$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: Fso7V+1MbaRaRzZqIj5u+6VOV+iuXc+kiz7/gQtuTw8= Subject key identifier: 52:94:BD:23:F6:0C:3A:9D:52:C7:07:74:6F:17:04:C5:EC:9E:1A:B1 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 01A156660C2B708581EA8CDD90CF175D1A62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 1768 Signing time: Mon 19 Oct 2026 23:01:30 +0000 Manifest this update: Mon 19 Oct 2026 23:01:30 +0000 Manifest next update: Tue 20 Oct 2026 23:01:30 +0000 Files and hashes: 1: 4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa (hash: 1+Dj9DjkqqJBKSFukY3ZLUFpE2kBLC6OJYlV3ZzlDHE=) 2: 51RV5bLUK5swpjii_ClMr0Z0LK4.roa (hash: eaEFcr3Fzwqgey9xkzHTc526Wfs17vHkTkKlWZDr6V4=) 3: 7Gfdl5k6T4Nt-xZrQUmYT2Wb0Q4.roa (hash: praaG5V4IjeUDRh2H9CpWs4rx+iMgs/zDPv4j89TbtU=) 4: 7meu7s1H44zdKfP25MFBcQbtGHI.roa (hash: WvFf3T5R9dDcoqBxFhAiq7tVRoIpj2LekmR2mNGzL1E=) 5: 9sk7o3-J1zppXpr20oFx7pS_U0c.roa (hash: pBXnQfzjUWzJ2ZBcFMKN6xODjJ4zYHByfhzLBkNvrdQ=) 6: BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa (hash: Q2q3HL2ikSVxapYF8tEqUbGc2dsp+tUqOuJvpkTfgSw=) 7: EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa (hash: ZEu9nOF1kbSjWSpE4NcC/VjSw7SsIRZ4h2G/ZSkfcXA=) 8: GWUpBhLv0PHDsIV3w3GIbM6-96s.roa (hash: qr4GrREKG7A3hhdS3Agv52m1MsgGN/WZ20ATzaaaiuk=) 9: HxGP4RyCdmbtsC_X7rEOMPaadGs.roa (hash: E1pPUcXW5mPkpSrQhelqafY4OsK2tjQxSmKWda1vbOE=) 10: MZUJ_YtPrARksG8JiNeh9h5bxjU.roa (hash: gULv6+Niu5hf2ZuzY/CCoAvGjaEsELBZ6B3Mi+f8gPo=) 11: NGwmCl15WNFt68CpU9SHnOdGS9A.roa (hash: tiNwaFIRigOg4n0EpHs5X3viBEMCSji5foeonip0c3s=) 12: NNB2avyCldcIMCL0f0MRWjsmPGg.roa (hash: DEfqSuvzloP85jcJKk7ZgGBFiOXRfF0MqFeO19BqKn0=) 13: NlSigp4Hky5t6wwHqEnase1qw0Y.roa (hash: F1Xe0FsAW9TwgGR3cAoO3hKVliyxVwRgoRq/WaNInJ8=) 14: T2lrM411-iTyURcEIl9g5I2ZFqE.roa (hash: df+E+9U3eV1BGvNj1HOrDOvwIzitKklyPlPfziC2WNQ=) 15: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: WX4bV7rcGesKjJiYw/WeyRtE6+R2YTK3LLTfKPiX6Tk=) 16: ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa (hash: U8GSnZZoap+4gf9xVbyRxlPJkgOVmU3uHH07WIciOyM=) 17: b5_COOMkuwt2UFmsw8RZDUdu2bU.roa (hash: SCz+3vlllNscZmO4r92p0VfL8FTVpL4+e6YHq26D4Zs=) 18: bKOziSP_XttR6KXVx43_hKvo5UM.roa (hash: 4QTv2mKHqsuXG6X8b61ridnXdKspO+S1hN2ZP7mulZY=) 19: fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa (hash: JpN5XVDZY1IahuGnYijyyeq5BW4QE/s6DEijCb+GpS0=) 20: j4qiTlmyE2UTELOd_dWPpgYgT7g.roa (hash: tL7gSkajUFv82zTjqwfcJA15HYbXtYeZkwl/AW0YDBU=) 21: nrPLRJPmPFUNnRKVYlt5xynJqbQ.roa (hash: I11fElTQunbRvyiT3+4v3tCdsssjfQCu5kwVzj1TuOs=) 22: oEZkCYyrtppA-RjBJVsTUj5sauY.roa (hash: 4YoPoKLuzSsKYi0sRFdBU8PzUS5iiBV8DQgLhMWCkuQ=) 23: oX7WM59W_xUjFvJMYCvxSZBbZbQ.roa (hash: jW8MZzhaUpzcebtjq5jIt3HMF7HjJl7jamf35OnVL9g=) 24: rDKlCwNnYGjM_ZvHSZVUJGxQO1w.roa (hash: Vp8deycYhJy+ifBe8xw8Uwn6twN444P3UYrlVIuB/Bg=) 25: waLcrNH7uHQklmGVHpfmCMZcL3o.roa (hash: G6P6bFBr2kZHKhtwrt4aC293o8D2o+Zw99eQaBr2bOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 17:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:56:66:0c:2b:70:85:81:ea:8c:dd:90:cf:17:5d:1a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Oct 19 