$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: voS593Ax4Gl8lX74OD78XUuR0SUjv00PbG7l0MZsLLE= Subject key identifier: F0:54:AA:3C:41:84:C0:1A:6D:DE:15:13:39:8B:F7:8D:64:4C:47:F7 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 0196B6D9737A95749C8070763631DF07AB33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 11AD Signing time: Fri 09 May 2025 21:00:26 +0000 Manifest this update: Fri 09 May 2025 21:00:26 +0000 Manifest next update: Sat 10 May 2025 21:00:26 +0000 Files and hashes: 1: 1-0RU5-UH22DOsQOFsaTxG_A9jv8.roa (hash: fqVefE6RlaYUPduGoWsI2YNic7R0MJ4+DTDKQ/JK4rc=) 2: 1-FdAmS5arjzjLAT6dSpDv5Zz5Yo.roa (hash: 5R9Ps8+XKEvJyKNmQySRtdXFtn/oxvTrhdjJdae+0Mc=) 3: 3zDvKjYX5qyyRWMCbEyCJb1whcI.roa (hash: UgMcPhJl2XRyl5iipWHUcO/ZAIUXrG8hPqC4bk4RBnI=) 4: 7lxVna_a0xg23I1zjghxq6R0RXo.roa (hash: tXqQs9pDj0utpLVKfAdmZ32ratdKDLdXwvY9QAYFHbQ=) 5: 8neCxhaAsYaJYU9S15NmrANTFco.roa (hash: 4Xxa8uO6V7yLYBbylJYWkJX0nrzIRa0JN8AeDSSd+ak=) 6: J9EfRVewePQYGlLe8kNseKQHxJk.roa (hash: 9VVRmDPU/cfVWvE65Fl3QvG+s92pe334/sHSfdMSMFU=) 7: KiMYrb7_k5A1XChjZVkaZe03-J4.roa (hash: 30qTixTrPBopXsIzoLW1hBKkrCQ5vS3MAYgu2zCZ2kU=) 8: KpqhmDN4PwGeQOyx1F2chMnA50g.roa (hash: DNgLDFTg3cwMMhN86OnAoSqZ+ZXAhdxntU2zCCbmG4E=) 9: LouV9CNyeDg8LwFm0WQg3Epf8sM.roa (hash: riVTvdLY1eaWT/u45Jf1fSb9f2SlRG/qD/bZHRckGb8=) 10: TZnMCWCDD7gEt2iDrVgun6OOwPs.roa (hash: SXv2dOCtyEflvEs/51vkBcKAPnsJErnwyCUiGSJl1Gs=) 11: UJXvhibxw_8TtOKnD--xEYn-Zww.roa (hash: OjpDb9p6TT8FBXJ45Y7m0jK/9WUgig2slzPx0C3W9Ns=) 12: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: W62PWBp5JzkOrJGNzIkb0XVYSjAiVBz7LSH4ONobNnc=) 13: UqRTo9zfPVco3yYn5nw6sqcSIPY.roa (hash: /Dt51aOP8kus3h99adWYkONhAkJ+yJWSL0c8KmtagW0=) 14: VnKbkzMWAdNyZPCEQCwxH17zOTU.roa (hash: M1ZyqSf62mnrFwNeiW1+tjvlZxQ3ALH4X2u5wgU4NPE=) 15: Xmv46alzrB60JmjVYvB6COzgMjA.roa (hash: hA/zNdXVXqQjvFAUICGet5aUd1QUuqsgENdS1uEiVVY=) 16: ce8k7XCQyghvYHchvwALfCrVJwg.roa (hash: yQNx287pWR7HRDZfUEYypC3YO0EWbPD76GUoO2g6XzE=) 17: dK1BXPCUXOQRT5oOEUWvGxP9gQk.roa (hash: Ys5B95zExSqqxQNADZXH3Qy0NLQy7XLhKxBDY3n6xFE=) 18: dM23tRMrfeVMohMV97WFUTG8sLM.roa (hash: OTTmI9o/dreNgVKL2IIkBGf7NtGEVJVZuJN7RdVlcwY=) 19: g6O7wY63DyqDJHy27Gz3lHDxU5s.roa (hash: TrqIQ8Zbcjz8fNMvr1JTBGMIwXO8B6vc4Pif/pzevVU=) 20: j-nqL0xN6WbmkmqvTYJrSA6qGCQ.roa (hash: Qw7R/IgYTVpT3XgGSpkjT+8JID4fe8wv1odGKPFhq/M=) 21: jDWhRAsVH-ADWO3fPKwaSwkr-tc.roa (hash: Sroyv7+ckh5jogjuhwtX2u83187uWC92R69FscJrG3U=) 22: jdQZdakevZhVtKrglfN2RFnzQcI.roa (hash: YWgCWrFOGK/KKipBlp5lhfep+s/kMG6GomEIbVictxA=) 23: l7wxx1zLyo_Vp6Dh5EdYTFcM2nU.roa (hash: CxolEvFopBeQFh0sVq8DG+TsCtldic0vb/t6anZwnLM=) 24: mI-_CctqZI0K2tk6hRHxlecB4_0.roa (hash: L5SL5l2FWo7G2VvQUQ1QwP0hC9pB98xkcansR+H3uHU=) 25: ry5QBM2Eu4QVa3IbvVInNcRx-ao.roa (hash: mo2V1hYGi7uA3mmFMMTCShk3qAC1sKE08+9dYnb3F5w=) 26: yz5Oj1IRN47m7-hfoNRLKR-QsFQ.roa (hash: AJUnhFM68923GYadc3urgh5yRRol8KdV+S2IVDVlxow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 19:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b6:d9:73:7a:95:74:9c:80:70:76:36:31:df:07:ab:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: May 9 21:00:26 2025 GMT