$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: JGxTgEz8BCbxsirFT6B3ZtTu0OwIrZ++Gso00so8Z8g= Subject key identifier: 59:CC:99:CD:39:78:9C:01:AF:20:4E:EE:5E:9B:35:A9:3D:BA:BC:DA Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019F8F7FB40B0351989ED2E32BC4BAA2370A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 17A2 Signing time: Thu 23 Jul 2026 15:02:18 +0000 Manifest this update: Thu 23 Jul 2026 15:02:18 +0000 Manifest next update: Fri 24 Jul 2026 15:02:18 +0000 Files and hashes: 1: 7yuAjuHUuBQgI9LKFETDYn_CZ5E.roa (hash: sYMFJLdO959jWZrAYfMJzmtj0yKZjN2K1lebp0gq+TM=) 2: EwdpgIL9FfCy9ehB3BBTCnpWay4.roa (hash: Zd/Fab+TtV6L026SR3m6Lr9zmEU3BY+Tmm5k2jzHBGA=) 3: I-sMHz5KWaJWWHv8LP-cTbLRlhk.roa (hash: ycdqoFMuV7vOqJ6ik/7TLLM1IrEFNQXg4WIcvH+nbTI=) 4: JltXya391JkGSYwvzrVlrXpnF64.roa (hash: UccBxpSpEJUyYr/IQ7pBmDAl22letmtiDRLPjq3VHKY=) 5: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: hdIbQ57jBXZc+Tb/2zkfG9pgxl7L0ThjWn78JzQvZ5o=) 6: LjwLBkukbLxUFkuTIfR9w1snMls.roa (hash: 4nFYoBbwhfsOo2OK62wk4BJ40HPGWDvHaokQJOEAsAE=) 7: SxsTTQPpb002U8lLZRV6SRhekS0.roa (hash: W+v+QmlBcUbu1220skf3dGHkJEwkEM6pZN3F3mSoEjA=) 8: ZpWVrlMb2NpY8HHQlSRsYYYBuS4.roa (hash: pkrt/UmdtM08Ahi5VFPpOcMkqFc/0tZBQtexbUjXoVw=) 9: _KBQXB2Ok6DxzjcnIQISyeFSnpM.roa (hash: 9HopsVKQdGio4tWIg9WjN9YxEsegpCgT2SWiuwriul0=) 10: _neEZrmq0Ct3kFL__C5GyRs4mP0.roa (hash: 9kAGb49vKmov+gzr6FaaU1iRQWFt3aVXTbBHFybGSGc=) 11: aKANS_nMhqKQxSqYsTLFAPPf4Ac.roa (hash: uM6jlbx5BEyZgSOnEuqPMeNP3j1cSANjK7c9s23dmCw=) 12: c0F1tCgxfTqqtecEpLhL2Yzgotc.roa (hash: kcc7SOAkVdEZqliKSy982SiY2cxq/54ffuzbxdOylbI=) 13: gZ4dcf6HjqfncGGeENClMefPX_s.roa (hash: 0o7ggVRkzqB00ya5tb+jsy9euf5xB6KFOxp5W1g0pVc=) 14: l8zay_INv7E0VzJhTHR34KyIxYU.roa (hash: Ub/uqiz++gX3geu9vGrvci1ULIu9IKfiqiE2f8mI0lM=) 15: mNhJEg8yYPko26xnMlb5p8FIxE0.roa (hash: w9gg5PUiPe908J5vjI6p+AZZqfbQNUOc9hdSAtqhApM=) 16: q6q4U64HI_-eToYoeUgOUPU3KRE.roa (hash: kxmtIIlqbHTH1qvNoBG2/z96qUIjP2N3zilZLCieN00=) 17: sSe9vjQhLXz0LCDCrOhG3-q5jrA.roa (hash: Ks/R2WS3cda1aUMFkl1JkdwTxi5reAccOsu/QKsp7Og=) 18: sohX7LbuAHcvqGne2pID4PK53cs.roa (hash: pnEuUuyYA2H3GexHsPga00jBAH2t730CNd994bqMDuA=) 19: tqXOVuDrdAyLecpEp2l4AMffHAw.roa (hash: zp13fmxJbku6zhMDC/zXyPJnhXVh8hRoWiN4PFSExOM=) 20: xYkYZOmCV58rTJJEdIAsjdVBGXM.roa (hash: eCJXn/CSFpM/78IXFQ7tMZnEX10POhy3RCQh+Y88gTU=) 21: yJoN1VaNgltdfpP-maVQQcOYy_8.roa (hash: DoE5yzS7wJT/6cfhAeXgd5cw2cfQnuSELoHqvY9h2n8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:7f:b4:0b:03:51:98:9e:d2:e3:2b:c4:ba:a2:37:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Jul 23 15:02:18 2026 GMT Not After : Jul 24 15:02:18 2026 GMT Subject: CN=59cc99cd39789c01af204eee5e9b35a93dbabcda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d0:4c:39:e4:fe:3e:0f:60:ed:73:9e:63:a0: 70:85:de:da:94:d1:76:88:85:04:30:ce:d2:c1:6f: 20:b5:3c:86:47:79:11:4e:9b:aa:18:c7:ac:75:d8: 