$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft File: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json) Hash identifier: lF/y0O8EzFGpUOwDmsaBfMfX+IG2vhITXXvvoS30XWA= Subject key identifier: BA:FE:46:31:C3:A6:8B:63:0F:64:AE:9F:12:3D:8F:EB:BF:0D:0D:69 Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 019E3297AFEE66DDAF44548F6EEDA5A8E499 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft Manifest number: 1945 Signing time: Sat 16 May 2026 21:01:02 +0000 Manifest this update: Sat 16 May 2026 21:01:02 +0000 Manifest next update: Sun 17 May 2026 21:01:02 +0000 Files and hashes: 1: 2lifCuWCmZX74wg673_4xS-ONag.roa (hash: 6lY0ENu0kD82v4utL4LG2PKDIcs5NRuZ7W1h/UjeZ3s=) 2: 4hH57FydlHdc4V1rY5LVn5D_lUA.roa (hash: bQ1e0/IxpkasqU8EsI7sNLsUave4BUbp6/mKopiE7ps=) 3: E4k_GLB1jh7MPVs-gyp-YH9i1VA.roa (hash: 7uI1YsgPEgxKnbIzjDUu68rwsx6hVD90WAbaTfQ1PeQ=) 4: FEe4UnqvSWKSAea0PHBwUXaDpm4.roa (hash: /HsHyiEMwRFNM8wBIEun/RLlHvSJ/E/CrgYY4W1LbRU=) 5: Lgy8y2r2iS0jXhVcsxg6dv326oE.roa (hash: wPcIhg3eIiw6VkkR9oijQGGlSbnCfpW6p5KDiz8+B2I=) 6: MQQzsxU40W_xEpXzt8cvUT-bq9E.roa (hash: d2EdB5G5EgArFhc3OWiFNquY+C0ERTnVWLmjHj1Wbbo=) 7: NyBz14MOmkpBtlhZ7WM1bi3cKHE.roa (hash: Et/9ehhdVf0NmhMuGdiZdz+LErbH+Fl/Psv/5/v/xGQ=) 8: OxhwppLGol158lCsq2yWJNLf_NE.roa (hash: MmzmN0W/m1dLKAb2mybZa7hE2FPBvGD3tTttqagSblg=) 9: Pr90WuSkqHq-lxUoQH2NqVzEu94.roa (hash: 6wVWcialsagT7geFrAaPhDZyYoMTpj0MkP2MqolJPfQ=) 10: Whw4eOPRUFj-X_q9R8Pnu4LNJlo.roa (hash: X0Zha2ZlfUGqlz4gFH70EfU/pfb2w6wYl+Jrpp2l7d8=) 11: Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa (hash: Hj1fjYxq7Hq5Pozz0dv4JvpffmO3HqQHwPJ42oxJcrk=) 12: agDTouKXh27x35ZP6bEJ5yzcJrA.roa (hash: OVkcnAYHjQt80Lrs6fk4p5r9gtYIWdVvRl09WAS/lM8=) 13: e-5TSb_mYHCdIuOD8vrCl1XPRAk.roa (hash: MQEDBz7zEe5IyXk9VD7pLY8AZKLie90h1keE21n1bzQ=) 14: gkoYWKhPVWJSzZKZ2UhHAj9zfS4.roa (hash: 2xLLVXq/Jt50epuLgX+yGtG0U3JwB6BPWJQju9wVWPo=) 15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: 6soWzeJ3l+1P5VdiZXug9V/ZK7bmLfoENoPKAeFu7EQ=) 16: rKmAVK4PxzbR_IThsBb1WgVN_YY.roa (hash: TV5HtQ7LPjAdjxp+ggpRM593FUWUOfL9JtSMN7pzuhU=) 17: tBM0BH84k4nIGXqIG37qLS0XebI.roa (hash: TQyYsWASmngbIW8Lh2ErsWEikXlEbvLYLPYi3fMojKA=) 18: tEZKD388wfIDI8SQ6X1kfbzjo_E.roa (hash: 6Al032wawyD0hBtB0AfHL41lnybj15pPaY89dRyaIg8=) 19: ttBmnLsLGk0QiBDZZrhpXLeq2Ro.roa (hash: aVi6Xk9A2f5Su9Y+yYYHIztt83ZG9tqYXEgyisye2K0=) 20: zLMAY1Q0XdWgZEDzB54ODnJ61Fc.roa (hash: 9HJq4nBdDYh3plgXx2Yf3DlxX8vzCFlzEoL5n+klIYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 17 May 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:32:97:af:ee:66:dd:af:44:54:8f:6e:ed:a5:a8:e4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: May 16 21:01:02 2026 GMT Not After : May 17 21:01:02 2026 GMT Subject: CN=bafe4631c3a68b630f64ae9f123d8febbf0d0d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:86:20:74:71:ac:f9:a5:8a:11:9e:44:92:f4: 