$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: OZyhoQi5PDIiiwJJaPhBv96UyKw98dnWjPJQ9E1Vzuc= Subject key identifier: 5F:E4:9A:D7:83:F6:29:AB:79:57:12:AE:24:67:63:2C:8C:EF:EB:59 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 0199165159EC5DCB7B364411BA652D5D24AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 12F7 Signing time: Thu 04 Sep 2025 20:00:54 +0000 Manifest this update: Thu 04 Sep 2025 20:00:54 +0000 Manifest next update: Fri 05 Sep 2025 20:00:54 +0000 Files and hashes: 1: 1-0RU5-UH22DOsQOFsaTxG_A9jv8.roa (hash: fqVefE6RlaYUPduGoWsI2YNic7R0MJ4+DTDKQ/JK4rc=) 2: 7lxVna_a0xg23I1zjghxq6R0RXo.roa (hash: tXqQs9pDj0utpLVKfAdmZ32ratdKDLdXwvY9QAYFHbQ=) 3: A3yjPvaD5qsyKW8DbOaa4404ACI.roa (hash: 9SMEUKist5LgjTBKapFbU6CN82Hi6SuDK2xmvcyP0C8=) 4: BIV00WGdCsdMPZily9CzqPCb__g.roa (hash: 2Po5O5AX+uWN/KKrFaZyBDhCcTGjg4dn50nifm52n4M=) 5: FCpJthrUdi78kwsbjnvmSeWPH68.roa (hash: RnhfDetX6Kie5PV96cMxUBtQPboqAvBdtd2gSPSaUYc=) 6: IM58WB6oRVSvth3T7GBmopm97NY.roa (hash: INk1QBtFJkQWxAphCXnUNmrjrSk0YRYITXcjMt0RgK4=) 7: J9EfRVewePQYGlLe8kNseKQHxJk.roa (hash: 9VVRmDPU/cfVWvE65Fl3QvG+s92pe334/sHSfdMSMFU=) 8: KiMYrb7_k5A1XChjZVkaZe03-J4.roa (hash: 30qTixTrPBopXsIzoLW1hBKkrCQ5vS3MAYgu2zCZ2kU=) 9: LO3Dmh76o3yUP4OdafCd70xCYL4.roa (hash: 2kNEWUMSLr9EsTWZSZq6yn8Fzkq0/lSxUPtBhfFtAkQ=) 10: LouV9CNyeDg8LwFm0WQg3Epf8sM.roa (hash: riVTvdLY1eaWT/u45Jf1fSb9f2SlRG/qD/bZHRckGb8=) 11: TZnMCWCDD7gEt2iDrVgun6OOwPs.roa (hash: SXv2dOCtyEflvEs/51vkBcKAPnsJErnwyCUiGSJl1Gs=) 12: UJXvhibxw_8TtOKnD--xEYn-Zww.roa (hash: OjpDb9p6TT8FBXJ45Y7m0jK/9WUgig2slzPx0C3W9Ns=) 13: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: xSLJkx7FdGIBCgg3Gl+MWxzVMIJzTM7t3Cb4HfM7Y44=) 14: UqRTo9zfPVco3yYn5nw6sqcSIPY.roa (hash: /Dt51aOP8kus3h99adWYkONhAkJ+yJWSL0c8KmtagW0=) 15: VnKbkzMWAdNyZPCEQCwxH17zOTU.roa (hash: M1ZyqSf62mnrFwNeiW1+tjvlZxQ3ALH4X2u5wgU4NPE=) 16: WKY8IJ34Pbfhdm-TZgLrK7Wwk2E.roa (hash: m4nX6fR1ByJGmNzYI3M0epwulBV88QVdzsVjHWx5K0w=) 17: Xmv46alzrB60JmjVYvB6COzgMjA.roa (hash: hA/zNdXVXqQjvFAUICGet5aUd1QUuqsgENdS1uEiVVY=) 18: arl_yEtpP4DDXrmQ6KVg-jQ2qHc.roa (hash: 5M1R6GNVKpG+HzSwMNPMjsqeNhJUUjm69hOu68qG2wo=) 19: dK1BXPCUXOQRT5oOEUWvGxP9gQk.roa (hash: Ys5B95zExSqqxQNADZXH3Qy0NLQy7XLhKxBDY3n6xFE=) 20: jdQZdakevZhVtKrglfN2RFnzQcI.roa (hash: YWgCWrFOGK/KKipBlp5lhfep+s/kMG6GomEIbVictxA=) 21: mI-_CctqZI0K2tk6hRHxlecB4_0.roa (hash: L5SL5l2FWo7G2VvQUQ1QwP0hC9pB98xkcansR+H3uHU=) 22: ry5QBM2Eu4QVa3IbvVInNcRx-ao.roa (hash: mo2V1hYGi7uA3mmFMMTCShk3qAC1sKE08+9dYnb3F5w=) 23: s0b5Fwdu-zyh8O2GAm7qQ0wY_w0.roa (hash: Eks6tlyajlng306QOp1CtkVeuU4kzzJoAMHFpAAbNDE=) 24: w2mTXklqmB3KRUtzG9fxKD6ZDi4.roa (hash: DcW9Z2MnonH9MmcvaudchOkSRXJ7jGtdyGxCDchTggE=) 25: yz5Oj1IRN47m7-hfoNRLKR-QsFQ.roa (hash: AJUnhFM68923GYadc3urgh5yRRol8KdV+S2IVDVlxow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Sep 2025 19:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:16:51:59:ec:5d:cb:7b:36:44:11:ba:65:2d:5d:24:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Sep 4 20:00:54 2025 GMT Not After : Sep 5 20:00:54 2025 GMT