$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: XnFd6urXUi6LZZlhY/renPpLJbys6Brfq1GtuRP40t0= Subject key identifier: 96:E8:83:F6:78:04:FF:3F:E0:39:32:15:A5:25:3E:47:A7:90:AB:9F Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019F8342EB3E98EBAE973853D33486508876 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 166C Signing time: Tue 21 Jul 2026 06:00:28 +0000 Manifest this update: Tue 21 Jul 2026 06:00:28 +0000 Manifest next update: Wed 22 Jul 2026 06:00:28 +0000 Files and hashes: 1: 4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa (hash: 1+Dj9DjkqqJBKSFukY3ZLUFpE2kBLC6OJYlV3ZzlDHE=) 2: 51RV5bLUK5swpjii_ClMr0Z0LK4.roa (hash: eaEFcr3Fzwqgey9xkzHTc526Wfs17vHkTkKlWZDr6V4=) 3: 7Gfdl5k6T4Nt-xZrQUmYT2Wb0Q4.roa (hash: praaG5V4IjeUDRh2H9CpWs4rx+iMgs/zDPv4j89TbtU=) 4: 7meu7s1H44zdKfP25MFBcQbtGHI.roa (hash: WvFf3T5R9dDcoqBxFhAiq7tVRoIpj2LekmR2mNGzL1E=) 5: 7u4RVlV52XWyTyDw_qznuD0UgXs.roa (hash: vYm6Nz0cS2O84RBnN+siuod691AUb0y3q4ys6CicPZI=) 6: 94dyBOLbRDpnRcB1TDzaqi0P_7E.roa (hash: 4anumJNiQjV3dDe2I41pvRC721HOGi/G29AUYm2u5e4=) 7: 9sk7o3-J1zppXpr20oFx7pS_U0c.roa (hash: pBXnQfzjUWzJ2ZBcFMKN6xODjJ4zYHByfhzLBkNvrdQ=) 8: Ac4tNrQugLPaGq4xz6HWInHCm6M.roa (hash: siaEigQ+ejfWwE/knI+4/nv5Jzojs+pIiSVBiWGlM3E=) 9: BiM5LxW5qvRjEp2keJNzm9u7VPc.roa (hash: +2yiPexL5iLD0vdODbDPQRtRM0VrKm5eDi0szvUR44s=) 10: BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa (hash: Q2q3HL2ikSVxapYF8tEqUbGc2dsp+tUqOuJvpkTfgSw=) 11: EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa (hash: ZEu9nOF1kbSjWSpE4NcC/VjSw7SsIRZ4h2G/ZSkfcXA=) 12: GWUpBhLv0PHDsIV3w3GIbM6-96s.roa (hash: qr4GrREKG7A3hhdS3Agv52m1MsgGN/WZ20ATzaaaiuk=) 13: HxGP4RyCdmbtsC_X7rEOMPaadGs.roa (hash: E1pPUcXW5mPkpSrQhelqafY4OsK2tjQxSmKWda1vbOE=) 14: MZUJ_YtPrARksG8JiNeh9h5bxjU.roa (hash: gULv6+Niu5hf2ZuzY/CCoAvGjaEsELBZ6B3Mi+f8gPo=) 15: NNB2avyCldcIMCL0f0MRWjsmPGg.roa (hash: DEfqSuvzloP85jcJKk7ZgGBFiOXRfF0MqFeO19BqKn0=) 16: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: CAnOkRSpKyqvA6yZOJrABOULLkDXop1Wy8iZJtbZ6Pc=) 17: XPnc98u3CUN5obEHzxurP6rkBVw.roa (hash: 4m3ABUbVfJN36M772cp8y6/T3l68sMul8PuOrR8yh5I=) 18: ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa (hash: U8GSnZZoap+4gf9xVbyRxlPJkgOVmU3uHH07WIciOyM=) 19: dDV9cw2CeKzJ-llu__WQtBWBaBY.roa (hash: 0lA5AjVyBh2dMfH3N8bdN7kVkHk/r4peFpEI1RzOKJs=) 20: fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa (hash: JpN5XVDZY1IahuGnYijyyeq5BW4QE/s6DEijCb+GpS0=) 21: j4qiTlmyE2UTELOd_dWPpgYgT7g.roa (hash: tL7gSkajUFv82zTjqwfcJA15HYbXtYeZkwl/AW0YDBU=) 22: nrPLRJPmPFUNnRKVYlt5xynJqbQ.roa (hash: I11fElTQunbRvyiT3+4v3tCdsssjfQCu5kwVzj1TuOs=) 23: ocvs0xJgvnYOlkU7g_PsYJ8jzkI.roa (hash: NDkizho/VVHKiL/ocU+qMBQwzE5gvlQ/xJmsHF69Dig=) 24: ql7rOmZ_btr3d4A37f2Df8JDM0E.roa (hash: /SRzz/yYDf39iuJ35shny0PsFk2f1QMbJVc74yAIIqU=) 25: w2EbvbMlk1vQVS1L_gh7f8JcQII.roa (hash: 0r3piY21wjYG6/bd5paELk5vAN9xgo5tcM9Ea+Ly8ns=) 26: waLcrNH7uHQklmGVHpfmCMZcL3o.roa (hash: G6P6bFBr2kZHKhtwrt4aC293o8D2o+Zw99eQaBr2bOo=) 27: zRZZ6UwPjjxw58VaB1rpkI5mlKo.roa (hash: n+9o/e8utiREiQm1EccaQwJdw3Xtg72tou+ySQuFAbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 06:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:83:42:eb:3e:98:eb:ae:97:38:53:d3:34:86:50:88:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jul 21 06:00:28 2026 GMT Not After : Jul 22 06:00:28 2026 GMT Subject: CN=96e883f67804ff3fe0393215a5253e47a790ab9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:80:d5:d1:23:66:4c:2a:91:23:a6:50:b3: d2:15:d9:0d:8c:b0:03:27:79:d4:bd:0f:a3:91:8e: 2d:d3:35:ce:91:1e:7c:28:f8:ea:26:35:61:db:f7: 21:3d:5e:f1:f9:14:3c:2f:5a:96:65:6a:9a:68:ff: b4:7b:fe:cb:77:64:ee:34:9f:73:b3:d4:e6:8e:1a: 78:72:66:db:0f:fe:5f:92:20:67:09:7b:00:71:ab: 50:72:5b:e7:c7:85:6e:11:34:4c:0b:32:26:be:a3: 03:ff:31:9e:90:37:91:80:27:01:47:17:c7:1f:be: 96:e2:e9:4f:74:5c:92:80:df:90:df:74:98:99:ad: f3:b5:8e:51:ff:81:46:f7:41:70:4f:fd:48:fc:f8: e3:4e:64:8d:0c:5c:c2:4b:d8:c4:83:fd:c1:73:62: 4b:d4:2e:ae:d1:e3:e2:b9:6c:2e:38:f4:9f:f6:63: b5:d7:a2:bf:b5:ef:b3:19:1f:8f:ca:ba:10:14:6d: b0:0a:a8:04:ec:c2:7b:bb:32:cf:51:39:18:79:18: 3b:e8:c5:0d:01:e3:d7:f0:74:18:bc:d8:92:6c:69: e3:af:12:a2:b1:63:f4:9f:42:e6:59:4e:f6:cc:be: 63:57:a1:9c:1a:9a:97:31:82:f1:b9:47:a8:fc:79: 82:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E8:83:F6:78:04:FF:3F:E0:39:32:15:A5:25:3E:47:A7:90:AB:9F X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:dc:d9:e4:33:0e:26:f1:b6:4b:0c:76:23:91:cb:1a:3f:ba: ff:ab:28:0e:b4:eb:9f:12:8e:0a:20:d8:68:58:13:9a:70:5e: f2:b3:a6:e0:51:57:43:24:24:40:58:02:3f:53:4b:bd:95:79: 49:37:06:07:04:44:7e:9a:cb:11:b2:cc:b6:45:d6:d3:47:b2: 53:06:e9:6a:9f:7c:73:ec:83:10:10:c3:d7:7e:5d:03:a1:bb: d7:e5:b2:1c:dc:55:40:f5:7b:e6:c6:60:95:f9:ca:b6:12:f4: ce:91:04:ad:1d:2c:fb:5d:10:cd:27:3c:d4:9b:c8:e1:a5:7e: 86:11:ce:bf:25:f6:d4:7f:37:00:b1:85:8b:b1:c6:5a:3d:a1: f0:a0:e7:8d:c6:e0:c8:2d:fb:12:08:6c:4b:62:dd:72:91:cc: f1:48:cc:50:a8:f0:1e:8e:d8:fa:e1:e5:e4:7a:ab:f9:b1:d8: 23:2c:3f:64:0e:57:e4:ae:e8:83:d6:f6:45:31:49:12:65:c5: d0:25:f3:26:e1:47:e3:7f:25:ba:d8:0f:50:02:99:b1:86:5b: 78:91:18:f3:c6:e8:92:53:0e:04:d3:78:0e:7f:d7:9e:5f:51: 73:05:95:12:47:2d:21:c4:58:09:60:bd:21:de:e2:14:dc:2f: 17:46:f0:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+DQus+mOuulzhT0zSGUIh2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwNzIxMDYwMDI4WhcNMjYwNzIyMDYwMDI4WjAzMTEwLwYDVQQD Eyg5NmU4ODNmNjc4MDRmZjNmZTAzOTMyMTVhNTI1M2U0N2E3OTBhYjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGuA1dEjZkwqkSOmULPSFdkNjLAD J3nUvQ+jkY4t0zXOkR58KPjqJjVh2/chPV7x+RQ8L1qWZWqaaP+0e/7Ld2TuNJ9z s9Tmjhp4cmbbD/5fkiBnCXsAcatQclvnx4VuETRMCzImvqMD/zGekDeRgCcBRxfH H76W4ulPdFySgN+Q33SYma3ztY5R/4FG90FwT/1I/PjjTmSNDFzCS9jEg/3Bc2JL 1C6u0ePiuWwuOPSf9mO116K/te+zGR+PyroQFG2wCqgE7MJ7uzLPUTkYeRg76MUN AePX8HQYvNiSbGnjrxKisWP0n0LmWU72zL5jV6GcGpqXMYLxuUeo/HmCjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbog/Z4BP8/4DkyFaUlPkenkKufMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9zZ5DMO JvG2Swx2I5HLGj+6/6soDrTrnxKOCiDYaFgTmnBe8rOm4FFXQyQkQFgCP1NLvZV5 STcGBwREfprLEbLMtkXW00eyUwbpap98c+yDEBDD135dA6G71+WyHNxVQPV75sZg lfnKthL0zpEErR0s+10QzSc81JvI4aV+hhHOvyX21H83ALGFi7HGWj2h8KDnjcbg yC37EghsS2LdcpHM8UjMUKjwHo7Y+uHl5Hqr+bHYIyw/ZA5X5K7og9b2RTFJEmXF 0CXzJuFH438lutgPUAKZsYZbeJEY88boklMOBNN4Dn/Xnl9RcwWVEkctIcRYCWC9 Id7iFNwvF0bwYg== -----END CERTIFICATE-----Generated at Tue Jul 21 09:55:29 2026 by rpki-client