$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: BAKLscciqsxToLhz4Y6w/NSoPvb8zoXDg1suFy4OmA8= Subject key identifier: B3:6E:0F:7B:46:3E:4D:6F:12:82:6B:57:CF:3B:F1:4D:9A:48:70:76 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 0197A49A53F84B163DADC2955678CF96AF44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 122C Signing time: Wed 25 Jun 2025 01:01:06 +0000 Manifest this update: Wed 25 Jun 2025 01:01:06 +0000 Manifest next update: Thu 26 Jun 2025 01:01:06 +0000 Files and hashes: 1: 1-0RU5-UH22DOsQOFsaTxG_A9jv8.roa (hash: fqVefE6RlaYUPduGoWsI2YNic7R0MJ4+DTDKQ/JK4rc=) 2: 1-FdAmS5arjzjLAT6dSpDv5Zz5Yo.roa (hash: 5R9Ps8+XKEvJyKNmQySRtdXFtn/oxvTrhdjJdae+0Mc=) 3: 7lxVna_a0xg23I1zjghxq6R0RXo.roa (hash: tXqQs9pDj0utpLVKfAdmZ32ratdKDLdXwvY9QAYFHbQ=) 4: 8neCxhaAsYaJYU9S15NmrANTFco.roa (hash: 4Xxa8uO6V7yLYBbylJYWkJX0nrzIRa0JN8AeDSSd+ak=) 5: BIV00WGdCsdMPZily9CzqPCb__g.roa (hash: 2Po5O5AX+uWN/KKrFaZyBDhCcTGjg4dn50nifm52n4M=) 6: J9EfRVewePQYGlLe8kNseKQHxJk.roa (hash: 9VVRmDPU/cfVWvE65Fl3QvG+s92pe334/sHSfdMSMFU=) 7: KiMYrb7_k5A1XChjZVkaZe03-J4.roa (hash: 30qTixTrPBopXsIzoLW1hBKkrCQ5vS3MAYgu2zCZ2kU=) 8: LouV9CNyeDg8LwFm0WQg3Epf8sM.roa (hash: riVTvdLY1eaWT/u45Jf1fSb9f2SlRG/qD/bZHRckGb8=) 9: TZnMCWCDD7gEt2iDrVgun6OOwPs.roa (hash: SXv2dOCtyEflvEs/51vkBcKAPnsJErnwyCUiGSJl1Gs=) 10: UJXvhibxw_8TtOKnD--xEYn-Zww.roa (hash: OjpDb9p6TT8FBXJ45Y7m0jK/9WUgig2slzPx0C3W9Ns=) 11: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: 2tUixncO5NDjy4hBy4qjcvbraYpTEQGRhiLK18DKcDA=) 12: UqRTo9zfPVco3yYn5nw6sqcSIPY.roa (hash: /Dt51aOP8kus3h99adWYkONhAkJ+yJWSL0c8KmtagW0=) 13: VnKbkzMWAdNyZPCEQCwxH17zOTU.roa (hash: M1ZyqSf62mnrFwNeiW1+tjvlZxQ3ALH4X2u5wgU4NPE=) 14: Xmv46alzrB60JmjVYvB6COzgMjA.roa (hash: hA/zNdXVXqQjvFAUICGet5aUd1QUuqsgENdS1uEiVVY=) 15: ce8k7XCQyghvYHchvwALfCrVJwg.roa (hash: yQNx287pWR7HRDZfUEYypC3YO0EWbPD76GUoO2g6XzE=) 16: dK1BXPCUXOQRT5oOEUWvGxP9gQk.roa (hash: Ys5B95zExSqqxQNADZXH3Qy0NLQy7XLhKxBDY3n6xFE=) 17: dM23tRMrfeVMohMV97WFUTG8sLM.roa (hash: OTTmI9o/dreNgVKL2IIkBGf7NtGEVJVZuJN7RdVlcwY=) 18: g6O7wY63DyqDJHy27Gz3lHDxU5s.roa (hash: TrqIQ8Zbcjz8fNMvr1JTBGMIwXO8B6vc4Pif/pzevVU=) 19: jDWhRAsVH-ADWO3fPKwaSwkr-tc.roa (hash: Sroyv7+ckh5jogjuhwtX2u83187uWC92R69FscJrG3U=) 20: jdQZdakevZhVtKrglfN2RFnzQcI.roa (hash: YWgCWrFOGK/KKipBlp5lhfep+s/kMG6GomEIbVictxA=) 21: l7wxx1zLyo_Vp6Dh5EdYTFcM2nU.roa (hash: CxolEvFopBeQFh0sVq8DG+TsCtldic0vb/t6anZwnLM=) 22: mI-_CctqZI0K2tk6hRHxlecB4_0.roa (hash: L5SL5l2FWo7G2VvQUQ1QwP0hC9pB98xkcansR+H3uHU=) 23: ry5QBM2Eu4QVa3IbvVInNcRx-ao.roa (hash: mo2V1hYGi7uA3mmFMMTCShk3qAC1sKE08+9dYnb3F5w=) 24: s0b5Fwdu-zyh8O2GAm7qQ0wY_w0.roa (hash: Eks6tlyajlng306QOp1CtkVeuU4kzzJoAMHFpAAbNDE=) 25: w2mTXklqmB3KRUtzG9fxKD6ZDi4.roa (hash: DcW9Z2MnonH9MmcvaudchOkSRXJ7jGtdyGxCDchTggE=) 26: yz5Oj1IRN47m7-hfoNRLKR-QsFQ.roa (hash: AJUnhFM68923GYadc3urgh5yRRol8KdV+S2IVDVlxow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Jun 2025 00:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:a4:9a:53:f8:4b:16:3d:ad:c2:95:56:78:cf:96:af:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jun 25 01:01:06 2025 