$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: E9z/ds9F3Gp0NNAQyMf1s6ZuYYq/wd0s1XW19iTi5+Y= Subject key identifier: 2E:53:A8:A7:F4:1A:3D:79:C2:E5:61:BA:0E:FB:BD:D1:CB:FA:07:9E Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 01A0D426709969750C9BE0289F7F1481D12F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 171E Signing time: Thu 24 Sep 2026 16:01:23 +0000 Manifest this update: Thu 24 Sep 2026 16:01:23 +0000 Manifest next update: Fri 25 Sep 2026 16:01:23 +0000 Files and hashes: 1: 1-kcZNt23iw1RBz4Gt3pzD1CfBpE.roa (hash: EXKCmselguxEWJqVjaQNd8s2v6f02y8BzJbbVd7d/lo=) 2: 4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa (hash: 1+Dj9DjkqqJBKSFukY3ZLUFpE2kBLC6OJYlV3ZzlDHE=) 3: 51RV5bLUK5swpjii_ClMr0Z0LK4.roa (hash: eaEFcr3Fzwqgey9xkzHTc526Wfs17vHkTkKlWZDr6V4=) 4: 7Gfdl5k6T4Nt-xZrQUmYT2Wb0Q4.roa (hash: praaG5V4IjeUDRh2H9CpWs4rx+iMgs/zDPv4j89TbtU=) 5: 7meu7s1H44zdKfP25MFBcQbtGHI.roa (hash: WvFf3T5R9dDcoqBxFhAiq7tVRoIpj2LekmR2mNGzL1E=) 6: 7u4RVlV52XWyTyDw_qznuD0UgXs.roa (hash: vYm6Nz0cS2O84RBnN+siuod691AUb0y3q4ys6CicPZI=) 7: 8rAeRa0qXMsqG4f_dX_MWwWzVkQ.roa (hash: 3WRYB98AxTpOkZs3vEOK1Iv1it3jF8yA7OeoAi550/s=) 8: 9sk7o3-J1zppXpr20oFx7pS_U0c.roa (hash: pBXnQfzjUWzJ2ZBcFMKN6xODjJ4zYHByfhzLBkNvrdQ=) 9: BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa (hash: Q2q3HL2ikSVxapYF8tEqUbGc2dsp+tUqOuJvpkTfgSw=) 10: EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa (hash: ZEu9nOF1kbSjWSpE4NcC/VjSw7SsIRZ4h2G/ZSkfcXA=) 11: GWUpBhLv0PHDsIV3w3GIbM6-96s.roa (hash: qr4GrREKG7A3hhdS3Agv52m1MsgGN/WZ20ATzaaaiuk=) 12: HxGP4RyCdmbtsC_X7rEOMPaadGs.roa (hash: E1pPUcXW5mPkpSrQhelqafY4OsK2tjQxSmKWda1vbOE=) 13: MZUJ_YtPrARksG8JiNeh9h5bxjU.roa (hash: gULv6+Niu5hf2ZuzY/CCoAvGjaEsELBZ6B3Mi+f8gPo=) 14: NNB2avyCldcIMCL0f0MRWjsmPGg.roa (hash: DEfqSuvzloP85jcJKk7ZgGBFiOXRfF0MqFeO19BqKn0=) 15: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: HaZiVeECaAouQsJ98Rzkl1Kat9NkDj1Q2Brb+HG6xgE=) 16: ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa (hash: U8GSnZZoap+4gf9xVbyRxlPJkgOVmU3uHH07WIciOyM=) 17: bKOziSP_XttR6KXVx43_hKvo5UM.roa (hash: 4QTv2mKHqsuXG6X8b61ridnXdKspO+S1hN2ZP7mulZY=) 18: fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa (hash: JpN5XVDZY1IahuGnYijyyeq5BW4QE/s6DEijCb+GpS0=) 19: j4qiTlmyE2UTELOd_dWPpgYgT7g.roa (hash: tL7gSkajUFv82zTjqwfcJA15HYbXtYeZkwl/AW0YDBU=) 20: nrPLRJPmPFUNnRKVYlt5xynJqbQ.roa (hash: I11fElTQunbRvyiT3+4v3tCdsssjfQCu5kwVzj1TuOs=) 21: ql7rOmZ_btr3d4A37f2Df8JDM0E.roa (hash: /SRzz/yYDf39iuJ35shny0PsFk2f1QMbJVc74yAIIqU=) 22: waLcrNH7uHQklmGVHpfmCMZcL3o.roa (hash: G6P6bFBr2kZHKhtwrt4aC293o8D2o+Zw99eQaBr2bOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d4:26:70:99:69:75:0c:9b:e0:28:9f:7f:14:81:d1:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Sep 24 16:01:23 2026 GMT Not After : Sep 25 16:01:23 2026 GMT Subject: CN=2e53a8a7f41a3d79c2e561ba0efbbdd1cbfa079e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:25:d0:8a:44:01:69:93:16:8f:2d:ea:cc: 