$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: GtVYWLwu5dQ3tdJu89Zwhkc4uwoB50DaYTFA3ZWdxQc= Subject key identifier: 87:3B:92:39:54:0A:9C:54:FD:86:F6:E1:DC:26:DA:AA:FF:E2:35:11 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 0198D629889A4AB93944D5C3CF5B2D9AB461 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 1420 Signing time: Sat 23 Aug 2025 09:01:42 +0000 Manifest this update: Sat 23 Aug 2025 09:01:42 +0000 Manifest next update: Sun 24 Aug 2025 09:01:42 +0000 Files and hashes: 1: 3_PU79fuHYEhPlNdsJUuZYubgqE.roa (hash: XJWOGH/fcmWGI7b/RAY8L2wuvZcYBFbJ22ImnM+pQlo=) 2: 6ZciseV0h3pH3lp0hLyZ992TdQQ.roa (hash: sFwBr6Wh0TdrZtVAujkppJqtVxS3U22k/6YTX59vUaI=) 3: 6nGhmoSDQSpfjNNYdXCrQWERlIk.roa (hash: /4N+szUgXgcEHHrQDjyOBrtHm4Pkc7NrFhdRQABicbY=) 4: 7HPt5nannhv2gwbAHwaRC5RFFDM.roa (hash: UBw+74e6x0xFF9XFftGKU2o22p62byiADLv5iJRfz1g=) 5: 8Bl_uVVQOuNTAYB4MJGJvtmHpC0.roa (hash: TlelRdg2AvLDMhtiuqfO42FikSgwVhiKJDAQT7WdJj0=) 6: 8YmL9Ep32a72BjjrjP1j1JO7b5Q.roa (hash: Ht29fppl19fG6SkxbeWiQ7UIPOPKrDH3yWJ3G4r6GG4=) 7: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: l8FXtdBMdNDQ6pcpVwA0p106H4GjKhBRukf+33eCwpk=) 8: M2zzd8H-Tlg7XAdTwUQjLUYGllY.roa (hash: ETq98V9SXDP0t347M1cA3yCogqTqQCthqQp4LwB/LXQ=) 9: M97ZcKaRZuOa3DTXxLHlO-RLatQ.roa (hash: w0gHLxi0MpSA4Cow6J8TG6Bmoy7AY86PSwg5UsV2kcM=) 10: Qb_xgsenhCkec0NMAq-37FxvC-Q.roa (hash: tOjmdfLGRrXXOfqXX2/nLImlZVzeIuD2NtgFbQbxXvU=) 11: WHIHIqWEsALKLs5d6Q-tOWQCla8.roa (hash: hEIDrElaFaUvEVn72pSS3zv8TkwlJYcJGyPsidxg2tA=) 12: a9iv50ooVHm1APCybq4owIunnG8.roa (hash: phKXw/sbpuIWnctwyonEWyJEOXe+K9H58t2l6qBy6tg=) 13: dVb7hZhGuZRTM--X8lkrhzF2Q7Y.roa (hash: EVPzk1PreoChl9YjAauXazZeGF8twPM0Bys79KZjvx8=) 14: iDsGG6EDS8fs9Hct4p8CitByvws.roa (hash: ch//5WVE7dA9hut4Enr9j7EKe84fcI2Ykg7l+3xy19U=) 15: jX4WFfpxo3HHZpB1YZxC4p_jFpo.roa (hash: HvcFd2uvN4vxiceLP8NW4lHvaK1pmADob7hykxb6+nc=) 16: pGGDoeGnPksdWvYsReZKh3O6puY.roa (hash: xGeOEw9UbAQAfMawzQlzpH9iOWa+z4LqLDy15zn/jN0=) 17: wnaVByUU9rLY0lixJG-AIxAIIKk.roa (hash: uZB4+jtFO740w1LWkNgD8gNKmUM01C7fhf/4nIXCJmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 09:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:29:88:9a:4a:b9:39:44:d5:c3:cf:5b:2d:9a:b4:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Aug 23 09:01:42 2025 GMT Not After : Aug 24 09:01:42 2025 GMT Subject: CN=873b9239540a9c54fd86f6e1dc26daaaffe23511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:68:d2:04:36:2f:be:2c:ae:ef:7d:f6:b1:26: df:95:41:b5:0b:ea:e8:e1:eb:7f:1f:b6:31:f5:72: 40:7b:9f:02:b6:cd:aa:f1:3d:70:9a:b3:97:e6:68: 19:de:01:07:37:6e:7f:02:5d:02:18:13:27:3a:84: 9d:8d:05:32:3d:3a:96:8f:84:09:49:68:27:2a:7e: d8:30:06:69:42:40:bd:a7:8b:87:02:88:72:41:ad: 