$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: rHlM5ctDvHlOWAHIBg80QdJ81qZsnD+xkHc2FEedhAU= Subject key identifier: E6:C8:5D:58:AC:09:EF:FC:8A:A4:D8:E9:75:65:E0:3E:03:9F:29:AF Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019F90C79D0AC0DBE1EAB638AE33533CDBE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 1673 Signing time: Thu 23 Jul 2026 21:00:28 +0000 Manifest this update: Thu 23 Jul 2026 21:00:28 +0000 Manifest next update: Fri 24 Jul 2026 21:00:28 +0000 Files and hashes: 1: 4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa (hash: 1+Dj9DjkqqJBKSFukY3ZLUFpE2kBLC6OJYlV3ZzlDHE=) 2: 51RV5bLUK5swpjii_ClMr0Z0LK4.roa (hash: eaEFcr3Fzwqgey9xkzHTc526Wfs17vHkTkKlWZDr6V4=) 3: 7Gfdl5k6T4Nt-xZrQUmYT2Wb0Q4.roa (hash: praaG5V4IjeUDRh2H9CpWs4rx+iMgs/zDPv4j89TbtU=) 4: 7meu7s1H44zdKfP25MFBcQbtGHI.roa (hash: WvFf3T5R9dDcoqBxFhAiq7tVRoIpj2LekmR2mNGzL1E=) 5: 7u4RVlV52XWyTyDw_qznuD0UgXs.roa (hash: vYm6Nz0cS2O84RBnN+siuod691AUb0y3q4ys6CicPZI=) 6: 94dyBOLbRDpnRcB1TDzaqi0P_7E.roa (hash: 4anumJNiQjV3dDe2I41pvRC721HOGi/G29AUYm2u5e4=) 7: 9sk7o3-J1zppXpr20oFx7pS_U0c.roa (hash: pBXnQfzjUWzJ2ZBcFMKN6xODjJ4zYHByfhzLBkNvrdQ=) 8: Ac4tNrQugLPaGq4xz6HWInHCm6M.roa (hash: siaEigQ+ejfWwE/knI+4/nv5Jzojs+pIiSVBiWGlM3E=) 9: BiM5LxW5qvRjEp2keJNzm9u7VPc.roa (hash: +2yiPexL5iLD0vdODbDPQRtRM0VrKm5eDi0szvUR44s=) 10: BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa (hash: Q2q3HL2ikSVxapYF8tEqUbGc2dsp+tUqOuJvpkTfgSw=) 11: EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa (hash: ZEu9nOF1kbSjWSpE4NcC/VjSw7SsIRZ4h2G/ZSkfcXA=) 12: GWUpBhLv0PHDsIV3w3GIbM6-96s.roa (hash: qr4GrREKG7A3hhdS3Agv52m1MsgGN/WZ20ATzaaaiuk=) 13: HxGP4RyCdmbtsC_X7rEOMPaadGs.roa (hash: E1pPUcXW5mPkpSrQhelqafY4OsK2tjQxSmKWda1vbOE=) 14: MZUJ_YtPrARksG8JiNeh9h5bxjU.roa (hash: gULv6+Niu5hf2ZuzY/CCoAvGjaEsELBZ6B3Mi+f8gPo=) 15: NNB2avyCldcIMCL0f0MRWjsmPGg.roa (hash: DEfqSuvzloP85jcJKk7ZgGBFiOXRfF0MqFeO19BqKn0=) 16: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: h+jy84ATOSbIUR/UPEuabqhp/lDi/HvFxWwJJX8ixME=) 17: XPnc98u3CUN5obEHzxurP6rkBVw.roa (hash: 4m3ABUbVfJN36M772cp8y6/T3l68sMul8PuOrR8yh5I=) 18: ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa (hash: U8GSnZZoap+4gf9xVbyRxlPJkgOVmU3uHH07WIciOyM=) 19: dDV9cw2CeKzJ-llu__WQtBWBaBY.roa (hash: 0lA5AjVyBh2dMfH3N8bdN7kVkHk/r4peFpEI1RzOKJs=) 20: fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa (hash: JpN5XVDZY1IahuGnYijyyeq5BW4QE/s6DEijCb+GpS0=) 21: j4qiTlmyE2UTELOd_dWPpgYgT7g.roa (hash: tL7gSkajUFv82zTjqwfcJA15HYbXtYeZkwl/AW0YDBU=) 22: nrPLRJPmPFUNnRKVYlt5xynJqbQ.roa (hash: I11fElTQunbRvyiT3+4v3tCdsssjfQCu5kwVzj1TuOs=) 23: ocvs0xJgvnYOlkU7g_PsYJ8jzkI.roa (hash: NDkizho/VVHKiL/ocU+qMBQwzE5gvlQ/xJmsHF69Dig=) 24: ql7rOmZ_btr3d4A37f2Df8JDM0E.roa (hash: /SRzz/yYDf39iuJ35shny0PsFk2f1QMbJVc74yAIIqU=) 25: w2EbvbMlk1vQVS1L_gh7f8JcQII.roa (hash: 0r3piY21wjYG6/bd5paELk5vAN9xgo5tcM9Ea+Ly8ns=) 26: waLcrNH7uHQklmGVHpfmCMZcL3o.roa (hash: G6P6bFBr2kZHKhtwrt4aC293o8D2o+Zw99eQaBr2bOo=) 27: zRZZ6UwPjjxw58VaB1rpkI5mlKo.roa (hash: n+9o/e8utiREiQm1EccaQwJdw3Xtg72tou+ySQuFAbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 21:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:c7:9d:0a:c0:db:e1:ea:b6:38:ae:33:53:3c:db:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jul 23 21:00:28 2026 GMT Not After : Jul 24 21:00:28 2026 GMT Subject: CN=e6c85d58ac09effc8aa4d8e97565e03e039f29af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:13:80:9e:01:6a:73:3e:04:bc:57:d4:77:37: 3a:cd:b2:b9:a2:30:e5:4a:ac:31:ff:93:6d:11:0e: 49:d1:95:f8:91:18:f5:6a:81:c1:db:0c:45:aa:35: 03:12:bd:34:65:7f:98:90:88:24:d8:e9:c9:58:d8: 28:76:35:75:cf:f2:8b:58:08:8b:8f:1c:7f:81:2f: 31:30:90:19:69:db:1e:cf:44:f3:d4:9c:30:f3:33: 54:8b:9e:96:76:55:25:4b:27:bf:c0:39:ca:8e:2e: 64:4f:d6:22:65:7f:cd:e0:d7:82:fd:84:6b:6e:07: df:66:2a:1d:4e:b3:f3:e5:a3:1a:da:80:de:df:e1: 26:a6:4d:4a:61:0d:f8:d1:be:0b:a8:d5:37:0a:03: 29:9d:b8:b0:01:0a:30:f3:c0:e7:15:f4:7a:86:a2: cc:ea:c1:c1:49:29:c4:5a:bb:7c:b9:7c:37:8a:55: 04:00:4e:8d:37:8e:f0:46:7e:2a:39:0e:4b:04:4e: 05:41:0b:50:5b:ef:ca:42:45:cf:c4:b9:72:28:33: 4c:32:82:24:06:c4:b3:39:ec:2c:0d:cf:6f:59:d0: 0d:cf:be:86:2b:8a:6c:88:c4:81:02:4f:91:f8:ff: 96:a6:a6:55:96:6a:99:c4:4a:d3:42:90:08:57:15: f3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C8:5D:58:AC:09:EF:FC:8A:A4:D8:E9:75:65:E0:3E:03:9F:29:AF X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:cc:a7:99:63:dc:78:6d:75:b9:26:cd:00:5b:90:db:14:b9: fb:1c:28:73:50:e2:c5:ff:65:97:8b:3b:82:ee:b8:99:2b:25: 0e:e1:1c:23:f3:72:dc:30:69:fe:ce:50:86:b3:90:df:af:7e: 64:bd:4b:0d:bb:79:24:3c:16:97:11:d5:27:8d:da:f7:87:c5: 68:3e:cf:45:55:b9:da:dd:9d:f5:f5:a6:e7:32:30:38:ad:87: 87:c1:b5:98:50:79:15:c5:ea:53:2d:f5:e2:8a:99:5d:e4:b4: 5f:b5:bb:b1:29:60:56:b0:19:07:a2:77:fd:7f:e5:a8:b4:81: 22:77:9b:f2:04:95:9d:8d:31:cc:dd:99:75:b8:19:98:0a:54: 87:68:78:e5:34:a5:ee:ca:77:40:53:a9:57:13:42:13:c6:7e: 4e:ee:4c:90:a8:c5:a3:66:45:e2:48:6b:3a:dd:bf:ee:29:a7: 70:9f:b8:02:f4:b0:26:53:0a:b8:be:c4:fa:05:65:b2:e0:c5: b0:f7:a4:d2:6c:6a:d5:f0:cd:a2:d7:b1:e3:85:9d:58:42:c0: 21:ef:36:a8:0f:ac:6c:97:00:0f:29:e0:70:5a:61:e4:78:14: 5d:38:68:4b:e0:3c:af:bc:0e:03:f3:f0:78:cc:5a:72:39:b6: a6:dd:1e:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Qx50KwNvh6rY4rjNTPNvnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwNzIzMjEwMDI4WhcNMjYwNzI0MjEwMDI4WjAzMTEwLwYDVQQD EyhlNmM4NWQ1OGFjMDllZmZjOGFhNGQ4ZTk3NTY1ZTAzZTAzOWYyOWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhOAngFqcz4EvFfUdzc6zbK5ojDl Sqwx/5NtEQ5J0ZX4kRj1aoHB2wxFqjUDEr00ZX+YkIgk2OnJWNgodjV1z/KLWAiL jxx/gS8xMJAZadsez0Tz1Jww8zNUi56WdlUlSye/wDnKji5kT9YiZX/N4NeC/YRr bgffZiodTrPz5aMa2oDe3+Empk1KYQ340b4LqNU3CgMpnbiwAQow88DnFfR6hqLM 6sHBSSnEWrt8uXw3ilUEAE6NN47wRn4qOQ5LBE4FQQtQW+/KQkXPxLlyKDNMMoIk BsSzOewsDc9vWdANz76GK4psiMSBAk+R+P+WpqZVlmqZxErTQpAIVxXzaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObIXVisCe/8iqTY6XVl4D4DnymvMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMynmWPc eG11uSbNAFuQ2xS5+xwoc1Dixf9ll4s7gu64mSslDuEcI/Ny3DBp/s5QhrOQ369+ ZL1LDbt5JDwWlxHVJ43a94fFaD7PRVW52t2d9fWm5zIwOK2Hh8G1mFB5FcXqUy31 4oqZXeS0X7W7sSlgVrAZB6J3/X/lqLSBIneb8gSVnY0xzN2ZdbgZmApUh2h45TSl 7sp3QFOpVxNCE8Z+Tu5MkKjFo2ZF4khrOt2/7imncJ+4AvSwJlMKuL7E+gVlsuDF sPek0mxq1fDNotex44WdWELAIe82qA+sbJcADyngcFph5HgUXThoS+A8r7wOA/Pw eMxacjm2pt0eoA== -----END CERTIFICATE-----Generated at Fri Jul 24 04:39:16 2026 by rpki-client