$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: o15+47O7qWD94/U+As+OGFF/W/tjkmK6BV3oOOnBGa4= Subject key identifier: 14:ED:C7:4F:22:A8:E9:42:4E:75:1A:FE:6B:44:7B:4D:F3:BC:B1:23 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 0199FCC6A92726C8F51EAD033D3D8FEEA894 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 1375 Signing time: Sun 19 Oct 2025 14:01:41 +0000 Manifest this update: Sun 19 Oct 2025 14:01:41 +0000 Manifest next update: Mon 20 Oct 2025 14:01:41 +0000 Files and hashes: 1: 1-0RU5-UH22DOsQOFsaTxG_A9jv8.roa (hash: fqVefE6RlaYUPduGoWsI2YNic7R0MJ4+DTDKQ/JK4rc=) 2: 1z54-R2eueuH54PTbLjKQAuYZZc.roa (hash: na8VleR3QcCgQLwEPa245cMk4lobIy28u3ve1B3bHSc=) 3: 7lxVna_a0xg23I1zjghxq6R0RXo.roa (hash: tXqQs9pDj0utpLVKfAdmZ32ratdKDLdXwvY9QAYFHbQ=) 4: BIV00WGdCsdMPZily9CzqPCb__g.roa (hash: 2Po5O5AX+uWN/KKrFaZyBDhCcTGjg4dn50nifm52n4M=) 5: CJRfADFE4-QkJg5dtABKS-ENn_0.roa (hash: KKiunGLLWijfm7wRv3Jxw+wzFAgL59bXip4yBbIw5wM=) 6: IM58WB6oRVSvth3T7GBmopm97NY.roa (hash: INk1QBtFJkQWxAphCXnUNmrjrSk0YRYITXcjMt0RgK4=) 7: J9EfRVewePQYGlLe8kNseKQHxJk.roa (hash: 9VVRmDPU/cfVWvE65Fl3QvG+s92pe334/sHSfdMSMFU=) 8: KiMYrb7_k5A1XChjZVkaZe03-J4.roa (hash: 30qTixTrPBopXsIzoLW1hBKkrCQ5vS3MAYgu2zCZ2kU=) 9: LO3Dmh76o3yUP4OdafCd70xCYL4.roa (hash: 2kNEWUMSLr9EsTWZSZq6yn8Fzkq0/lSxUPtBhfFtAkQ=) 10: LouV9CNyeDg8LwFm0WQg3Epf8sM.roa (hash: riVTvdLY1eaWT/u45Jf1fSb9f2SlRG/qD/bZHRckGb8=) 11: N8DREp9r8mOMTx82dCznYOBmi0U.roa (hash: U1YNu1TATTo2GJ7jthgUIu3jxffhrfvRRPtT3JsQMh8=) 12: TZnMCWCDD7gEt2iDrVgun6OOwPs.roa (hash: SXv2dOCtyEflvEs/51vkBcKAPnsJErnwyCUiGSJl1Gs=) 13: UJXvhibxw_8TtOKnD--xEYn-Zww.roa (hash: OjpDb9p6TT8FBXJ45Y7m0jK/9WUgig2slzPx0C3W9Ns=) 14: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: A3AT7WXmCyTQcN12QHY7jHghixmUsXq1YumdS1j7X/Y=) 15: UqRTo9zfPVco3yYn5nw6sqcSIPY.roa (hash: /Dt51aOP8kus3h99adWYkONhAkJ+yJWSL0c8KmtagW0=) 16: VnKbkzMWAdNyZPCEQCwxH17zOTU.roa (hash: M1ZyqSf62mnrFwNeiW1+tjvlZxQ3ALH4X2u5wgU4NPE=) 17: Xmv46alzrB60JmjVYvB6COzgMjA.roa (hash: hA/zNdXVXqQjvFAUICGet5aUd1QUuqsgENdS1uEiVVY=) 18: arl_yEtpP4DDXrmQ6KVg-jQ2qHc.roa (hash: 5M1R6GNVKpG+HzSwMNPMjsqeNhJUUjm69hOu68qG2wo=) 19: cU_yNL1eM_HdNE8wpI0gj0opY-Q.roa (hash: MYgNl6Bn9+R1XeYd2aWGDf5EYcLica0KZQKzsNv9cno=) 20: dK1BXPCUXOQRT5oOEUWvGxP9gQk.roa (hash: Ys5B95zExSqqxQNADZXH3Qy0NLQy7XLhKxBDY3n6xFE=) 21: jdQZdakevZhVtKrglfN2RFnzQcI.roa (hash: YWgCWrFOGK/KKipBlp5lhfep+s/kMG6GomEIbVictxA=) 22: s0b5Fwdu-zyh8O2GAm7qQ0wY_w0.roa (hash: Eks6tlyajlng306QOp1CtkVeuU4kzzJoAMHFpAAbNDE=) 23: w2mTXklqmB3KRUtzG9fxKD6ZDi4.roa (hash: DcW9Z2MnonH9MmcvaudchOkSRXJ7jGtdyGxCDchTggE=) 24: yz5Oj1IRN47m7-hfoNRLKR-QsFQ.roa (hash: AJUnhFM68923GYadc3urgh5yRRol8KdV+S2IVDVlxow=) 25: zsqlSKujJDEpPxbXLnbR63-l1vg.roa (hash: PnSwjAwNQ6gRKWOEYcqHvgvuayLLY4sW0dSTLof3lrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 14:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:c6:a9:27:26:c8:f5:1e:ad:03:3d:3d:8f:ee:a8:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Oct 19 14:01:41 2025 GMT Not After : Oct 20 14:01:41 2025 GMT Subject: CN=14edc74f22a8e9424e751afe6b447b4df3bcb123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c6:d7:ac:9d:00:ab:79:24:e6:60:b1:c7:cd: 69:1c:8d:cf:93:51:a3:75:de:9d:0c:0a:13:76:10: f2:72:59:1c:29:a0:12:48:4e:1a:7e:00:78:8a:2f: ef:c8:48:69:53:c8:ea:8a:65:69:b3:eb:24:8a:bd: 37:c9:73:aa:18:77:1f:f8:03:cd:d8:b9:e8:ed:fd: ea:54:64:fd:0a:92:e3:b5:b2:8e:5a:16:ed:3f:f3: 6d:09:93:bf:a2:36:6e:e2:6f:09:2f:d9:4e:9b:e4: 8d:79:c9:c2:4e:d3:aa:55:cb:45:31:b7:80:92:8c: 14:ab:27:76:f8:7b:7c:a1:86:94:c2:c5:5f:ae:f7: a1:81:7e:fe:61:4a:84:50:ad:a5:a7:89:db:af:22: 70:2d:40:5e:2b:3a:8e:a9:1b:59:59:7a:f1:07:7a: 8a:69:54:be:2a:16:22:1d:50:58:3c:e0:34:0d:6f: d5:7b:91:98:05:f4:bc:70:4e:68:c0:d5:c9:8e:4b: c6:97:46:c5:08:0f:3f:64:cf:5e:26:44:cd:c6:51: 73:8e:0a:cc:b3:d3:e5:a6:14:ab:0d:94:91:0f:4f: eb:35:86:d9:87:ab:5d:f5:97:18:b9:d7:a1:c7:2d: 3e:af:ed:35:2b:02:7d:ae:5b:35:e4:91:3d:fd:5f: 5b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:ED:C7:4F:22:A8:E9:42:4E:75:1A:FE:6B:44:7B:4D:F3:BC:B1:23 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:1a:59:d2:e0:28:87:33:09:16:9d:11:d9:79:7f:a1:c1:a2: 1e:10:13:8d:a1:f1:21:d0:14:de:5f:a2:2f:d9:44:34:24:78: 4b:26:b9:c0:b2:d7:1f:d2:62:8e:d9:af:2b:e7:7c:99:67:bd: 6a:fd:1e:8c:bc:36:76:7a:51:fb:03:99:9c:da:6e:7d:5d:8d: fb:1f:3c:99:0f:3d:f6:f7:23:ac:d4:16:a4:f9:ba:92:88:21: 6a:d4:e9:94:0f:c5:09:00:3a:b5:8d:b4:55:a1:a4:77:a3:3f: 55:52:b5:4c:e7:3c:4d:81:ba:3f:9e:2c:3b:43:53:46:f2:12: c9:1f:b1:55:db:c1:03:79:aa:77:bc:32:0b:6d:59:a9:30:26: 9c:25:71:f3:a3:fc:46:a5:27:5f:44:c3:fa:ea:76:8c:2c:f6: 59:84:c3:6d:9b:39:76:b9:24:9d:ad:0a:66:15:ce:0b:e1:4b: 78:1f:32:5b:c5:81:84:51:4b:f3:a4:a6:ff:f0:84:3d:0a:36: 6d:ba:e5:1a:f7:35:c7:7e:5f:43:98:2c:f6:4b:62:70:fb:b7: 24:02:b2:06:80:1d:92:8b:41:7f:7c:21:cc:9d:4c:3b:36:ed: de:b0:a5:2e:ca:2c:e0:ee:34:58:e5:40:fe:79:7d:a8:a5:47: 13:d4:1e:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8xqknJsj1Hq0DPT2P7qiUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjUxMDE5MTQwMTQxWhcNMjUxMDIwMTQwMTQxWjAzMTEwLwYDVQQD EygxNGVkYzc0ZjIyYThlOTQyNGU3NTFhZmU2YjQ0N2I0ZGYzYmNiMTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMbXrJ0Aq3kk5mCxx81pHI3Pk1Gj dd6dDAoTdhDyclkcKaASSE4afgB4ii/vyEhpU8jqimVps+skir03yXOqGHcf+APN 2Lno7f3qVGT9CpLjtbKOWhbtP/NtCZO/ojZu4m8JL9lOm+SNecnCTtOqVctFMbeA kowUqyd2+Ht8oYaUwsVfrvehgX7+YUqEUK2lp4nbryJwLUBeKzqOqRtZWXrxB3qK aVS+KhYiHVBYPOA0DW/Ve5GYBfS8cE5owNXJjkvGl0bFCA8/ZM9eJkTNxlFzjgrM s9PlphSrDZSRD0/rNYbZh6td9ZcYudehxy0+r+01KwJ9rls15JE9/V9bnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTtx08iqOlCTnUa/mtEe03zvLEjMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxpZ0uAo hzMJFp0R2Xl/ocGiHhATjaHxIdAU3l+iL9lENCR4Sya5wLLXH9JijtmvK+d8mWe9 av0ejLw2dnpR+wOZnNpufV2N+x88mQ899vcjrNQWpPm6koghatTplA/FCQA6tY20 VaGkd6M/VVK1TOc8TYG6P54sO0NTRvISyR+xVdvBA3mqd7wyC21ZqTAmnCVx86P8 RqUnX0TD+up2jCz2WYTDbZs5drkkna0KZhXOC+FLeB8yW8WBhFFL86Sm//CEPQo2 bbrlGvc1x35fQ5gs9kticPu3JAKyBoAdkotBf3whzJ1MOzbt3rClLsos4O40WOVA /nl9qKVHE9Qe6A== -----END CERTIFICATE-----Generated at Sun Oct 19 22:37:05 2025 by rpki-client