$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: jwoaAsV3WteAtZ124oDtENaIuYFiBhnAndsPuekvZNI= Subject key identifier: 95:8E:1E:6F:FF:CF:BC:5B:CA:96:AB:81:FE:47:E5:79:13:C9:7C:BF Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 0197BBC6D7B6CBA46878192EB3D9EB6BD9B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 1238 Signing time: Sun 29 Jun 2025 13:01:00 +0000 Manifest this update: Sun 29 Jun 2025 13:01:00 +0000 Manifest next update: Mon 30 Jun 2025 13:01:00 +0000 Files and hashes: 1: 1-0RU5-UH22DOsQOFsaTxG_A9jv8.roa (hash: fqVefE6RlaYUPduGoWsI2YNic7R0MJ4+DTDKQ/JK4rc=) 2: 1-FdAmS5arjzjLAT6dSpDv5Zz5Yo.roa (hash: 5R9Ps8+XKEvJyKNmQySRtdXFtn/oxvTrhdjJdae+0Mc=) 3: 7lxVna_a0xg23I1zjghxq6R0RXo.roa (hash: tXqQs9pDj0utpLVKfAdmZ32ratdKDLdXwvY9QAYFHbQ=) 4: 8neCxhaAsYaJYU9S15NmrANTFco.roa (hash: 4Xxa8uO6V7yLYBbylJYWkJX0nrzIRa0JN8AeDSSd+ak=) 5: BIV00WGdCsdMPZily9CzqPCb__g.roa (hash: 2Po5O5AX+uWN/KKrFaZyBDhCcTGjg4dn50nifm52n4M=) 6: J9EfRVewePQYGlLe8kNseKQHxJk.roa (hash: 9VVRmDPU/cfVWvE65Fl3QvG+s92pe334/sHSfdMSMFU=) 7: KiMYrb7_k5A1XChjZVkaZe03-J4.roa (hash: 30qTixTrPBopXsIzoLW1hBKkrCQ5vS3MAYgu2zCZ2kU=) 8: LouV9CNyeDg8LwFm0WQg3Epf8sM.roa (hash: riVTvdLY1eaWT/u45Jf1fSb9f2SlRG/qD/bZHRckGb8=) 9: TZnMCWCDD7gEt2iDrVgun6OOwPs.roa (hash: SXv2dOCtyEflvEs/51vkBcKAPnsJErnwyCUiGSJl1Gs=) 10: UJXvhibxw_8TtOKnD--xEYn-Zww.roa (hash: OjpDb9p6TT8FBXJ45Y7m0jK/9WUgig2slzPx0C3W9Ns=) 11: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: RMM6NOF9MKUbmT2tDuG/K04cWFoY1dy0TbVt4cTyzPo=) 12: UqRTo9zfPVco3yYn5nw6sqcSIPY.roa (hash: /Dt51aOP8kus3h99adWYkONhAkJ+yJWSL0c8KmtagW0=) 13: VnKbkzMWAdNyZPCEQCwxH17zOTU.roa (hash: M1ZyqSf62mnrFwNeiW1+tjvlZxQ3ALH4X2u5wgU4NPE=) 14: Xmv46alzrB60JmjVYvB6COzgMjA.roa (hash: hA/zNdXVXqQjvFAUICGet5aUd1QUuqsgENdS1uEiVVY=) 15: ce8k7XCQyghvYHchvwALfCrVJwg.roa (hash: yQNx287pWR7HRDZfUEYypC3YO0EWbPD76GUoO2g6XzE=) 16: dK1BXPCUXOQRT5oOEUWvGxP9gQk.roa (hash: Ys5B95zExSqqxQNADZXH3Qy0NLQy7XLhKxBDY3n6xFE=) 17: dM23tRMrfeVMohMV97WFUTG8sLM.roa (hash: OTTmI9o/dreNgVKL2IIkBGf7NtGEVJVZuJN7RdVlcwY=) 18: g6O7wY63DyqDJHy27Gz3lHDxU5s.roa (hash: TrqIQ8Zbcjz8fNMvr1JTBGMIwXO8B6vc4Pif/pzevVU=) 19: jDWhRAsVH-ADWO3fPKwaSwkr-tc.roa (hash: Sroyv7+ckh5jogjuhwtX2u83187uWC92R69FscJrG3U=) 20: jdQZdakevZhVtKrglfN2RFnzQcI.roa (hash: YWgCWrFOGK/KKipBlp5lhfep+s/kMG6GomEIbVictxA=) 21: l7wxx1zLyo_Vp6Dh5EdYTFcM2nU.roa (hash: CxolEvFopBeQFh0sVq8DG+TsCtldic0vb/t6anZwnLM=) 22: mI-_CctqZI0K2tk6hRHxlecB4_0.roa (hash: L5SL5l2FWo7G2VvQUQ1QwP0hC9pB98xkcansR+H3uHU=) 23: ry5QBM2Eu4QVa3IbvVInNcRx-ao.roa (hash: mo2V1hYGi7uA3mmFMMTCShk3qAC1sKE08+9dYnb3F5w=) 24: s0b5Fwdu-zyh8O2GAm7qQ0wY_w0.roa (hash: Eks6tlyajlng306QOp1CtkVeuU4kzzJoAMHFpAAbNDE=) 25: w2mTXklqmB3KRUtzG9fxKD6ZDi4.roa (hash: DcW9Z2MnonH9MmcvaudchOkSRXJ7jGtdyGxCDchTggE=) 26: yz5Oj1IRN47m7-hfoNRLKR-QsFQ.roa (hash: AJUnhFM68923GYadc3urgh5yRRol8KdV+S2IVDVlxow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:bb:c6:d7:b6:cb:a4:68:78:19:2e:b3:d9:eb:6b:d9:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jun 29 