19:19:ed:f5:7e:8a:58:64:93:8b:5a:65:c0:5a:7e: 81:2e:ee:ec:c8:d2:52:db:8e:75:e0:a9:32:fd:2f: da:ee:6d:82:14:43:ed:8d:92:46:80:ef:09:69:da: ed:65:19:29:45:8d:63:af:79:ba:6e:80:9a:a3:d0: e4:aa:e5:37:5c:d1:c2:c3:54:5a:d9:12:ac:aa:a6: 13:f8:05:1d:46:b8:44:05:93:ba:fd:42:d5:bf:be: aa:ba:43:8f:c2:3e:8f:b7:8f:a5:0c:a6:fe:28:2f: f1:e8:6f:93:f7:36:8f:a0:2c:9e:07:74:f9:23:75: cc:52:01:a3:bd:f9:91:d1:89:b4:bc:a6:18:89:28: 34:ff:b9:8c:33:03:df:55:99:96:b0:3b:04:3f:96: 14:b3:89:9c:dd:c1:a9:b9:65:f7:cb:2b:cf:fc:aa: 6e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3B:92:39:54:0A:9C:54:FD:86:F6:E1:DC:26:DA:AA:FF:E2:35:11 X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f5:40:8f:e4:f4:44:26:54:0a:a0:92:7e:29:e2:ad:d4:26: 18:ce:57:78:26:1f:b2:36:79:25:2a:8e:a1:33:15:44:66:00: 98:be:8d:8b:33:c1:e4:99:c5:b8:ea:7b:03:dd:0d:86:58:a6: 8f:f2:c0:be:a7:c0:db:71:16:6f:33:18:73:49:a3:d8:41:eb: f8:3b:20:be:18:4b:1c:dc:94:8f:14:2a:4b:5f:e3:fc:db:67: ab:da:f5:e5:b1:d9:f4:12:ce:36:63:19:4a:7d:75:ad:93:81: 0c:50:10:a9:27:93:db:92:3b:64:71:d7:fb:b6:13:0b:6b:94: a7:9f:59:3f:6a:33:90:81:51:54:18:57:5e:0e:9a:b3:95:ff: 72:e2:c7:5d:26:8d:57:b8:d3:6e:e9:bd:b0:84:91:8a:f1:f1: 89:2b:ef:48:10:79:10:97:a7:5f:96:7c:65:e0:02:21:c2:94: 06:cb:7a:3f:8e:f2:0c:ad:29:a6:70:f3:d9:fc:dd:33:71:d6: c7:e4:eb:0c:42:57:36:06:c7:63:6e:e3:61:ac:86:15:62:ab: 5a:ec:48:89:4a:4b:5b:cd:cb:1b:4c:21:27:a7:84:91:a8:86: 90:8a:c3:40:94:21:8a:a9:15:2b:d5:c6:d2:4f:be:44:78:a6: 26:10:03:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWKYiaSrk5RNXDz1stmrRhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjUwODIzMDkwMTQyWhcNMjUwODI0MDkwMTQyWjAzMTEwLwYDVQQD Eyg4NzNiOTIzOTU0MGE5YzU0ZmQ4NmY2ZTFkYzI2ZGFhYWZmZTIzNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumjSBDYvviyu7332sSbflUG1C+ro 4et/H7Yx9XJAe58Cts2q8T1wmrOX5mgZ3gEHN25/Al0CGBMnOoSdjQUyPTqWj4QJ SWgnKn7YMAZpQkC9p4uHAohyQa0ZGe31fopYZJOLWmXAWn6BLu7syNJS24514Kky /S/a7m2CFEPtjZJGgO8JadrtZRkpRY1jr3m6boCao9DkquU3XNHCw1Ra2RKsqqYT +AUdRrhEBZO6/ULVv76qukOPwj6Pt4+lDKb+KC/x6G+T9zaPoCyeB3T5I3XMUgGj vfmR0Ym0vKYYiSg0/7mMMwPfVZmWsDsEP5YUs4mc3cGpuWX3yyvP/Kpu6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIc7kjlUCpxU/Yb24dwm2qr/4jURMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPVAj+T0 RCZUCqCSfinirdQmGM5XeCYfsjZ5JSqOoTMVRGYAmL6NizPB5JnFuOp7A90Nhlim j/LAvqfA23EWbzMYc0mj2EHr+DsgvhhLHNyUjxQqS1/j/Ntnq9r15bHZ9BLONmMZ Sn11rZOBDFAQqSeT25I7ZHHX+7YTC2uUp59ZP2ozkIFRVBhXXg6as5X/cuLHXSaN V7jTbum9sISRivHxiSvvSBB5EJenX5Z8ZeACIcKUBst6P47yDK0ppnDz2fzdM3HW x+TrDEJXNgbHY27jYayGFWKrWuxIiUpLW83LG0whJ6eEkaiGkIrDQJQhiqkVK9XG 0k++RHimJhADRw== -----END CERTIFICATE-----Generated at Sat Aug 23 16:05:37 2025 by rpki-client