$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: gtw/sSG1eReouWAACbF5G6+Zdgt8TlNDaMrdJvG5V8M= Subject key identifier: FC:EC:0E:19:D5:93:0D:17:A4:57:98:12:DF:7D:0B:CC:A3:20:5E:96 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019DA67938E16B80EEE19C37F54F0C4F9FC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 156B Signing time: Sun 19 Apr 2026 16:00:55 +0000 Manifest this update: Sun 19 Apr 2026 16:00:55 +0000 Manifest next update: Mon 20 Apr 2026 16:00:55 +0000 Files and hashes: 1: 4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa (hash: 1+Dj9DjkqqJBKSFukY3ZLUFpE2kBLC6OJYlV3ZzlDHE=) 2: 51RV5bLUK5swpjii_ClMr0Z0LK4.roa (hash: eaEFcr3Fzwqgey9xkzHTc526Wfs17vHkTkKlWZDr6V4=) 3: 6TspkPEtNeMIOxgYCbpvq18PMC0.roa (hash: 8bo4csWweD7RMiWr3h9S7/8r7y82pLqLqFjVLFXUIaQ=) 4: 7Gfdl5k6T4Nt-xZrQUmYT2Wb0Q4.roa (hash: praaG5V4IjeUDRh2H9CpWs4rx+iMgs/zDPv4j89TbtU=) 5: 7meu7s1H44zdKfP25MFBcQbtGHI.roa (hash: WvFf3T5R9dDcoqBxFhAiq7tVRoIpj2LekmR2mNGzL1E=) 6: 9sk7o3-J1zppXpr20oFx7pS_U0c.roa (hash: pBXnQfzjUWzJ2ZBcFMKN6xODjJ4zYHByfhzLBkNvrdQ=) 7: BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa (hash: Q2q3HL2ikSVxapYF8tEqUbGc2dsp+tUqOuJvpkTfgSw=) 8: DpYS7lRrillfu9K51nCIniTqNmY.roa (hash: UkQwWYpXy7K/OwHNGaKai/nAfoWeLWXYqtRRe4F8mQE=) 9: EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa (hash: ZEu9nOF1kbSjWSpE4NcC/VjSw7SsIRZ4h2G/ZSkfcXA=) 10: HxGP4RyCdmbtsC_X7rEOMPaadGs.roa (hash: E1pPUcXW5mPkpSrQhelqafY4OsK2tjQxSmKWda1vbOE=) 11: MZUJ_YtPrARksG8JiNeh9h5bxjU.roa (hash: gULv6+Niu5hf2ZuzY/CCoAvGjaEsELBZ6B3Mi+f8gPo=) 12: NNB2avyCldcIMCL0f0MRWjsmPGg.roa (hash: DEfqSuvzloP85jcJKk7ZgGBFiOXRfF0MqFeO19BqKn0=) 13: OvQCPbU7xaexN6KNG98gTxBlPZ8.roa (hash: B+7vMRgtRKWIYiyObWJnR9TPAurOqhLva4J/rVDJQSQ=) 14: QLLq3_7q5uUt7ipkpQL0iFrZcwE.roa (hash: ix8UNlXwntzVUKkNrdwMiCBgS77GVr+qjV/KIZeeGps=) 15: RSlrMSXsYQqD5_X3qdeusHBjTV8.roa (hash: rm68bm8MwPNoLfEzVKTjK5KhGKZaNdAMKVt15UbeVB8=) 16: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: TOemVmqg/N7G/DOho9MXvg1o1dy6wd6ppxzQ/LFvrFA=) 17: WXitulZE6XZAWLN9EH7AUrKlJFA.roa (hash: WUGgSZ27pj+bCnK3yWkRpPdHgH/Lrga3crrfT495xGI=) 18: ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa (hash: U8GSnZZoap+4gf9xVbyRxlPJkgOVmU3uHH07WIciOyM=) 19: bP0DL2QAJVKBhisPOEKSCrb5P7I.roa (hash: SSq+LObEvTskeEChP41dHP/d10Dn6Nt47PhXiubra4Q=) 20: bToR6umJYInit4YmCjsW758Knfc.roa (hash: 37BGec+qdTp+UnRV0AER+V8DA3MB50nkwTf82xMXRJw=) 21: fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa (hash: JpN5XVDZY1IahuGnYijyyeq5BW4QE/s6DEijCb+GpS0=) 22: fbSoKsXWu3vMu37siMiY-wAiEWk.roa (hash: o2jpBV54JiENtAI5H5hS+86ge/vbtsQ6m03B1UpGa2w=) 23: j4qiTlmyE2UTELOd_dWPpgYgT7g.roa (hash: tL7gSkajUFv82zTjqwfcJA15HYbXtYeZkwl/AW0YDBU=) 24: nrPLRJPmPFUNnRKVYlt5xynJqbQ.roa (hash: I11fElTQunbRvyiT3+4v3tCdsssjfQCu5kwVzj1TuOs=) 25: waLcrNH7uHQklmGVHpfmCMZcL3o.roa (hash: G6P6bFBr2kZHKhtwrt4aC293o8D2o+Zw99eQaBr2bOo=) 26: wsRgR45KaT49poTA_W1Ls5MLbfs.roa (hash: ViM4U6kU9YALqeWbdS/cNkJpeVULZz246+oAFPxJ4Yc=) 27: zRZZ6UwPjjxw58VaB1rpkI5mlKo.roa (hash: n+9o/e8utiREiQm1EccaQwJdw3Xtg72tou+ySQuFAbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 16:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a6:79:38:e1:6b:80:ee:e1:9c:37:f5:4f:0c:4f:9f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Apr 19 16:00:55 2026 GMT Not After : Apr 20 16:00:55 2026 GMT Subject: CN=fcec0e19d5930d17a4579812df7d0bcca3205e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:06:0d:1c:ba:03:a7:0e:72:52:b6:3d:13:b8: 45:c6:6c:45:c3:22:44:bc:4c:94:f1:0a:b9:b9:e5: 98:fc:25:89:38:31:da:48:42:75:af:f0:bb:cd:1e: d5:8d:da:bf:16:2e:e3:55:0e:69:bb:7b:b7:b1:9f: 7b:5e:0e:78:e1:0b:2b:b4:0f:c6:69:b2:94:73:7b: 92:a7:1d:8b:82:18:e6:13:97:61:9c:a8:79:22:63: b5:8f:13:c4:76:53:55:86:eb:6d:8a:b2:ac:81:94: e1:74:4b:b6:e2:d1:a4:f5:87:c0:79:b2:23:41:03: 43:78:c0:97:08:f4:1f:f9:a9:45:fa:93:fb:a3:f5: 12:58:5a:fe:71:21:a1:e7:20:f2:5e:30:f2:d9:74: db:0f:72:0b:1e:d3:9c:df:15:f2:3f:44:61:ff:38: 80:61:a3:1d:85:94:3a:59:48:4d:6a:01:8d:0f:6b: 0d:77:7c:90:fe:cd:67:8a:f3:bc:a7:13:2b:a2:38: 4c:75:89:bd:81:18:57:97:94:0d:c3:9e:99:da:cd: c2:a5:3b:0d:43:6c:96:f3:a3:d0:37:9e:dd:54:80: bf:ad:98:77:10:0e:dc:59:05:a8:31:b8:7c:ad:60: 57:02:87:b2:2e:d9:cf:d3:fc:3e:16:07:9f:1d:ad: c3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EC:0E:19:D5:93:0D:17:A4:57:98:12:DF:7D:0B:CC:A3:20:5E:96 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:bc:08:25:27:c2:55:52:c9:43:fc:d9:c4:bf:12:5f:cd:89: eb:ba:ce:52:fd:a8:a4:6e:a4:23:ec:81:e0:06:ec:10:eb:80: 1b:89:9e:00:fc:b9:ef:dc:3b:fc:3e:e7:df:f1:7f:50:94:69: 13:a6:13:51:1f:77:ec:2a:97:fd:63:43:ef:98:71:42:d3:84: 79:c0:80:2e:b2:78:90:d9:35:28:f4:a3:ce:ae:b0:e0:b9:5e: a2:75:8b:38:7d:fb:eb:c3:07:01:fe:d6:c1:34:1f:1d:95:1e: 8f:88:1d:41:9f:80:19:5f:ac:16:73:f4:c7:95:cd:79:fd:10: ba:f7:d5:e0:5c:43:dc:b7:ef:99:f4:91:48:21:e2:58:d0:ce: e6:2c:53:e2:84:44:cd:76:ec:d8:55:f5:58:7d:36:0f:5b:eb: 71:30:b3:5c:38:98:7e:ff:d2:38:81:9b:3b:ea:33:0d:90:be: 94:90:0d:e5:80:d1:f9:32:ad:b2:49:74:c4:af:6d:09:c7:e6: 74:4d:ce:bd:4b:fe:24:e2:28:eb:82:8c:b2:a3:fd:82:ec:fe: ec:c2:31:fb:02:ab:e2:a2:68:c6:e5:01:87:ce:e9:7f:d3:2c: 88:af:84:53:76:06:09:03:c9:97:95:26:10:69:a3:ce:da:eb: 2e:04:89:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2meTjha4Du4Zw39U8MT5/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwNDE5MTYwMDU1WhcNMjYwNDIwMTYwMDU1WjAzMTEwLwYDVQQD EyhmY2VjMGUxOWQ1OTMwZDE3YTQ1Nzk4MTJkZjdkMGJjY2EzMjA1ZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQYNHLoDpw5yUrY9E7hFxmxFwyJE vEyU8Qq5ueWY/CWJODHaSEJ1r/C7zR7Vjdq/Fi7jVQ5pu3u3sZ97Xg544QsrtA/G abKUc3uSpx2LghjmE5dhnKh5ImO1jxPEdlNVhuttirKsgZThdEu24tGk9YfAebIj QQNDeMCXCPQf+alF+pP7o/USWFr+cSGh5yDyXjDy2XTbD3ILHtOc3xXyP0Rh/ziA YaMdhZQ6WUhNagGND2sNd3yQ/s1nivO8pxMrojhMdYm9gRhXl5QNw56Z2s3CpTsN Q2yW86PQN57dVIC/rZh3EA7cWQWoMbh8rWBXAoeyLtnP0/w+FgefHa3DuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzsDhnVkw0XpFeYEt99C8yjIF6WMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7wIJSfC VVLJQ/zZxL8SX82J67rOUv2opG6kI+yB4AbsEOuAG4meAPy579w7/D7n3/F/UJRp E6YTUR937CqX/WND75hxQtOEecCALrJ4kNk1KPSjzq6w4LleonWLOH3768MHAf7W wTQfHZUej4gdQZ+AGV+sFnP0x5XNef0QuvfV4FxD3LfvmfSRSCHiWNDO5ixT4oRE zXbs2FX1WH02D1vrcTCzXDiYfv/SOIGbO+ozDZC+lJAN5YDR+TKtskl0xK9tCcfm dE3OvUv+JOIo64KMsqP9guz+7MIx+wKr4qJoxuUBh87pf9MsiK+EU3YGCQPJl5Um EGmjztrrLgSJDQ== -----END CERTIFICATE-----Generated at Mon Apr 20 03:28:48 2026 by rpki-client