GMT Not After : Jun 26 01:01:06 2025 GMT Subject: CN=b36e0f7b463e4d6f12826b57cf3bf14d9a487076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:38:9c:4c:89:52:df:68:4a:f2:8a:f3:c1:a9: 77:c3:81:e6:18:ad:63:a6:7f:8e:41:01:30:fc:9a: ac:ca:dd:d3:01:4c:59:d9:48:57:42:02:54:fa:78: 9d:17:4e:cf:6f:fe:a9:af:21:76:ef:cc:65:bc:9b: bd:43:2c:ba:03:01:e4:ba:f6:8a:0a:0c:88:f6:29: c7:e1:ed:f2:89:c8:f2:62:33:f7:10:c4:db:8c:2b: 4e:1b:01:6e:9c:ff:c7:f5:ec:c8:17:c7:6b:d7:71: b1:74:5d:49:65:ad:d5:28:d0:df:5b:ec:58:75:5f: b5:15:42:00:12:5d:af:72:a6:5f:e4:51:50:cf:8c: ec:1a:c7:aa:56:f5:ca:e4:d9:b5:1a:b1:9f:06:46: f8:8a:b0:03:8f:3e:ea:f8:73:99:bb:44:6f:c7:94: 2f:fb:8a:91:ad:18:5d:15:38:fc:0f:ff:f1:40:67: 9e:19:c5:4c:65:53:2b:f0:2e:d1:e3:64:cc:f3:1b: 0e:eb:3a:b4:d5:98:97:2d:df:97:42:46:96:f0:c2: 62:f1:75:d5:43:4a:e7:73:44:09:63:84:d8:36:c9: 05:26:c6:b5:29:fd:e2:59:47:5b:53:76:7d:f1:43: f5:7b:7d:f9:e0:c6:27:fc:a6:59:bc:15:72:ef:8a: 5b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6E:0F:7B:46:3E:4D:6F:12:82:6B:57:CF:3B:F1:4D:9A:48:70:76 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:60:67:71:c4:a1:51:74:51:0f:04:80:16:4a:de:be:00:e4: d8:c7:4b:44:f8:cb:3d:90:2a:04:54:a8:a7:d4:5a:6e:e1:1b: 53:73:29:37:7c:de:0e:25:d0:54:62:59:77:99:38:95:ff:84: 0e:ec:0d:dc:cf:1b:1e:ef:4e:1b:ec:85:30:6c:5d:60:76:e8: dd:19:07:c4:25:1c:a2:ec:be:af:34:41:2b:00:83:f0:00:18: 82:e3:a3:f0:6c:e3:51:a3:52:fd:81:64:ee:7b:bb:0a:81:e0: 15:35:50:3c:77:d7:89:84:41:6e:20:ed:1d:79:e9:0a:d9:78: 32:c5:1c:e3:94:94:9c:3a:34:ed:09:18:71:08:c8:b9:36:b6: 67:5b:a1:33:a5:5b:c9:4b:7c:af:e4:c3:c8:af:58:19:29:85: e1:92:53:2b:f2:08:a9:e7:66:b9:90:f6:ef:d6:9e:0b:04:86: 86:b1:26:25:32:54:e5:d7:c2:c3:6b:c0:19:d7:62:78:be:5b: 0a:b4:8c:19:0a:b7:d9:59:1a:54:fa:27:e9:f1:20:70:1f:da: a9:62:20:52:d9:0f:68:85:40:52:25:36:3e:f1:ad:3e:95:bb: 12:03:01:50:eb:89:f2:24:e4:2f:68:d9:56:93:91:cd:29:4c: 30:36:53:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZekmlP4SxY9rcKVVnjPlq9EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjUwNjI1MDEwMTA2WhcNMjUwNjI2MDEwMTA2WjAzMTEwLwYDVQQD EyhiMzZlMGY3YjQ2M2U0ZDZmMTI4MjZiNTdjZjNiZjE0ZDlhNDg3MDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjicTIlS32hK8orzwal3w4HmGK1j pn+OQQEw/Jqsyt3TAUxZ2UhXQgJU+nidF07Pb/6pryF278xlvJu9Qyy6AwHkuvaK CgyI9inH4e3yicjyYjP3EMTbjCtOGwFunP/H9ezIF8dr13GxdF1JZa3VKNDfW+xY dV+1FUIAEl2vcqZf5FFQz4zsGseqVvXK5Nm1GrGfBkb4irADjz7q+HOZu0Rvx5Qv +4qRrRhdFTj8D//xQGeeGcVMZVMr8C7R42TM8xsO6zq01ZiXLd+XQkaW8MJi8XXV Q0rnc0QJY4TYNskFJsa1Kf3iWUdbU3Z98UP1e3354MYn/KZZvBVy74pbBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNuD3tGPk1vEoJrV8878U2aSHB2MB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWBnccSh UXRRDwSAFkrevgDk2MdLRPjLPZAqBFSop9RabuEbU3MpN3zeDiXQVGJZd5k4lf+E DuwN3M8bHu9OG+yFMGxdYHbo3RkHxCUcouy+rzRBKwCD8AAYguOj8GzjUaNS/YFk 7nu7CoHgFTVQPHfXiYRBbiDtHXnpCtl4MsUc45SUnDo07QkYcQjIuTa2Z1uhM6Vb yUt8r+TDyK9YGSmF4ZJTK/IIqedmuZD279aeCwSGhrEmJTJU5dfCw2vAGddieL5b CrSMGQq32VkaVPon6fEgcB/aqWIgUtkPaIVAUiU2PvGtPpW7EgMBUOuJ8iTkL2jZ VpORzSlMMDZTZA== -----END CERTIFICATE-----Generated at Wed Jun 25 08:29:12 2025 by rpki-client