7c:96:64:b2:54:fa:10:22:98:6a:e0:d5:40:e5:be: ff:7e:49:7c:2f:cd:7b:ff:1e:25:fc:18:65:e5:fe: 79:09:5d:c2:f6:70:58:e9:92:93:a1:20:6d:90:87: d2:60:57:00:c8:91:76:dc:6d:ca:5d:cc:23:92:1f: 09:7d:41:5c:d8:fd:e9:c5:31:52:7b:56:c6:40:86: 79:ed:01:74:95:06:5e:9e:bd:0b:cc:b6:85:d3:8d: fe:39:a4:07:63:1a:cb:a2:16:ce:fa:ed:92:87:70: 0c:d7:60:e5:74:4d:50:08:22:e2:ec:3c:68:d1:ee: 78:19:94:34:42:cf:dc:64:f1:37:a5:82:6f:13:01: 8d:2d:6a:ba:8c:b8:db:17:28:6f:7c:8f:a5:2f:9d: 82:de:78:41:10:a1:6d:b3:f6:7b:2a:4b:f6:2c:8c: d8:78:8a:29:fe:f3:42:da:47:7a:6c:cd:4e:93:b0: 4f:af:3b:fb:04:c9:65:0c:74:57:10:4d:b2:e8:bd: ba:c8:ec:59:8b:52:12:41:ec:fc:d7:d9:b8:52:a6: fc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CC:99:CD:39:78:9C:01:AF:20:4E:EE:5E:9B:35:A9:3D:BA:BC:DA X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:9a:83:50:84:61:03:f5:a5:b8:45:c2:33:95:77:61:f7:54: fd:a0:da:ef:b4:48:ba:bc:c3:65:95:62:e9:16:05:41:72:36: 37:3e:30:32:b7:70:46:55:1d:fb:45:71:4c:7e:b6:f7:5f:34: d6:09:3a:de:6e:ff:9b:1b:c8:ea:1e:32:8d:b8:99:c7:19:ff: ad:ad:ec:81:96:f5:3c:83:50:d9:3b:52:eb:c7:02:db:fb:f1: 0c:27:81:49:6f:bb:e3:98:5c:e3:b5:02:61:7a:12:73:30:e3: 2a:23:37:09:1c:0f:b2:8c:7e:a2:26:ec:59:08:7d:73:34:ce: c0:bf:bc:d6:da:ac:26:b1:16:c7:8c:71:31:ad:db:32:c6:95: e1:6b:9b:85:73:46:e8:ac:ed:14:56:1b:fe:ca:47:07:c6:fd: 3f:f6:4a:c5:3c:a3:42:4d:22:9c:5e:8c:f1:3d:22:50:0f:8e: ff:ed:46:0e:cb:c7:1e:7d:f0:3a:25:4b:99:e8:d4:f7:92:69: e7:4f:a1:7b:8a:d6:34:f3:a4:b5:bd:a4:9e:dc:95:bc:33:9b: 82:9f:04:02:5b:ac:4f:49:95:04:fd:d7:c7:9b:71:ba:01:e8: 74:d2:dd:1d:73:d1:e9:af:9b:2a:19:84:a6:3c:1e:61:28:4e: cd:4a:b4:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Pf7QLA1GYntLjK8S6ojcKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjYwNzIzMTUwMjE4WhcNMjYwNzI0MTUwMjE4WjAzMTEwLwYDVQQD Eyg1OWNjOTljZDM5Nzg5YzAxYWYyMDRlZWU1ZTliMzVhOTNkYmFiY2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNBMOeT+Pg9g7XOeY6Bwhd7alNF2 iIUEMM7SwW8gtTyGR3kRTpuqGMesddh8lmSyVPoQIphq4NVA5b7/fkl8L817/x4l /Bhl5f55CV3C9nBY6ZKToSBtkIfSYFcAyJF23G3KXcwjkh8JfUFc2P3pxTFSe1bG QIZ57QF0lQZenr0LzLaF043+OaQHYxrLohbO+u2Sh3AM12DldE1QCCLi7Dxo0e54 GZQ0Qs/cZPE3pYJvEwGNLWq6jLjbFyhvfI+lL52C3nhBEKFts/Z7Kkv2LIzYeIop /vNC2kd6bM1Ok7BPrzv7BMllDHRXEE2y6L26yOxZi1ISQez819m4Uqb8uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnMmc05eJwBryBO7l6bNak9urzaMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZqDUIRh A/WluEXCM5V3YfdU/aDa77RIurzDZZVi6RYFQXI2Nz4wMrdwRlUd+0VxTH629180 1gk63m7/mxvI6h4yjbiZxxn/ra3sgZb1PINQ2TtS68cC2/vxDCeBSW+745hc47UC YXoSczDjKiM3CRwPsox+oibsWQh9czTOwL+81tqsJrEWx4xxMa3bMsaV4WubhXNG 6KztFFYb/spHB8b9P/ZKxTyjQk0inF6M8T0iUA+O/+1GDsvHHn3wOiVLmejU95Jp 50+he4rWNPOktb2kntyVvDObgp8EAlusT0mVBP3Xx5txugHodNLdHXPR6a+bKhmE pjweYShOzUq0TA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:57:07 2026 by rpki-client