$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft File: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json) Hash identifier: UaZA61f0vlqsRcuA/5vNWcSMas906R/lO6G7OMowu8Q= Subject key identifier: 7C:49:DD:26:3C:04:14:36:FB:71:5B:3B:C7:21:F2:09:83:5A:77:3F Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 019A503E089AC89A7521B3BEE78DBB980080 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft Manifest number: 173C Signing time: Tue 04 Nov 2025 19:00:33 +0000 Manifest this update: Tue 04 Nov 2025 19:00:33 +0000 Manifest next update: Wed 05 Nov 2025 19:00:33 +0000 Files and hashes: 1: 0iKiDzWWxSntVrrXCmhrJjOH6aw.roa (hash: av0mGR/5BFLwU8N3c2ijOxp9aJ3xR9cZmKrH0YmTzMA=) 2: 3IY4TmbnRLj5k1WANLdjXwTXYew.roa (hash: qjK8pA3ZvCwbUBgq8RlJOJI1zB3hdjk5IYpiJi0lf+Y=) 3: DLpQGPGOf_OYvmHwf8b2lOYyOj0.roa (hash: +g29EdBhXU2GeBhgFcLWLeXtQJs4K/ChJhjgEP7KbZM=) 4: HMYF6_4se6-zijlekaRHSzmW9Jk.roa (hash: eqBnyqMcI8I2Ft7undsWPPs8lpkvdgxjWJ94tuPWoXI=) 5: I2YZ3IMak0VxnQcMthTtwmErqSw.roa (hash: p04i2TuYtY5s50ZwH3Us8UiZXTbYrw5bHRhSeM6Ld8Q=) 6: Ji6nEv3LafDcVTBG7aO97iudROE.roa (hash: p6pmniXLM/oWpBTXfpZqsZaAulIp2wCdQ9Jqkw9LVqE=) 7: N4HwjJKSX0cNlaYcj3jS4bVMgXE.roa (hash: YIMBZJbGgThBGYMYz0OP8LMxO+xC4s7B+V+yscfXQzc=) 8: Nb6TNhx-uC8I1Ffn515OIvBOQXg.roa (hash: Rag11JXj0d5gz3k2DXVRyxAiLg6LoiF+avVU8LVp2b0=) 9: TDMrt1P1gCHwvoGmH1EuT7lA4wU.roa (hash: XiBPhE3TLU1BuZaHa1qGrBxFPh5DC9L1nSoO49zFSn0=) 10: UUrExGIUuYmvJrzFIhPpcC26aCI.roa (hash: 5oxwYt4KRXP54+h592JN5Pg7aFrlsSfI2urY+v1pF/M=) 11: WfQsimdISfx91Ef7cYATyQIN7d4.roa (hash: hL6J1XxC9eqb2hyvPaLfMPBZ2q4oqhwcTiAhioDAJQs=) 12: aC6HOiqUxYGN254KZuSqiaJtNPE.roa (hash: qS7pdtxXfriW+5XqG23et3Nu8v85hG8JxjCRqEZITSs=) 13: aClXX-iR5Bl7IeW2FlIWaN6iIYc.roa (hash: HtL2L3d9fDCOnFgD6PIPMw7B8WRPV0RJs8E04QzbYYE=) 14: iSC665C-UVVhnrmnNRLvj3Ij9kA.roa (hash: kHL9oQkOOW8rZCb10yvOczvSUcqVnHoZYo6f16erQPM=) 15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: hEtcmoxjHEcu2PFA70sR5ebGNBSWRZlI+t6V4YV30k8=) 16: ntfUrbz7BUkei1F-tn7_XqXuheE.roa (hash: JAg5H8Q6Okry2xwWdwcj84ENgOyWvgrkVLihOHku7dw=) 17: vjtwmaRwxidwva3YZznIjLCoyQw.roa (hash: ZIJmnXOzxW3+TY4MpM3ZcpPqyL+GA1pmCMT952lDXKw=) 18: yGH6Oil6BAsrvRObF0sqosVRvc0.roa (hash: lPk6gmzjTVLAOfdoaQeb9dFBHg5tILEM3fFJMiKVdVY=) 19: znIOIdcg0Pfmr3lk9A2J6j6xSio.roa (hash: WJuHJIJ2rWApOKXb9tEkGYEbBNocsCE6EJQCs8d6EgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:3e:08:9a:c8:9a:75:21:b3:be:e7:8d:bb:98:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Nov 4 19:00:33 2025 GMT Not After : Nov 5 19:00:33 2025 GMT Subject: CN=7c49dd263c041436fb715b3bc721f209835a773f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:29:b5:3d:83:bb:eb:cf:16:4b:ae:77:5c:c6: d5:64:b7:4e:46:aa:7a:a7:d7:d5:10:18:9d:02:ba: 80:cc:a9:b6:5e:14:07:54:31:a8:4b:22:8a:6b:e3: d6:3c:68:a2:1b:e8:64:a5:9a:e7:7f:b1:76:99:49: 57:60:cd:3d:f4:ef:71:d0:00:60:aa:62:7d:0b:6b: ef:f8:f6:7c:16:e6:04:d2:07:fa:d7:49:14:bc:3e: 29:32:13:f3:2f:4b:f8:62:89:65:6c:aa:9c:a2:78: 05:9c:f6:12:2b:2f:0c:49:7c:1e:ab:a3:70:bc:bf: 7c:ef:83:22:a2:af:ce:a6:87:b5:d9:08:2c:1a:02: 63:b2:91:c2:d9:73:e4:8b:19:fa:a8:e0:30:27:d1: 02:73:c3:c0:e3:7c:80:c9:e6:fe:be:c8:05:ef:57: c8:80:c4:25:53:76:63:cb:42:38:39:63:13:af:f6: 16:62:c3:30:23:72:e1:0d:eb:28:b3:19:5f:0c:87: 16:0e:2a:cd:12:33:20:44:e8:4c:3b:01:d6:68:6b: f6:e4:16:d1:84:d5:04:77:f3:3c:42:01:66:df:b3: fd:69:f1:6e:e0:99:41:ed:ef:7d:fe:5a:53:15:4a: ae:a8:fb:1c:71:b5:b6:43:c0:26:83:ba:84:bf:4b: e0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:49:DD:26:3C:04:14:36:FB:71:5B:3B:C7:21:F2:09:83:5A:77:3F X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5a:62:6c:df:5b:51:87:28:9e:73:71:c4:2a:83:02:ef:69: 64:fa:69:e1:11:6e:31:e1:6e:8f:6d:cb:09:28:0d:8e:1b:68: 8c:e7:f4:0b:78:62:b4:7b:08:93:0c:0d:d7:d0:64:e7:d9:e0: b1:50:fd:76:b1:c9:63:dd:4e:d6:88:1b:df:a3:42:73:a2:fc: bd:72:59:32:9a:4e:cd:36:22:2b:01:10:69:aa:11:ed:51:28: e6:0f:f6:48:90:8b:20:06:90:65:5b:c0:27:a5:3c:c8:6f:5f: 07:2f:64:b9:4e:c4:16:ed:8c:3f:9f:1e:56:91:a7:95:b9:e2: 1f:60:88:bb:2d:5a:7e:a5:d0:65:0c:96:b6:9c:7b:53:7d:1a: c5:cf:d8:a8:a7:35:62:10:f9:21:af:fe:06:77:62:d1:15:26: 36:59:87:7d:73:fc:c7:2b:68:d2:e4:bb:fc:99:fc:ed:8f:88: 76:2c:cb:01:76:7b:29:fa:7d:d6:27:46:5c:04:15:56:a0:b1: 32:93:99:c6:43:d1:13:f8:74:40:a5:15:eb:5e:b0:c5:19:3d: e7:73:a7:00:91:76:6e:01:0c:c7:3b:4f:b2:74:aa:ea:6a:1a: bb:5c:8f:2a:7c:cc:f1:c5:f2:57:44:e8:12:03:6c:db:33:98: 09:40:00:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQPgiayJp1IbO+5427mACAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjUxMTA0MTkwMDMzWhcNMjUxMTA1MTkwMDMzWjAzMTEwLwYDVQQD Eyg3YzQ5ZGQyNjNjMDQxNDM2ZmI3MTViM2JjNzIxZjIwOTgzNWE3NzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArim1PYO7688WS653XMbVZLdORqp6 p9fVEBidArqAzKm2XhQHVDGoSyKKa+PWPGiiG+hkpZrnf7F2mUlXYM099O9x0ABg qmJ9C2vv+PZ8FuYE0gf610kUvD4pMhPzL0v4YollbKqcongFnPYSKy8MSXweq6Nw vL9874Mioq/Opoe12QgsGgJjspHC2XPkixn6qOAwJ9ECc8PA43yAyeb+vsgF71fI gMQlU3Zjy0I4OWMTr/YWYsMwI3LhDesosxlfDIcWDirNEjMgROhMOwHWaGv25BbR hNUEd/M8QgFm37P9afFu4JlB7e99/lpTFUquqPsccbW2Q8Amg7qEv0vgTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxJ3SY8BBQ2+3FbO8ch8gmDWnc/MB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1pibN9b UYconnNxxCqDAu9pZPpp4RFuMeFuj23LCSgNjhtojOf0C3hitHsIkwwN19Bk59ng sVD9drHJY91O1ogb36NCc6L8vXJZMppOzTYiKwEQaaoR7VEo5g/2SJCLIAaQZVvA J6U8yG9fBy9kuU7EFu2MP58eVpGnlbniH2CIuy1afqXQZQyWtpx7U30axc/YqKc1 YhD5Ia/+Bndi0RUmNlmHfXP8xyto0uS7/Jn87Y+IdizLAXZ7Kfp91idGXAQVVqCx MpOZxkPRE/h0QKUV616wxRk953OnAJF2bgEMxztPsnSq6moau1yPKnzM8cXyV0To EgNs2zOYCUAAmA== -----END CERTIFICATE-----Generated at Wed Nov 5 04:26:19 2025 by rpki-client