$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: SZnOty6bPpnmdDmljNAVUaLoy/9HJZaSeInYBnUt1PE= Subject key identifier: D6:91:FC:AF:72:EC:25:11:EE:96:5A:7B:0F:FD:1B:FE:1B:EB:BC:45 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019A00A3854A9765D2863846A8E5211BFE56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 1377 Signing time: Mon 20 Oct 2025 08:01:47 +0000 Manifest this update: Mon 20 Oct 2025 08:01:47 +0000 Manifest next update: Tue 21 Oct 2025 08:01:47 +0000 Files and hashes: 1: 1-0RU5-UH22DOsQOFsaTxG_A9jv8.roa (hash: fqVefE6RlaYUPduGoWsI2YNic7R0MJ4+DTDKQ/JK4rc=) 2: 1z54-R2eueuH54PTbLjKQAuYZZc.roa (hash: na8VleR3QcCgQLwEPa245cMk4lobIy28u3ve1B3bHSc=) 3: 7lxVna_a0xg23I1zjghxq6R0RXo.roa (hash: tXqQs9pDj0utpLVKfAdmZ32ratdKDLdXwvY9QAYFHbQ=) 4: BIV00WGdCsdMPZily9CzqPCb__g.roa (hash: 2Po5O5AX+uWN/KKrFaZyBDhCcTGjg4dn50nifm52n4M=) 5: CJRfADFE4-QkJg5dtABKS-ENn_0.roa (hash: KKiunGLLWijfm7wRv3Jxw+wzFAgL59bXip4yBbIw5wM=) 6: IM58WB6oRVSvth3T7GBmopm97NY.roa (hash: INk1QBtFJkQWxAphCXnUNmrjrSk0YRYITXcjMt0RgK4=) 7: J9EfRVewePQYGlLe8kNseKQHxJk.roa (hash: 9VVRmDPU/cfVWvE65Fl3QvG+s92pe334/sHSfdMSMFU=) 8: KiMYrb7_k5A1XChjZVkaZe03-J4.roa (hash: 30qTixTrPBopXsIzoLW1hBKkrCQ5vS3MAYgu2zCZ2kU=) 9: LO3Dmh76o3yUP4OdafCd70xCYL4.roa (hash: 2kNEWUMSLr9EsTWZSZq6yn8Fzkq0/lSxUPtBhfFtAkQ=) 10: LouV9CNyeDg8LwFm0WQg3Epf8sM.roa (hash: riVTvdLY1eaWT/u45Jf1fSb9f2SlRG/qD/bZHRckGb8=) 11: N8DREp9r8mOMTx82dCznYOBmi0U.roa (hash: U1YNu1TATTo2GJ7jthgUIu3jxffhrfvRRPtT3JsQMh8=) 12: TZnMCWCDD7gEt2iDrVgun6OOwPs.roa (hash: SXv2dOCtyEflvEs/51vkBcKAPnsJErnwyCUiGSJl1Gs=) 13: UJXvhibxw_8TtOKnD--xEYn-Zww.roa (hash: OjpDb9p6TT8FBXJ45Y7m0jK/9WUgig2slzPx0C3W9Ns=) 14: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: KH4iMiV2bNfH6QOl5gj51IsP8+xsL5nBL4o1yWrR5F4=) 15: UqRTo9zfPVco3yYn5nw6sqcSIPY.roa (hash: /Dt51aOP8kus3h99adWYkONhAkJ+yJWSL0c8KmtagW0=) 16: VnKbkzMWAdNyZPCEQCwxH17zOTU.roa (hash: M1ZyqSf62mnrFwNeiW1+tjvlZxQ3ALH4X2u5wgU4NPE=) 17: Xmv46alzrB60JmjVYvB6COzgMjA.roa (hash: hA/zNdXVXqQjvFAUICGet5aUd1QUuqsgENdS1uEiVVY=) 18: arl_yEtpP4DDXrmQ6KVg-jQ2qHc.roa (hash: 5M1R6GNVKpG+HzSwMNPMjsqeNhJUUjm69hOu68qG2wo=) 19: cU_yNL1eM_HdNE8wpI0gj0opY-Q.roa (hash: MYgNl6Bn9+R1XeYd2aWGDf5EYcLica0KZQKzsNv9cno=) 20: dK1BXPCUXOQRT5oOEUWvGxP9gQk.roa (hash: Ys5B95zExSqqxQNADZXH3Qy0NLQy7XLhKxBDY3n6xFE=) 21: jdQZdakevZhVtKrglfN2RFnzQcI.roa (hash: YWgCWrFOGK/KKipBlp5lhfep+s/kMG6GomEIbVictxA=) 22: s0b5Fwdu-zyh8O2GAm7qQ0wY_w0.roa (hash: Eks6tlyajlng306QOp1CtkVeuU4kzzJoAMHFpAAbNDE=) 23: w2mTXklqmB3KRUtzG9fxKD6ZDi4.roa (hash: DcW9Z2MnonH9MmcvaudchOkSRXJ7jGtdyGxCDchTggE=) 24: yz5Oj1IRN47m7-hfoNRLKR-QsFQ.roa (hash: AJUnhFM68923GYadc3urgh5yRRol8KdV+S2IVDVlxow=) 25: zsqlSKujJDEpPxbXLnbR63-l1vg.roa (hash: PnSwjAwNQ6gRKWOEYcqHvgvuayLLY4sW0dSTLof3lrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 08:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:00:a3:85:4a:97:65:d2:86:38:46:a8:e5:21:1b:fe:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Oct 20 08:01:47 2025 GMT Not After : Oct 21 08:01:47 2025 GMT Subject: