$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft File: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json) Hash identifier: CGMyi5nFoy73asEIM5jpKJ12Y7bIcZRPl75x/EAiU3o= Subject key identifier: 37:16:B4:A4:C9:0A:19:60:34:97:1E:DA:3A:A5:15:0F:59:10:1B:C7 Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 019782EA4D475B0EEE40C5E5BB8D3609255F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft Manifest number: 15C7 Signing time: Wed 18 Jun 2025 12:01:22 +0000 Manifest this update: Wed 18 Jun 2025 12:01:22 +0000 Manifest next update: Thu 19 Jun 2025 12:01:22 +0000 Files and hashes: 1: 0iKiDzWWxSntVrrXCmhrJjOH6aw.roa (hash: av0mGR/5BFLwU8N3c2ijOxp9aJ3xR9cZmKrH0YmTzMA=) 2: 3IY4TmbnRLj5k1WANLdjXwTXYew.roa (hash: qjK8pA3ZvCwbUBgq8RlJOJI1zB3hdjk5IYpiJi0lf+Y=) 3: AHbXdKXc3M-CfGXTwbfq7QGRrvM.roa (hash: YbPDz6n014xlIU7wVTub26EyYvqoU35p6NFQjROCV14=) 4: DLpQGPGOf_OYvmHwf8b2lOYyOj0.roa (hash: +g29EdBhXU2GeBhgFcLWLeXtQJs4K/ChJhjgEP7KbZM=) 5: HMYF6_4se6-zijlekaRHSzmW9Jk.roa (hash: eqBnyqMcI8I2Ft7undsWPPs8lpkvdgxjWJ94tuPWoXI=) 6: I2YZ3IMak0VxnQcMthTtwmErqSw.roa (hash: p04i2TuYtY5s50ZwH3Us8UiZXTbYrw5bHRhSeM6Ld8Q=) 7: Ji6nEv3LafDcVTBG7aO97iudROE.roa (hash: p6pmniXLM/oWpBTXfpZqsZaAulIp2wCdQ9Jqkw9LVqE=) 8: N4HwjJKSX0cNlaYcj3jS4bVMgXE.roa (hash: YIMBZJbGgThBGYMYz0OP8LMxO+xC4s7B+V+yscfXQzc=) 9: Nb6TNhx-uC8I1Ffn515OIvBOQXg.roa (hash: Rag11JXj0d5gz3k2DXVRyxAiLg6LoiF+avVU8LVp2b0=) 10: TDMrt1P1gCHwvoGmH1EuT7lA4wU.roa (hash: XiBPhE3TLU1BuZaHa1qGrBxFPh5DC9L1nSoO49zFSn0=) 11: UUrExGIUuYmvJrzFIhPpcC26aCI.roa (hash: 5oxwYt4KRXP54+h592JN5Pg7aFrlsSfI2urY+v1pF/M=) 12: WfQsimdISfx91Ef7cYATyQIN7d4.roa (hash: hL6J1XxC9eqb2hyvPaLfMPBZ2q4oqhwcTiAhioDAJQs=) 13: aC6HOiqUxYGN254KZuSqiaJtNPE.roa (hash: qS7pdtxXfriW+5XqG23et3Nu8v85hG8JxjCRqEZITSs=) 14: iSC665C-UVVhnrmnNRLvj3Ij9kA.roa (hash: kHL9oQkOOW8rZCb10yvOczvSUcqVnHoZYo6f16erQPM=) 15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: Vn8zZJQ/MTk1zmGbiNJe0iSAN9iusF64LKqr36o6OVY=) 16: ntfUrbz7BUkei1F-tn7_XqXuheE.roa (hash: JAg5H8Q6Okry2xwWdwcj84ENgOyWvgrkVLihOHku7dw=) 17: vjtwmaRwxidwva3YZznIjLCoyQw.roa (hash: ZIJmnXOzxW3+TY4MpM3ZcpPqyL+GA1pmCMT952lDXKw=) 18: yGH6Oil6BAsrvRObF0sqosVRvc0.roa (hash: lPk6gmzjTVLAOfdoaQeb9dFBHg5tILEM3fFJMiKVdVY=) 19: znIOIdcg0Pfmr3lk9A2J6j6xSio.roa (hash: WJuHJIJ2rWApOKXb9tEkGYEbBNocsCE6EJQCs8d6EgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Jun 2025 12:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:82:ea:4d:47:5b:0e:ee:40:c5:e5:bb:8d:36:09:25:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Jun 18 12:01:22 2025 GMT Not After : Jun 19 12:01:22 2025 GMT Subject: CN=3716b4a4c90a196034971eda3aa5150f59101bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b3:34:64:2c:76:34:cc:8d:49:1a:d3:b2:fa: a1:41:d5:0d:7f:f9:7a:e3:2a:14:f9:4a:02:de:8a: 96:95:99:34:0f:5c:50:60:52:7f:72:82:43:31:d7: 