$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft File: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json) Hash identifier: lfE0GvoHq+gppWIaNtfnUT6XI2K3CKj4lkujNfT8mVk= Subject key identifier: 54:C1:43:8D:FE:DA:7E:8C:5F:9D:3B:6C:A1:57:0B:1F:47:36:F5:3C Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 0199FB45EEE9911055CC99EE6797B52FF4FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft Manifest number: 1710 Signing time: Sun 19 Oct 2025 07:01:28 +0000 Manifest this update: Sun 19 Oct 2025 07:01:28 +0000 Manifest next update: Mon 20 Oct 2025 07:01:28 +0000 Files and hashes: 1: 0iKiDzWWxSntVrrXCmhrJjOH6aw.roa (hash: av0mGR/5BFLwU8N3c2ijOxp9aJ3xR9cZmKrH0YmTzMA=) 2: 3IY4TmbnRLj5k1WANLdjXwTXYew.roa (hash: qjK8pA3ZvCwbUBgq8RlJOJI1zB3hdjk5IYpiJi0lf+Y=) 3: DLpQGPGOf_OYvmHwf8b2lOYyOj0.roa (hash: +g29EdBhXU2GeBhgFcLWLeXtQJs4K/ChJhjgEP7KbZM=) 4: HMYF6_4se6-zijlekaRHSzmW9Jk.roa (hash: eqBnyqMcI8I2Ft7undsWPPs8lpkvdgxjWJ94tuPWoXI=) 5: I2YZ3IMak0VxnQcMthTtwmErqSw.roa (hash: p04i2TuYtY5s50ZwH3Us8UiZXTbYrw5bHRhSeM6Ld8Q=) 6: Ji6nEv3LafDcVTBG7aO97iudROE.roa (hash: p6pmniXLM/oWpBTXfpZqsZaAulIp2wCdQ9Jqkw9LVqE=) 7: N4HwjJKSX0cNlaYcj3jS4bVMgXE.roa (hash: YIMBZJbGgThBGYMYz0OP8LMxO+xC4s7B+V+yscfXQzc=) 8: Nb6TNhx-uC8I1Ffn515OIvBOQXg.roa (hash: Rag11JXj0d5gz3k2DXVRyxAiLg6LoiF+avVU8LVp2b0=) 9: TDMrt1P1gCHwvoGmH1EuT7lA4wU.roa (hash: XiBPhE3TLU1BuZaHa1qGrBxFPh5DC9L1nSoO49zFSn0=) 10: UUrExGIUuYmvJrzFIhPpcC26aCI.roa (hash: 5oxwYt4KRXP54+h592JN5Pg7aFrlsSfI2urY+v1pF/M=) 11: WfQsimdISfx91Ef7cYATyQIN7d4.roa (hash: hL6J1XxC9eqb2hyvPaLfMPBZ2q4oqhwcTiAhioDAJQs=) 12: aC6HOiqUxYGN254KZuSqiaJtNPE.roa (hash: qS7pdtxXfriW+5XqG23et3Nu8v85hG8JxjCRqEZITSs=) 13: aClXX-iR5Bl7IeW2FlIWaN6iIYc.roa (hash: HtL2L3d9fDCOnFgD6PIPMw7B8WRPV0RJs8E04QzbYYE=) 14: iSC665C-UVVhnrmnNRLvj3Ij9kA.roa (hash: kHL9oQkOOW8rZCb10yvOczvSUcqVnHoZYo6f16erQPM=) 15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: 0mpMg6m1KhoO2+Nd8fUAdlW6umqKjc1IYu7kPvZWw/A=) 16: ntfUrbz7BUkei1F-tn7_XqXuheE.roa (hash: JAg5H8Q6Okry2xwWdwcj84ENgOyWvgrkVLihOHku7dw=) 17: vjtwmaRwxidwva3YZznIjLCoyQw.roa (hash: ZIJmnXOzxW3+TY4MpM3ZcpPqyL+GA1pmCMT952lDXKw=) 18: yGH6Oil6BAsrvRObF0sqosVRvc0.roa (hash: lPk6gmzjTVLAOfdoaQeb9dFBHg5tILEM3fFJMiKVdVY=) 19: znIOIdcg0Pfmr3lk9A2J6j6xSio.roa (hash: WJuHJIJ2rWApOKXb9tEkGYEbBNocsCE6EJQCs8d6EgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:45:ee:e9:91:10:55:cc:99:ee:67:97:b5:2f:f4:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Oct 19 07:01:28 2025 GMT Not After : Oct 20 07:01:28 2025 GMT Subject: CN=54c1438dfeda7e8c5f9d3b6ca1570b1f4736f53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:74:d1:56:23:59:4c:98:f2:38:b7:c0:d6:84: e0:0e:82:04:86:ea:6a:cb:68:a6:52:f6:43:be:b1: c4:35:20:a0:8c:c4:7a:cf:39:c6:c0:b0:b2:ea:fa: 