CN=d691fcaf72ec2511ee965a7b0ffd1bfe1bebbc45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:62:08:e5:cf:66:e5:f4:82:5e:e9:6f:29: b9:8d:97:08:8c:ba:f2:6c:9a:f6:2d:b5:aa:c0:ab: e6:16:06:53:3c:89:87:25:29:75:b4:b8:49:fc:f4: 5c:b8:73:3e:fa:cd:3e:f7:24:dd:9d:68:48:4f:dd: 4b:8b:ad:89:c6:8e:38:03:fd:59:46:5b:96:d7:c5: 5d:aa:f6:8d:68:78:75:27:a5:82:6e:bc:0c:35:d2: a0:85:80:3a:b1:a2:b3:17:b5:b6:eb:ad:ab:f6:40: 95:10:06:56:0c:76:03:f7:a2:a0:d6:42:ab:cb:1f: aa:c1:da:3b:9b:ca:42:65:61:d1:b7:a0:39:24:89: 58:52:c9:83:bf:37:c3:62:c0:d3:db:14:1e:02:e5: 2d:43:97:9c:28:6c:c9:88:f3:9d:5e:f1:53:07:a4: 63:8a:4d:13:f4:eb:1f:f3:e6:2f:f1:20:5c:0c:d9: 90:42:39:0a:3c:3a:d6:5d:ad:a3:52:9b:0e:1a:dc: 3d:f4:a3:27:24:d5:64:fe:0e:28:46:53:41:7c:6e: c5:29:a2:86:15:06:00:99:ca:65:f6:09:33:f7:59: 40:83:9a:c3:20:b2:64:b5:9d:9d:3e:aa:69:67:6e: 9f:53:3b:aa:a9:63:52:a7:99:2f:30:03:b1:02:f3: f8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:91:FC:AF:72:EC:25:11:EE:96:5A:7B:0F:FD:1B:FE:1B:EB:BC:45 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:26:a6:e3:94:cd:e2:85:e2:94:25:6b:00:04:05:f4:8e:eb: e4:20:72:e4:13:1c:34:31:4a:86:94:aa:f3:48:ab:74:d2:db: 5b:2a:50:a2:ea:1d:40:61:2e:24:86:c5:37:04:83:76:e5:ac: 79:fa:d1:6c:7b:45:95:bc:c9:43:91:e2:69:5b:e8:54:10:53: d2:70:87:65:e2:7e:aa:66:db:1f:b9:40:48:f6:c2:11:62:b8: f7:c4:34:03:37:b1:05:20:bd:b0:cb:ee:b8:01:fb:b9:77:ba: 9a:bd:dd:e4:8d:67:86:aa:2f:6c:91:ba:ee:75:6f:49:fe:c5: 97:7d:51:19:2f:ac:9f:ba:65:7c:05:3d:66:14:ec:b7:ad:ff: 51:f1:20:9f:68:d4:34:8e:50:c8:08:5e:82:69:9b:57:5f:8e: d1:5d:2f:60:e7:4e:91:a0:6b:c1:8e:37:d4:a9:ee:70:57:23: c5:14:b2:28:fb:c5:5f:ad:dd:32:28:f2:2a:75:01:e2:6b:c0: 84:28:e7:01:99:c5:1b:8b:24:a1:6c:99:3e:23:cd:50:23:3c: 16:b4:d3:88:8d:27:e2:8c:8b:e7:20:df:60:70:ad:6f:65:ba: 6f:7a:57:9a:fb:da:5f:dd:41:28:18:a8:f7:01:47:d6:c6:00: d9:df:95:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoAo4VKl2XShjhGqOUhG/5WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjUxMDIwMDgwMTQ3WhcNMjUxMDIxMDgwMTQ3WjAzMTEwLwYDVQQD EyhkNjkxZmNhZjcyZWMyNTExZWU5NjVhN2IwZmZkMWJmZTFiZWJiYzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmFiCOXPZuX0gl7pbym5jZcIjLry bJr2LbWqwKvmFgZTPImHJSl1tLhJ/PRcuHM++s0+9yTdnWhIT91Li62Jxo44A/1Z RluW18VdqvaNaHh1J6WCbrwMNdKghYA6saKzF7W2662r9kCVEAZWDHYD96Kg1kKr yx+qwdo7m8pCZWHRt6A5JIlYUsmDvzfDYsDT2xQeAuUtQ5ecKGzJiPOdXvFTB6Rj ik0T9Osf8+Yv8SBcDNmQQjkKPDrWXa2jUpsOGtw99KMnJNVk/g4oRlNBfG7FKaKG FQYAmcpl9gkz91lAg5rDILJktZ2dPqppZ26fUzuqqWNSp5kvMAOxAvP4zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaR/K9y7CUR7pZaew/9G/4b67xFMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiam45TN 4oXilCVrAAQF9I7r5CBy5BMcNDFKhpSq80irdNLbWypQouodQGEuJIbFNwSDduWs efrRbHtFlbzJQ5HiaVvoVBBT0nCHZeJ+qmbbH7lASPbCEWK498Q0AzexBSC9sMvu uAH7uXe6mr3d5I1nhqovbJG67nVvSf7Fl31RGS+sn7plfAU9ZhTst63/UfEgn2jU NI5QyAhegmmbV1+O0V0vYOdOkaBrwY431KnucFcjxRSyKPvFX63dMijyKnUB4mvA hCjnAZnFG4skoWyZPiPNUCM8FrTTiI0n4oyL5yDfYHCtb2W6b3pXmvvaX91BKBio 9wFH1sYA2d+VHw== -----END CERTIFICATE-----Generated at Mon Oct 20 16:59:45 2025 by rpki-client