$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft File: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json) Hash identifier: MPt0/lBW7fwLckyxOr0FJ/ZY2wFTbi4SnFMUc4D+f+0= Subject key identifier: 57:F6:01:E4:FD:70:D4:18:41:49:43:82:65:C5:08:83:AB:5A:45:AC Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 01992CA295B2B36B0D742E4DDE32E37FEEF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft Manifest number: 16A5 Signing time: Tue 09 Sep 2025 04:01:16 +0000 Manifest this update: Tue 09 Sep 2025 04:01:16 +0000 Manifest next update: Wed 10 Sep 2025 04:01:16 +0000 Files and hashes: 1: 0iKiDzWWxSntVrrXCmhrJjOH6aw.roa (hash: av0mGR/5BFLwU8N3c2ijOxp9aJ3xR9cZmKrH0YmTzMA=) 2: 3IY4TmbnRLj5k1WANLdjXwTXYew.roa (hash: qjK8pA3ZvCwbUBgq8RlJOJI1zB3hdjk5IYpiJi0lf+Y=) 3: DLpQGPGOf_OYvmHwf8b2lOYyOj0.roa (hash: +g29EdBhXU2GeBhgFcLWLeXtQJs4K/ChJhjgEP7KbZM=) 4: HMYF6_4se6-zijlekaRHSzmW9Jk.roa (hash: eqBnyqMcI8I2Ft7undsWPPs8lpkvdgxjWJ94tuPWoXI=) 5: I2YZ3IMak0VxnQcMthTtwmErqSw.roa (hash: p04i2TuYtY5s50ZwH3Us8UiZXTbYrw5bHRhSeM6Ld8Q=) 6: Ji6nEv3LafDcVTBG7aO97iudROE.roa (hash: p6pmniXLM/oWpBTXfpZqsZaAulIp2wCdQ9Jqkw9LVqE=) 7: N4HwjJKSX0cNlaYcj3jS4bVMgXE.roa (hash: YIMBZJbGgThBGYMYz0OP8LMxO+xC4s7B+V+yscfXQzc=) 8: Nb6TNhx-uC8I1Ffn515OIvBOQXg.roa (hash: Rag11JXj0d5gz3k2DXVRyxAiLg6LoiF+avVU8LVp2b0=) 9: TDMrt1P1gCHwvoGmH1EuT7lA4wU.roa (hash: XiBPhE3TLU1BuZaHa1qGrBxFPh5DC9L1nSoO49zFSn0=) 10: UUrExGIUuYmvJrzFIhPpcC26aCI.roa (hash: 5oxwYt4KRXP54+h592JN5Pg7aFrlsSfI2urY+v1pF/M=) 11: WfQsimdISfx91Ef7cYATyQIN7d4.roa (hash: hL6J1XxC9eqb2hyvPaLfMPBZ2q4oqhwcTiAhioDAJQs=) 12: aC6HOiqUxYGN254KZuSqiaJtNPE.roa (hash: qS7pdtxXfriW+5XqG23et3Nu8v85hG8JxjCRqEZITSs=) 13: aClXX-iR5Bl7IeW2FlIWaN6iIYc.roa (hash: HtL2L3d9fDCOnFgD6PIPMw7B8WRPV0RJs8E04QzbYYE=) 14: iSC665C-UVVhnrmnNRLvj3Ij9kA.roa (hash: kHL9oQkOOW8rZCb10yvOczvSUcqVnHoZYo6f16erQPM=) 15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: uKSODzdaUtcebx5S+3DIjB6P3Q3DeFy0gqD1KIbK5h0=) 16: ntfUrbz7BUkei1F-tn7_XqXuheE.roa (hash: JAg5H8Q6Okry2xwWdwcj84ENgOyWvgrkVLihOHku7dw=) 17: vjtwmaRwxidwva3YZznIjLCoyQw.roa (hash: ZIJmnXOzxW3+TY4MpM3ZcpPqyL+GA1pmCMT952lDXKw=) 18: yGH6Oil6BAsrvRObF0sqosVRvc0.roa (hash: lPk6gmzjTVLAOfdoaQeb9dFBHg5tILEM3fFJMiKVdVY=) 19: znIOIdcg0Pfmr3lk9A2J6j6xSio.roa (hash: WJuHJIJ2rWApOKXb9tEkGYEbBNocsCE6EJQCs8d6EgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 04:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2c:a2:95:b2:b3:6b:0d:74:2e:4d:de:32:e3:7f:ee:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Sep 9 04:01:16 2025 GMT Not After : Sep 10 04:01:16 2025 GMT Subject: CN=57f601e4fd70d4184149438265c50883ab5a45ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fd:aa:8d:63:88:a4:be:6a:76:cf:66:e8:06: e5:8d:24:f5:69:72:43:22:6e:1a:36:a9:15:4c:4b: 83:72:3a:7a:b1:74:fc:a4:81:08:ec:e2:23:c4:8c: a2:f0:0e:54:f8:3a:39:1e:2b:af:28:eb:07:00:37: 5c:45:66:20:1f:5e:de:a4:96:06:c6:c3:99:de:2e: ec:56:00:e5:bb:e5:cb:3d:ca:cf:37:9e:e6:23:42: 85:d6:f3:1a:5b:e8:fe:94:cf:a3:a2:2a:2a:2e:04: 57:5d:35:a7:90:d4:d3:ec:79:63:91:ec:6f:ff:01: 1a:ad:5d:3c:46:fb:39:a3:40:b1:11:22:f7:a6:da: 66:74:06:f7:50:58:5a:1e:59:86:23:57:9e:7f:e1: 92:d2:7c:fe:c3:18:4d:f2:e0:9a:3d:87:dc:1a:04: 02:1f:2c:0e:52:50:3e:30:0f:e3:c8:0c:bd:ed:df: 20:eb:a5:bf:a2:6b:53:d5:ed:5e:4c:4e:41:1b:6b: e3:fc:25:35:d8:bc:34:59:36:cd:9f:dd:25:3b:10: b0:9b:e9:ff:6c:63:9d:4f:b6:e2:8b:b9:85:25:69: a2:bd:72:47:42:73:b1:f6:46:5b:62:d9:42:75:15: 0d:50:db:d0:37:63:d4:c7:6e:ef:87:36:36:3d:a1: 10:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F6:01:E4:FD:70:D4:18:41:49:43:82:65:C5:08:83:AB:5A:45:AC X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:81:1b:07:04:65:22:8a:67:e7:91:a7:2a:f8:0a:a0:76:db: 01:58:61:31:89:80:39:4d:97:7c:1b:ea:da:53:13:81:12:b9: 5c:9b:99:15:72:81:9c:11:7d:b3:7d:04:a1:c7:72:d6:e6:48: 92:3c:49:92:8a:5f:8e:51:9c:38:bd:8f:86:1a:d5:d0:69:45: 03:50:30:55:ad:99:e2:47:a7:c1:60:8b:9f:3f:5f:b9:f6:8a: ee:75:0d:58:7f:4c:2d:10:47:e1:08:e6:28:72:ea:45:3f:23: 0c:fd:1a:69:ef:76:ac:b9:90:15:5b:3e:00:55:fe:e2:33:c0: f5:3b:cc:3f:e8:3e:ab:21:ba:8a:15:62:23:4e:1f:58:62:e0: d1:43:c4:3a:a2:68:2e:ba:62:3a:6f:95:d8:b9:a5:f5:78:55: e8:d7:83:33:dc:7c:0a:92:ac:cb:05:54:3e:a6:6f:0d:fa:a1: fc:b8:7d:fb:33:9a:72:10:9e:ac:70:d4:e5:b3:b7:78:6c:62: 6f:bc:98:2d:36:0c:cf:12:10:1f:be:fb:2a:11:eb:20:c0:b8: ed:10:c2:e5:7e:65:1d:3d:f3:fc:89:8b:35:f9:a4:59:98:c4: e9:ec:27:2d:bb:7f:64:c6:af:25:d0:23:eb:bc:ee:3e:03:70: 64:16:73:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZksopWys2sNdC5N3jLjf+70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjUwOTA5MDQwMTE2WhcNMjUwOTEwMDQwMTE2WjAzMTEwLwYDVQQD Eyg1N2Y2MDFlNGZkNzBkNDE4NDE0OTQzODI2NWM1MDg4M2FiNWE0NWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf2qjWOIpL5qds9m6AbljST1aXJD Im4aNqkVTEuDcjp6sXT8pIEI7OIjxIyi8A5U+Do5HiuvKOsHADdcRWYgH17epJYG xsOZ3i7sVgDlu+XLPcrPN57mI0KF1vMaW+j+lM+joioqLgRXXTWnkNTT7Hljkexv /wEarV08Rvs5o0CxESL3ptpmdAb3UFhaHlmGI1eef+GS0nz+wxhN8uCaPYfcGgQC HywOUlA+MA/jyAy97d8g66W/omtT1e1eTE5BG2vj/CU12Lw0WTbNn90lOxCwm+n/ bGOdT7bii7mFJWmivXJHQnOx9kZbYtlCdRUNUNvQN2PUx27vhzY2PaEQvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFf2AeT9cNQYQUlDgmXFCIOrWkWsMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIEbBwRl Iopn55GnKvgKoHbbAVhhMYmAOU2XfBvq2lMTgRK5XJuZFXKBnBF9s30Eocdy1uZI kjxJkopfjlGcOL2PhhrV0GlFA1AwVa2Z4kenwWCLnz9fufaK7nUNWH9MLRBH4Qjm KHLqRT8jDP0aae92rLmQFVs+AFX+4jPA9TvMP+g+qyG6ihViI04fWGLg0UPEOqJo LrpiOm+V2Lml9XhV6NeDM9x8CpKsywVUPqZvDfqh/Lh9+zOachCerHDU5bO3eGxi b7yYLTYMzxIQH777KhHrIMC47RDC5X5lHT3z/ImLNfmkWZjE6ewnLbt/ZMavJdAj 67zuPgNwZBZzzg== -----END CERTIFICATE-----Generated at Tue Sep 9 13:19:45 2025 by rpki-client