$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft File: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json) Hash identifier: 1qsjiG4m0VOy2hZF/F9lI97BVcOH60gHOYO7DVu0ZCY= Subject key identifier: 82:A8:41:A2:EF:DB:1F:56:2A:43:0D:F8:C7:28:30:D0:E1:3B:1B:A6 Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 0198D5BB914BF78C9402440E2A6532A4E84B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft Manifest number: 1678 Signing time: Sat 23 Aug 2025 07:01:36 +0000 Manifest this update: Sat 23 Aug 2025 07:01:36 +0000 Manifest next update: Sun 24 Aug 2025 07:01:36 +0000 Files and hashes: 1: 0iKiDzWWxSntVrrXCmhrJjOH6aw.roa (hash: av0mGR/5BFLwU8N3c2ijOxp9aJ3xR9cZmKrH0YmTzMA=) 2: 3IY4TmbnRLj5k1WANLdjXwTXYew.roa (hash: qjK8pA3ZvCwbUBgq8RlJOJI1zB3hdjk5IYpiJi0lf+Y=) 3: DLpQGPGOf_OYvmHwf8b2lOYyOj0.roa (hash: +g29EdBhXU2GeBhgFcLWLeXtQJs4K/ChJhjgEP7KbZM=) 4: HMYF6_4se6-zijlekaRHSzmW9Jk.roa (hash: eqBnyqMcI8I2Ft7undsWPPs8lpkvdgxjWJ94tuPWoXI=) 5: I2YZ3IMak0VxnQcMthTtwmErqSw.roa (hash: p04i2TuYtY5s50ZwH3Us8UiZXTbYrw5bHRhSeM6Ld8Q=) 6: Ji6nEv3LafDcVTBG7aO97iudROE.roa (hash: p6pmniXLM/oWpBTXfpZqsZaAulIp2wCdQ9Jqkw9LVqE=) 7: N4HwjJKSX0cNlaYcj3jS4bVMgXE.roa (hash: YIMBZJbGgThBGYMYz0OP8LMxO+xC4s7B+V+yscfXQzc=) 8: Nb6TNhx-uC8I1Ffn515OIvBOQXg.roa (hash: Rag11JXj0d5gz3k2DXVRyxAiLg6LoiF+avVU8LVp2b0=) 9: TDMrt1P1gCHwvoGmH1EuT7lA4wU.roa (hash: XiBPhE3TLU1BuZaHa1qGrBxFPh5DC9L1nSoO49zFSn0=) 10: UUrExGIUuYmvJrzFIhPpcC26aCI.roa (hash: 5oxwYt4KRXP54+h592JN5Pg7aFrlsSfI2urY+v1pF/M=) 11: WfQsimdISfx91Ef7cYATyQIN7d4.roa (hash: hL6J1XxC9eqb2hyvPaLfMPBZ2q4oqhwcTiAhioDAJQs=) 12: aC6HOiqUxYGN254KZuSqiaJtNPE.roa (hash: qS7pdtxXfriW+5XqG23et3Nu8v85hG8JxjCRqEZITSs=) 13: aClXX-iR5Bl7IeW2FlIWaN6iIYc.roa (hash: HtL2L3d9fDCOnFgD6PIPMw7B8WRPV0RJs8E04QzbYYE=) 14: iSC665C-UVVhnrmnNRLvj3Ij9kA.roa (hash: kHL9oQkOOW8rZCb10yvOczvSUcqVnHoZYo6f16erQPM=) 15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: NmPwFk/WuxDb4pb0tfpilctA7kMCu6QYV1ZNfqpNpR4=) 16: ntfUrbz7BUkei1F-tn7_XqXuheE.roa (hash: JAg5H8Q6Okry2xwWdwcj84ENgOyWvgrkVLihOHku7dw=) 17: vjtwmaRwxidwva3YZznIjLCoyQw.roa (hash: ZIJmnXOzxW3+TY4MpM3ZcpPqyL+GA1pmCMT952lDXKw=) 18: yGH6Oil6BAsrvRObF0sqosVRvc0.roa (hash: lPk6gmzjTVLAOfdoaQeb9dFBHg5tILEM3fFJMiKVdVY=) 19: znIOIdcg0Pfmr3lk9A2J6j6xSio.roa (hash: WJuHJIJ2rWApOKXb9tEkGYEbBNocsCE6EJQCs8d6EgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:91:4b:f7:8c:94:02:44:0e:2a:65:32:a4:e8:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Aug 23 07:01:36 2025 GMT Not After : Aug 24 07:01:36 2025 GMT Subject: CN=82a841a2efdb1f562a430df8c72830d0e13b1ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cb:5c:7e:67:12:a4:f9:9c:18:a3:0c:d0:fa: 33:d7:8f:0a:34:03:a0:f9:27:73:82:bb:70:a9:24: 66:66:04:e7:9c:eb:15:b6:2f:8e:20:8a:72:80:f2: 