$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: nDCIg0RfWbVXonySrPsA2ydCR4yCusQSZ8sXBWlFXec= Subject key identifier: 88:F7:68:83:3E:2F:5C:A7:E4:01:88:68:56:0C:DD:77:87:BB:64:BA Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019A0CDDB3539633BDE96318B8368AB4A69C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 14C2 Signing time: Wed 22 Oct 2025 17:00:47 +0000 Manifest this update: Wed 22 Oct 2025 17:00:47 +0000 Manifest next update: Thu 23 Oct 2025 17:00:47 +0000 Files and hashes: 1: 22kYZQvoR5jdI__S3Y9e_IlegJI.roa (hash: v2JflyKvWdnGRLMTf57I2mASMxm7uWcRonEZWyuw8wY=) 2: 3_PU79fuHYEhPlNdsJUuZYubgqE.roa (hash: XJWOGH/fcmWGI7b/RAY8L2wuvZcYBFbJ22ImnM+pQlo=) 3: 6ZciseV0h3pH3lp0hLyZ992TdQQ.roa (hash: sFwBr6Wh0TdrZtVAujkppJqtVxS3U22k/6YTX59vUaI=) 4: 6nGhmoSDQSpfjNNYdXCrQWERlIk.roa (hash: /4N+szUgXgcEHHrQDjyOBrtHm4Pkc7NrFhdRQABicbY=) 5: 7HPt5nannhv2gwbAHwaRC5RFFDM.roa (hash: UBw+74e6x0xFF9XFftGKU2o22p62byiADLv5iJRfz1g=) 6: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: OtqBWts64sE7U+g+9ps4a8O/JVzgmqRoEmY56W43waA=) 7: M2zzd8H-Tlg7XAdTwUQjLUYGllY.roa (hash: ETq98V9SXDP0t347M1cA3yCogqTqQCthqQp4LwB/LXQ=) 8: M97ZcKaRZuOa3DTXxLHlO-RLatQ.roa (hash: w0gHLxi0MpSA4Cow6J8TG6Bmoy7AY86PSwg5UsV2kcM=) 9: Msw5lWLcMEnYB6JQ72VGTubuEUo.roa (hash: j3iVppScPPj4RkIHmOn6ItOKTBT6owq12o7XbsNpt4A=) 10: WHIHIqWEsALKLs5d6Q-tOWQCla8.roa (hash: hEIDrElaFaUvEVn72pSS3zv8TkwlJYcJGyPsidxg2tA=) 11: a9iv50ooVHm1APCybq4owIunnG8.roa (hash: phKXw/sbpuIWnctwyonEWyJEOXe+K9H58t2l6qBy6tg=) 12: dVb7hZhGuZRTM--X8lkrhzF2Q7Y.roa (hash: EVPzk1PreoChl9YjAauXazZeGF8twPM0Bys79KZjvx8=) 13: exrTmGvOj2xClhDCfcsldQif4Z4.roa (hash: 3LtdjnhF9ISRLFDfrOGup/m3oOMZq8ll2E/u+2tZH4g=) 14: iDsGG6EDS8fs9Hct4p8CitByvws.roa (hash: ch//5WVE7dA9hut4Enr9j7EKe84fcI2Ykg7l+3xy19U=) 15: jX4WFfpxo3HHZpB1YZxC4p_jFpo.roa (hash: HvcFd2uvN4vxiceLP8NW4lHvaK1pmADob7hykxb6+nc=) 16: pGGDoeGnPksdWvYsReZKh3O6puY.roa (hash: xGeOEw9UbAQAfMawzQlzpH9iOWa+z4LqLDy15zn/jN0=) 17: wnaVByUU9rLY0lixJG-AIxAIIKk.roa (hash: uZB4+jtFO740w1LWkNgD8gNKmUM01C7fhf/4nIXCJmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 16:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0c:dd:b3:53:96:33:bd:e9:63:18:b8:36:8a:b4:a6:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Oct 22 17:00:47 2025 GMT Not After : Oct 23 17:00:47 2025 GMT Subject: CN=88f768833e2f5ca7e4018868560cdd7787bb64ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3e:22:55:f7:43:9f:b7:b9:f4:99:70:05:4e: 06:4e:39:ff:1f:a5:c7:18:51:ee:a4:a2:29:32:c2: cb:07:0c:75:a5:7a:ae:76:da:fd:ef:06:84:c9:d0: 49:61:62:e2:0c:8b:d8:63:db:0b:c1:68:b0:27:33: 52:0c:1d:3e:ba:dd:a8:84:8d:5b:68:ad:b0:27:3e: 4e:d8:49:05:af:e0:b6:13:f3:fa:f0:49:b2:9d:d5: