$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: fVCfRilHClw0Gw2AaPTa8lN9rJYeF209Xl5okAiEfd8= Subject key identifier: A7:0A:BE:2B:77:4E:0D:36:43:E5:65:3D:3D:02:C3:65:E7:61:31:C3 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019D2772253BD59E21A082EC5C7DD6444568 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 1662 Signing time: Thu 26 Mar 2026 00:01:25 +0000 Manifest this update: Thu 26 Mar 2026 00:01:25 +0000 Manifest next update: Fri 27 Mar 2026 00:01:25 +0000 Files and hashes: 1: EwdpgIL9FfCy9ehB3BBTCnpWay4.roa (hash: Zd/Fab+TtV6L026SR3m6Lr9zmEU3BY+Tmm5k2jzHBGA=) 2: I-sMHz5KWaJWWHv8LP-cTbLRlhk.roa (hash: ycdqoFMuV7vOqJ6ik/7TLLM1IrEFNQXg4WIcvH+nbTI=) 3: JltXya391JkGSYwvzrVlrXpnF64.roa (hash: UccBxpSpEJUyYr/IQ7pBmDAl22letmtiDRLPjq3VHKY=) 4: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: 9g+lycj0I7dl25s9yzxnMnZRVsqTKT10pIZBVTfJiBs=) 5: LjwLBkukbLxUFkuTIfR9w1snMls.roa (hash: 4nFYoBbwhfsOo2OK62wk4BJ40HPGWDvHaokQJOEAsAE=) 6: ObD_iT1UqS396-qKzynzvOWcYVE.roa (hash: MME3dtO0blR3+hlzFcjbnhAzp7Vz9ov/p94b+hvW8jw=) 7: SxsTTQPpb002U8lLZRV6SRhekS0.roa (hash: W+v+QmlBcUbu1220skf3dGHkJEwkEM6pZN3F3mSoEjA=) 8: ZpWVrlMb2NpY8HHQlSRsYYYBuS4.roa (hash: pkrt/UmdtM08Ahi5VFPpOcMkqFc/0tZBQtexbUjXoVw=) 9: _KBQXB2Ok6DxzjcnIQISyeFSnpM.roa (hash: 9HopsVKQdGio4tWIg9WjN9YxEsegpCgT2SWiuwriul0=) 10: _neEZrmq0Ct3kFL__C5GyRs4mP0.roa (hash: 9kAGb49vKmov+gzr6FaaU1iRQWFt3aVXTbBHFybGSGc=) 11: aKANS_nMhqKQxSqYsTLFAPPf4Ac.roa (hash: uM6jlbx5BEyZgSOnEuqPMeNP3j1cSANjK7c9s23dmCw=) 12: c0F1tCgxfTqqtecEpLhL2Yzgotc.roa (hash: kcc7SOAkVdEZqliKSy982SiY2cxq/54ffuzbxdOylbI=) 13: gZ4dcf6HjqfncGGeENClMefPX_s.roa (hash: 0o7ggVRkzqB00ya5tb+jsy9euf5xB6KFOxp5W1g0pVc=) 14: l8zay_INv7E0VzJhTHR34KyIxYU.roa (hash: Ub/uqiz++gX3geu9vGrvci1ULIu9IKfiqiE2f8mI0lM=) 15: mNhJEg8yYPko26xnMlb5p8FIxE0.roa (hash: w9gg5PUiPe908J5vjI6p+AZZqfbQNUOc9hdSAtqhApM=) 16: q6q4U64HI_-eToYoeUgOUPU3KRE.roa (hash: kxmtIIlqbHTH1qvNoBG2/z96qUIjP2N3zilZLCieN00=) 17: sSe9vjQhLXz0LCDCrOhG3-q5jrA.roa (hash: Ks/R2WS3cda1aUMFkl1JkdwTxi5reAccOsu/QKsp7Og=) 18: sohX7LbuAHcvqGne2pID4PK53cs.roa (hash: pnEuUuyYA2H3GexHsPga00jBAH2t730CNd994bqMDuA=) 19: tqXOVuDrdAyLecpEp2l4AMffHAw.roa (hash: zp13fmxJbku6zhMDC/zXyPJnhXVh8hRoWiN4PFSExOM=) 20: tw6AZDGGpP9NxVAB2it1NsPBTW4.roa (hash: IMxXE5hLU1Mm0BQGKqcA2AkFFX2OTXDF0EUw7x9FubM=) 21: xYkYZOmCV58rTJJEdIAsjdVBGXM.roa (hash: eCJXn/CSFpM/78IXFQ7tMZnEX10POhy3RCQh+Y88gTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:72:25:3b:d5:9e:21:a0:82:ec:5c:7d:d6:44:45:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Mar 26 00:01:25 2026 GMT Not After : Mar 27 00:01:25 2026 GMT Subject: CN=a70abe2b774e0d3643e5653d3d02c365e76131c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:80:17:bf:0c:d6:25:f2:45:3f:1b:fb:3e:0f: 71:c6:60:87:77:77:1d:59:ab:53:a7:56:2c:2d:3f: c8:77:56:a0:7b:78:b0:bf:c4:a1:be:4a:19:c8:ff: 