$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: NHt5Pdrp1O5U72eDiO9wmhrky48uY6r3tpUOf56dWLA= Subject key identifier: 52:31:15:6C:E0:96:20:E9:98:1D:35:9E:62:0F:7A:3D:73:AD:FB:07 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 0198D4044DC725863149946ACA1AA993018D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 12D3 Signing time: Fri 22 Aug 2025 23:01:48 +0000 Manifest this update: Fri 22 Aug 2025 23:01:48 +0000 Manifest next update: Sat 23 Aug 2025 23:01:48 +0000 Files and hashes: 1: 1-0RU5-UH22DOsQOFsaTxG_A9jv8.roa (hash: fqVefE6RlaYUPduGoWsI2YNic7R0MJ4+DTDKQ/JK4rc=) 2: 7lxVna_a0xg23I1zjghxq6R0RXo.roa (hash: tXqQs9pDj0utpLVKfAdmZ32ratdKDLdXwvY9QAYFHbQ=) 3: BAmcZLC8c1pYbRVx9bEwz7hXkh4.roa (hash: Gw4Wc6UKh9AqIVk4VRz0Ra02r6VzzByuN/IWwFfcpD8=) 4: BIV00WGdCsdMPZily9CzqPCb__g.roa (hash: 2Po5O5AX+uWN/KKrFaZyBDhCcTGjg4dn50nifm52n4M=) 5: IM58WB6oRVSvth3T7GBmopm97NY.roa (hash: INk1QBtFJkQWxAphCXnUNmrjrSk0YRYITXcjMt0RgK4=) 6: J9EfRVewePQYGlLe8kNseKQHxJk.roa (hash: 9VVRmDPU/cfVWvE65Fl3QvG+s92pe334/sHSfdMSMFU=) 7: KiMYrb7_k5A1XChjZVkaZe03-J4.roa (hash: 30qTixTrPBopXsIzoLW1hBKkrCQ5vS3MAYgu2zCZ2kU=) 8: LO3Dmh76o3yUP4OdafCd70xCYL4.roa (hash: 2kNEWUMSLr9EsTWZSZq6yn8Fzkq0/lSxUPtBhfFtAkQ=) 9: LouV9CNyeDg8LwFm0WQg3Epf8sM.roa (hash: riVTvdLY1eaWT/u45Jf1fSb9f2SlRG/qD/bZHRckGb8=) 10: TZnMCWCDD7gEt2iDrVgun6OOwPs.roa (hash: SXv2dOCtyEflvEs/51vkBcKAPnsJErnwyCUiGSJl1Gs=) 11: UJXvhibxw_8TtOKnD--xEYn-Zww.roa (hash: OjpDb9p6TT8FBXJ45Y7m0jK/9WUgig2slzPx0C3W9Ns=) 12: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: TeZPgtUPHIUGKxMmkPV8lhRmOWmFY4/DTg6psZH/0rw=) 13: UqRTo9zfPVco3yYn5nw6sqcSIPY.roa (hash: /Dt51aOP8kus3h99adWYkONhAkJ+yJWSL0c8KmtagW0=) 14: VnKbkzMWAdNyZPCEQCwxH17zOTU.roa (hash: M1ZyqSf62mnrFwNeiW1+tjvlZxQ3ALH4X2u5wgU4NPE=) 15: Xmv46alzrB60JmjVYvB6COzgMjA.roa (hash: hA/zNdXVXqQjvFAUICGet5aUd1QUuqsgENdS1uEiVVY=) 16: arl_yEtpP4DDXrmQ6KVg-jQ2qHc.roa (hash: 5M1R6GNVKpG+HzSwMNPMjsqeNhJUUjm69hOu68qG2wo=) 17: dK1BXPCUXOQRT5oOEUWvGxP9gQk.roa (hash: Ys5B95zExSqqxQNADZXH3Qy0NLQy7XLhKxBDY3n6xFE=) 18: jdQZdakevZhVtKrglfN2RFnzQcI.roa (hash: YWgCWrFOGK/KKipBlp5lhfep+s/kMG6GomEIbVictxA=) 19: mI-_CctqZI0K2tk6hRHxlecB4_0.roa (hash: L5SL5l2FWo7G2VvQUQ1QwP0hC9pB98xkcansR+H3uHU=) 20: ry5QBM2Eu4QVa3IbvVInNcRx-ao.roa (hash: mo2V1hYGi7uA3mmFMMTCShk3qAC1sKE08+9dYnb3F5w=) 21: s0b5Fwdu-zyh8O2GAm7qQ0wY_w0.roa (hash: Eks6tlyajlng306QOp1CtkVeuU4kzzJoAMHFpAAbNDE=) 22: w2mTXklqmB3KRUtzG9fxKD6ZDi4.roa (hash: DcW9Z2MnonH9MmcvaudchOkSRXJ7jGtdyGxCDchTggE=) 23: yz5Oj1IRN47m7-hfoNRLKR-QsFQ.roa (hash: AJUnhFM68923GYadc3urgh5yRRol8KdV+S2IVDVlxow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 23:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:04:4d:c7:25:86:31:49:94:6a:ca:1a:a9:93:01:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Aug 22 23:01:48 2025 GMT Not After : Aug 23 23:01:48 2025 GMT Subject: CN=5231156ce09620e9981d359e620f7a3d73adfb07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c0:8e:c2:83:5c:8c:e0:1b:c6:a9:07:e5:ea: