12:f9:6c:0f:b7:e4:2f:db:45:cc:42:15:8d:37:c9:b1: 45:01:cc:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+F1qY1kK9qwxKTDGfrCWUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjYwNzIxMTgwMTA0WhcNMjYwNzIyMTgwMTA0WjAzMTEwLwYDVQQD EyhkZWFjYTU0ODQ2MTdjZmZhNjdkZDk2YjU2Yjg0YjExNGYxNjQ1ZGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCS0E3n0QAdSiWar/OP0UvwBbk2q pSNwnqYJJnTR0aJfZlwU80D8DEqsy2RBvhcRzqm1xqiWwUpg36UQIFa5fZls/eVx axtAmwPntL5FsiZhFDOE1zofl4eKk6APF6rguuiN8wIASOp69jtQokqD7K5pNn7r s8OtFUcUMNmmWDtV/app25Qz8F/mqgKpGVOo4cOWykdmPZso0ZyrsgXxn3MrAmBs GStvzeicObuusS6bg8UssvqeOIcOox2duQJgswoWfE7k+8V31ootuhBNp5fAuyrb GH8JW8Y3GcHNUYezLuFwCefBfoa8xkXBIKah20knNedJM/J8nEneXAxg6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6spUhGF8/6Z92WtWuEsRTxZF3/MB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpHYLOk2 /kEkMwZlve0umE75yZHIl4mejzjmfM6WxJ3TdLz3tqw83MMvMsxeKieV1RAzSskQ eVfPv6wb8/O0akkELhpKNQ6oK3ogf1NaF2DY8UmTCWFxpU8hBlB1D95FxTjVTUyH qjxpoMV+dxlC2IsYRB5a+eJ/4CWDdBxlmAfiGYxARGIacfyrM7xSIUiGDyzv4bwL bPm3f+jA0e9n0ud8UfWN/3DO1jzGlcuib4QZ7HCBBeNqvTmgc0BpqCi7jUlRTfsL qij/qsNgGLY8G06J3ylb3Zzdhw6MLAG3aqqlt/etGKYVXXFdKi0S+WwPt+Qv20XM QhWNN8mxRQHMng== -----END CERTIFICATE-----Generated at Tue Jul 21 20:31:05 2026 by rpki-client