8a:c3:90:96:10:71:0c:f5:bd:9e:d5:2c:4a:5b:04: 26:7e:f9:9c:21:9d:84:87:b4:09:cd:05:fb:fd:ee: 93:31:fc:7e:a4:6f:3b:a7:29:17:92:7e:fa:e7:a8: aa:a5:56:a6:bc:0d:4f:6b:dd:8a:34:79:8d:20:df: 6b:96:ea:28:f3:10:6f:de:36:ae:33:95:b0:05:1b: e6:5e:da:dd:34:62:c9:9d:87:ab:70:18:ba:87:02: a9:9d:c6:8a:67:cf:4c:71:e3:b2:36:d6:63:f4:99: 46:ab:fd:72:cf:ba:3e:88:05:57:cf:2a:6b:f7:a1: 0a:52:29:0c:6b:27:f8:a6:91:47:a4:4d:0c:8c:72: 10:da:cd:55:7c:00:90:44:cf:bc:74:9c:3b:2e:c5: 30:1a:e9:0b:cd:58:9d:01:14:30:e9:ec:86:34:b8: 7d:26:4c:ea:de:cb:2c:8b:30:16:65:91:b7:89:69: 32:82:c2:bc:5e:3d:e2:db:20:ad:f8:39:d0:4c:43: 5e:56:53:92:32:3c:e9:e7:4b:11:f4:11:f9:e5:84: bb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:16:B4:A4:C9:0A:19:60:34:97:1E:DA:3A:A5:15:0F:59:10:1B:C7 X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:5f:21:7d:09:fe:50:0a:c2:32:35:54:84:a7:24:c0:06:08: ff:7a:0e:a0:a8:bc:dd:2d:a7:27:09:00:9a:11:96:a4:0a:28: e5:c7:3f:47:d7:85:bc:d7:ab:12:73:bf:5d:70:57:13:7f:d4: 31:4d:33:f7:ae:c1:82:31:2f:5e:d7:9a:27:8a:1b:5e:8e:61: 43:18:b1:77:a7:7e:f2:bb:79:d2:ce:d1:f1:13:4c:f5:4d:56: e4:2e:13:02:77:a0:d4:5c:05:52:84:06:87:e5:bd:84:3f:28: 0f:50:18:82:6f:43:38:03:bd:12:91:59:eb:f7:4b:b5:97:2c: 62:b5:67:01:f6:85:d8:4e:9d:56:4e:92:a2:84:14:40:eb:ee: 92:87:e9:0e:2a:ef:b7:96:b2:f5:63:11:17:d1:93:98:d6:22: 08:24:ed:4b:e9:b0:2d:07:00:b3:24:f9:0d:92:5a:df:87:30: 67:3d:de:cc:75:17:07:8a:be:0c:f6:f2:61:5e:e8:82:20:a4: a7:0d:51:4d:54:3d:ee:50:4c:da:f7:03:32:53:99:47:6a:e0: 87:5a:e9:fa:cd:b5:ac:99:81:a1:14:ff:ca:10:46:3e:60:6a: e4:ff:34:5d:91:24:59:8f:ef:a8:ed:63:e4:fc:ec:63:b5:41: e2:11:df:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeC6k1HWw7uQMXlu402CSVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjUwNjE4MTIwMTIyWhcNMjUwNjE5MTIwMTIyWjAzMTEwLwYDVQQD EygzNzE2YjRhNGM5MGExOTYwMzQ5NzFlZGEzYWE1MTUwZjU5MTAxYmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LM0ZCx2NMyNSRrTsvqhQdUNf/l6 4yoU+UoC3oqWlZk0D1xQYFJ/coJDMdeKw5CWEHEM9b2e1SxKWwQmfvmcIZ2Eh7QJ zQX7/e6TMfx+pG87pykXkn7656iqpVamvA1Pa92KNHmNIN9rluoo8xBv3jauM5Ww BRvmXtrdNGLJnYercBi6hwKpncaKZ89MceOyNtZj9JlGq/1yz7o+iAVXzypr96EK UikMayf4ppFHpE0MjHIQ2s1VfACQRM+8dJw7LsUwGukLzVidARQw6eyGNLh9Jkzq 3sssizAWZZG3iWkygsK8Xj3i2yCt+DnQTENeVlOSMjzp50sR9BH55YS7XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcWtKTJChlgNJce2jqlFQ9ZEBvHMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsF8hfQn+ UArCMjVUhKckwAYI/3oOoKi83S2nJwkAmhGWpAoo5cc/R9eFvNerEnO/XXBXE3/U MU0z967BgjEvXteaJ4obXo5hQxixd6d+8rt50s7R8RNM9U1W5C4TAneg1FwFUoQG h+W9hD8oD1AYgm9DOAO9EpFZ6/dLtZcsYrVnAfaF2E6dVk6SooQUQOvukofpDirv t5ay9WMRF9GTmNYiCCTtS+mwLQcAsyT5DZJa34cwZz3ezHUXB4q+DPbyYV7ogiCk pw1RTVQ97lBM2vcDMlOZR2rgh1rp+s21rJmBoRT/yhBGPmBq5P80XZEkWY/vqO1j 5PzsY7VB4hHfxA== -----END CERTIFICATE-----Generated at Wed Jun 18 20:03:55 2025 by rpki-client