$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft File: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json) Hash identifier: aWE1PdZz+7VDDUt3OUjfNfwqEOR3QHfI8tfbvlVilPI= Subject key identifier: D7:18:62:FF:CF:9C:74:2D:BB:1F:25:3C:0A:B5:F1:01:F6:96:7C:34 Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 0197470BE7FBC4A00FC1D8A07C1E4B30D57E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft Manifest number: 15A8 Signing time: Fri 06 Jun 2025 21:00:51 +0000 Manifest this update: Fri 06 Jun 2025 21:00:51 +0000 Manifest next update: Sat 07 Jun 2025 21:00:51 +0000 Files and hashes: 1: 0iKiDzWWxSntVrrXCmhrJjOH6aw.roa (hash: av0mGR/5BFLwU8N3c2ijOxp9aJ3xR9cZmKrH0YmTzMA=) 2: 3IY4TmbnRLj5k1WANLdjXwTXYew.roa (hash: qjK8pA3ZvCwbUBgq8RlJOJI1zB3hdjk5IYpiJi0lf+Y=) 3: AHbXdKXc3M-CfGXTwbfq7QGRrvM.roa (hash: YbPDz6n014xlIU7wVTub26EyYvqoU35p6NFQjROCV14=) 4: DLpQGPGOf_OYvmHwf8b2lOYyOj0.roa (hash: +g29EdBhXU2GeBhgFcLWLeXtQJs4K/ChJhjgEP7KbZM=) 5: HMYF6_4se6-zijlekaRHSzmW9Jk.roa (hash: eqBnyqMcI8I2Ft7undsWPPs8lpkvdgxjWJ94tuPWoXI=) 6: I2YZ3IMak0VxnQcMthTtwmErqSw.roa (hash: p04i2TuYtY5s50ZwH3Us8UiZXTbYrw5bHRhSeM6Ld8Q=) 7: Ji6nEv3LafDcVTBG7aO97iudROE.roa (hash: p6pmniXLM/oWpBTXfpZqsZaAulIp2wCdQ9Jqkw9LVqE=) 8: N4HwjJKSX0cNlaYcj3jS4bVMgXE.roa (hash: YIMBZJbGgThBGYMYz0OP8LMxO+xC4s7B+V+yscfXQzc=) 9: Nb6TNhx-uC8I1Ffn515OIvBOQXg.roa (hash: Rag11JXj0d5gz3k2DXVRyxAiLg6LoiF+avVU8LVp2b0=) 10: TDMrt1P1gCHwvoGmH1EuT7lA4wU.roa (hash: XiBPhE3TLU1BuZaHa1qGrBxFPh5DC9L1nSoO49zFSn0=) 11: UUrExGIUuYmvJrzFIhPpcC26aCI.roa (hash: 5oxwYt4KRXP54+h592JN5Pg7aFrlsSfI2urY+v1pF/M=) 12: WfQsimdISfx91Ef7cYATyQIN7d4.roa (hash: hL6J1XxC9eqb2hyvPaLfMPBZ2q4oqhwcTiAhioDAJQs=) 13: aC6HOiqUxYGN254KZuSqiaJtNPE.roa (hash: qS7pdtxXfriW+5XqG23et3Nu8v85hG8JxjCRqEZITSs=) 14: iSC665C-UVVhnrmnNRLvj3Ij9kA.roa (hash: kHL9oQkOOW8rZCb10yvOczvSUcqVnHoZYo6f16erQPM=) 15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: lMkX09kxAHUT++7gw6y8e5l9LhNedX+akiVdjbaAwlY=) 16: ntfUrbz7BUkei1F-tn7_XqXuheE.roa (hash: JAg5H8Q6Okry2xwWdwcj84ENgOyWvgrkVLihOHku7dw=) 17: vjtwmaRwxidwva3YZznIjLCoyQw.roa (hash: ZIJmnXOzxW3+TY4MpM3ZcpPqyL+GA1pmCMT952lDXKw=) 18: yGH6Oil6BAsrvRObF0sqosVRvc0.roa (hash: lPk6gmzjTVLAOfdoaQeb9dFBHg5tILEM3fFJMiKVdVY=) 19: znIOIdcg0Pfmr3lk9A2J6j6xSio.roa (hash: WJuHJIJ2rWApOKXb9tEkGYEbBNocsCE6EJQCs8d6EgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:0b:e7:fb:c4:a0:0f:c1:d8:a0:7c:1e:4b:30:d5:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Jun 6 21:00:51 2025 GMT Not After : Jun 7 21:00:51 2025 GMT Subject: CN=d71862ffcf9c742dbb1f253c0ab5f101f6967c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:81:77:44:0b:c0:be:c6:dc:2d:f5:8d:aa:db: 5f:af:91:44:db:f2:40:77:ea:7d:c5:e9:fb:98:1a: 1f:af:7d:43:b9:97:02:31:5a:c9:10:b0:83:a7:f3: e3:e2:42:32:f1:d5:a7:21:d3:71:31:93:0e:0c:8a: 11:ab:3b:49:9f:35:f2:59:9e:fe:50:98:5f:ad:c6: 88:1d:77:b5:12:91:8e:82:6c:8c:20:28:92:1a:1a: 07:8e:6c:db:0b:70:3d:a7:d6:e4:b4:59:d6:72:ad: 6c:ed:b2:c8:56:bc:2b:36:8d:32:dd:5a:4f:19:3b: 39:80:84:49:7b:b8:54:a9:d2:60:3d:89:de:43:00: 1a:72:d6:23:52:74:f1:cb:3f:b6:fe:60:f5:4b:69: ba:7b:48:ba:c1:73:3a:2e:2a:5d:29:5c:55:41:4c: 7c:b1:39:30:94:07:52:f1:8f:41:8a:c8:15:0f:50: d2:4b:f5:84:9d:22:5b:f2:f4:d6:b9:6e:bc:1f:38: e5:ca:81:7c:7d:86:50:69:52:b1:de:b4:18:f5:41: a2:7f:eb:ee:3d:12:fb:4e:76:a5:bd:b0:bf:2d:6f: 10:24:0e:92:5a:4a:ee:8b:af:8b:91:7d:a9:b4:f6: 4e:b0:69:92:c2:43:d6:4c:4e:31:69:d2:fb:88:bb: 55:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:18:62:FF:CF:9C:74:2D:BB:1F:25:3C:0A:B5:F1:01:F6:96:7C:34 X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:21:32:54:fd:6a:64:8b:1d:a9:d2:24:83:33:36:7f:4f:49: 47:9c:3c:c0:2d:1a:61:a6:11:7a:c7:1e:b2:e6:2d:c0:70:e1: 45:aa:74:73:2a:b9:c3:4d:d8:78:42:72:f5:8a:80:bf:c5:fb: 24:b3:ea:62:ee:f1:c9:42:cf:c9:ff:98:2b:76:f2:3b:78:a4: 7d:52:84:e9:2f:b3:3a:8b:84:3b:7a:a2:77:a3:b7:bf:43:79: cc:d6:37:e4:27:e4:ed:86:47:54:87:06:42:92:99:4b:36:7b: 51:e5:4f:fe:16:22:2e:e9:96:87:03:02:ee:79:a5:b5:f0:4a: 0f:c9:c2:b2:3c:06:93:f0:4f:3f:85:9f:65:01:1e:9d:8c:c4: 7b:57:b9:61:61:ea:58:54:4c:5b:32:51:dd:ef:a0:0a:8b:b8: 5e:d8:a0:28:49:92:e1:09:64:2a:68:5d:d6:6b:24:c0:02:c2: 94:c3:95:11:4a:29:19:a7:4b:ca:44:49:e1:30:af:d4:1f:9b: 9f:ea:7c:d3:2f:89:9e:d4:e1:8e:50:de:77:a4:a0:33:8d:a6: cf:0a:33:d0:7f:a8:40:a6:f4:b4:72:31:be:85:a6:65:ee:59: ed:3e:08:3d:15:dc:bd:8f:0a:b2:7e:4e:13:4f:e5:2b:77:16: bb:8f:74:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdHC+f7xKAPwdigfB5LMNV+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjUwNjA2MjEwMDUxWhcNMjUwNjA3MjEwMDUxWjAzMTEwLwYDVQQD EyhkNzE4NjJmZmNmOWM3NDJkYmIxZjI1M2MwYWI1ZjEwMWY2OTY3YzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4F3RAvAvsbcLfWNqttfr5FE2/JA d+p9xen7mBofr31DuZcCMVrJELCDp/Pj4kIy8dWnIdNxMZMODIoRqztJnzXyWZ7+ UJhfrcaIHXe1EpGOgmyMICiSGhoHjmzbC3A9p9bktFnWcq1s7bLIVrwrNo0y3VpP GTs5gIRJe7hUqdJgPYneQwAactYjUnTxyz+2/mD1S2m6e0i6wXM6LipdKVxVQUx8 sTkwlAdS8Y9BisgVD1DSS/WEnSJb8vTWuW68HzjlyoF8fYZQaVKx3rQY9UGif+vu PRL7TnalvbC/LW8QJA6SWkrui6+LkX2ptPZOsGmSwkPWTE4xadL7iLtVIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcYYv/PnHQtux8lPAq18QH2lnw0MB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxCEyVP1q ZIsdqdIkgzM2f09JR5w8wC0aYaYRescesuYtwHDhRap0cyq5w03YeEJy9YqAv8X7 JLPqYu7xyULPyf+YK3byO3ikfVKE6S+zOouEO3qid6O3v0N5zNY35Cfk7YZHVIcG QpKZSzZ7UeVP/hYiLumWhwMC7nmltfBKD8nCsjwGk/BPP4WfZQEenYzEe1e5YWHq WFRMWzJR3e+gCou4XtigKEmS4QlkKmhd1mskwALClMOVEUopGadLykRJ4TCv1B+b n+p80y+JntThjlDed6SgM42mzwoz0H+oQKb0tHIxvoWmZe5Z7T4IPRXcvY8Ksn5O E0/lK3cWu490Vw== -----END CERTIFICATE-----Generated at Sat Jun 7 03:47:17 2025 by rpki-client