b6:bc:48:70:aa:e4:b5:75:51:57:9a:99:67:94:5b: ba:86:10:30:74:65:5f:26:33:0d:ce:32:a8:21:99: e8:ec:67:5a:a4:01:db:23:32:5a:e8:ff:53:36:af: 30:ca:71:13:dd:70:f9:72:73:b0:76:12:e9:16:6f: 38:94:6d:62:5d:b1:5b:0b:07:6e:4b:3e:45:a5:d5: 62:f9:84:06:18:c5:34:54:6c:36:84:1f:57:cb:ce: 0e:ac:94:81:84:09:19:f0:6e:5c:cc:ae:5c:c1:3b: 0a:a3:58:28:81:a6:bd:ec:2a:c2:e6:9b:d2:56:44: ca:38:1e:3a:a0:53:ca:45:6c:e6:0c:1f:0b:2f:1c: 39:51:4f:54:ea:29:1f:74:4f:34:40:15:63:d0:2f: fd:0f:68:0f:3f:00:89:d8:0d:e3:8e:bf:36:17:eb: ac:46:f3:e1:5e:04:25:56:b0:dc:94:54:2d:11:ae: 61:8d:bf:0d:c4:e7:a8:7d:08:f6:47:39:5a:8e:7d: e1:37:5e:da:c9:bb:04:46:62:6a:d8:11:6b:86:0b: 10:6d:4e:09:bc:fe:0b:62:ff:83:f0:9f:76:5f:4f: 91:28:33:d0:0d:6d:94:5a:e1:6d:cc:4e:4d:46:0f: 13:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:31:15:6C:E0:96:20:E9:98:1D:35:9E:62:0F:7A:3D:73:AD:FB:07 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:c1:fd:bd:a0:4c:c0:cf:82:d6:d7:c8:7d:a4:2f:cb:07:42: cf:32:10:90:10:40:f7:9d:96:f2:9a:9a:e0:26:a5:4c:d9:85: 47:aa:80:a2:fa:9b:23:53:0c:e9:d8:45:bd:3c:5f:aa:1a:12: 2e:04:8f:cd:9b:36:32:31:a0:31:d8:b3:54:d4:fa:7e:3c:d3: 27:94:4a:d2:a1:e9:6b:59:5d:57:2b:0e:1a:ba:ad:54:4e:f1: 0f:7f:c7:9c:04:b9:61:e3:82:75:ee:c4:2e:ef:29:8e:f9:43: 93:16:9f:bf:75:81:7c:e6:17:22:b5:0f:2a:ca:37:7b:56:ee: 57:80:53:f8:e5:e4:49:bc:2b:40:88:8b:30:d1:cf:16:83:cc: 13:11:47:37:a0:e1:f1:9f:06:3c:d2:d1:46:fd:a3:27:70:87: b4:38:2f:d2:e4:92:a2:16:a1:be:10:e7:83:7b:1e:dc:d9:b3: 82:8f:39:ae:70:72:98:8b:54:db:8d:9d:12:00:d1:26:07:c1: c0:d3:6e:45:55:13:34:46:1b:af:81:4c:25:b4:94:4f:88:e5: c0:70:9d:5c:3b:d4:75:d2:aa:87:16:57:f8:b2:9a:a0:e4:a7: a6:eb:e9:d5:3e:09:64:15:d8:1f:95:a6:63:56:ff:74:3b:d2: 2b:33:7a:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUBE3HJYYxSZRqyhqpkwGNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjUwODIyMjMwMTQ4WhcNMjUwODIzMjMwMTQ4WjAzMTEwLwYDVQQD Eyg1MjMxMTU2Y2UwOTYyMGU5OTgxZDM1OWU2MjBmN2EzZDczYWRmYjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicCOwoNcjOAbxqkH5eq2vEhwquS1 dVFXmplnlFu6hhAwdGVfJjMNzjKoIZno7GdapAHbIzJa6P9TNq8wynET3XD5cnOw dhLpFm84lG1iXbFbCwduSz5FpdVi+YQGGMU0VGw2hB9Xy84OrJSBhAkZ8G5czK5c wTsKo1gogaa97CrC5pvSVkTKOB46oFPKRWzmDB8LLxw5UU9U6ikfdE80QBVj0C/9 D2gPPwCJ2A3jjr82F+usRvPhXgQlVrDclFQtEa5hjb8NxOeofQj2Rzlajn3hN17a ybsERmJq2BFrhgsQbU4JvP4LYv+D8J92X0+RKDPQDW2UWuFtzE5NRg8TGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIxFWzgliDpmB01nmIPej1zrfsHMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMH9vaBM wM+C1tfIfaQvywdCzzIQkBBA952W8pqa4CalTNmFR6qAovqbI1MM6dhFvTxfqhoS LgSPzZs2MjGgMdizVNT6fjzTJ5RK0qHpa1ldVysOGrqtVE7xD3/HnAS5YeOCde7E Lu8pjvlDkxafv3WBfOYXIrUPKso3e1buV4BT+OXkSbwrQIiLMNHPFoPMExFHN6Dh 8Z8GPNLRRv2jJ3CHtDgv0uSSohahvhDng3se3Nmzgo85rnBymItU242dEgDRJgfB wNNuRVUTNEYbr4FMJbSUT4jlwHCdXDvUddKqhxZX+LKaoOSnpuvp1T4JZBXYH5Wm Y1b/dDvSKzN69g== -----END CERTIFICATE-----Generated at Sat Aug 23 09:42:51 2025 by rpki-client