52:0f:84:f4:32:81:c2:85:6c:e4:0e:c8:ca:91:36: ed:aa:cc:be:59:32:7c:f9:1d:dc:6c:e8:85:97:93: 96:3a:ec:d7:57:69:1d:55:77:74:f9:81:a3:69:63: b3:e1:1a:da:6b:0c:07:19:2a:8c:58:fb:8c:5e:19: 6a:d9:46:dc:4c:b4:73:57:8f:7f:bb:63:4b:78:38: 6c:72:2e:4d:e6:89:56:73:2d:2d:87:36:37:6c:e1: a0:06:33:de:f7:0f:b8:19:87:03:d2:b2:d2:e8:a1: e2:dc:bd:8d:37:f4:d9:b8:ee:a0:9b:e8:07:f4:72: cc:f7:a0:41:13:7e:8d:df:51:54:04:25:cd:31:e4: 90:4d:25:39:02:bc:38:7d:6f:7b:f9:05:95:2b:b6: 1c:01:0b:2e:36:82:fb:01:fc:43:13:7a:44:7c:06: 10:71:e6:ca:fe:a7:3c:79:2d:84:1b:8e:ca:9c:0d: 72:c8:68:49:e4:82:e3:ff:b7:26:83:a8:f8:12:b0: cf:b7:94:63:18:20:f1:81:b6:7a:ce:0f:91:13:7c: 15:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A8:41:A2:EF:DB:1F:56:2A:43:0D:F8:C7:28:30:D0:E1:3B:1B:A6 X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:15:18:06:ca:cc:28:1e:ce:da:ab:d2:c9:b1:cb:77:d3:17: c1:8c:17:4f:d0:2a:e1:a5:ea:fb:cd:58:0b:ff:68:ee:c2:db: dc:85:48:49:ed:db:8b:a2:14:7b:2f:1c:a8:05:1c:9e:e4:cc: 33:fc:4f:22:1b:c6:7c:82:6a:9c:44:7e:a3:72:a6:bf:45:2c: 39:88:85:bd:80:65:cb:1d:dd:9f:f4:d6:fd:d2:75:5c:d4:4f: a2:f6:e2:a2:cb:c7:56:e3:60:4d:3b:55:b4:0d:fd:b0:4e:6e: 5a:b0:e5:e8:57:e4:98:ed:ac:8a:6d:46:6c:ee:5a:94:16:3d: dc:cc:40:fe:8d:4e:28:7f:d0:cb:3c:f8:9c:02:81:fd:f1:08: 13:73:39:3a:e6:ca:f9:3e:6e:ef:7a:22:34:ab:36:73:d6:08: f5:51:51:12:58:21:f2:a9:df:13:f3:41:8b:d4:91:2f:9c:9c: c0:5a:7d:ae:37:c6:97:1a:53:20:e8:94:7f:1d:50:1c:e7:67: 8a:41:52:b5:da:e6:41:0d:7c:e2:d8:ad:c6:b4:d6:e8:50:a8: d7:b0:12:37:75:85:07:40:d5:d6:96:a5:ab:6b:95:f3:37:d8: fa:54:b2:12:42:86:89:7c:38:ce:d0:ae:22:48:41:21:bc:16: 6c:a2:e2:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu5FL94yUAkQOKmUypOhLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjUwODIzMDcwMTM2WhcNMjUwODI0MDcwMTM2WjAzMTEwLwYDVQQD Eyg4MmE4NDFhMmVmZGIxZjU2MmE0MzBkZjhjNzI4MzBkMGUxM2IxYmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMtcfmcSpPmcGKMM0Poz148KNAOg +SdzgrtwqSRmZgTnnOsVti+OIIpygPJSD4T0MoHChWzkDsjKkTbtqsy+WTJ8+R3c bOiFl5OWOuzXV2kdVXd0+YGjaWOz4RraawwHGSqMWPuMXhlq2UbcTLRzV49/u2NL eDhsci5N5olWcy0thzY3bOGgBjPe9w+4GYcD0rLS6KHi3L2NN/TZuO6gm+gH9HLM 96BBE36N31FUBCXNMeSQTSU5Arw4fW97+QWVK7YcAQsuNoL7AfxDE3pEfAYQcebK /qc8eS2EG47KnA1yyGhJ5ILj/7cmg6j4ErDPt5RjGCDxgbZ6zg+RE3wVbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKoQaLv2x9WKkMN+McoMNDhOxumMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBUYBsrM KB7O2qvSybHLd9MXwYwXT9Aq4aXq+81YC/9o7sLb3IVISe3bi6IUey8cqAUcnuTM M/xPIhvGfIJqnER+o3Kmv0UsOYiFvYBlyx3dn/TW/dJ1XNRPovbiosvHVuNgTTtV tA39sE5uWrDl6FfkmO2sim1GbO5alBY93MxA/o1OKH/Qyzz4nAKB/fEIE3M5OubK +T5u73oiNKs2c9YI9VFRElgh8qnfE/NBi9SRL5ycwFp9rjfGlxpTIOiUfx1QHOdn ikFStdrmQQ184titxrTW6FCo17ASN3WFB0DV1palq2uV8zfY+lSyEkKGiXw4ztCu IkhBIbwWbKLi0A== -----END CERTIFICATE-----Generated at Sat Aug 23 10:38:38 2025 by rpki-client