$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft File: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json) Hash identifier: iDrpXkF8qI0dWaeMCt84qmzx+d9GgX6qH3fN/NRCauE= Subject key identifier: 3D:2A:44:24:08:F7:82:B5:04:6D:81:EE:D9:F3:A1:3D:04:6C:10:C7 Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 01968A6EA0B638FDEEE9D8613AAA9C238EA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft Manifest number: 1546 Signing time: Thu 01 May 2025 06:00:27 +0000 Manifest this update: Thu 01 May 2025 06:00:27 +0000 Manifest next update: Fri 02 May 2025 06:00:27 +0000 Files and hashes: 1: 0iKiDzWWxSntVrrXCmhrJjOH6aw.roa (hash: av0mGR/5BFLwU8N3c2ijOxp9aJ3xR9cZmKrH0YmTzMA=) 2: 3IY4TmbnRLj5k1WANLdjXwTXYew.roa (hash: qjK8pA3ZvCwbUBgq8RlJOJI1zB3hdjk5IYpiJi0lf+Y=) 3: AHbXdKXc3M-CfGXTwbfq7QGRrvM.roa (hash: YbPDz6n014xlIU7wVTub26EyYvqoU35p6NFQjROCV14=) 4: DLpQGPGOf_OYvmHwf8b2lOYyOj0.roa (hash: +g29EdBhXU2GeBhgFcLWLeXtQJs4K/ChJhjgEP7KbZM=) 5: HMYF6_4se6-zijlekaRHSzmW9Jk.roa (hash: eqBnyqMcI8I2Ft7undsWPPs8lpkvdgxjWJ94tuPWoXI=) 6: I2YZ3IMak0VxnQcMthTtwmErqSw.roa (hash: p04i2TuYtY5s50ZwH3Us8UiZXTbYrw5bHRhSeM6Ld8Q=) 7: Ji6nEv3LafDcVTBG7aO97iudROE.roa (hash: p6pmniXLM/oWpBTXfpZqsZaAulIp2wCdQ9Jqkw9LVqE=) 8: Nb6TNhx-uC8I1Ffn515OIvBOQXg.roa (hash: Rag11JXj0d5gz3k2DXVRyxAiLg6LoiF+avVU8LVp2b0=) 9: TDMrt1P1gCHwvoGmH1EuT7lA4wU.roa (hash: XiBPhE3TLU1BuZaHa1qGrBxFPh5DC9L1nSoO49zFSn0=) 10: UUrExGIUuYmvJrzFIhPpcC26aCI.roa (hash: 5oxwYt4KRXP54+h592JN5Pg7aFrlsSfI2urY+v1pF/M=) 11: WfQsimdISfx91Ef7cYATyQIN7d4.roa (hash: hL6J1XxC9eqb2hyvPaLfMPBZ2q4oqhwcTiAhioDAJQs=) 12: aC6HOiqUxYGN254KZuSqiaJtNPE.roa (hash: qS7pdtxXfriW+5XqG23et3Nu8v85hG8JxjCRqEZITSs=) 13: iSC665C-UVVhnrmnNRLvj3Ij9kA.roa (hash: kHL9oQkOOW8rZCb10yvOczvSUcqVnHoZYo6f16erQPM=) 14: j1jJDy1bsDo19kM-qcS6eCJYpIY.roa (hash: iG7JzgoGBQGGMxVsaVSziIkyl1Kri/SxbRvg7JUBBws=) 15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: SsZ54jwQ4hs3mNeCNCDqwsag9lY3TrK5nVhCoSIhpZI=) 16: ntfUrbz7BUkei1F-tn7_XqXuheE.roa (hash: JAg5H8Q6Okry2xwWdwcj84ENgOyWvgrkVLihOHku7dw=) 17: vjtwmaRwxidwva3YZznIjLCoyQw.roa (hash: ZIJmnXOzxW3+TY4MpM3ZcpPqyL+GA1pmCMT952lDXKw=) 18: yGH6Oil6BAsrvRObF0sqosVRvc0.roa (hash: lPk6gmzjTVLAOfdoaQeb9dFBHg5tILEM3fFJMiKVdVY=) 19: znIOIdcg0Pfmr3lk9A2J6j6xSio.roa (hash: WJuHJIJ2rWApOKXb9tEkGYEbBNocsCE6EJQCs8d6EgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 May 2025 06:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:8a:6e:a0:b6:38:fd:ee:e9:d8:61:3a:aa:9c:23:8e:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: May 1 06:00:27 2025 GMT Not After : May 2 06:00:27 2025 GMT Subject: CN=3d2a442408f782b5046d81eed9f3a13d046c10c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b9:27:5c:40:67:16:9e:ff:60:19:12:ea:93: d5:29:42:db:f8:a3:90:f4:0b:24:4d:19:cc:8b:4d: b9:24:88:d6:17:b4:df:e7:81:07:ca:ac:db:ce:ca: 