$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: hsgQ/PYuUqQzFyWdf3dIYegcDlVvk9cUsAlFiDitOGc= Subject key identifier: 34:C7:57:2C:08:02:52:16:5B:A9:A1:87:DA:99:E8:C3:CF:64:CA:F5 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 01A0CEC8BE9D0ACBB45790D09CF804AA2205 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 1849 Signing time: Wed 23 Sep 2026 15:00:57 +0000 Manifest this update: Wed 23 Sep 2026 15:00:57 +0000 Manifest next update: Thu 24 Sep 2026 15:00:57 +0000 Files and hashes: 1: 5_2f2IG6Ff_Z8Ppp1UYGQdcbpd8.roa (hash: kCO6losb3l4e0pwUvR/y3U7+rbUeZzOuEE/W82Lxfuk=) 2: 7yuAjuHUuBQgI9LKFETDYn_CZ5E.roa (hash: sYMFJLdO959jWZrAYfMJzmtj0yKZjN2K1lebp0gq+TM=) 3: EwdpgIL9FfCy9ehB3BBTCnpWay4.roa (hash: Zd/Fab+TtV6L026SR3m6Lr9zmEU3BY+Tmm5k2jzHBGA=) 4: I-sMHz5KWaJWWHv8LP-cTbLRlhk.roa (hash: ycdqoFMuV7vOqJ6ik/7TLLM1IrEFNQXg4WIcvH+nbTI=) 5: JltXya391JkGSYwvzrVlrXpnF64.roa (hash: UccBxpSpEJUyYr/IQ7pBmDAl22letmtiDRLPjq3VHKY=) 6: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: eipBHuGvtwQXSOpHQJND07MZLu4dBH1rpxKpgvl33/8=) 7: LjwLBkukbLxUFkuTIfR9w1snMls.roa (hash: 4nFYoBbwhfsOo2OK62wk4BJ40HPGWDvHaokQJOEAsAE=) 8: SxsTTQPpb002U8lLZRV6SRhekS0.roa (hash: W+v+QmlBcUbu1220skf3dGHkJEwkEM6pZN3F3mSoEjA=) 9: U27renAALZTxH0h-gwjCCnMoHKk.roa (hash: ORyWVmLu5TiTeF6f08kuBMFxVBSVN460MMMTmyam6hc=) 10: ZpWVrlMb2NpY8HHQlSRsYYYBuS4.roa (hash: pkrt/UmdtM08Ahi5VFPpOcMkqFc/0tZBQtexbUjXoVw=) 11: _KBQXB2Ok6DxzjcnIQISyeFSnpM.roa (hash: 9HopsVKQdGio4tWIg9WjN9YxEsegpCgT2SWiuwriul0=) 12: _neEZrmq0Ct3kFL__C5GyRs4mP0.roa (hash: 9kAGb49vKmov+gzr6FaaU1iRQWFt3aVXTbBHFybGSGc=) 13: aKANS_nMhqKQxSqYsTLFAPPf4Ac.roa (hash: uM6jlbx5BEyZgSOnEuqPMeNP3j1cSANjK7c9s23dmCw=) 14: c0F1tCgxfTqqtecEpLhL2Yzgotc.roa (hash: kcc7SOAkVdEZqliKSy982SiY2cxq/54ffuzbxdOylbI=) 15: gZ4dcf6HjqfncGGeENClMefPX_s.roa (hash: 0o7ggVRkzqB00ya5tb+jsy9euf5xB6KFOxp5W1g0pVc=) 16: l8zay_INv7E0VzJhTHR34KyIxYU.roa (hash: Ub/uqiz++gX3geu9vGrvci1ULIu9IKfiqiE2f8mI0lM=) 17: mNhJEg8yYPko26xnMlb5p8FIxE0.roa (hash: w9gg5PUiPe908J5vjI6p+AZZqfbQNUOc9hdSAtqhApM=) 18: q6q4U64HI_-eToYoeUgOUPU3KRE.roa (hash: kxmtIIlqbHTH1qvNoBG2/z96qUIjP2N3zilZLCieN00=) 19: sSe9vjQhLXz0LCDCrOhG3-q5jrA.roa (hash: Ks/R2WS3cda1aUMFkl1JkdwTxi5reAccOsu/QKsp7Og=) 20: sohX7LbuAHcvqGne2pID4PK53cs.roa (hash: pnEuUuyYA2H3GexHsPga00jBAH2t730CNd994bqMDuA=) 21: tqXOVuDrdAyLecpEp2l4AMffHAw.roa (hash: zp13fmxJbku6zhMDC/zXyPJnhXVh8hRoWiN4PFSExOM=) 22: xYkYZOmCV58rTJJEdIAsjdVBGXM.roa (hash: eCJXn/CSFpM/78IXFQ7tMZnEX10POhy3RCQh+Y88gTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ce:c8:be:9d:0a:cb:b4:57:90:d0:9c:f8:04:aa:22:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Sep 23 15:00:57 2026 GMT Not After : Sep 24 15:00:57 2026 GMT Subject: CN=34c7572c080252165ba9a187da99e8c3cf64caf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:23:cb:85:fc:53:88:f2:25:a4:c1:1e:61:bf: 55:aa:01:83:b6:7d:ea:94:ec:a6:83:34:2b:ab:ff: 