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=958e1e6fffcfbc5bca96ab81fe47e57913c97cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:40:38:17:8b:b1:7a:83:af:94:eb:59:03:d4: 66:39:c9:c3:95:6a:63:68:87:f5:04:f7:f6:7d:a9: 2b:66:12:21:e0:e9:f5:0e:73:fa:5a:40:cd:f6:f0: 49:21:74:e1:27:94:18:89:e6:e1:7d:45:e5:63:02: 7d:2a:aa:ad:67:21:36:b0:cf:76:ec:23:2b:a1:7f: dd:a9:68:de:a8:14:88:b9:06:42:5a:dd:92:50:96: 46:48:bc:5f:c9:b9:85:94:15:a7:92:8b:18:1b:de: d2:12:d3:8d:43:9c:ad:36:72:1c:53:89:94:d8:49: d1:d8:5b:a3:10:81:10:d5:a0:aa:cb:98:09:85:b4: 13:96:f9:85:20:5e:38:01:ae:87:b8:eb:9f:35:40: 49:01:44:d4:70:68:b8:8e:fe:0f:13:13:55:fc:2c: 9d:32:a0:6d:c8:11:19:a8:04:9c:bf:1c:4e:64:fa: 78:e5:39:e7:8f:b5:f3:aa:62:8f:37:eb:e6:4f:37: ce:e1:d7:f5:27:c1:66:5a:dd:77:e7:bb:2a:23:c2: 5b:9f:15:37:9c:ee:d5:8e:75:ba:8b:d7:a5:24:fe: 3d:49:5b:e4:3d:bd:0a:17:78:52:99:93:a5:24:65: 48:e6:5c:19:60:4d:b7:d7:96:27:b1:48:ad:c4:8b: 70:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8E:1E:6F:FF:CF:BC:5B:CA:96:AB:81:FE:47:E5:79:13:C9:7C:BF X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:10:0a:e5:2c:52:31:99:a5:2b:5c:9a:e6:0e:54:5e:8e:01: 19:4e:10:63:02:2c:52:89:4b:97:1c:e2:8a:bd:b0:d9:da:8b: da:cd:c5:cf:ae:4c:3f:37:c5:40:01:3d:35:bf:c4:77:e6:1e: 9f:c8:68:be:18:d8:79:38:21:0c:ff:ae:96:5c:a7:20:7f:77: bc:b7:38:c9:a2:52:92:de:1c:ff:8a:19:af:50:e8:d2:ae:11: dc:af:46:ce:9c:ab:c4:45:52:e4:25:11:c3:bc:40:1c:ef:3e: 1b:16:5a:3e:0a:ca:01:4c:08:6a:22:c5:64:75:cb:9b:27:a3: cd:c4:da:ff:15:bb:bb:ee:bd:ec:85:51:ac:8f:a1:9c:f8:de: 6d:c4:9c:a1:aa:c9:c2:63:16:43:12:93:5c:9f:24:5f:65:e4: 5f:d4:29:bd:16:10:58:f6:5f:c5:81:53:52:67:0d:bb:c1:e0: de:a0:20:7b:f6:d8:ec:7b:82:cf:81:09:64:b0:a5:44:f8:0f: 62:3e:3f:e5:ee:5d:da:a6:62:67:5c:2e:37:14:25:b5:80:09: 88:03:3a:e9:9c:63:ed:a4:f9:03:3c:cc:7f:f0:1b:e1:f3:82: 17:f4:a3:3b:77:ba:96:fd:ff:3b:08:cd:ba:6e:96:82:18:8d: 4b:43:37:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe7xte2y6RoeBkus9nra9m3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjUwNjI5MTMwMTAwWhcNMjUwNjMwMTMwMTAwWjAzMTEwLwYDVQQD Eyg5NThlMWU2ZmZmY2ZiYzViY2E5NmFiODFmZTQ3ZTU3OTEzYzk3Y2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0A4F4uxeoOvlOtZA9RmOcnDlWpj aIf1BPf2fakrZhIh4On1DnP6WkDN9vBJIXThJ5QYiebhfUXlYwJ9KqqtZyE2sM92 7CMroX/dqWjeqBSIuQZCWt2SUJZGSLxfybmFlBWnkosYG97SEtONQ5ytNnIcU4mU 2EnR2FujEIEQ1aCqy5gJhbQTlvmFIF44Aa6HuOufNUBJAUTUcGi4jv4PExNV/Cyd MqBtyBEZqAScvxxOZPp45Tnnj7XzqmKPN+vmTzfO4df1J8FmWt1357sqI8JbnxU3 nO7VjnW6i9elJP49SVvkPb0KF3hSmZOlJGVI5lwZYE2315YnsUitxItwCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWOHm//z7xbypargf5H5XkTyXy/MB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxAK5SxS MZmlK1ya5g5UXo4BGU4QYwIsUolLlxziir2w2dqL2s3Fz65MPzfFQAE9Nb/Ed+Ye n8hovhjYeTghDP+ullynIH93vLc4yaJSkt4c/4oZr1Do0q4R3K9GzpyrxEVS5CUR w7xAHO8+GxZaPgrKAUwIaiLFZHXLmyejzcTa/xW7u+697IVRrI+hnPjebcScoarJ wmMWQxKTXJ8kX2XkX9QpvRYQWPZfxYFTUmcNu8Hg3qAge/bY7HuCz4EJZLClRPgP Yj4/5e5d2qZiZ1wuNxQltYAJiAM66Zxj7aT5AzzMf/Ab4fOCF/SjO3e6lv3/OwjN um6WghiNS0M36A== -----END CERTIFICATE-----Generated at Sun Jun 29 21:04:08 2025 by rpki-client