$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: NhLuxhdzKocf2gzaog13J+jpL3pzgY1S2mQsp3t8nZ8= Subject key identifier: 2B:45:A8:F0:F6:96:E2:93:CF:57:6A:97:C3:F0:10:1C:97:26:86:00 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 0197B6694A4ADF19D77C0A649DAA8D8FE677 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 138B Signing time: Sat 28 Jun 2025 12:00:42 +0000 Manifest this update: Sat 28 Jun 2025 12:00:42 +0000 Manifest next update: Sun 29 Jun 2025 12:00:42 +0000 Files and hashes: 1: 3_PU79fuHYEhPlNdsJUuZYubgqE.roa (hash: XJWOGH/fcmWGI7b/RAY8L2wuvZcYBFbJ22ImnM+pQlo=) 2: 6ZciseV0h3pH3lp0hLyZ992TdQQ.roa (hash: sFwBr6Wh0TdrZtVAujkppJqtVxS3U22k/6YTX59vUaI=) 3: 6nGhmoSDQSpfjNNYdXCrQWERlIk.roa (hash: /4N+szUgXgcEHHrQDjyOBrtHm4Pkc7NrFhdRQABicbY=) 4: 7HPt5nannhv2gwbAHwaRC5RFFDM.roa (hash: UBw+74e6x0xFF9XFftGKU2o22p62byiADLv5iJRfz1g=) 5: 8Bl_uVVQOuNTAYB4MJGJvtmHpC0.roa (hash: TlelRdg2AvLDMhtiuqfO42FikSgwVhiKJDAQT7WdJj0=) 6: 8YmL9Ep32a72BjjrjP1j1JO7b5Q.roa (hash: Ht29fppl19fG6SkxbeWiQ7UIPOPKrDH3yWJ3G4r6GG4=) 7: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: 28u9iB8HRS9/2UfV9psipI3jL/+Tdskq7owINCY6I94=) 8: M2zzd8H-Tlg7XAdTwUQjLUYGllY.roa (hash: ETq98V9SXDP0t347M1cA3yCogqTqQCthqQp4LwB/LXQ=) 9: M97ZcKaRZuOa3DTXxLHlO-RLatQ.roa (hash: w0gHLxi0MpSA4Cow6J8TG6Bmoy7AY86PSwg5UsV2kcM=) 10: Qb_xgsenhCkec0NMAq-37FxvC-Q.roa (hash: tOjmdfLGRrXXOfqXX2/nLImlZVzeIuD2NtgFbQbxXvU=) 11: WHIHIqWEsALKLs5d6Q-tOWQCla8.roa (hash: hEIDrElaFaUvEVn72pSS3zv8TkwlJYcJGyPsidxg2tA=) 12: a9iv50ooVHm1APCybq4owIunnG8.roa (hash: phKXw/sbpuIWnctwyonEWyJEOXe+K9H58t2l6qBy6tg=) 13: dVb7hZhGuZRTM--X8lkrhzF2Q7Y.roa (hash: EVPzk1PreoChl9YjAauXazZeGF8twPM0Bys79KZjvx8=) 14: iDsGG6EDS8fs9Hct4p8CitByvws.roa (hash: ch//5WVE7dA9hut4Enr9j7EKe84fcI2Ykg7l+3xy19U=) 15: jX4WFfpxo3HHZpB1YZxC4p_jFpo.roa (hash: HvcFd2uvN4vxiceLP8NW4lHvaK1pmADob7hykxb6+nc=) 16: pGGDoeGnPksdWvYsReZKh3O6puY.roa (hash: xGeOEw9UbAQAfMawzQlzpH9iOWa+z4LqLDy15zn/jN0=) 17: wnaVByUU9rLY0lixJG-AIxAIIKk.roa (hash: uZB4+jtFO740w1LWkNgD8gNKmUM01C7fhf/4nIXCJmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:69:4a:4a:df:19:d7:7c:0a:64:9d:aa:8d:8f:e6:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Jun 28 12:00:42 2025 GMT Not After : Jun 29 12:00:42 2025 GMT Subject: CN=2b45a8f0f696e293cf576a97c3f0101c97268600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5e:8c:5e:68:06:b3:64:7b:07:fa:cd:39:0b: e9:70:34:0a:b7:d0:2b:9f:9a:b1:1c:7b:5c:a0:38: 50:db:80:49:02:e3:d4:f0:09:29:96:fe:13:d5:89: bd:01:7c:03:c7:50:1d:e6:91:02:9b:3b:9c:02:f4: 82:d8:c8:23:7f:65:2c:a7:c6:ed:36:27:a5:70:e1: e5:96:40:db:4f:ed:45:35:b7:75:04:5d:42:d9:68: 