7c:dc:21:f2:00:0f:28:56:84:d5:38:2d:53:79:a4: 99:a4:d6:28:9e:13:f3:01:79:5b:74:b2:9b:89:70: fc:0a:73:06:ea:20:31:dc:4a:de:8d:69:2a:18:b3: 20:85:44:1d:32:40:ed:54:5d:97:56:39:2e:b7:af: f2:55:67:8a:5a:83:94:e9:04:4c:bf:dd:c3:d2:05: 7f:35:4f:9d:46:db:8f:ed:82:fd:36:93:90:4f:6b: ff:70:14:97:79:b9:ff:ed:62:74:7b:d2:11:0c:00: d1:8f:4b:9a:7c:f1:45:b0:95:a1:05:09:29:81:38: 02:2b:a1:56:c8:71:88:48:57:36:fc:fc:17:4b:40: be:54:2b:e8:a4:fc:99:6a:b3:42:3b:4e:ad:f2:29: e2:3f:65:d7:d0:a7:c9:a8:4e:60:d2:99:d9:5c:fc: e6:a1:24:59:d2:21:bd:d1:52:13:3f:4b:cc:1f:70: 45:f4:1e:df:79:58:b5:5d:f6:74:4d:f6:7d:3e:80: 27:c4:ba:a5:f7:5e:ce:95:61:1e:3c:8d:94:66:e5: a8:f8:77:ee:dc:d2:c3:b8:72:61:b8:61:a9:b8:76: e0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C7:57:2C:08:02:52:16:5B:A9:A1:87:DA:99:E8:C3:CF:64:CA:F5 X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c7:ce:b6:7a:09:65:99:03:cd:a0:57:3b:0d:f1:ba:a1:73: da:61:4e:e5:3b:86:47:77:38:48:50:26:14:56:0b:bd:76:a5: 43:a9:44:0f:1b:13:f8:d5:3b:50:f8:ce:ba:84:3f:ff:a4:52: 51:7e:13:ef:a5:21:81:d4:07:c0:38:04:1f:7b:82:67:ee:53: 15:d1:d5:54:d5:ea:d9:70:73:39:9d:7a:69:31:65:d4:fa:71: 13:0c:13:a5:89:c8:7f:f4:6a:60:10:e3:72:b3:a8:26:e8:13: d8:fc:40:72:3f:e1:d9:9d:e0:ed:1b:a3:01:6f:ea:34:bd:e6: b0:5b:be:76:7b:ec:e4:30:0d:cb:c8:bc:57:ad:3d:0e:c1:65: 2e:56:fe:da:1d:79:1a:df:0e:3e:99:72:ef:ca:0a:79:fe:5f: a5:f9:c1:f0:3c:26:b8:40:fc:b3:cd:f7:24:e8:3b:63:9f:4b: e7:20:f8:0c:34:77:bf:e6:2f:d5:c5:ef:4d:1c:66:03:af:77: de:24:29:d2:3f:50:d0:24:40:49:c1:64:ab:ea:cc:2b:65:e3: f4:1a:be:e5:75:56:a3:df:fa:46:9e:f9:56:64:b3:30:aa:60: ea:ba:a7:98:89:66:48:ea:f2:45:d9:4a:a6:ac:8d:96:db:c5: d1:8d:95:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDOyL6dCsu0V5DQnPgEqiIFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjYwOTIzMTUwMDU3WhcNMjYwOTI0MTUwMDU3WjAzMTEwLwYDVQQD EygzNGM3NTcyYzA4MDI1MjE2NWJhOWExODdkYTk5ZThjM2NmNjRjYWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iPLhfxTiPIlpMEeYb9VqgGDtn3q lOymgzQrq/983CHyAA8oVoTVOC1TeaSZpNYonhPzAXlbdLKbiXD8CnMG6iAx3Ere jWkqGLMghUQdMkDtVF2XVjkut6/yVWeKWoOU6QRMv93D0gV/NU+dRtuP7YL9NpOQ T2v/cBSXebn/7WJ0e9IRDADRj0uafPFFsJWhBQkpgTgCK6FWyHGISFc2/PwXS0C+ VCvopPyZarNCO06t8iniP2XX0KfJqE5g0pnZXPzmoSRZ0iG90VITP0vMH3BF9B7f eVi1XfZ0TfZ9PoAnxLql917OlWEePI2UZuWo+Hfu3NLDuHJhuGGpuHbgOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTHVywIAlIWW6mhh9qZ6MPPZMr1MB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcfOtnoJ ZZkDzaBXOw3xuqFz2mFO5TuGR3c4SFAmFFYLvXalQ6lEDxsT+NU7UPjOuoQ//6RS UX4T76UhgdQHwDgEH3uCZ+5TFdHVVNXq2XBzOZ16aTFl1PpxEwwTpYnIf/RqYBDj crOoJugT2PxAcj/h2Z3g7RujAW/qNL3msFu+dnvs5DANy8i8V609DsFlLlb+2h15 Gt8OPply78oKef5fpfnB8DwmuED8s833JOg7Y59L5yD4DDR3v+Yv1cXvTRxmA693 3iQp0j9Q0CRAScFkq+rMK2Xj9Bq+5XVWo9/6Rp75VmSzMKpg6rqnmIlmSOryRdlK pqyNltvF0Y2VJw== -----END CERTIFICATE-----Generated at Wed Sep 23 19:17:02 2026 by rpki-client