$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: bp8lmF6h/xnsbcYFCLFjmrhZ11mmNdkAzBCVFdpXViQ= Subject key identifier: DE:13:1B:36:BE:EC:01:44:5B:F5:B9:63:3B:0B:29:B8:A8:C5:65:03 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019728CB03035075C9DC87C5C8C8C5331408 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 11E8 Signing time: Sun 01 Jun 2025 00:01:22 +0000 Manifest this update: Sun 01 Jun 2025 00:01:22 +0000 Manifest next update: Mon 02 Jun 2025 00:01:22 +0000 Files and hashes: 1: 1-0RU5-UH22DOsQOFsaTxG_A9jv8.roa (hash: fqVefE6RlaYUPduGoWsI2YNic7R0MJ4+DTDKQ/JK4rc=) 2: 1-FdAmS5arjzjLAT6dSpDv5Zz5Yo.roa (hash: 5R9Ps8+XKEvJyKNmQySRtdXFtn/oxvTrhdjJdae+0Mc=) 3: 3zDvKjYX5qyyRWMCbEyCJb1whcI.roa (hash: UgMcPhJl2XRyl5iipWHUcO/ZAIUXrG8hPqC4bk4RBnI=) 4: 7lxVna_a0xg23I1zjghxq6R0RXo.roa (hash: tXqQs9pDj0utpLVKfAdmZ32ratdKDLdXwvY9QAYFHbQ=) 5: 8neCxhaAsYaJYU9S15NmrANTFco.roa (hash: 4Xxa8uO6V7yLYBbylJYWkJX0nrzIRa0JN8AeDSSd+ak=) 6: J9EfRVewePQYGlLe8kNseKQHxJk.roa (hash: 9VVRmDPU/cfVWvE65Fl3QvG+s92pe334/sHSfdMSMFU=) 7: KiMYrb7_k5A1XChjZVkaZe03-J4.roa (hash: 30qTixTrPBopXsIzoLW1hBKkrCQ5vS3MAYgu2zCZ2kU=) 8: KpqhmDN4PwGeQOyx1F2chMnA50g.roa (hash: DNgLDFTg3cwMMhN86OnAoSqZ+ZXAhdxntU2zCCbmG4E=) 9: LouV9CNyeDg8LwFm0WQg3Epf8sM.roa (hash: riVTvdLY1eaWT/u45Jf1fSb9f2SlRG/qD/bZHRckGb8=) 10: TZnMCWCDD7gEt2iDrVgun6OOwPs.roa (hash: SXv2dOCtyEflvEs/51vkBcKAPnsJErnwyCUiGSJl1Gs=) 11: UJXvhibxw_8TtOKnD--xEYn-Zww.roa (hash: OjpDb9p6TT8FBXJ45Y7m0jK/9WUgig2slzPx0C3W9Ns=) 12: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: GUZkSwBtsFvyXAhqKGCF6NgillcJESYvIp2b3yrlpRM=) 13: UqRTo9zfPVco3yYn5nw6sqcSIPY.roa (hash: /Dt51aOP8kus3h99adWYkONhAkJ+yJWSL0c8KmtagW0=) 14: VnKbkzMWAdNyZPCEQCwxH17zOTU.roa (hash: M1ZyqSf62mnrFwNeiW1+tjvlZxQ3ALH4X2u5wgU4NPE=) 15: Xmv46alzrB60JmjVYvB6COzgMjA.roa (hash: hA/zNdXVXqQjvFAUICGet5aUd1QUuqsgENdS1uEiVVY=) 16: ce8k7XCQyghvYHchvwALfCrVJwg.roa (hash: yQNx287pWR7HRDZfUEYypC3YO0EWbPD76GUoO2g6XzE=) 17: dK1BXPCUXOQRT5oOEUWvGxP9gQk.roa (hash: Ys5B95zExSqqxQNADZXH3Qy0NLQy7XLhKxBDY3n6xFE=) 18: