$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft File: lbPIfnB0hTyRg_FnosJbAuNBdIA.mft (raw, json) Hash identifier: 4/WeYgTKgnfjHDdw5y55x1x9wiR8VsC7Xff43cG5CsA= Subject key identifier: 03:B4:0E:C3:87:F5:D9:5F:57:FF:13:B1:3E:B4:C1:67:4F:4C:75:C7 Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80 Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480 Certificate serial: 019FA899CF8D9A68FE520ADD23806CAB901A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft Manifest number: 4C Signing time: Tue 28 Jul 2026 12:01:20 +0000 Manifest this update: Tue 28 Jul 2026 12:01:20 +0000 Manifest next update: Wed 29 Jul 2026 12:01:20 +0000 Files and hashes: 1: 1-8e6_0FbPvAXJgx01t7ARbBFfAc.roa (hash: CthKGsR5rP9kW/VUDaY/MBae0sF4z9YzQpaj0QH82Ik=) 2: 1-SU8SHnANaDD0VYlFf9Hpx5DMBc.roa (hash: smSsjE+AzeRu3/D9QdEFU+aHS0vNv5m9EyZtmYRjqZ8=) 3: 3R0Yxl6kEU6pvSgQ-sIBt7_ZX24.roa (hash: yaZClV2N6KJOhOcRmYXgjmVx6NMZGfMoAMrjVHPIHQ0=) 4: 3xaFim0SGUOhqh2f2EtSifTUM_c.roa (hash: O1ADycx84QWxmLprGvzt1AvfH4PGqy4iVqQ9rd+n9Ow=) 5: 4kDUwYcFfXVURDuSV-TCLrbE-Sc.roa (hash: A+C1HWWgrEoVh8S1UWH5eBFsLS2ObhPfgvCLRfHxAVU=) 6: CmNz7wBcSO6S5kY9fiiU3S-n6Z8.roa (hash: JDuuWYqi288rBIEpYgn3i+cUgxGJJxYAvOKEt6CJa9s=) 7: D0YcMPOnrSPV7ASIyczMje58jk0.roa (hash: Is1vr91+FB4C4ZqWVmY3m9n+tl9WokJiTH6COjiU6fc=) 8: D5KXW9fykA4D2kkau-Hvj4ncfkI.roa (hash: 2YFVOViFfFs7vK318hzQBHl3F/L33hmlhwDuKQW2ado=) 9: EmaHkN4PwghzXlxJKLnJoSQYQS4.roa (hash: M7GjgagdSvn/s11yZM1uY9CZiXGc766ZPfNroiq0yUw=) 10: O4NMqZLOORFev6MNDuTBAV0i9i0.roa (hash: yFb+imFb3YpJlSZCKwhYAdkCmVo6U4X0OVsZzrQhuYc=) 11: PHjOQ9Fpxy9SuDKIU3ymHFxItwQ.roa (hash: AtEVBryEU+0QaV9AVKbszJgM2w291RiX7wwevVc0Kpc=) 12: RfnQ2GSXRNmd5tgPFMvO0k_fmSU.roa (hash: lU6TT8C4YLLk9wdZrkEDLd51HljO1TGhWxAw/mqY+1w=) 13: X7DeWmIh751ahxsaFVz2zkdKKCc.roa (hash: IXEs+MmuMikSpeDhMH7eEj5LIfv44DMx+zGcEOzh2FE=) 14: ZNnLiyaUkDsW-jQcjbhAHKh8lPM.roa (hash: wE4gqY4aNVDXTiKJ4lZkuzt8RrFPCx2HN9rmT8v0O3A=) 15: hCUwEVQFkHAHS1ND_WColb8GNDQ.roa (hash: EXg2wBfKWOo0l6CcOVqolcA8vFL03jMqU9pr6Gmv5ns=) 16: lbPIfnB0hTyRg_FnosJbAuNBdIA.crl (hash: