$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft File: lbPIfnB0hTyRg_FnosJbAuNBdIA.mft (raw, json) Hash identifier: k4OR6tfCsa157S5/FtvzT9h1csy3z1SB4XQmvQHPcfI= Subject key identifier: 30:D5:44:5D:3C:9F:53:B5:8B:AA:EB:82:A5:00:22:15:2E:FE:59:28 Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80 Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480 Certificate serial: 01A1705C18E98783D135D4E7A2768831C043 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft Manifest number: 0138 Signing time: Sun 25 Oct 2026 00:00:46 +0000 Manifest this update: Sun 25 Oct 2026 00:00:46 +0000 Manifest next update: Mon 26 Oct 2026 00:00:46 +0000 Files and hashes: 1: 1-8e6_0FbPvAXJgx01t7ARbBFfAc.roa (hash: CthKGsR5rP9kW/VUDaY/MBae0sF4z9YzQpaj0QH82Ik=) 2: 1-SU8SHnANaDD0VYlFf9Hpx5DMBc.roa (hash: smSsjE+AzeRu3/D9QdEFU+aHS0vNv5m9EyZtmYRjqZ8=) 3: 3R0Yxl6kEU6pvSgQ-sIBt7_ZX24.roa (hash: yaZClV2N6KJOhOcRmYXgjmVx6NMZGfMoAMrjVHPIHQ0=) 4: 3xaFim0SGUOhqh2f2EtSifTUM_c.roa (hash: O1ADycx84QWxmLprGvzt1AvfH4PGqy4iVqQ9rd+n9Ow=) 5: 4kDUwYcFfXVURDuSV-TCLrbE-Sc.roa (hash: A+C1HWWgrEoVh8S1UWH5eBFsLS2ObhPfgvCLRfHxAVU=) 6: CmNz7wBcSO6S5kY9fiiU3S-n6Z8.roa (hash: JDuuWYqi288rBIEpYgn3i+cUgxGJJxYAvOKEt6CJa9s=) 7: D0YcMPOnrSPV7ASIyczMje58jk0.roa (hash: Is1vr91+FB4C4ZqWVmY3m9n+tl9WokJiTH6COjiU6fc=) 8: D5KXW9fykA4D2kkau-Hvj4ncfkI.roa (hash: 2YFVOViFfFs7vK318hzQBHl3F/L33hmlhwDuKQW2ado=) 9: EmaHkN4PwghzXlxJKLnJoSQYQS4.roa (hash: M7GjgagdSvn/s11yZM1uY9CZiXGc766ZPfNroiq0yUw=) 10: O4NMqZLOORFev6MNDuTBAV0i9i0.roa (hash: yFb+imFb3YpJlSZCKwhYAdkCmVo6U4X0OVsZzrQhuYc=) 11: PHjOQ9Fpxy9SuDKIU3ymHFxItwQ.roa (hash: AtEVBryEU+0QaV9AVKbszJgM2w291RiX7wwevVc0Kpc=) 12: RfnQ2GSXRNmd5tgPFMvO0k_fmSU.roa (hash: lU6TT8C4YLLk9wdZrkEDLd51HljO1TGhWxAw/mqY+1w=) 13: X7DeWmIh751ahxsaFVz2zkdKKCc.roa (hash: IXEs+MmuMikSpeDhMH7eEj5LIfv44DMx+zGcEOzh2FE=) 14: ZNnLiyaUkDsW-jQcjbhAHKh8lPM.roa (hash: wE4gqY4aNVDXTiKJ4lZkuzt8RrFPCx2HN9rmT8v0O3A=) 15: hCUwEVQFkHAHS1ND_WColb8GNDQ.roa (hash: EXg2wBfKWOo0l6CcOVqolcA8vFL03jMqU9pr6Gmv5ns=) 16: lbPIfnB0hTyRg_FnosJbAuNBdIA.crl (hash: /84VB7qvPmC6JpLKNodGIYpsXtox1r+MkA/Mx/c4LIs=) 17: pSdUwJDFDwRI9dUX1o7-AEBKFJ4.roa (hash: yf7UMs7TaL+tARugPzQ5wUgFzgFz5SS2mVJi3OrvF2s=) 18: sjEyW6AD2Jf48TivnuWbHN3pmpM.roa (hash: 7twsJMkUmHbT5ZR1Ntzc98zq9nXpj2vWiMkvKAXsBxY=) 19: snxe_w3IKkhLIe7EgkGi3Sltxa8.roa (hash: by5CuoYCbG9kkbc8t3grQ6D6kwW4sZmGfuNZlP82FOA=) 20: tumc2U0ueawjQmyhq2TbwEHEvII.roa (hash: oSgEHJFz2FIBd47b6uaPoT90omu3i9HEM2qcnwvI7cg=) 21: ufRes8Nqob9X-LbpoNirtnnM0Bg.roa (hash: ijVGBDbmWH17EvrwQkxNuSqhaxL0E9xhqTrvLRBfUsY=) 22: wR1usNodUuK6XHhDdVcRc5TfXWM.roa (hash: 1r4Dh3PyEx2gFXDbQ/FX1ps1UiBmg9mqACZcvahzVak=) 23: yjo-DKyB6upn-q8jOq2YNWMm_7w.roa (hash: PKTXGqrxOZbFJDyMmjyPry7t1DdNVYa8O7YWz5OT3qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 23:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:70:5c:18:e9:87:83:d1:35:d4:e7:a2:76:88:31:c0:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480 Validity Not Before: Oct 25 00:00:46 2026 GMT Not After : Oct 26 00:00:46 2026 GMT Subject: CN=30d5445d3c9f53b58baaeb82a50022152efe5928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7f:ce:98:23:32:4c:d6:2d:66:57:5a:ff:93: fc:ac:d4:0c:4f:87:01:2f:40:b1:b8:63:3d:85:4d: 1e:bd:b4:9f:29:d1:7e:f8:49:32:00:62:f6:1f:15: 21:2c:25:54:b5:21:de:90:db:f7:e2:63:7a:f2:c0: 8e:3d:f9:72:d0:88:c6:20:fa:55:21:64:84:ee:fe: ee:9d:1e:ff:47:a5:1a:7b:9b:c2:af:a1:b4:7c:da: 3e:79:38:e6:47:92:11:28:7c:47:94:39:51:3d:66: 43:a8:98:e3:8b:4e:a6:0e:a2:27:f4:dc:0f:c6:c1: 0e:82:10:31:d1:2c:32:32:2c:80:c6:a0:5a:8c:cf: bb:a6:94:b0:c3:4d:1c:ca:10:22:8b:3a:5b:a9:49: a2:2b:d2:3c:45:36:95:83:84:9a:c6:7f:f8:3c:66: bc:52:44:3c:9e:f5:8a:6a:d4:89:2f:df:bc:2a:52: fa:df:e5:dd:55:fe:19:b8:b3:40:1a:e6:97:4d:f2: 65:4e:9e:91:09:58:72:a8:81:d0:98:02:7b:6c:7a: e1:4b:52:3c:70:49:6c:2c:b6:27:1f:44:09:92:1e: 0f:38:ca:ed:d5:80:07:a3:6a:09:81:2c:7a:e4:e8: 37:87:88:59:ef:39:eb:1a:bf:08:17:c5:f4:9e:cc: ee:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D5:44:5D:3C:9F:53:B5:8B:AA:EB:82:A5:00:22:15:2E:FE:59:28 X509v3 Authority Key Identifier: keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:30:78:4e:90:39:c1:6b:94:53:c8:dd:55:59:cd:d3:d9:72: 