09:9b:ed:99:da:08:d0:be:f4:18:98:e2:72:11:a7: 48:93:61:b0:b4:89:1a:65:98:91:f3:2a:5a:cd:dd: be:20:0b:79:97:23:28:39:a1:62:5c:0c:af:49:6f: 83:94:3f:42:03:74:31:c7:e3:e4:c0:86:a9:72:d8: 8b:fd:e6:5e:91:91:e9:3e:b9:f6:e2:04:23:28:18: 6e:fc:b0:e3:38:c4:3b:c0:29:d6:20:73:b3:93:87: 53:0d:76:6a:ec:4e:28:f6:7a:af:c4:7d:73:e8:b3: 36:42:54:d0:d7:de:55:c9:d4:0e:a0:5b:0d:6c:8d: a3:28:ae:ce:2a:89:b8:0e:cf:56:c3:0d:a7:e1:8b: 07:af:1f:73:bb:25:ec:fa:12:f4:4c:df:d9:48:9a: 94:60:90:16:a6:2c:73:12:92:a4:55:23:44:27:27: b8:d7:1f:b4:b3:d1:d3:88:03:cf:2e:29:5b:00:79: d6:9f:33:3b:ec:d5:10:95:19:36:5c:14:c0:33:d1: fd:c7:6a:e0:52:11:8d:fb:89:56:0a:e3:1e:3a:2b: 92:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2A:44:24:08:F7:82:B5:04:6D:81:EE:D9:F3:A1:3D:04:6C:10:C7 X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ae:aa:20:89:2c:52:e5:27:49:7e:93:4b:33:8c:9c:13:ea: 20:01:e6:18:77:fb:cf:5f:94:11:6f:ef:d3:d8:9b:79:b1:93: 6e:45:51:84:77:ac:ec:10:66:d2:ab:fb:80:ca:d0:89:76:d7: af:70:8d:e1:0e:3a:37:03:1a:45:9c:48:dd:52:6f:f1:54:f1: d3:98:ab:d2:b2:66:01:85:bc:34:f9:96:52:34:6d:99:1b:30: 66:2f:bf:fa:6f:97:ee:09:1f:ba:e3:fb:99:82:a1:39:b1:a5: 3d:6d:b4:19:05:00:81:37:b6:cb:01:fd:50:f6:bd:60:f2:24: a1:6c:f3:1c:ec:f8:39:1c:a2:6a:a4:6a:95:aa:d8:1f:53:a1: fa:0f:26:dd:a8:6f:90:fc:df:ae:b2:d5:20:33:6d:6a:8a:27: 78:5c:8b:2e:5e:fe:94:d8:31:52:0d:be:6b:ba:2e:32:cc:2c: 8d:dd:1d:a9:b7:eb:7b:6c:42:21:cd:dd:33:6e:1e:09:b5:16: 71:a6:55:11:98:6d:69:6e:04:80:18:dd:37:a4:86:12:15:6f: 1e:2e:58:30:44:58:8b:d5:d4:dc:dc:d2:d4:09:1a:9c:55:8a: 55:2e:35:0e:6c:2a:f9:5e:37:53:66:f2:3e:b5:59:89:93:77: f9:98:b8:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaKbqC2OP3u6dhhOqqcI46lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjUwNTAxMDYwMDI3WhcNMjUwNTAyMDYwMDI3WjAzMTEwLwYDVQQD EygzZDJhNDQyNDA4Zjc4MmI1MDQ2ZDgxZWVkOWYzYTEzZDA0NmMxMGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7knXEBnFp7/YBkS6pPVKULb+KOQ 9AskTRnMi025JIjWF7Tf54EHyqzbzsoJm+2Z2gjQvvQYmOJyEadIk2GwtIkaZZiR 8ypazd2+IAt5lyMoOaFiXAyvSW+DlD9CA3Qxx+PkwIapctiL/eZekZHpPrn24gQj KBhu/LDjOMQ7wCnWIHOzk4dTDXZq7E4o9nqvxH1z6LM2QlTQ195VydQOoFsNbI2j KK7OKom4Ds9Www2n4YsHrx9zuyXs+hL0TN/ZSJqUYJAWpixzEpKkVSNEJye41x+0 s9HTiAPPLilbAHnWnzM77NUQlRk2XBTAM9H9x2rgUhGN+4lWCuMeOiuSzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0qRCQI94K1BG2B7tnzoT0EbBDHMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXq6qIIks UuUnSX6TSzOMnBPqIAHmGHf7z1+UEW/v09ibebGTbkVRhHes7BBm0qv7gMrQiXbX r3CN4Q46NwMaRZxI3VJv8VTx05ir0rJmAYW8NPmWUjRtmRswZi+/+m+X7gkfuuP7 mYKhObGlPW20GQUAgTe2ywH9UPa9YPIkoWzzHOz4ORyiaqRqlarYH1Oh+g8m3ahv kPzfrrLVIDNtaooneFyLLl7+lNgxUg2+a7ouMswsjd0dqbfre2xCIc3dM24eCbUW caZVEZhtaW4EgBjdN6SGEhVvHi5YMERYi9XU3NzS1AkanFWKVS41Dmwq+V43U2by PrVZiZN3+Zi4Kw== -----END CERTIFICATE-----Generated at Thu May 1 16:05:20 2025 by rpki-client