B7xSOTV8cOkz4YFA/gEUJOGfLuPDRWYusY5tbyXpFfQ=) 17: pSdUwJDFDwRI9dUX1o7-AEBKFJ4.roa (hash: yf7UMs7TaL+tARugPzQ5wUgFzgFz5SS2mVJi3OrvF2s=) 18: sjEyW6AD2Jf48TivnuWbHN3pmpM.roa (hash: 7twsJMkUmHbT5ZR1Ntzc98zq9nXpj2vWiMkvKAXsBxY=) 19: snxe_w3IKkhLIe7EgkGi3Sltxa8.roa (hash: by5CuoYCbG9kkbc8t3grQ6D6kwW4sZmGfuNZlP82FOA=) 20: tumc2U0ueawjQmyhq2TbwEHEvII.roa (hash: oSgEHJFz2FIBd47b6uaPoT90omu3i9HEM2qcnwvI7cg=) 21: ufRes8Nqob9X-LbpoNirtnnM0Bg.roa (hash: ijVGBDbmWH17EvrwQkxNuSqhaxL0E9xhqTrvLRBfUsY=) 22: wR1usNodUuK6XHhDdVcRc5TfXWM.roa (hash: 1r4Dh3PyEx2gFXDbQ/FX1ps1UiBmg9mqACZcvahzVak=) 23: yjo-DKyB6upn-q8jOq2YNWMm_7w.roa (hash: PKTXGqrxOZbFJDyMmjyPry7t1DdNVYa8O7YWz5OT3qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 12:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:99:cf:8d:9a:68:fe:52:0a:dd:23:80:6c:ab:90:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480 Validity Not Before: Jul 28 12:01:20 2026 GMT Not After : Jul 29 12:01:20 2026 GMT Subject: CN=03b40ec387f5d95f57ff13b13eb4c1674f4c75c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c2:07:a7:62:da:6b:73:5d:52:90:3b:3c:37: 1f:e3:91:fa:d2:3f:b7:2f:4a:7a:7b:4b:0f:3e:0a: df:d7:f6:11:29:e8:b8:f7:28:c6:6c:f6:15:69:6d: df:3f:cb:56:4d:f3:7e:44:19:02:c6:94:5b:97:65: ba:54:30:56:d0:4c:54:34:73:70:5c:23:b5:59:8b: 60:6a:4f:0d:e0:95:ab:6c:5e:45:33:89:a5:80:08: c9:35:6d:31:b8:a1:fa:10:a7:2e:30:e1:c2:5d:ba: c9:3c:a8:da:31:01:78:26:d3:ce:6c:3b:97:ec:ae: 37:34:1d:96:8e:01:98:ea:61:66:e0:6b:e3:75:8e: c9:1f:93:df:e0:90:0e:b1:1c:c5:d0:71:2e:0c:cc: 8a:b1:cb:1f:de:0b:ad:49:1c:9f:a3:a2:fa:60:54: 16:44:7a:da:2b:a4:fd:75:05:22:2d:6a:49:1a:6d: 29:b3:4c:73:3a:92:44:77:84:71:23:0c:76:e6:e7: 03:ea:fe:0d:f0:cc:9e:7c:56:51:ad:fb:fe:9d:f6: 55:d3:df:58:e5:e7:c2:ad:ea:21:4c:66:1a:57:5c: f9:83:c8:3f:a4:cf:8f:fc:20:69:33:01:30:0d:32: f7:5d:d1:04:d6:ff:f4:bc:71:66:80:cf:aa:56:5c: a0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B4:0E:C3:87:F5:D9:5F:57:FF:13:B1:3E:B4:C1:67:4F:4C:75:C7 X509v3 Authority Key Identifier: keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:70:72:18:7a:2a:d1:22:77:f5:f8:4d:51:5c:7b:d0:21:66: 