$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: U/u2hVURJBIfslgJNelJ7DmyeeTsEkWfwwgW9no6go0= Subject key identifier: 1D:03:88:0C:DF:5A:BC:F8:F5:8D:4F:FB:CA:FC:D2:B8:1F:DB:5D:51 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019E1D228A4725722BDE2CF2AA362D5F6A65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 16E2 Signing time: Tue 12 May 2026 17:01:03 +0000 Manifest this update: Tue 12 May 2026 17:01:03 +0000 Manifest next update: Wed 13 May 2026 17:01:03 +0000 Files and hashes: 1: EwdpgIL9FfCy9ehB3BBTCnpWay4.roa (hash: Zd/Fab+TtV6L026SR3m6Lr9zmEU3BY+Tmm5k2jzHBGA=) 2: I-sMHz5KWaJWWHv8LP-cTbLRlhk.roa (hash: ycdqoFMuV7vOqJ6ik/7TLLM1IrEFNQXg4WIcvH+nbTI=) 3: JltXya391JkGSYwvzrVlrXpnF64.roa (hash: UccBxpSpEJUyYr/IQ7pBmDAl22letmtiDRLPjq3VHKY=) 4: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: lSk/8/p6p17/sLaRPIsc8+dmez7Q62Dad10hrIGTvI4=) 5: LjwLBkukbLxUFkuTIfR9w1snMls.roa (hash: 4nFYoBbwhfsOo2OK62wk4BJ40HPGWDvHaokQJOEAsAE=) 6: SxsTTQPpb002U8lLZRV6SRhekS0.roa (hash: W+v+QmlBcUbu1220skf3dGHkJEwkEM6pZN3F3mSoEjA=) 7: ZpWVrlMb2NpY8HHQlSRsYYYBuS4.roa (hash: pkrt/UmdtM08Ahi5VFPpOcMkqFc/0tZBQtexbUjXoVw=) 8: _KBQXB2Ok6DxzjcnIQISyeFSnpM.roa (hash: 9HopsVKQdGio4tWIg9WjN9YxEsegpCgT2SWiuwriul0=) 9: _neEZrmq0Ct3kFL__C5GyRs4mP0.roa (hash: 9kAGb49vKmov+gzr6FaaU1iRQWFt3aVXTbBHFybGSGc=) 10: aKANS_nMhqKQxSqYsTLFAPPf4Ac.roa (hash: uM6jlbx5BEyZgSOnEuqPMeNP3j1cSANjK7c9s23dmCw=) 11: c0F1tCgxfTqqtecEpLhL2Yzgotc.roa (hash: kcc7SOAkVdEZqliKSy982SiY2cxq/54ffuzbxdOylbI=) 12: gZ4dcf6HjqfncGGeENClMefPX_s.roa (hash: 0o7ggVRkzqB00ya5tb+jsy9euf5xB6KFOxp5W1g0pVc=) 13: l8zay_INv7E0VzJhTHR34KyIxYU.roa (hash: Ub/uqiz++gX3geu9vGrvci1ULIu9IKfiqiE2f8mI0lM=) 14: mNhJEg8yYPko26xnMlb5p8FIxE0.roa (hash: w9gg5PUiPe908J5vjI6p+AZZqfbQNUOc9hdSAtqhApM=) 15: q6q4U64HI_-eToYoeUgOUPU3KRE.roa (hash: kxmtIIlqbHTH1qvNoBG2/z96qUIjP2N3zilZLCieN00=) 16: sSe9vjQhLXz0LCDCrOhG3-q5jrA.roa (hash: Ks/R2WS3cda1aUMFkl1JkdwTxi5reAccOsu/QKsp7Og=) 17: sohX7LbuAHcvqGne2pID4PK53cs.roa (hash: pnEuUuyYA2H3GexHsPga00jBAH2t730CNd994bqMDuA=) 18: tqXOVuDrdAyLecpEp2l4AMffHAw.roa (hash: zp13fmxJbku6zhMDC/zXyPJnhXVh8hRoWiN4PFSExOM=) 19: tw6AZDGGpP9NxVAB2it1NsPBTW4.roa (hash: IMxXE5hLU1Mm0BQGKqcA2AkFFX2OTXDF0EUw7x9FubM=) 20: xYkYZOmCV58rTJJEdIAsjdVBGXM.roa (hash: eCJXn/CSFpM/78IXFQ7tMZnEX10POhy3RCQh+Y88gTU=) 21: yJoN1VaNgltdfpP-maVQQcOYy_8.roa (hash: DoE5yzS7wJT/6cfhAeXgd5cw2cfQnuSELoHqvY9h2n8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:22:8a:47:25:72:2b:de:2c:f2:aa:36:2d:5f:6a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: May 12 17:01:03 2026 GMT Not After : May 13 17:01:03 2026 GMT Subject: CN=1d03880cdf5abcf8f58d4ffbcafcd2b81fdb5d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:00:a8:7b:fe:65:9b:c7:4e:a4:6e:c1:61: fd:cf:9f:df:e3:47:ac:3c:65:95:c6:ee:f4:db:2a: 0a:23:a7:05:81:eb:20:e9:2e:58:2b:86:1a:7b:16: 