$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: jbv1XnAuCBeMp8GLAxNGLGHSC3W7wCxHkRp7DetnEPQ= Subject key identifier: 46:F5:0D:1C:6E:BE:00:60:80:31:82:D3:64:6A:00:8A:83:D5:42:5C Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 01A0DB0439687CDE61F0F0F8A9610C05C957 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 1722 Signing time: Sat 26 Sep 2026 00:01:21 +0000 Manifest this update: Sat 26 Sep 2026 00:01:21 +0000 Manifest next update: Sun 27 Sep 2026 00:01:21 +0000 Files and hashes: 1: 4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa (hash: 1+Dj9DjkqqJBKSFukY3ZLUFpE2kBLC6OJYlV3ZzlDHE=) 2: 51RV5bLUK5swpjii_ClMr0Z0LK4.roa (hash: eaEFcr3Fzwqgey9xkzHTc526Wfs17vHkTkKlWZDr6V4=) 3: 7Gfdl5k6T4Nt-xZrQUmYT2Wb0Q4.roa (hash: praaG5V4IjeUDRh2H9CpWs4rx+iMgs/zDPv4j89TbtU=) 4: 7meu7s1H44zdKfP25MFBcQbtGHI.roa (hash: WvFf3T5R9dDcoqBxFhAiq7tVRoIpj2LekmR2mNGzL1E=) 5: 7u4RVlV52XWyTyDw_qznuD0UgXs.roa (hash: vYm6Nz0cS2O84RBnN+siuod691AUb0y3q4ys6CicPZI=) 6: 9sk7o3-J1zppXpr20oFx7pS_U0c.roa (hash: pBXnQfzjUWzJ2ZBcFMKN6xODjJ4zYHByfhzLBkNvrdQ=) 7: BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa (hash: Q2q3HL2ikSVxapYF8tEqUbGc2dsp+tUqOuJvpkTfgSw=) 8: EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa (hash: ZEu9nOF1kbSjWSpE4NcC/VjSw7SsIRZ4h2G/ZSkfcXA=) 9: GWUpBhLv0PHDsIV3w3GIbM6-96s.roa (hash: qr4GrREKG7A3hhdS3Agv52m1MsgGN/WZ20ATzaaaiuk=) 10: HxGP4RyCdmbtsC_X7rEOMPaadGs.roa (hash: E1pPUcXW5mPkpSrQhelqafY4OsK2tjQxSmKWda1vbOE=) 11: MZUJ_YtPrARksG8JiNeh9h5bxjU.roa (hash: gULv6+Niu5hf2ZuzY/CCoAvGjaEsELBZ6B3Mi+f8gPo=) 12: NNB2avyCldcIMCL0f0MRWjsmPGg.roa (hash: DEfqSuvzloP85jcJKk7ZgGBFiOXRfF0MqFeO19BqKn0=) 13: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: LHyU2PX7h8bb8uH6nQ4ucCEaqH+fyaqTWlVJu07IKg0=) 14: ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa (hash: U8GSnZZoap+4gf9xVbyRxlPJkgOVmU3uHH07WIciOyM=) 15: bCdYO2D1pk-Sh6yPVxjaFkaTLV4.roa (hash: cUAnZwmDfvuC8Ml+3dgezXg7SEdjrMZVgimvYz6Sy2A=) 16: bKOziSP_XttR6KXVx43_hKvo5UM.roa (hash: 4QTv2mKHqsuXG6X8b61ridnXdKspO+S1hN2ZP7mulZY=) 17: fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa (hash: JpN5XVDZY1IahuGnYijyyeq5BW4QE/s6DEijCb+GpS0=) 18: j4qiTlmyE2UTELOd_dWPpgYgT7g.roa (hash: tL7gSkajUFv82zTjqwfcJA15HYbXtYeZkwl/AW0YDBU=) 19: nrPLRJPmPFUNnRKVYlt5xynJqbQ.roa (hash: I11fElTQunbRvyiT3+4v3tCdsssjfQCu5kwVzj1TuOs=) 20: ql7rOmZ_btr3d4A37f2Df8JDM0E.roa (hash: /SRzz/yYDf39iuJ35shny0PsFk2f1QMbJVc74yAIIqU=) 21: waLcrNH7uHQklmGVHpfmCMZcL3o.roa (hash: G6P6bFBr2kZHKhtwrt4aC293o8D2o+Zw99eQaBr2bOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:db:04:39:68:7c:de:61:f0:f0:f8:a9:61:0c:05:c9:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Sep 26 00:01:21 2026 GMT Not After : Sep 27 00:01:21 2026 GMT Subject: CN=46f50d1c6ebe0060803182d3646a008a83d5425c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:91:d9:3a:6c:e8:33:1e:b9:7f:f9:23:ea:01: 