$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft File: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json) Hash identifier: SLtmCda6FJKzxMHcl6e1fRpR7pfv0eC1wFR5s4MLH4E= Subject key identifier: FF:7E:26:B5:4D:7E:19:C3:FB:15:DE:25:BD:97:77:58:5C:EE:69:CB Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 01988C58716B1AB0997E71DA995316DA6646 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft Manifest number: 1652 Signing time: Sat 09 Aug 2025 01:01:03 +0000 Manifest this update: Sat 09 Aug 2025 01:01:03 +0000 Manifest next update: Sun 10 Aug 2025 01:01:03 +0000 Files and hashes: 1: 0iKiDzWWxSntVrrXCmhrJjOH6aw.roa (hash: av0mGR/5BFLwU8N3c2ijOxp9aJ3xR9cZmKrH0YmTzMA=) 2: 3IY4TmbnRLj5k1WANLdjXwTXYew.roa (hash: qjK8pA3ZvCwbUBgq8RlJOJI1zB3hdjk5IYpiJi0lf+Y=) 3: DLpQGPGOf_OYvmHwf8b2lOYyOj0.roa (hash: +g29EdBhXU2GeBhgFcLWLeXtQJs4K/ChJhjgEP7KbZM=) 4: HMYF6_4se6-zijlekaRHSzmW9Jk.roa (hash: eqBnyqMcI8I2Ft7undsWPPs8lpkvdgxjWJ94tuPWoXI=) 5: I2YZ3IMak0VxnQcMthTtwmErqSw.roa (hash: p04i2TuYtY5s50ZwH3Us8UiZXTbYrw5bHRhSeM6Ld8Q=) 6: Ji6nEv3LafDcVTBG7aO97iudROE.roa (hash: p6pmniXLM/oWpBTXfpZqsZaAulIp2wCdQ9Jqkw9LVqE=) 7: N4HwjJKSX0cNlaYcj3jS4bVMgXE.roa (hash: YIMBZJbGgThBGYMYz0OP8LMxO+xC4s7B+V+yscfXQzc=) 8: Nb6TNhx-uC8I1Ffn515OIvBOQXg.roa (hash: Rag11JXj0d5gz3k2DXVRyxAiLg6LoiF+avVU8LVp2b0=) 9: TDMrt1P1gCHwvoGmH1EuT7lA4wU.roa (hash: XiBPhE3TLU1BuZaHa1qGrBxFPh5DC9L1nSoO49zFSn0=) 10: UUrExGIUuYmvJrzFIhPpcC26aCI.roa (hash: 5oxwYt4KRXP54+h592JN5Pg7aFrlsSfI2urY+v1pF/M=) 11: WfQsimdISfx91Ef7cYATyQIN7d4.roa (hash: hL6J1XxC9eqb2hyvPaLfMPBZ2q4oqhwcTiAhioDAJQs=) 12: aC6HOiqUxYGN254KZuSqiaJtNPE.roa (hash: qS7pdtxXfriW+5XqG23et3Nu8v85hG8JxjCRqEZITSs=) 13: aClXX-iR5Bl7IeW2FlIWaN6iIYc.roa (hash: HtL2L3d9fDCOnFgD6PIPMw7B8WRPV0RJs8E04QzbYYE=) 14: iSC665C-UVVhnrmnNRLvj3Ij9kA.roa (hash: kHL9oQkOOW8rZCb10yvOczvSUcqVnHoZYo6f16erQPM=) 15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: 3ga2uY+2/HVZLpxgQcgyS8AZfkV8+u5G9Skd+PCX09c=) 16: ntfUrbz7BUkei1F-tn7_XqXuheE.roa (hash: JAg5H8Q6Okry2xwWdwcj84ENgOyWvgrkVLihOHku7dw=) 17: vjtwmaRwxidwva3YZznIjLCoyQw.roa (hash: ZIJmnXOzxW3+TY4MpM3ZcpPqyL+GA1pmCMT952lDXKw=) 18: yGH6Oil6BAsrvRObF0sqosVRvc0.roa (hash: lPk6gmzjTVLAOfdoaQeb9dFBHg5tILEM3fFJMiKVdVY=) 19: znIOIdcg0Pfmr3lk9A2J6j6xSio.roa (hash: WJuHJIJ2rWApOKXb9tEkGYEbBNocsCE6EJQCs8d6EgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Aug 2025 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8c:58:71:6b:1a:b0:99:7e:71:da:99:53:16:da:66:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Aug 9 01:01:03 2025 GMT Not After : Aug 10 01:01:03 2025 GMT Subject: CN=ff7e26b54d7e19c3fb15de25bd9777585cee69cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a6:09:0d:7c:71:6e:48:4a:28:bf:30:aa:04: 7f:eb:46:93:ef:26:bd:a5:1f:02:bd:2e:5a:79:16: ad:73:bb:ba:5c:6f:92:b3:0f:58:bc:b4:45:f1:47: ec:f6:a5:93:de:0b:e2:7e:46:17:65:16:96:a8:51: b8:62:76:17:bd:6c:46:9c:e5:9d:10:1c:df:3b:8c: c5:ca:40:7a:ac:1a:28:0c:b8:77:54:f0:84:f1:27: ed:0e:b8:83:e5:d4:a3:38:fe:ed:6c:08:30:7f:20: 68:1c:cd:fc:f9:87:b0:2a:2e:d9:8b:e7:f3:95:99: 52:a5:45:27:a2:b3:4e:92:2e:91:23:a0:9e:eb:fe: f0:22:c6:fc:2a:8f:4a:1d:98:ab:4a:cc:52:48:8c: b0:55:e3:8c:48:2d:2f:96:89:2e:8a:7f:9a:a9:82: 57:a7:83:99:55:b9:c5:12:41:20:d8:8d:c5:d7:49: e9:e0:6b:b8:9e:e1:28:4c:73:cb:e8:b7:db:b8:2d: 8d:b6:f6:a5:e5:19:c2:b0:ab:95:f2:63:e0:f6:9d: d8:58:b1:c7:c9:1b:f6:76:2f:c5:87:07:b2:74:70: 93:c6:7c:a4:0d:4f:7b:10:db:49:7a:7d:2b:24:56: 6c:3d:0b:f4:5f:75:ad:7f:8a:6d:57:7a:41:a7:e2: a3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7E:26:B5:4D:7E:19:C3:FB:15:DE:25:BD:97:77:58:5C:EE:69:CB X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:76:06:97:9d:a4:d4:ce:75:fd:91:bb:6d:4c:93:03:40:6b: 68:cf:3e:81:ee:1c:f6:8d:b3:f0:e4:34:63:b0:09:8a:9d:a6: 2e:ba:43:09:77:06:1d:ca:68:0c:7f:52:c1:20:4c:11:f5:ed: b2:17:27:b1:54:e1:0b:38:68:2d:7d:a6:78:50:e9:4b:34:22: 7d:c7:2f:5d:95:bb:c3:99:60:7e:3e:39:7e:95:f6:99:31:a7: e3:3e:41:aa:13:c6:ef:e0:33:c4:fa:d5:ba:65:52:9d:4d:e2: b2:98:83:a5:a3:db:5a:ba:a8:49:a0:b2:65:e3:0c:79:0b:08: 61:e7:bf:f0:85:47:15:00:c0:45:fa:a1:5e:5e:1f:4e:48:7c: 83:17:bc:61:ec:95:10:0c:67:1c:2c:27:28:b6:a9:9c:af:df: 25:7c:00:a4:a5:5e:ad:b5:6b:f1:d4:1a:10:81:0b:8b:f5:30: 67:bd:ea:37:fc:8b:c0:d7:a4:ba:1b:80:7a:e7:7d:73:c8:83: e7:55:4a:a5:39:09:9f:50:92:31:60:7a:1f:12:ba:10:5b:02: d3:7b:6a:97:53:57:95:b8:42:c7:c8:9a:23:3e:a2:7b:e0:cd: e3:4b:52:35:e7:54:38:8e:4d:b7:b6:87:54:92:2b:f9:2a:5e: cb:44:35:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiMWHFrGrCZfnHamVMW2mZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjUwODA5MDEwMTAzWhcNMjUwODEwMDEwMTAzWjAzMTEwLwYDVQQD EyhmZjdlMjZiNTRkN2UxOWMzZmIxNWRlMjViZDk3Nzc1ODVjZWU2OWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqYJDXxxbkhKKL8wqgR/60aT7ya9 pR8CvS5aeRatc7u6XG+Ssw9YvLRF8Ufs9qWT3gvifkYXZRaWqFG4YnYXvWxGnOWd EBzfO4zFykB6rBooDLh3VPCE8SftDriD5dSjOP7tbAgwfyBoHM38+YewKi7Zi+fz lZlSpUUnorNOki6RI6Ce6/7wIsb8Ko9KHZirSsxSSIywVeOMSC0vlokuin+aqYJX p4OZVbnFEkEg2I3F10np4Gu4nuEoTHPL6LfbuC2Ntval5RnCsKuV8mPg9p3YWLHH yRv2di/FhweydHCTxnykDU97ENtJen0rJFZsPQv0X3Wtf4ptV3pBp+KjAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9+JrVNfhnD+xXeJb2Xd1hc7mnLMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3YGl52k 1M51/ZG7bUyTA0BraM8+ge4c9o2z8OQ0Y7AJip2mLrpDCXcGHcpoDH9SwSBMEfXt shcnsVThCzhoLX2meFDpSzQifccvXZW7w5lgfj45fpX2mTGn4z5BqhPG7+AzxPrV umVSnU3ispiDpaPbWrqoSaCyZeMMeQsIYee/8IVHFQDARfqhXl4fTkh8gxe8YeyV EAxnHCwnKLapnK/fJXwApKVerbVr8dQaEIELi/UwZ73qN/yLwNekuhuAeud9c8iD 51VKpTkJn1CSMWB6HxK6EFsC03tql1NXlbhCx8iaIz6ie+DN40tSNedUOI5Nt7aH VJIr+Spey0Q1bQ== -----END CERTIFICATE-----Generated at Sat Aug 9 10:46:42 2025 by rpki-client