$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft File: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json) Hash identifier: L2DZUbwKPtaISmqUcnzKBIwqBydXHgeQtAaIa61LvD0= Subject key identifier: CF:6D:30:76:33:BE:F5:75:42:5C:1F:59:B7:05:50:06:33:44:2C:99 Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 019A1E07FC748EE32AF72B97B3F67EB22C89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft Manifest number: 1722 Signing time: Sun 26 Oct 2025 01:00:30 +0000 Manifest this update: Sun 26 Oct 2025 01:00:30 +0000 Manifest next update: Mon 27 Oct 2025 01:00:30 +0000 Files and hashes: 1: 0iKiDzWWxSntVrrXCmhrJjOH6aw.roa (hash: av0mGR/5BFLwU8N3c2ijOxp9aJ3xR9cZmKrH0YmTzMA=) 2: 3IY4TmbnRLj5k1WANLdjXwTXYew.roa (hash: qjK8pA3ZvCwbUBgq8RlJOJI1zB3hdjk5IYpiJi0lf+Y=) 3: DLpQGPGOf_OYvmHwf8b2lOYyOj0.roa (hash: +g29EdBhXU2GeBhgFcLWLeXtQJs4K/ChJhjgEP7KbZM=) 4: HMYF6_4se6-zijlekaRHSzmW9Jk.roa (hash: eqBnyqMcI8I2Ft7undsWPPs8lpkvdgxjWJ94tuPWoXI=) 5: I2YZ3IMak0VxnQcMthTtwmErqSw.roa (hash: p04i2TuYtY5s50ZwH3Us8UiZXTbYrw5bHRhSeM6Ld8Q=) 6: Ji6nEv3LafDcVTBG7aO97iudROE.roa (hash: p6pmniXLM/oWpBTXfpZqsZaAulIp2wCdQ9Jqkw9LVqE=) 7: N4HwjJKSX0cNlaYcj3jS4bVMgXE.roa (hash: YIMBZJbGgThBGYMYz0OP8LMxO+xC4s7B+V+yscfXQzc=) 8: Nb6TNhx-uC8I1Ffn515OIvBOQXg.roa (hash: Rag11JXj0d5gz3k2DXVRyxAiLg6LoiF+avVU8LVp2b0=) 9: TDMrt1P1gCHwvoGmH1EuT7lA4wU.roa (hash: XiBPhE3TLU1BuZaHa1qGrBxFPh5DC9L1nSoO49zFSn0=) 10: UUrExGIUuYmvJrzFIhPpcC26aCI.roa (hash: 5oxwYt4KRXP54+h592JN5Pg7aFrlsSfI2urY+v1pF/M=) 11: WfQsimdISfx91Ef7cYATyQIN7d4.roa (hash: hL6J1XxC9eqb2hyvPaLfMPBZ2q4oqhwcTiAhioDAJQs=) 12: aC6HOiqUxYGN254KZuSqiaJtNPE.roa (hash: qS7pdtxXfriW+5XqG23et3Nu8v85hG8JxjCRqEZITSs=) 13: aClXX-iR5Bl7IeW2FlIWaN6iIYc.roa (hash: HtL2L3d9fDCOnFgD6PIPMw7B8WRPV0RJs8E04QzbYYE=) 14: iSC665C-UVVhnrmnNRLvj3Ij9kA.roa (hash: kHL9oQkOOW8rZCb10yvOczvSUcqVnHoZYo6f16erQPM=) 15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: KATJzuHgM+htF5skVhWOMidHTI42Y1ekETPXO13kY28=) 16: ntfUrbz7BUkei1F-tn7_XqXuheE.roa (hash: JAg5H8Q6Okry2xwWdwcj84ENgOyWvgrkVLihOHku7dw=) 17: vjtwmaRwxidwva3YZznIjLCoyQw.roa (hash: ZIJmnXOzxW3+TY4MpM3ZcpPqyL+GA1pmCMT952lDXKw=) 18: yGH6Oil6BAsrvRObF0sqosVRvc0.roa (hash: lPk6gmzjTVLAOfdoaQeb9dFBHg5tILEM3fFJMiKVdVY=) 19: znIOIdcg0Pfmr3lk9A2J6j6xSio.roa (hash: WJuHJIJ2rWApOKXb9tEkGYEbBNocsCE6EJQCs8d6EgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 19:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1e:07:fc:74:8e:e3:2a:f7:2b:97:b3:f6:7e:b2:2c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Oct 26 01:00:30 2025 GMT Not After : Oct 27 01:00:30 2025 GMT Subject: CN=cf6d307633bef575425c1f59b705500633442c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c7:59:69:c0:de:33:1d:b7:75:0c:85:6a:13: 7d:f0:ae:62:de:c8:cb:7f:c3:33:4a:70:15:60:75: 1c:8c:79:12:40:9a:06:9b:2d:6e:0d:bb:83:31:62: 