66:4e:10:9e:6a:a4:0e:85:ec:3b:30:10:b5:e5:89: 0a:9f:2b:1c:01:88:69:b6:c4:0c:64:17:81:67:c0: 4d:80:07:67:d2:c9:75:cb:3c:ec:4e:33:7a:0f:df: 5a:85:aa:9a:7c:13:4f:02:d9:e1:88:b0:fb:a5:64: 39:be:b0:8f:10:8d:9e:91:c5:e0:f3:0e:28:d7:f0: 38:68:ee:d3:c7:f3:38:c2:da:81:1b:87:c9:e6:bc: 7e:f1:64:20:3d:36:2d:ff:be:b1:b9:ce:e3:b0:7a: 8f:66:27:08:d8:73:28:0e:50:37:51:67:bb:5e:77: 7d:fe:d1:25:9d:9e:93:d7:c3:b2:23:11:c3:09:37: 75:40:c8:97:87:ed:f6:e6:f3:33:5a:ea:7a:1b:b0: c9:dc:4f:94:ee:36:bd:35:ba:09:91:0b:26:fa:36: 18:b0:be:76:8a:e0:0d:21:33:cc:03:8d:0a:b7:cb: 98:8c:36:7e:57:23:9b:42:db:23:93:da:ef:41:79: 72:27:c7:80:2d:a1:57:9b:56:25:a7:73:d8:fe:41: a1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C1:43:8D:FE:DA:7E:8C:5F:9D:3B:6C:A1:57:0B:1F:47:36:F5:3C X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:09:a0:c8:15:ad:92:6d:f5:80:1e:ca:c0:fc:72:d3:8e:75: 77:a5:f5:8a:cd:c5:56:35:c2:12:3e:01:12:a2:0e:19:ec:22: c8:d4:c5:10:26:71:f4:89:08:f9:4e:9b:7f:2c:17:fd:39:e9: 90:26:69:14:ad:c9:29:42:d3:ae:b3:61:10:86:49:82:d9:ce: 7f:47:c8:41:41:5c:f7:9d:9d:a9:14:f6:37:6a:91:45:8e:f7: 21:a8:19:26:36:f5:b7:3a:67:1b:23:9f:5b:cb:07:4e:8f:17: f6:f8:9d:b4:eb:60:0e:d9:d5:55:32:31:c1:80:72:c5:d6:3a: 1d:85:fc:61:d0:a8:a7:f9:c9:9a:ac:b8:f7:1f:da:ba:f4:b3: b2:59:fb:da:81:0b:b4:84:eb:7f:cb:4f:27:f8:5c:4c:2f:51: 8c:4e:13:6c:03:96:62:9b:e3:ea:78:20:23:cf:ab:da:3b:f0: 72:86:b6:91:90:bc:7b:55:f9:92:31:d9:f2:25:2d:ac:f5:1a: ef:39:93:47:68:0e:eb:c6:78:fc:6f:3a:92:dc:40:90:5c:10: 66:3b:d3:68:8c:b3:5e:7a:ae:4e:87:6b:a7:bf:84:0c:8a:d4: 46:3b:c5:57:c0:67:04:24:f4:46:b3:7b:9d:02:88:1c:00:59: cd:24:0f:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7Re7pkRBVzJnuZ5e1L/T9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjUxMDE5MDcwMTI4WhcNMjUxMDIwMDcwMTI4WjAzMTEwLwYDVQQD Eyg1NGMxNDM4ZGZlZGE3ZThjNWY5ZDNiNmNhMTU3MGIxZjQ3MzZmNTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3TRViNZTJjyOLfA1oTgDoIEhupq y2imUvZDvrHENSCgjMR6zznGwLCy6vpmThCeaqQOhew7MBC15YkKnyscAYhptsQM ZBeBZ8BNgAdn0sl1yzzsTjN6D99ahaqafBNPAtnhiLD7pWQ5vrCPEI2ekcXg8w4o 1/A4aO7Tx/M4wtqBG4fJ5rx+8WQgPTYt/76xuc7jsHqPZicI2HMoDlA3UWe7Xnd9 /tElnZ6T18OyIxHDCTd1QMiXh+325vMzWup6G7DJ3E+U7ja9NboJkQsm+jYYsL52 iuANITPMA40Kt8uYjDZ+VyObQtsjk9rvQXlyJ8eALaFXm1Ylp3PY/kGhuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTBQ43+2n6MX507bKFXCx9HNvU8MB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAmgyBWt km31gB7KwPxy0451d6X1is3FVjXCEj4BEqIOGewiyNTFECZx9IkI+U6bfywX/Tnp kCZpFK3JKULTrrNhEIZJgtnOf0fIQUFc952dqRT2N2qRRY73IagZJjb1tzpnGyOf W8sHTo8X9vidtOtgDtnVVTIxwYByxdY6HYX8YdCop/nJmqy49x/auvSzsln72oEL tITrf8tPJ/hcTC9RjE4TbAOWYpvj6nggI8+r2jvwcoa2kZC8e1X5kjHZ8iUtrPUa 7zmTR2gO68Z4/G86ktxAkFwQZjvTaIyzXnquTodrp7+EDIrURjvFV8BnBCT0RrN7 nQKIHABZzSQPWQ== -----END CERTIFICATE-----Generated at Sun Oct 19 15:40:57 2025 by rpki-client