64:56:d6:3f:7a:e3:05:d6:4a:9d:6e:4a:d6:85:f0: 6f:cc:8e:ce:2c:e9:c0:e6:6e:28:a6:1b:58:2b:16: ab:ed:74:80:4f:42:b9:30:b8:cc:48:f7:e7:e9:14: 81:96:9e:42:10:f0:50:ac:fe:e9:dc:ab:c4:1c:c5: 0a:7c:1d:1e:6c:5f:f0:d5:a5:06:c7:57:64:7a:c8: 81:83:52:6d:62:e7:ff:ec:1e:4c:75:dd:c1:3d:4d: 70:bd:44:cc:6d:92:52:0f:d7:bc:87:66:42:3d:51: a2:06:1a:10:b8:2a:3a:34:af:9d:4b:25:e0:5f:d6: 9c:2e:0e:62:d4:3f:91:34:db:79:a9:d0:39:d0:93: cb:3c:22:b4:75:e2:15:40:7f:dc:52:0a:be:d3:98: c8:27:e8:fa:66:c4:ef:c4:60:90:f4:77:40:d1:60: bd:6b:3d:79:de:3b:c5:6e:4a:99:b1:b3:2d:99:e4: 6a:0d:69:73:8b:93:2e:63:91:46:17:61:22:af:ac: d4:d9:c1:f5:19:b9:21:b6:b8:00:99:71:9e:e1:0a: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:03:88:0C:DF:5A:BC:F8:F5:8D:4F:FB:CA:FC:D2:B8:1F:DB:5D:51 X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:2d:63:1e:8b:4c:0a:aa:d8:27:a7:9c:99:54:12:82:bd:0c: d1:ec:61:65:ae:ae:0b:38:d3:ee:34:83:f0:7d:2a:6c:06:8a: 93:80:34:14:ab:cd:46:74:35:96:c4:56:40:c6:e3:1d:17:04: af:6d:59:08:b1:8f:1b:d9:79:11:f0:2f:51:68:b5:c8:dd:93: 5a:7b:df:db:40:4f:d8:8f:04:3b:19:e7:a2:06:32:98:f1:97: b0:cd:50:f6:37:dc:09:a4:c7:1a:5f:6a:3d:db:aa:fc:87:39: 53:79:4c:7a:6b:90:64:6e:ec:af:5d:dd:b1:93:77:70:eb:23: 60:ea:27:bb:ed:0a:b8:25:80:dc:5c:bf:66:68:da:2f:9e:65: ea:82:5e:4d:f2:41:36:4e:05:8e:89:1a:b8:23:e9:e3:fd:2a: ad:62:1b:9e:d2:f9:21:db:c2:4d:fb:0d:af:df:fb:80:c1:28: a4:95:19:62:fb:b6:9f:09:5c:13:0b:be:df:07:37:6e:50:09: eb:e7:01:8c:13:7c:98:51:fb:bf:58:7f:3f:1f:42:75:56:23: e6:bf:e9:9c:44:bf:2b:bc:aa:2c:ba:f8:5b:50:12:36:66:4c: 0c:fc:34:f7:b4:a8:16:46:59:a3:d3:7d:a2:46:8f:a6:a4:05: 7a:6e:8e:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dIopHJXIr3izyqjYtX2plMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjYwNTEyMTcwMTAzWhcNMjYwNTEzMTcwMTAzWjAzMTEwLwYDVQQD EygxZDAzODgwY2RmNWFiY2Y4ZjU4ZDRmZmJjYWZjZDJiODFmZGI1ZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRcAqHv+ZZvHTqRuwWH9z5/f40es PGWVxu702yoKI6cFgesg6S5YK4YaexZkVtY/euMF1kqdbkrWhfBvzI7OLOnA5m4o phtYKxar7XSAT0K5MLjMSPfn6RSBlp5CEPBQrP7p3KvEHMUKfB0ebF/w1aUGx1dk esiBg1JtYuf/7B5Mdd3BPU1wvUTMbZJSD9e8h2ZCPVGiBhoQuCo6NK+dSyXgX9ac Lg5i1D+RNNt5qdA50JPLPCK0deIVQH/cUgq+05jIJ+j6ZsTvxGCQ9HdA0WC9az15 3jvFbkqZsbMtmeRqDWlzi5MuY5FGF2Eir6zU2cH1GbkhtrgAmXGe4QptXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0DiAzfWrz49Y1P+8r80rgf211RMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQC1jHotM CqrYJ6ecmVQSgr0M0exhZa6uCzjT7jSD8H0qbAaKk4A0FKvNRnQ1lsRWQMbjHRcE r21ZCLGPG9l5EfAvUWi1yN2TWnvf20BP2I8EOxnnogYymPGXsM1Q9jfcCaTHGl9q Pduq/Ic5U3lMemuQZG7sr13dsZN3cOsjYOonu+0KuCWA3Fy/ZmjaL55l6oJeTfJB Nk4FjokauCPp4/0qrWIbntL5IdvCTfsNr9/7gMEopJUZYvu2nwlcEwu+3wc3blAJ 6+cBjBN8mFH7v1h/Px9CdVYj5r/pnES/K7yqLLr4W1ASNmZMDPw097SoFkZZo9N9 okaPpqQFem6OzQ== -----END CERTIFICATE-----Generated at Tue May 12 21:56:51 2026 by rpki-client