93:17:78:f0:0d:4d:ec:0a:b9:0d:0f:09:99:19:08: d1:6f:c5:3a:c7:f5:63:2f:1e:ef:a0:8e:eb:4c:17: 0e:71:13:01:d9:72:af:8b:44:81:dd:cc:3b:52:51: 1f:0e:81:23:26:9a:dd:91:b2:77:08:f1:09:ed:27: 80:9c:45:89:80:d7:9f:2b:c1:f2:f1:4d:a6:43:5a: 71:c5:04:49:91:b5:f9:ad:5d:23:51:57:9b:8a:55: 34:f3:be:0a:5c:94:95:dd:66:01:d0:43:be:b5:bb: dd:41:d2:5a:65:1b:1d:92:67:c5:01:88:af:d4:6a: 90:0a:79:7a:33:b9:51:fa:a5:a6:91:c4:74:7b:81: 12:4f:01:3f:44:1e:e2:ed:50:b6:f0:72:20:90:05: c0:ba:23:07:05:d7:66:83:2e:fd:e0:39:76:90:81: 92:a1:45:fa:5a:56:48:e1:de:4d:43:c5:1c:08:8d: 49:6e:8d:8e:ab:37:ed:b2:31:9a:c3:85:9c:5d:f4: f2:1e:81:6c:2c:9c:ad:c8:52:50:cb:be:1b:09:a3: 30:5f:bf:4b:8b:cf:15:41:60:65:e2:ff:14:fc:07: 75:59:11:c4:f0:ef:e1:60:90:e8:b9:83:e4:4b:68: 2d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F5:0D:1C:6E:BE:00:60:80:31:82:D3:64:6A:00:8A:83:D5:42:5C X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4e:e4:65:51:9b:08:84:73:ad:14:5e:20:dd:4f:e5:c3:ec: 39:13:5d:74:da:05:61:10:bc:6c:77:23:f0:bb:45:97:98:fc: 9f:61:54:60:67:81:c6:86:ea:f5:bb:df:90:d8:ba:30:61:93: a5:8b:c3:d7:39:a3:b9:45:4c:ff:89:1d:74:47:15:6c:26:30: d3:0d:56:4b:ac:48:fc:95:d4:67:48:90:01:ff:b5:a0:85:21: 7f:72:f9:f1:bb:dd:1b:c0:04:e5:c0:ff:e1:29:74:f3:2a:bc: 6c:9b:fe:04:8f:bb:45:14:f8:02:be:9b:1f:63:65:68:40:52: a0:fd:06:21:4e:c3:45:2e:e6:c7:c0:2d:55:67:94:d6:e6:55: 0a:73:91:8a:f2:e9:a1:fe:ae:be:4b:98:a5:19:f3:33:aa:42: d5:c9:69:9d:ba:f3:b7:dd:53:37:ab:99:ac:94:27:fb:ab:8f: be:b5:04:8e:95:4b:58:8c:62:0a:e3:ac:d9:39:a4:e4:af:d5: 69:c6:34:84:0c:2b:de:ca:5c:36:a4:f3:39:b8:3e:d4:47:47: 1f:e3:7e:6b:15:c3:64:f8:94:bc:f1:93:02:2a:d9:c1:59:30: f6:3a:1f:59:79:99:b8:11:08:29:81:85:30:6b:e0:61:51:ce: 27:eb:4f:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDbBDlofN5h8PD4qWEMBclXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwOTI2MDAwMTIxWhcNMjYwOTI3MDAwMTIxWjAzMTEwLwYDVQQD Eyg0NmY1MGQxYzZlYmUwMDYwODAzMTgyZDM2NDZhMDA4YTgzZDU0MjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5HZOmzoMx65f/kj6gGTF3jwDU3s CrkNDwmZGQjRb8U6x/VjLx7voI7rTBcOcRMB2XKvi0SB3cw7UlEfDoEjJprdkbJ3 CPEJ7SeAnEWJgNefK8Hy8U2mQ1pxxQRJkbX5rV0jUVebilU0874KXJSV3WYB0EO+ tbvdQdJaZRsdkmfFAYiv1GqQCnl6M7lR+qWmkcR0e4ESTwE/RB7i7VC28HIgkAXA uiMHBddmgy794Dl2kIGSoUX6WlZI4d5NQ8UcCI1Jbo2OqzftsjGaw4WcXfTyHoFs LJytyFJQy74bCaMwX79Li88VQWBl4v8U/Ad1WRHE8O/hYJDouYPkS2gtEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEb1DRxuvgBggDGC02RqAIqD1UJcMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADk7kZVGb CIRzrRReIN1P5cPsORNddNoFYRC8bHcj8LtFl5j8n2FUYGeBxobq9bvfkNi6MGGT pYvD1zmjuUVM/4kddEcVbCYw0w1WS6xI/JXUZ0iQAf+1oIUhf3L58bvdG8AE5cD/ 4Sl08yq8bJv+BI+7RRT4Ar6bH2NlaEBSoP0GIU7DRS7mx8AtVWeU1uZVCnORivLp of6uvkuYpRnzM6pC1clpnbrzt91TN6uZrJQn+6uPvrUEjpVLWIxiCuOs2Tmk5K/V acY0hAwr3spcNqTzObg+1EdHH+N+axXDZPiUvPGTAirZwVkw9jofWXmZuBEIKYGF MGvgYVHOJ+tPjQ== -----END CERTIFICATE-----Generated at Sat Sep 26 08:48:27 2026 by rpki-client