Subject: CN=5fe49ad783f629ab795712ae2467632c8cefeb59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f2:7c:e7:d0:27:49:b4:80:28:89:8d:dc:c1: 33:b4:3f:74:2a:fb:26:9d:1e:ae:54:93:b5:42:36: 0d:22:0b:20:d3:09:0e:84:cf:ca:bc:0b:e4:5d:84: d4:a6:90:5a:77:a0:68:82:05:11:41:b7:6e:b4:40: f1:ce:5f:4d:37:b1:e1:50:1d:7e:4e:ad:c7:1c:33: 39:37:a0:98:6f:59:eb:cc:00:21:3b:57:2b:58:b4: c8:e0:3a:a3:28:9e:5f:5d:8f:0f:e1:e7:71:72:3d: 53:b7:e6:d0:2f:f7:44:dc:ef:a2:b0:83:e1:87:94: 90:b9:91:71:9e:34:e3:70:d9:40:af:1b:cb:60:86: 89:2c:48:a5:de:8d:45:ee:ee:c8:59:11:34:1f:2c: 3e:49:37:4a:76:a9:f1:c0:55:c8:61:76:73:b2:ab: 56:57:11:0f:8f:49:fc:c9:96:ac:4a:f6:99:0f:ac: 6a:8f:a4:ae:de:f6:4a:c9:ad:ee:5e:91:65:d0:44: 22:3e:d4:91:49:44:ae:bf:8f:27:0c:0a:f7:b7:a8: 73:c1:cc:44:0c:17:29:40:96:b6:84:cd:c6:ee:6d: d0:7a:50:ff:57:5c:94:b6:a4:88:39:a0:2e:be:8a: 15:7b:8f:c4:4c:8a:ec:02:83:f6:c1:04:92:af:87: 7a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E4:9A:D7:83:F6:29:AB:79:57:12:AE:24:67:63:2C:8C:EF:EB:59 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:af:c2:10:37:ae:47:11:87:8b:cb:dc:eb:45:3c:70:37:6f: 8c:6d:94:35:f6:d3:b7:89:2c:4b:e8:59:67:da:7b:bf:03:a7: 34:cc:55:94:61:a7:22:8f:ef:a8:1c:e1:4d:22:26:31:ce:62: 40:3e:c6:18:92:cf:d3:54:cb:64:a9:f8:39:aa:0e:38:21:8c: 46:24:e4:11:12:b2:60:70:ad:75:75:80:1d:f0:33:f6:d7:99: a0:f3:c7:4b:ad:ad:d6:bb:02:8b:35:04:5d:3a:93:85:0d:92: 4a:16:75:b6:e2:ea:61:c2:50:9d:1e:48:0b:e7:37:15:75:46: 30:e8:a3:35:ea:1d:78:eb:d6:c5:fc:a5:5b:f6:bb:81:32:c9: 54:61:f3:37:4c:63:c9:5b:48:5a:7c:f2:60:ad:7e:f9:40:7e: e5:94:fc:3d:f2:4b:60:a3:65:d6:35:8f:a9:34:87:9a:ff:44: 60:ff:03:51:5c:99:38:60:ab:dd:e2:46:a0:1f:2f:2e:2d:b2: 9a:f3:ee:a7:51:4f:cf:3b:f5:4b:96:48:5a:18:a6:e5:2c:dc: 5b:5b:5f:7a:8f:1e:eb:23:73:78:ca:14:da:1a:af:5b:b9:37: 97:e4:94:a6:96:44:6a:93:53:64:08:9c:95:97:9d:ec:30:42: 4b:b6:8a:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkWUVnsXct7NkQRumUtXSStMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjUwOTA0MjAwMDU0WhcNMjUwOTA1MjAwMDU0WjAzMTEwLwYDVQQD Eyg1ZmU0OWFkNzgzZjYyOWFiNzk1NzEyYWUyNDY3NjMyYzhjZWZlYjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfJ859AnSbSAKImN3MEztD90Kvsm nR6uVJO1QjYNIgsg0wkOhM/KvAvkXYTUppBad6BoggURQbdutEDxzl9NN7HhUB1+ Tq3HHDM5N6CYb1nrzAAhO1crWLTI4DqjKJ5fXY8P4edxcj1Tt+bQL/dE3O+isIPh h5SQuZFxnjTjcNlArxvLYIaJLEil3o1F7u7IWRE0Hyw+STdKdqnxwFXIYXZzsqtW VxEPj0n8yZasSvaZD6xqj6Su3vZKya3uXpFl0EQiPtSRSUSuv48nDAr3t6hzwcxE DBcpQJa2hM3G7m3QelD/V1yUtqSIOaAuvooVe4/ETIrsAoP2wQSSr4d6XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/kmteD9imreVcSriRnYyyM7+tZMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPq/CEDeu RxGHi8vc60U8cDdvjG2UNfbTt4ksS+hZZ9p7vwOnNMxVlGGnIo/vqBzhTSImMc5i QD7GGJLP01TLZKn4OaoOOCGMRiTkERKyYHCtdXWAHfAz9teZoPPHS62t1rsCizUE XTqThQ2SShZ1tuLqYcJQnR5IC+c3FXVGMOijNeodeOvWxfylW/a7gTLJVGHzN0xj yVtIWnzyYK1++UB+5ZT8PfJLYKNl1jWPqTSHmv9EYP8DUVyZOGCr3eJGoB8vLi2y mvPup1FPzzv1S5ZIWhim5SzcW1tfeo8e6yNzeMoU2hqvW7k3l+SUppZEapNTZAic lZed7DBCS7aKmw== -----END CERTIFICATE-----Generated at Fri Sep 5 02:52:32 2025 by rpki-client