44:5a:2d:da:22:29:52:b9:91:2f:f8:90:76:9e:bf: 7a:3a:2f:d3:1d:37:e6:e6:88:c1:80:51:f0:e7:10: dc:55:0e:f9:ad:bc:e7:8d:bf:d5:8c:b5:7f:51:aa: fa:5f:d1:ab:dd:3d:57:ba:e8:ce:91:66:b6:63:17: ee:db:be:b9:94:87:c6:32:46:0e:b5:90:1d:b2:12: cc:f1:51:35:f7:95:42:58:d4:64:c9:6f:07:8b:a3: 8f:a9:81:05:ea:09:c2:0a:64:5e:41:38:4d:10:69: 14:dd:c3:b3:0b:bf:d5:4b:ad:4e:bf:bd:df:a5:eb: f0:e8:c8:02:a4:13:05:a5:16:92:98:f1:02:ea:9f: 84:fb:52:26:d1:d9:e6:66:48:48:66:db:08:6e:d6: 9c:20:fa:76:ee:ae:b1:5b:16:6a:9f:b3:3e:4e:35: 30:6a:d6:97:e2:d4:73:dc:34:8f:cb:87:ce:28:53: 22:00:67:3a:a0:a7:46:af:b0:32:bb:51:09:f3:02: 0d:31:58:14:2c:1b:ec:72:1d:ab:23:a3:4b:9d:b3: aa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0A:BE:2B:77:4E:0D:36:43:E5:65:3D:3D:02:C3:65:E7:61:31:C3 X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:21:07:89:39:38:16:29:02:73:0e:7f:eb:c3:93:1b:dc:ee: 30:ee:ce:4a:f3:dd:9b:4f:98:fb:9d:0d:61:e7:ee:04:18:52: a9:66:bd:ce:ce:d3:13:b5:fa:59:3b:b0:6f:17:40:8c:a8:34: 97:22:31:1d:9a:2c:84:42:cf:56:21:ff:fd:8c:b4:a3:cb:26: a1:af:90:30:88:6f:f9:d3:c8:5e:c7:dc:92:9f:0a:c8:57:83: 3b:17:fb:f8:d0:a1:27:51:0b:b7:a3:68:3b:54:c3:e5:be:c3: 96:e8:cf:d0:ce:9b:6d:84:1a:6f:d4:6f:46:6e:41:7d:fe:ee: 3c:fd:7a:61:f0:61:3e:71:20:d2:03:ee:ba:8e:63:fe:70:47: 8c:0b:45:ca:85:5b:a5:95:da:7a:6a:08:8a:7b:a5:2d:5e:3d: ac:6d:f7:1b:64:6f:73:a0:e5:79:85:47:02:5d:4e:19:fd:3a: b0:56:56:59:1b:00:a7:3d:06:a3:77:60:71:82:fc:1c:c8:c8: 70:50:5a:d5:c9:1c:97:80:a6:e8:37:10:ae:f1:42:56:ca:1a: 03:9f:b1:ad:2c:55:85:43:8c:f5:66:9f:68:67:ff:00:be:18: 9d:2d:18:3d:50:aa:60:19:29:75:b9:b9:de:99:7d:e1:4b:23: 38:ab:e3:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nciU71Z4hoILsXH3WREVoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjYwMzI2MDAwMTI1WhcNMjYwMzI3MDAwMTI1WjAzMTEwLwYDVQQD EyhhNzBhYmUyYjc3NGUwZDM2NDNlNTY1M2QzZDAyYzM2NWU3NjEzMWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oAXvwzWJfJFPxv7Pg9xxmCHd3cd WatTp1YsLT/Id1age3iwv8ShvkoZyP9EWi3aIilSuZEv+JB2nr96Oi/THTfm5ojB gFHw5xDcVQ75rbznjb/VjLV/Uar6X9Gr3T1XuujOkWa2Yxfu2765lIfGMkYOtZAd shLM8VE195VCWNRkyW8Hi6OPqYEF6gnCCmReQThNEGkU3cOzC7/VS61Ov73fpevw 6MgCpBMFpRaSmPEC6p+E+1Im0dnmZkhIZtsIbtacIPp27q6xWxZqn7M+TjUwataX 4tRz3DSPy4fOKFMiAGc6oKdGr7Ayu1EJ8wINMVgULBvsch2rI6NLnbOq0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcKvit3Tg02Q+VlPT0Cw2XnYTHDMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCEHiTk4 FikCcw5/68OTG9zuMO7OSvPdm0+Y+50NYefuBBhSqWa9zs7TE7X6WTuwbxdAjKg0 lyIxHZoshELPViH//Yy0o8smoa+QMIhv+dPIXsfckp8KyFeDOxf7+NChJ1ELt6No O1TD5b7DlujP0M6bbYQab9RvRm5Bff7uPP16YfBhPnEg0gPuuo5j/nBHjAtFyoVb pZXaemoIinulLV49rG33G2Rvc6DleYVHAl1OGf06sFZWWRsApz0Go3dgcYL8HMjI cFBa1ckcl4Cm6DcQrvFCVsoaA5+xrSxVhUOM9WafaGf/AL4YnS0YPVCqYBkpdbm5 3pl94UsjOKvjMg== -----END CERTIFICATE-----Generated at Thu Mar 26 05:08:52 2026 by rpki-client