01:47:19:39:d6:8b:5f:5c:b9:5f:06:7e:99:94:f7: 3a:fd:9a:89:19:e4:88:f1:48:49:ab:a7:20:9b:0f: 58:a8:0e:d7:0a:29:f0:5d:99:f5:b1:e0:75:f1:1e: 45:35:7e:44:74:c3:3c:7d:51:99:e4:bc:41:9f:b8: f2:ae:bf:f0:65:cd:59:9c:3b:2a:a3:dc:30:c1:d3: b4:fc:10:ea:11:4e:2c:b4:b3:78:ba:8d:46:41:79: 3e:72:d4:24:61:3f:39:53:35:10:7d:63:98:73:be: 55:9e:ab:a9:e1:34:3d:0b:92:5c:5a:42:12:3f:01: bc:0c:1e:b0:3e:c8:c0:06:4f:97:bb:0c:a7:c2:9e: 66:2e:0e:05:9c:9b:19:59:07:91:a3:f6:c7:30:26: 7f:34:f2:e5:7b:70:b5:68:9b:77:94:b8:f1:27:1a: c5:2d:cf:50:c8:95:03:d2:4d:1f:69:12:eb:cf:99: 84:fa:c8:ba:ad:ab:d5:d1:4b:b2:3a:01:c5:b2:0f: 78:9c:8f:7a:f0:00:6c:c6:ea:8a:6c:0a:e2:b9:86: d5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6D:30:76:33:BE:F5:75:42:5C:1F:59:B7:05:50:06:33:44:2C:99 X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2f:fd:74:53:78:bf:0a:a4:32:61:93:4e:e2:69:90:50:1b: 57:41:1f:8f:64:55:35:7f:67:98:db:26:85:24:5f:e9:0c:d1: b4:c9:1a:b6:85:ec:67:d1:fe:0f:65:4e:47:05:cf:61:f9:9f: 5a:d2:56:38:e4:3b:13:92:aa:2a:49:61:4c:5a:0d:df:92:15: 67:75:b6:20:09:fb:2a:9a:60:b9:e1:8d:98:19:c6:d4:52:27: 45:79:be:89:7c:ee:76:61:97:b9:26:fe:36:d9:3f:68:b7:95: 6f:08:21:cf:43:c3:c5:de:2f:b4:dd:7d:ea:0d:e6:d4:fe:17: a0:98:de:f3:eb:6c:76:ef:08:ed:26:8a:30:42:20:f0:84:ed: 16:3e:fa:b0:7a:56:e9:79:1f:be:68:17:dd:8e:c8:97:5e:bb: 33:69:c8:b3:e2:cf:21:cc:88:24:36:15:37:f7:92:f2:24:d6: da:ad:a5:b5:10:5a:53:6b:b0:bd:78:60:07:e3:55:e9:4b:cf: e7:1f:43:b6:8e:36:e8:b8:9c:2d:14:25:74:3b:af:98:ea:fe: d3:30:7a:0e:91:be:90:bf:43:f8:ce:57:6f:59:d7:d3:c2:a0: 31:93:01:62:5f:30:42:4b:10:ac:08:9f:bc:37:95:4c:42:c4: d5:a5:0f:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoeB/x0juMq9yuXs/Z+siyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjUxMDI2MDEwMDMwWhcNMjUxMDI3MDEwMDMwWjAzMTEwLwYDVQQD EyhjZjZkMzA3NjMzYmVmNTc1NDI1YzFmNTliNzA1NTAwNjMzNDQyYzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcdZacDeMx23dQyFahN98K5i3sjL f8MzSnAVYHUcjHkSQJoGmy1uDbuDMWIBRxk51otfXLlfBn6ZlPc6/ZqJGeSI8UhJ q6cgmw9YqA7XCinwXZn1seB18R5FNX5EdMM8fVGZ5LxBn7jyrr/wZc1ZnDsqo9ww wdO0/BDqEU4stLN4uo1GQXk+ctQkYT85UzUQfWOYc75Vnqup4TQ9C5JcWkISPwG8 DB6wPsjABk+Xuwynwp5mLg4FnJsZWQeRo/bHMCZ/NPLle3C1aJt3lLjxJxrFLc9Q yJUD0k0faRLrz5mE+si6ravV0UuyOgHFsg94nI968ABsxuqKbAriuYbVSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9tMHYzvvV1QlwfWbcFUAYzRCyZMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKC/9dFN4 vwqkMmGTTuJpkFAbV0Efj2RVNX9nmNsmhSRf6QzRtMkatoXsZ9H+D2VORwXPYfmf WtJWOOQ7E5KqKklhTFoN35IVZ3W2IAn7KppgueGNmBnG1FInRXm+iXzudmGXuSb+ Ntk/aLeVbwghz0PDxd4vtN196g3m1P4XoJje8+tsdu8I7SaKMEIg8ITtFj76sHpW 6XkfvmgX3Y7Il167M2nIs+LPIcyIJDYVN/eS8iTW2q2ltRBaU2uwvXhgB+NV6UvP 5x9Dto426LicLRQldDuvmOr+0zB6DpG+kL9D+M5Xb1nX08KgMZMBYl8wQksQrAif vDeVTELE1aUPbw== -----END CERTIFICATE-----Generated at Sun Oct 26 02:54:09 2025 by rpki-client