4a:ea:09:08:28:98:6d:91:a4:fa:32:f4:2e:49:31:c6:90:6e: f9:e1:c1:4c:49:e4:ad:28:98:7b:45:1e:dd:d8:42:05:91:cc: ce:11:d8:02:2e:b5:26:f8:23:e1:dd:11:d8:1f:7c:a2:25:80: 49:fc:3e:ea:dc:57:58:51:43:fe:d4:f5:a3:67:ae:5c:84:b1: 90:5e:9b:8e:ca:49:8b:48:12:04:d9:ca:a7:f2:b9:05:b6:34: cc:68:80:0f:d0:f2:db:84:34:55:ec:00:6f:d3:f3:a6:ec:29: 4a:0e:82:1f:e0:d7:60:6b:8d:f8:9f:e6:3f:6a:27:b5:a8:88: 76:f3:b7:d9:08:ad:67:9d:31:4e:71:f2:c6:67:8c:50:c3:4d: ef:6b:97:20:55:6c:5d:66:58:04:be:5a:4b:37:ab:5a:67:d5: 2e:f3:af:00:cc:0b:fd:88:bb:ae:22:52:dd:14:ab:59:71:9d: 15:52:b0:48:dd:6c:a4:66:fc:36:c3:2a:72:6b:08:db:0e:50: 08:1a:62:34:86:6a:24:3f:d2:d4:24:d7:c0:ee:83:fa:49:b8: da:43:0e:83:a9:c7:9e:1c:6d:0b:e7:81:37:a4:01:64:6c:f5: 38:78:7b:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFwXBjph4PRNdTnonaIMcBDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjNjODdlNzA3NDg1M2M5MTgzZjE2N2EyYzI1YjAyZTM0 MTc0ODAwHhcNMjYxMDI1MDAwMDQ2WhcNMjYxMDI2MDAwMDQ2WjAzMTEwLwYDVQQD EygzMGQ1NDQ1ZDNjOWY1M2I1OGJhYWViODJhNTAwMjIxNTJlZmU1OTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH/OmCMyTNYtZlda/5P8rNQMT4cB L0CxuGM9hU0evbSfKdF++EkyAGL2HxUhLCVUtSHekNv34mN68sCOPfly0IjGIPpV IWSE7v7unR7/R6Uae5vCr6G0fNo+eTjmR5IRKHxHlDlRPWZDqJjji06mDqIn9NwP xsEOghAx0SwyMiyAxqBajM+7ppSww00cyhAiizpbqUmiK9I8RTaVg4Saxn/4PGa8 UkQ8nvWKatSJL9+8KlL63+XdVf4ZuLNAGuaXTfJlTp6RCVhyqIHQmAJ7bHrhS1I8 cElsLLYnH0QJkh4POMrt1YAHo2oJgSx65Og3h4hZ7znrGr8IF8X0nszukQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDVRF08n1O1i6rrgqUAIhUu/lkoMB8GA1UdIwQY MBaAFJWzyH5wdIU8kYPxZ6LCWwLjQXSAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTB4TpA5 wWuUU8jdVVnN09lySuoJCCiYbZGk+jL0LkkxxpBu+eHBTEnkrSiYe0Ue3dhCBZHM zhHYAi61Jvgj4d0R2B98oiWASfw+6txXWFFD/tT1o2euXISxkF6bjspJi0gSBNnK p/K5BbY0zGiAD9Dy24Q0VewAb9PzpuwpSg6CH+DXYGuN+J/mP2ontaiIdvO32Qit Z50xTnHyxmeMUMNN72uXIFVsXWZYBL5aSzerWmfVLvOvAMwL/Yi7riJS3RSrWXGd FVKwSN1spGb8NsMqcmsI2w5QCBpiNIZqJD/S1CTXwO6D+km42kMOg6nHnhxtC+eB N6QBZGz1OHh75g== -----END CERTIFICATE-----Generated at Sun Oct 25 03:23:19 2026 by rpki-client