6f:e5:1b:fe:81:6f:d0:e6:eb:d9:08:56:52:a3:65: 2f:3e:95:01:cd:52:81:e2:bc:71:54:fe:16:12:6f: 50:3f:9b:aa:53:5a:3d:16:6f:64:2e:ad:43:cb:b5: 9b:2e:fb:26:38:c8:0e:5b:16:bb:5b:0c:5f:43:72: 85:05:90:64:6b:cb:17:20:da:c5:79:c8:b7:a6:2f: 96:fd:09:fd:0b:41:81:7e:15:bc:74:b2:e9:a7:cb: 2e:37:72:a7:a4:71:c6:9d:54:ae:ea:f8:d7:f5:e9: bd:fc:03:d0:8f:ac:ee:99:ad:ba:eb:a9:7d:27:a2: 05:40:c4:7a:04:48:d4:55:4f:1e:fa:7a:78:36:b3: 1d:1a:f4:76:79:e6:50:ad:0d:fa:44:b4:80:b5:c3: fb:cb:af:6a:1e:f4:90:9e:10:da:65:ca:75:85:89: bf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:45:A8:F0:F6:96:E2:93:CF:57:6A:97:C3:F0:10:1C:97:26:86:00 X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:1b:9d:6c:1a:f9:19:fe:36:cf:8a:b0:7a:5f:8e:96:4e:19: f0:c9:53:dd:6e:20:13:d8:bc:a5:3e:3f:c3:82:e2:d5:bb:e3: 3f:04:1d:55:0b:0b:9b:8f:39:32:a3:16:72:23:10:b0:36:e8: 6d:d5:67:fe:fa:ad:a8:79:17:53:49:e4:75:24:ae:ae:57:b7: a6:cf:17:50:76:c0:9d:f3:d8:87:45:36:f6:2d:aa:d7:73:6c: 7f:71:4a:f5:79:bf:f6:64:d9:14:c6:9b:e9:91:82:77:c9:15: d9:08:88:21:bd:fe:29:92:a8:62:36:2a:61:73:ab:53:d5:5a: dd:cf:9e:bb:55:5a:29:52:b9:5a:c2:d8:b8:ed:66:17:d7:ee: bd:9c:69:49:e5:64:63:75:71:06:23:26:db:e5:f2:18:74:e8: d1:13:9b:62:ef:ca:64:e1:2c:a9:3d:66:60:14:9d:91:61:e1: b9:1f:50:c4:93:f4:e8:f3:b9:83:d7:4c:0a:2c:9a:41:cb:ac: 34:05:ef:2f:08:1d:bd:69:83:b4:74:af:37:8b:b4:59:9f:63: f6:59:a7:31:e4:e8:29:27:5c:b3:8e:bd:f4:73:7c:8a:47:a4: ff:ea:18:74:c8:a5:6b:d2:db:94:3b:ae:f7:f1:53:22:17:93: d4:19:01:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2aUpK3xnXfApknaqNj+Z3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjUwNjI4MTIwMDQyWhcNMjUwNjI5MTIwMDQyWjAzMTEwLwYDVQQD EygyYjQ1YThmMGY2OTZlMjkzY2Y1NzZhOTdjM2YwMTAxYzk3MjY4NjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy16MXmgGs2R7B/rNOQvpcDQKt9Ar n5qxHHtcoDhQ24BJAuPU8Akplv4T1Ym9AXwDx1Ad5pECmzucAvSC2Mgjf2Usp8bt NielcOHllkDbT+1FNbd1BF1C2Whv5Rv+gW/Q5uvZCFZSo2UvPpUBzVKB4rxxVP4W Em9QP5uqU1o9Fm9kLq1Dy7WbLvsmOMgOWxa7WwxfQ3KFBZBka8sXINrFeci3pi+W /Qn9C0GBfhW8dLLpp8suN3KnpHHGnVSu6vjX9em9/APQj6zuma2666l9J6IFQMR6 BEjUVU8e+np4NrMdGvR2eeZQrQ36RLSAtcP7y69qHvSQnhDaZcp1hYm/4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtFqPD2luKTz1dql8PwEByXJoYAMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhudbBr5 Gf42z4qwel+Olk4Z8MlT3W4gE9i8pT4/w4Li1bvjPwQdVQsLm485MqMWciMQsDbo bdVn/vqtqHkXU0nkdSSurle3ps8XUHbAnfPYh0U29i2q13Nsf3FK9Xm/9mTZFMab 6ZGCd8kV2QiIIb3+KZKoYjYqYXOrU9Va3c+eu1VaKVK5WsLYuO1mF9fuvZxpSeVk Y3VxBiMm2+XyGHTo0RObYu/KZOEsqT1mYBSdkWHhuR9QxJP06PO5g9dMCiyaQcus NAXvLwgdvWmDtHSvN4u0WZ9j9lmnMeToKSdcs4699HN8ikek/+oYdMila9LblDuu 9/FTIheT1BkBsw== -----END CERTIFICATE-----Generated at Sat Jun 28 19:26:17 2025 by rpki-client