23:01:30 2026 GMT Not After : Oct 20 23:01:30 2026 GMT Subject: CN=5294bd23f60c3a9d52c707746f1704c5ec9e1ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ad:a8:0f:8d:08:a2:03:b1:fa:c9:c8:b5:72: 9c:06:24:a9:65:c6:e5:3a:56:f8:6f:af:52:18:93: 4e:1b:b9:e4:49:21:9b:54:5f:05:d4:1e:d8:41:46: c9:a0:6c:f6:89:49:87:1a:70:72:40:78:23:42:4a: 3e:4a:64:99:d3:b7:6f:5d:1b:cb:44:4b:df:e9:3b: c5:1e:88:31:82:8f:e8:23:17:a4:e9:a0:9e:71:60: bd:69:e4:25:30:ca:ed:eb:a5:26:37:80:c7:75:b9: a7:ee:23:ab:2f:b3:23:43:07:bf:9d:c5:4d:1a:aa: 17:e5:bf:6f:64:9d:b2:05:29:07:cd:fe:5a:4c:f2: 80:3e:0a:25:7e:d0:84:d8:b4:9b:f4:4b:53:8d:1a: c0:4a:60:eb:f7:11:18:d4:f3:7b:e5:c9:bb:64:54: df:12:bc:51:14:5c:0e:50:7c:a1:08:66:03:7c:ef: 98:75:ad:ad:f8:b6:92:d8:7f:c9:cb:2c:6e:69:04: 93:31:5e:9d:55:f8:a7:a5:f8:b9:3b:2b:10:90:cb: ff:18:21:4c:0b:76:af:e1:46:bd:da:e3:13:9a:d2: a6:65:20:fe:7c:fc:97:ba:16:af:10:60:65:e1:2b: b9:7d:6c:1b:e5:23:9f:8f:20:31:94:77:7f:41:6b: 97:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:94:BD:23:F6:0C:3A:9D:52:C7:07:74:6F:17:04:C5:EC:9E:1A:B1 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a1:06:bd:37:5e:10:93:e6:29:ab:4b:d3:73:2c:39:1d:f4: 1b:2d:bb:9a:ce:47:67:24:a8:d9:b5:ee:c1:02:c1:1f:6a:d7: 19:1a:93:e8:fd:8d:07:a6:68:78:90:15:1b:6f:c2:36:e8:d4: d9:2f:bd:75:db:23:50:47:8b:09:b0:2c:2d:38:d4:2b:74:c4: e0:a9:c0:10:60:5d:fa:68:14:96:55:45:94:82:94:7c:24:ab: 2a:85:89:4d:26:27:84:01:11:36:b1:28:76:aa:ea:18:87:f9: ec:a4:6a:d0:95:f3:0f:e0:52:a7:15:cb:d1:cb:66:aa:1c:54: cc:bc:28:53:30:71:e8:90:0b:5b:be:ef:f3:d3:3f:b8:58:0e: e5:76:b9:5e:cb:8e:e7:ee:3a:5e:29:ce:7c:c2:f9:75:2d:e8: 9d:fb:c8:99:bd:2c:df:76:c5:8f:01:2b:b4:6f:40:ac:82:d7: 2d:f6:cb:3d:84:05:28:26:2f:8b:7e:65:75:95:6c:6c:e2:2c: dd:07:10:53:b7:8d:6f:aa:3a:9d:5a:7f:c5:f9:ff:93:47:82: ca:9e:d5:4f:1e:e2:32:2f:c8:54:9f:d1:82:8e:f2:c9:85:2c: 8d:45:fd:74:84:7f:23:c4:a9:fa:e3:64:cf:3b:12:e9:fa:dc: 45:5c:72:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFWZgwrcIWB6ozdkM8XXRpiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYxMDE5MjMwMTMwWhcNMjYxMDIwMjMwMTMwWjAzMTEwLwYDVQQD Eyg1Mjk0YmQyM2Y2MGMzYTlkNTJjNzA3NzQ2ZjE3MDRjNWVjOWUxYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv62oD40IogOx+snItXKcBiSpZcbl Olb4b69SGJNOG7nkSSGbVF8F1B7YQUbJoGz2iUmHGnByQHgjQko+SmSZ07dvXRvL REvf6TvFHogxgo/oIxek6aCecWC9aeQlMMrt66UmN4DHdbmn7iOrL7MjQwe/ncVN GqoX5b9vZJ2yBSkHzf5aTPKAPgolftCE2LSb9EtTjRrASmDr9xEY1PN75cm7ZFTf ErxRFFwOUHyhCGYDfO+Yda2t+LaS2H/JyyxuaQSTMV6dVfinpfi5OysQkMv/GCFM C3av4Ua92uMTmtKmZSD+fPyXuhavEGBl4Su5fWwb5SOfjyAxlHd/QWuX3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKUvSP2DDqdUscHdG8XBMXsnhqxMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaEGvTde EJPmKatL03MsOR30Gy27ms5HZySo2bXuwQLBH2rXGRqT6P2NB6ZoeJAVG2/CNujU 2S+9ddsjUEeLCbAsLTjUK3TE4KnAEGBd+mgUllVFlIKUfCSrKoWJTSYnhAERNrEo dqrqGIf57KRq0JXzD+BSpxXL0ctmqhxUzLwoUzBx6JALW77v89M/uFgO5Xa5XsuO 5+46XinOfML5dS3onfvImb0s33bFjwErtG9ArILXLfbLPYQFKCYvi35ldZVsbOIs 3QcQU7eNb6o6nVp/xfn/k0eCyp7VTx7iMi/IVJ/Rgo7yyYUsjUX9dIR/I8Sp+uNk zzsS6frcRVxyJA== -----END CERTIFICATE-----Generated at Tue Oct 20 04:21:28 2026 by rpki-client