Not After : May 10 21:00:26 2025 GMT Subject: CN=f054aa3c4184c01a6dde1513398bf78d644c47f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c4:22:46:60:c8:ef:81:3a:0b:ce:a1:33:c5: 7a:a7:28:94:87:0c:55:39:c0:32:6e:d6:38:7e:cc: bd:76:1d:4e:78:4f:4a:9f:3c:f1:ba:68:68:00:e2: 9e:25:33:8b:c7:28:49:31:3d:ee:bd:9d:9c:80:2c: df:f4:73:71:1f:5c:ae:91:c4:63:d7:6d:1b:7b:5b: 32:2e:bf:e8:4a:93:77:5c:81:15:67:0a:e1:b0:f5: 8f:7f:23:9f:22:6b:7c:74:79:7c:00:54:a6:65:9e: 53:6f:50:90:7a:1e:ba:d6:4d:5c:b3:4d:58:89:c1: bf:c6:5d:32:c6:00:6e:95:27:ff:0c:fa:bc:3f:e5: 0a:72:ce:4c:52:e1:8f:fc:21:a4:8e:c5:8f:9d:87: 55:27:9e:59:78:0c:66:40:2c:e5:3d:f2:54:0d:0d: 35:8c:02:04:78:96:85:18:21:61:5a:1f:db:36:a4: a6:ee:78:38:c7:21:c9:8a:6f:08:ef:c1:9c:a2:66: cb:79:6a:ed:29:59:f0:76:e1:3a:74:4f:d0:6d:ba: 10:0b:3a:02:39:a9:51:41:19:a0:d0:f3:e3:bc:9d: 38:91:cf:ab:4b:8b:02:94:1c:35:e6:e0:5a:78:fa: 80:9b:53:69:4f:a4:6c:89:12:46:7f:52:c4:59:5d: db:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:54:AA:3C:41:84:C0:1A:6D:DE:15:13:39:8B:F7:8D:64:4C:47:F7 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:e4:28:28:6c:10:46:88:c6:a0:83:4c:79:6d:95:0d:22:b2: 41:e6:57:f1:a7:c5:13:63:ef:f3:1f:8f:85:76:98:4e:8f:b7: 3e:64:3d:87:5d:7a:70:54:ce:f6:f9:ec:1f:0a:b3:56:7b:91: 2a:20:2f:64:ea:f7:cf:c5:a2:a1:08:30:86:5e:6f:a2:7d:d9: bf:12:99:e6:42:b4:56:c9:e6:e2:cb:a8:92:a6:e1:04:97:da: 95:6e:df:7e:db:fa:9e:4f:3e:3a:29:53:c7:46:2d:c7:40:3c: 8d:46:7e:08:48:47:52:1d:28:e5:99:30:66:a7:77:8c:d7:4a: a2:10:7a:05:89:01:d3:2c:b8:7b:e2:96:92:12:93:0b:ea:e1: 9e:f9:e4:b7:a5:82:df:cd:b5:d8:56:ff:03:ac:1c:e3:46:d7: ae:b7:98:e0:5e:76:ed:c6:4c:c4:cf:8a:3d:51:ce:f2:61:49: ff:ab:e9:29:ef:e7:39:7e:e1:38:b2:73:b6:02:27:47:b0:0d: cb:3e:e7:a1:9a:66:59:37:a3:05:4a:35:d4:e1:04:e4:37:ee: d6:f1:c7:0c:90:cf:3b:14:16:8d:9c:a2:44:38:b3:07:ed:f1: ce:f5:66:15:ba:5a:7f:a6:4b:4a:8a:f5:45:9c:ef:ae:2e:c0: 3f:65:bd:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa22XN6lXScgHB2NjHfB6szMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjUwNTA5MjEwMDI2WhcNMjUwNTEwMjEwMDI2WjAzMTEwLwYDVQQD EyhmMDU0YWEzYzQxODRjMDFhNmRkZTE1MTMzOThiZjc4ZDY0NGM0N2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcQiRmDI74E6C86hM8V6pyiUhwxV OcAybtY4fsy9dh1OeE9KnzzxumhoAOKeJTOLxyhJMT3uvZ2cgCzf9HNxH1yukcRj 120be1syLr/oSpN3XIEVZwrhsPWPfyOfImt8dHl8AFSmZZ5Tb1CQeh661k1cs01Y icG/xl0yxgBulSf/DPq8P+UKcs5MUuGP/CGkjsWPnYdVJ55ZeAxmQCzlPfJUDQ01 jAIEeJaFGCFhWh/bNqSm7ng4xyHJim8I78GcombLeWrtKVnwduE6dE/QbboQCzoC OalRQRmg0PPjvJ04kc+rS4sClBw15uBaePqAm1NpT6RsiRJGf1LEWV3b4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBUqjxBhMAabd4VEzmL941kTEf3MB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReQoKGwQ RojGoINMeW2VDSKyQeZX8afFE2Pv8x+PhXaYTo+3PmQ9h116cFTO9vnsHwqzVnuR KiAvZOr3z8WioQgwhl5von3ZvxKZ5kK0Vsnm4suokqbhBJfalW7fftv6nk8+OilT x0Ytx0A8jUZ+CEhHUh0o5ZkwZqd3jNdKohB6BYkB0yy4e+KWkhKTC+rhnvnkt6WC 38212Fb/A6wc40bXrreY4F527cZMxM+KPVHO8mFJ/6vpKe/nOX7hOLJztgInR7AN yz7noZpmWTejBUo11OEE5Dfu1vHHDJDPOxQWjZyiRDizB+3xzvVmFbpaf6ZLSor1 RZzvri7AP2W9Dw== -----END CERTIFICATE-----Generated at Sat May 10 05:24:27 2025 by rpki-client