20:4d:b6:28:ed:ea:33:02:d7:49:7a:0d:96:bc:23: 08:1d:09:8b:41:54:11:c2:31:3f:0c:6b:22:f3:5d: a1:1b:2f:04:14:eb:94:70:36:ea:53:af:bc:3d:e8: df:c5:d9:f9:84:20:10:dd:cb:1f:81:07:ac:bb:96: 4c:43:8c:4e:db:39:0c:91:34:48:05:79:53:93:f5: 22:b8:1f:41:db:5d:0c:e7:16:b9:62:d3:a5:f2:ae: fc:bc:65:cb:46:50:7a:a5:22:2d:8a:cb:ca:2b:3b: 45:df:a6:23:ea:d5:06:a1:f9:6a:5e:f5:60:d1:2b: fb:f2:be:60:a7:c9:52:de:97:13:b7:05:35:fc:83: db:83:92:59:e2:ac:7a:cb:27:7c:ba:cb:c0:b1:68: 0c:43:be:3e:4a:32:49:20:8f:05:9f:8e:3d:ca:aa: 65:72:d9:3b:e7:ae:cc:82:7d:6c:21:85:29:37:53: 2d:7c:8d:8d:86:c9:43:81:41:ac:c4:bd:18:f4:97: 5a:00:79:8c:f8:e0:39:73:f1:c2:24:99:b3:ff:99: 2a:02:2f:a9:66:db:09:92:e2:e8:28:a6:de:f2:6f: 31:4c:23:1e:e1:68:98:03:72:4b:83:d9:7c:07:3a: e6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:53:A8:A7:F4:1A:3D:79:C2:E5:61:BA:0E:FB:BD:D1:CB:FA:07:9E X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6e:b0:b8:86:1c:5d:4f:9b:98:c3:c0:2d:26:60:53:a7:36: 29:1d:62:f5:94:3e:bf:2a:ae:5d:a6:92:42:5a:b2:2d:21:a3: fc:4f:d2:fa:dc:9d:96:1c:f7:96:4b:c4:ad:0e:d8:66:1d:31: 0a:57:3e:bc:41:9b:79:5a:20:e5:06:b8:a8:9e:52:d4:e4:4e: 0c:7a:09:b9:b4:13:77:65:03:49:12:c1:5f:0a:71:92:b7:78: a2:ac:f8:d2:4d:df:fb:ac:ad:5a:67:90:2f:e9:9f:66:7e:50: c0:95:68:6d:40:a1:f8:84:9c:23:b6:58:3c:0f:fa:3a:07:87: 52:9b:ee:05:b4:8b:91:b3:6b:1f:f9:a9:32:41:1c:80:a7:3b: 16:25:f1:24:e5:8a:60:66:f4:4e:f5:f4:e6:86:df:93:0f:aa: f7:d0:cc:6f:b6:dd:d2:22:8e:2e:32:23:8b:d7:c0:3e:ab:2b: ad:00:9e:e1:d6:4f:6a:db:34:93:ea:e5:2d:db:2d:40:59:76: 3b:4a:d8:98:7b:75:6f:e0:ad:c5:f7:0d:e0:b6:0b:50:27:61: e7:c6:65:99:3e:82:2b:48:3e:e9:c0:cc:dc:c7:04:f9:26:4d: 8b:76:f4:8c:79:6a:ac:c5:52:02:5a:80:bf:e1:7a:f1:ac:ee: 7e:47:81:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDUJnCZaXUMm+Aon38UgdEvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwOTI0MTYwMTIzWhcNMjYwOTI1MTYwMTIzWjAzMTEwLwYDVQQD EygyZTUzYThhN2Y0MWEzZDc5YzJlNTYxYmEwZWZiYmRkMWNiZmEwNzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAkl0IpEAWmTFo8t6swgTbYo7eoz AtdJeg2WvCMIHQmLQVQRwjE/DGsi812hGy8EFOuUcDbqU6+8Pejfxdn5hCAQ3csf gQesu5ZMQ4xO2zkMkTRIBXlTk/UiuB9B210M5xa5YtOl8q78vGXLRlB6pSItisvK KztF36Yj6tUGoflqXvVg0Sv78r5gp8lS3pcTtwU1/IPbg5JZ4qx6yyd8usvAsWgM Q74+SjJJII8Fn449yqplctk7567Mgn1sIYUpN1MtfI2NhslDgUGsxL0Y9JdaAHmM +OA5c/HCJJmz/5kqAi+pZtsJkuLoKKbe8m8xTCMe4WiYA3JLg9l8Bzrm1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5TqKf0Gj15wuVhug77vdHL+geeMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT26wuIYc XU+bmMPALSZgU6c2KR1i9ZQ+vyquXaaSQlqyLSGj/E/S+tydlhz3lkvErQ7YZh0x Clc+vEGbeVog5Qa4qJ5S1ORODHoJubQTd2UDSRLBXwpxkrd4oqz40k3f+6ytWmeQ L+mfZn5QwJVobUCh+IScI7ZYPA/6OgeHUpvuBbSLkbNrH/mpMkEcgKc7FiXxJOWK YGb0TvX05obfkw+q99DMb7bd0iKOLjIji9fAPqsrrQCe4dZPats0k+rlLdstQFl2 O0rYmHt1b+CtxfcN4LYLUCdh58ZlmT6CK0g+6cDM3McE+SZNi3b0jHlqrMVSAlqA v+F68azufkeBFg== -----END CERTIFICATE-----Generated at Thu Sep 24 19:05:23 2026 by rpki-client