84:a4:46:06:1b:7f:a6:ad:76:24:2a:a0:a1:19:89: b7:17:c3:fa:f8:07:1a:4a:ae:bc:a1:94:9c:21:1f: 43:b3:7b:8c:d4:ff:94:88:07:12:f0:be:9c:85:a8: 7e:29:4d:3c:83:cc:19:c8:55:24:85:f2:67:cc:cc: 71:1b:5a:80:c2:7e:30:e4:72:1e:48:83:b8:44:36: e5:cf:a1:95:07:f9:c9:6d:8a:2c:c8:b7:06:70:14: ef:5c:fc:84:d7:be:22:1b:4a:13:22:c9:9a:2d:cc: 20:4a:65:70:90:24:26:b1:f6:f1:a9:c8:f5:6b:89: 4d:9d:74:07:ff:7d:d8:4a:71:2a:bf:ce:7a:74:14: 2d:34:c4:37:a8:ce:ab:5a:68:1a:19:8c:6f:66:04: 85:f9:fe:46:72:2e:49:79:85:89:26:cf:fa:b9:e7: 9b:21:7c:4a:57:2a:78:db:d0:00:e3:8d:00:5b:e4: 20:e4:fd:c7:0b:9e:74:63:58:f1:05:9b:de:ae:a4: 52:69:38:5a:65:95:4a:8d:87:7e:0e:9a:0a:0e:7a: a5:43:76:43:ac:85:7f:45:c7:23:c7:82:80:45:47: 26:51:61:4c:27:a6:31:29:b4:db:f5:01:0c:bf:c4: 02:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FE:46:31:C3:A6:8B:63:0F:64:AE:9F:12:3D:8F:EB:BF:0D:0D:69 X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:5a:53:6c:4f:e2:51:58:f7:51:92:a5:8e:06:ee:a6:18:ed: a5:1c:9f:c6:b5:37:c2:35:7c:65:00:73:2e:aa:37:16:6e:cc: 3b:70:c2:82:7e:ca:43:cc:a2:80:cf:33:e8:01:69:28:f0:aa: 2d:80:a5:29:64:9d:66:88:dd:4e:03:8a:41:72:d6:80:dc:b7: 7a:cb:3b:ae:31:ec:e4:da:54:1c:37:01:15:f2:6b:d4:05:73: 5e:8e:f7:6b:8e:6c:dd:83:bd:5f:de:84:24:f1:6f:2a:a4:c4: ab:8c:c8:31:15:22:1f:e3:6a:80:26:ee:3f:df:48:6b:ef:f1: e1:bf:9a:65:ab:49:9e:c5:11:73:4e:2d:16:09:f6:7d:12:3f: 2d:e1:28:7a:f9:0a:66:f0:c3:f5:aa:b6:2a:fd:55:4d:9e:f1: 53:bb:5c:09:96:41:ce:3d:79:42:29:c4:29:9b:89:a0:81:94: 91:8c:1d:b2:8b:2d:55:6f:06:ce:b3:aa:fa:7d:ed:c8:73:50: 6e:b2:e6:83:09:48:8d:41:97:86:db:a2:d8:ed:43:23:ae:bf: 80:09:43:33:eb:55:ec:4c:a5:6d:1b:e6:d5:4e:cf:f2:57:59: 71:53:5c:c6:98:c3:f7:f5:36:ae:9c:f3:5e:83:9e:be:6f:75: 3b:2c:48:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4yl6/uZt2vRFSPbu2lqOSZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjYwNTE2MjEwMTAyWhcNMjYwNTE3MjEwMTAyWjAzMTEwLwYDVQQD EyhiYWZlNDYzMWMzYTY4YjYzMGY2NGFlOWYxMjNkOGZlYmJmMGQwZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YYgdHGs+aWKEZ5EkvSEpEYGG3+m rXYkKqChGYm3F8P6+AcaSq68oZScIR9Ds3uM1P+UiAcS8L6chah+KU08g8wZyFUk hfJnzMxxG1qAwn4w5HIeSIO4RDblz6GVB/nJbYosyLcGcBTvXPyE174iG0oTIsma LcwgSmVwkCQmsfbxqcj1a4lNnXQH/33YSnEqv856dBQtNMQ3qM6rWmgaGYxvZgSF +f5Gci5JeYWJJs/6ueebIXxKVyp429AA440AW+Qg5P3HC550Y1jxBZverqRSaTha ZZVKjYd+DpoKDnqlQ3ZDrIV/Rccjx4KARUcmUWFMJ6YxKbTb9QEMv8QCmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLr+RjHDpotjD2SunxI9j+u/DQ1pMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlpTbE/i UVj3UZKljgbuphjtpRyfxrU3wjV8ZQBzLqo3Fm7MO3DCgn7KQ8yigM8z6AFpKPCq LYClKWSdZojdTgOKQXLWgNy3ess7rjHs5NpUHDcBFfJr1AVzXo73a45s3YO9X96E JPFvKqTEq4zIMRUiH+NqgCbuP99Ia+/x4b+aZatJnsURc04tFgn2fRI/LeEoevkK ZvDD9aq2Kv1VTZ7xU7tcCZZBzj15QinEKZuJoIGUkYwdsostVW8GzrOq+n3tyHNQ brLmgwlIjUGXhtui2O1DI66/gAlDM+tV7EylbRvm1U7P8ldZcVNcxpjD9/U2rpzz XoOevm91OyxIEg== -----END CERTIFICATE-----Generated at Sat May 16 23:28:37 2026 by rpki-client