d1:75:a4:70:df:33:b7:23:16:f9:df:9c:10:02:5c: 5a:9d:fc:83:da:11:c9:36:e2:8b:17:d3:27:10:8d: 6f:07:ef:8f:39:9f:4a:2f:1d:0a:ef:68:d2:75:aa: 58:83:c0:2a:55:af:dc:6b:bc:b9:49:19:75:7e:bc: 9f:ac:c7:31:ec:97:77:b1:e6:7c:a2:c4:4b:65:10: 68:69:64:f1:6a:83:e2:6f:f3:15:a5:fb:37:cb:e1: 1e:06:6b:cd:e2:52:64:20:09:75:90:40:e8:d1:83: 95:6d:8d:33:28:46:2c:93:cf:8e:40:af:93:15:27: ad:1a:4c:01:2f:51:a1:4c:9f:e7:e0:6a:2e:c0:13: 36:b7:04:21:d5:5d:02:b7:f1:2e:29:ba:52:8a:20: 0e:64:51:de:67:12:3a:2e:c3:22:3e:c0:aa:31:a7: 8d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F7:68:83:3E:2F:5C:A7:E4:01:88:68:56:0C:DD:77:87:BB:64:BA X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:17:3a:27:84:d4:a6:94:53:a0:c1:e9:df:51:86:2d:24:66: 76:93:3e:eb:f3:63:dc:b5:a2:da:c7:ba:8e:4e:3c:0d:4b:a7: 37:8a:8b:16:e6:99:b5:c2:66:c2:b2:b5:d5:29:20:37:79:de: 88:04:64:a2:af:52:ad:25:f9:e8:37:87:48:70:26:46:d0:b2: 5d:14:5c:3f:87:53:74:7a:df:72:df:14:08:ef:4b:21:21:02: 2a:48:5b:d3:36:2a:83:1d:9a:f5:1e:bf:2c:0b:e9:c8:66:ea: 0e:fb:d3:64:a9:96:80:24:86:46:e9:35:e0:24:32:14:8b:4e: 76:32:96:51:b9:3c:47:04:74:62:fd:6a:19:bb:0e:33:5c:34: 27:39:49:66:8e:9f:71:7f:b7:ca:ae:fb:fb:de:13:95:5b:3e: ce:3e:42:e3:15:3f:4d:48:7a:83:f9:a8:26:4b:89:19:c3:13: 77:fd:9a:16:66:7b:78:d9:dc:46:38:a7:1f:d6:46:79:0e:c6: 03:92:bb:30:58:97:95:74:ae:b3:41:b8:34:41:4f:29:05:87: ea:5e:c9:33:5d:de:d8:35:18:ea:c9:3f:13:d3:df:0e:37:70: d4:6e:25:c5:9d:0b:83:cc:a9:94:63:68:95:90:5e:82:c5:f8: 46:b9:52:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoM3bNTljO96WMYuDaKtKacMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjUxMDIyMTcwMDQ3WhcNMjUxMDIzMTcwMDQ3WjAzMTEwLwYDVQQD Eyg4OGY3Njg4MzNlMmY1Y2E3ZTQwMTg4Njg1NjBjZGQ3Nzg3YmI2NGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz4iVfdDn7e59JlwBU4GTjn/H6XH GFHupKIpMsLLBwx1pXqudtr97waEydBJYWLiDIvYY9sLwWiwJzNSDB0+ut2ohI1b aK2wJz5O2EkFr+C2E/P68EmyndXRdaRw3zO3Ixb535wQAlxanfyD2hHJNuKLF9Mn EI1vB++POZ9KLx0K72jSdapYg8AqVa/ca7y5SRl1fryfrMcx7Jd3seZ8osRLZRBo aWTxaoPib/MVpfs3y+EeBmvN4lJkIAl1kEDo0YOVbY0zKEYsk8+OQK+TFSetGkwB L1GhTJ/n4GouwBM2twQh1V0Ct/EuKbpSiiAOZFHeZxI6LsMiPsCqMaeNrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIj3aIM+L1yn5AGIaFYM3XeHu2S6MB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBc6J4TU ppRToMHp31GGLSRmdpM+6/Nj3LWi2se6jk48DUunN4qLFuaZtcJmwrK11SkgN3ne iARkoq9SrSX56DeHSHAmRtCyXRRcP4dTdHrfct8UCO9LISECKkhb0zYqgx2a9R6/ LAvpyGbqDvvTZKmWgCSGRuk14CQyFItOdjKWUbk8RwR0Yv1qGbsOM1w0JzlJZo6f cX+3yq77+94TlVs+zj5C4xU/TUh6g/moJkuJGcMTd/2aFmZ7eNncRjinH9ZGeQ7G A5K7MFiXlXSus0G4NEFPKQWH6l7JM13e2DUY6sk/E9PfDjdw1G4lxZ0Lg8yplGNo lZBegsX4RrlS0w== -----END CERTIFICATE-----Generated at Wed Oct 22 23:53:09 2025 by rpki-client