dM23tRMrfeVMohMV97WFUTG8sLM.roa (hash: OTTmI9o/dreNgVKL2IIkBGf7NtGEVJVZuJN7RdVlcwY=) 19: g6O7wY63DyqDJHy27Gz3lHDxU5s.roa (hash: TrqIQ8Zbcjz8fNMvr1JTBGMIwXO8B6vc4Pif/pzevVU=) 20: j-nqL0xN6WbmkmqvTYJrSA6qGCQ.roa (hash: Qw7R/IgYTVpT3XgGSpkjT+8JID4fe8wv1odGKPFhq/M=) 21: jDWhRAsVH-ADWO3fPKwaSwkr-tc.roa (hash: Sroyv7+ckh5jogjuhwtX2u83187uWC92R69FscJrG3U=) 22: jdQZdakevZhVtKrglfN2RFnzQcI.roa (hash: YWgCWrFOGK/KKipBlp5lhfep+s/kMG6GomEIbVictxA=) 23: l7wxx1zLyo_Vp6Dh5EdYTFcM2nU.roa (hash: CxolEvFopBeQFh0sVq8DG+TsCtldic0vb/t6anZwnLM=) 24: mI-_CctqZI0K2tk6hRHxlecB4_0.roa (hash: L5SL5l2FWo7G2VvQUQ1QwP0hC9pB98xkcansR+H3uHU=) 25: ry5QBM2Eu4QVa3IbvVInNcRx-ao.roa (hash: mo2V1hYGi7uA3mmFMMTCShk3qAC1sKE08+9dYnb3F5w=) 26: yz5Oj1IRN47m7-hfoNRLKR-QsFQ.roa (hash: AJUnhFM68923GYadc3urgh5yRRol8KdV+S2IVDVlxow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Jun 2025 22:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:28:cb:03:03:50:75:c9:dc:87:c5:c8:c8:c5:33:14:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jun 1 00:01:22 2025 GMT Not After : Jun 2 00:01:22 2025 GMT Subject: CN=de131b36beec01445bf5b9633b0b29b8a8c56503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:4c:1b:78:11:29:65:56:7a:6a:8d:96:6f: 75:12:cc:8f:ca:22:83:b5:24:90:ae:e1:29:36:4f: 0c:58:88:bc:0e:ae:b2:f2:4a:ac:a8:1c:20:e9:0d: 52:c7:9f:35:d4:70:94:b6:d9:7d:26:ab:cb:96:a8: 54:0c:c7:5b:07:93:11:6a:49:9e:4a:09:7a:b7:ef: 3b:fd:09:c6:30:8f:1d:af:c9:ef:39:e1:71:41:9d: 2b:1a:16:e4:a6:20:e9:85:08:e5:f6:c8:8b:f1:72: 59:ab:ee:f6:5c:a6:a7:29:dc:a1:7f:dd:f9:8d:f0: a6:2e:ce:51:4c:9e:e4:07:38:1b:4e:26:b7:65:56: 31:00:d0:9c:ff:b1:66:c4:25:b4:e9:2d:64:a6:e8: 99:47:b1:b6:d3:41:6a:ae:bc:e5:54:de:03:d8:09: a9:61:11:67:26:8f:1d:a6:54:9f:8f:50:17:b5:f1: 33:60:f2:47:79:d0:13:ce:8b:c7:7a:f2:a3:bf:60: 0c:06:ee:ea:48:7a:92:5f:49:c8:34:3b:f9:e3:fc: ff:82:bd:44:0e:fb:cf:37:3f:64:7c:b1:d6:77:34: 43:8f:a0:7c:07:8c:77:db:8a:09:ee:03:9b:c1:8b: 02:1d:08:22:59:da:da:5c:96:31:60:de:eb:70:33: c8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:13:1B:36:BE:EC:01:44:5B:F5:B9:63:3B:0B:29:B8:A8:C5:65:03 