17:21:b7:d1:dc:45:7c:b6:9f:a7:18:89:02:69:20:fc:e8:8c: 85:06:4a:07:21:5c:9f:2a:fc:50:85:a9:51:11:63:91:7d:0a: f3:09:97:c8:6a:73:6c:84:cc:b8:f1:68:c3:4d:9a:36:8f:42: b2:7f:a5:95:f9:f0:f0:99:47:70:a8:b9:8f:dc:05:c3:bc:62: c4:a4:7f:c8:bd:c0:4e:ee:1b:3c:ff:80:79:6c:ed:66:78:ce: 8b:19:9a:03:1a:18:27:32:f9:f5:cc:6a:98:21:d4:48:0c:89: 28:11:5b:cd:02:1f:51:c4:ef:51:6e:7f:37:5a:49:49:5f:ec: 4e:81:51:91:28:7f:2a:6b:24:90:0e:7b:69:b3:3a:2d:66:63: ce:02:61:11:54:56:a1:23:a1:af:ce:64:79:ef:13:66:a7:71: 3d:fb:08:7e:dc:89:fa:a2:6c:08:b6:c4:8c:ce:79:3b:cf:1e: d4:11:78:b4:d4:3b:20:40:c9:6a:fc:0c:fd:67:a2:95:40:73: 4b:7f:f6:60:dc:b6:95:2a:d3:0a:6c:bc:e9:25:92:13:d0:b6: 41:8b:c8:91:3a:a8:e8:44:85:2c:50:9c:fc:62:8b:37:5a:89: 5e:ab:6e:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+omc+Nmmj+UgrdI4Bsq5AaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjNjODdlNzA3NDg1M2M5MTgzZjE2N2EyYzI1YjAyZTM0 MTc0ODAwHhcNMjYwNzI4MTIwMTIwWhcNMjYwNzI5MTIwMTIwWjAzMTEwLwYDVQQD EygwM2I0MGVjMzg3ZjVkOTVmNTdmZjEzYjEzZWI0YzE2NzRmNGM3NWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cIHp2Laa3NdUpA7PDcf45H60j+3 L0p6e0sPPgrf1/YRKei49yjGbPYVaW3fP8tWTfN+RBkCxpRbl2W6VDBW0ExUNHNw XCO1WYtgak8N4JWrbF5FM4mlgAjJNW0xuKH6EKcuMOHCXbrJPKjaMQF4JtPObDuX 7K43NB2WjgGY6mFm4GvjdY7JH5Pf4JAOsRzF0HEuDMyKscsf3gutSRyfo6L6YFQW RHraK6T9dQUiLWpJGm0ps0xzOpJEd4RxIwx25ucD6v4N8MyefFZRrfv+nfZV099Y 5efCreohTGYaV1z5g8g/pM+P/CBpMwEwDTL3XdEE1v/0vHFmgM+qVlyg9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAO0DsOH9dlfV/8TsT60wWdPTHXHMB8GA1UdIwQY MBaAFJWzyH5wdIU8kYPxZ6LCWwLjQXSAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXByGHoq 0SJ39fhNUVx70CFmFyG30dxFfLafpxiJAmkg/OiMhQZKByFcnyr8UIWpURFjkX0K 8wmXyGpzbITMuPFow02aNo9Csn+llfnw8JlHcKi5j9wFw7xixKR/yL3ATu4bPP+A eWztZnjOixmaAxoYJzL59cxqmCHUSAyJKBFbzQIfUcTvUW5/N1pJSV/sToFRkSh/ KmskkA57abM6LWZjzgJhEVRWoSOhr85kee8TZqdxPfsIftyJ+qJsCLbEjM55O88e 1BF4tNQ7IEDJavwM/WeilUBzS3/2YNy2lSrTCmy86SWSE9C2QYvIkTqo6ESFLFCc /GKLN1qJXqtuWQ== -----END CERTIFICATE-----Generated at Tue Jul 28 16:41:06 2026 by rpki-client