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:14:9f:61:f9:e4:6b:d7:34:44:ab:1f:bd:7f:1f:98:4f:56: 64:20:3c:03:7c:26:ac:f9:73:a9:41:cf:9d:92:ec:b0:10:d0: 7a:7e:73:e7:eb:9a:98:55:32:b6:54:a8:16:35:44:fa:f7:eb: 7c:64:58:14:4a:fb:a4:ba:ef:fb:67:9a:f1:6b:99:ae:1f:8c: 50:7c:68:30:a2:59:fd:2c:69:00:ef:d5:71:3c:c4:9d:23:5d: c2:8b:04:cd:81:51:5f:aa:a1:a1:24:cf:24:17:e2:53:2c:05: 4e:d6:c3:87:e7:73:d0:97:e6:5d:0c:98:12:3b:37:68:4f:33: bf:e0:95:df:a9:cf:bf:1d:e3:e8:2e:e6:4d:53:f9:5f:d9:98: 4f:31:e4:81:d6:13:04:68:39:72:e3:07:31:7b:00:64:8d:20: 58:94:be:0c:c8:d7:85:13:c7:2a:d9:5c:97:d8:81:dd:10:85: c9:1d:65:4a:de:bc:ba:4b:db:ae:21:93:1b:78:7e:21:bf:be: 4c:97:d0:c4:ba:58:72:04:c6:26:a9:03:dc:02:56:92:ad:3a: 3e:63:de:71:6e:41:91:55:fc:cb:a5:d5:4e:ef:1f:71:b8:a2: c9:bc:1a:2c:6d:06:28:c5:c5:6f:50:be:28:09:27:50:e3:07: 24:1f:92:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZcoywMDUHXJ3IfFyMjFMxQIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjUwNjAxMDAwMTIyWhcNMjUwNjAyMDAwMTIyWjAzMTEwLwYDVQQD EyhkZTEzMWIzNmJlZWMwMTQ0NWJmNWI5NjMzYjBiMjliOGE4YzU2NTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIBMG3gRKWVWemqNlm91EsyPyiKD tSSQruEpNk8MWIi8Dq6y8kqsqBwg6Q1Sx5811HCUttl9JqvLlqhUDMdbB5MRakme Sgl6t+87/QnGMI8dr8nvOeFxQZ0rGhbkpiDphQjl9siL8XJZq+72XKanKdyhf935 jfCmLs5RTJ7kBzgbTia3ZVYxANCc/7FmxCW06S1kpuiZR7G200FqrrzlVN4D2Amp YRFnJo8dplSfj1AXtfEzYPJHedATzovHevKjv2AMBu7qSHqSX0nINDv54/z/gr1E DvvPNz9kfLHWdzRDj6B8B4x324oJ7gObwYsCHQgiWdraXJYxYN7rcDPIUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4TGza+7AFEW/W5YzsLKbioxWUDMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRSfYfnk a9c0RKsfvX8fmE9WZCA8A3wmrPlzqUHPnZLssBDQen5z5+uamFUytlSoFjVE+vfr fGRYFEr7pLrv+2ea8WuZrh+MUHxoMKJZ/SxpAO/VcTzEnSNdwosEzYFRX6qhoSTP JBfiUywFTtbDh+dz0JfmXQyYEjs3aE8zv+CV36nPvx3j6C7mTVP5X9mYTzHkgdYT BGg5cuMHMXsAZI0gWJS+DMjXhRPHKtlcl9iB3RCFyR1lSt68ukvbriGTG3h+Ib++ TJfQxLpYcgTGJqkD3AJWkq06PmPecW5BkVX8y6XVTu8fcbiiybwaLG0GKMXFb1C+ KAknUOMHJB+S7A== -----END CERTIFICATE-----Generated at Sun Jun 1 03:28:45 2025 by rpki-client