$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: daDgjWYrcwO93UkxjXuY2bS8Zrig3JVxsvumFcKNpKI= Subject key identifier: BA:CC:2B:3B:E7:77:BC:29:2A:CF:0C:26:3C:4F:0F:90:E5:AD:35:8E Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019D9AE268B89E40C58DA6001921C043CFBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 1565 Signing time: Fri 17 Apr 2026 10:00:22 +0000 Manifest this update: Fri 17 Apr 2026 10:00:22 +0000 Manifest next update: Sat 18 Apr 2026 10:00:22 +0000 Files and hashes: 1: 4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa (hash: 1+Dj9DjkqqJBKSFukY3ZLUFpE2kBLC6OJYlV3ZzlDHE=) 2: 51RV5bLUK5swpjii_ClMr0Z0LK4.roa (hash: eaEFcr3Fzwqgey9xkzHTc526Wfs17vHkTkKlWZDr6V4=) 3: 6TspkPEtNeMIOxgYCbpvq18PMC0.roa (hash: 8bo4csWweD7RMiWr3h9S7/8r7y82pLqLqFjVLFXUIaQ=) 4: 7Gfdl5k6T4Nt-xZrQUmYT2Wb0Q4.roa (hash: praaG5V4IjeUDRh2H9CpWs4rx+iMgs/zDPv4j89TbtU=) 5: 7meu7s1H44zdKfP25MFBcQbtGHI.roa (hash: WvFf3T5R9dDcoqBxFhAiq7tVRoIpj2LekmR2mNGzL1E=) 6: 9sk7o3-J1zppXpr20oFx7pS_U0c.roa (hash: pBXnQfzjUWzJ2ZBcFMKN6xODjJ4zYHByfhzLBkNvrdQ=) 7: BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa (hash: Q2q3HL2ikSVxapYF8tEqUbGc2dsp+tUqOuJvpkTfgSw=) 8: DpYS7lRrillfu9K51nCIniTqNmY.roa (hash: UkQwWYpXy7K/OwHNGaKai/nAfoWeLWXYqtRRe4F8mQE=) 9: EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa (hash: ZEu9nOF1kbSjWSpE4NcC/VjSw7SsIRZ4h2G/ZSkfcXA=) 10: HxGP4RyCdmbtsC_X7rEOMPaadGs.roa (hash: E1pPUcXW5mPkpSrQhelqafY4OsK2tjQxSmKWda1vbOE=) 11: MZUJ_YtPrARksG8JiNeh9h5bxjU.roa (hash: gULv6+Niu5hf2ZuzY/CCoAvGjaEsELBZ6B3Mi+f8gPo=) 12: NNB2avyCldcIMCL0f0MRWjsmPGg.roa (hash: DEfqSuvzloP85jcJKk7ZgGBFiOXRfF0MqFeO19BqKn0=) 13: OvQCPbU7xaexN6KNG98gTxBlPZ8.roa (hash: B+7vMRgtRKWIYiyObWJnR9TPAurOqhLva4J/rVDJQSQ=) 14: QLLq3_7q5uUt7ipkpQL0iFrZcwE.roa (hash: ix8UNlXwntzVUKkNrdwMiCBgS77GVr+qjV/KIZeeGps=) 15: RSlrMSXsYQqD5_X3qdeusHBjTV8.roa (hash: rm68bm8MwPNoLfEzVKTjK5KhGKZaNdAMKVt15UbeVB8=) 16: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: 7Sbl5135WLsaM3mLvObYQcz3reO3IFUkQ9MTKVm6EV8=) 17: WXitulZE6XZAWLN9EH7AUrKlJFA.roa (hash: WUGgSZ27pj+bCnK3yWkRpPdHgH/Lrga3crrfT495xGI=) 18: ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa (hash: U8GSnZZoap+4gf9xVbyRxlPJkgOVmU3uHH07WIciOyM=) 19: bP0DL2QAJVKBhisPOEKSCrb5P7I.roa (hash: SSq+LObEvTskeEChP41dHP/d10Dn6Nt47PhXiubra4Q=) 20: bToR6umJYInit4YmCjsW758Knfc.roa (hash: 37BGec+qdTp+UnRV0AER+V8DA3MB50nkwTf82xMXRJw=) 21: fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa (hash: JpN5XVDZY1IahuGnYijyyeq5BW4QE/s6DEijCb+GpS0=) 22: fbSoKsXWu3vMu37siMiY-wAiEWk.roa (hash: o2jpBV54JiENtAI5H5hS+86ge/vbtsQ6m03B1UpGa2w=) 23: j4qiTlmyE2UTELOd_dWPpgYgT7g.roa (hash: tL7gSkajUFv82zTjqwfcJA15HYbXtYeZkwl/AW0YDBU=) 24: nrPLRJPmPFUNnRKVYlt5xynJqbQ.roa (hash: I11fElTQunbRvyiT3+4v3tCdsssjfQCu5kwVzj1TuOs=) 25: waLcrNH7uHQklmGVHpfmCMZcL3o.roa (hash: G6P6bFBr2kZHKhtwrt4aC293o8D2o+Zw99eQaBr2bOo=) 26: wsRgR45KaT49poTA_W1Ls5MLbfs.roa (hash: ViM4U6kU9YALqeWbdS/cNkJpeVULZz246+oAFPxJ4Yc=) 27: zRZZ6UwPjjxw58VaB1rpkI5mlKo.roa (hash: n+9o/e8utiREiQm1EccaQwJdw3Xtg72tou+ySQuFAbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:e2:68:b8:9e:40:c5:8d:a6:00:19:21:c0:43:cf:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Apr 17 10:00:22 2026 GMT Not After : Apr 18 10:00:22 2026 GMT Subject: CN=bacc2b3be777bc292acf0c263c4f0f90e5ad358e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:12:7e:f5:ee:ad:b6:b0:37:f4:4a:d0:33: 5a:4c:5c:a2:c0:fc:bf:71:cc:a8:55:ff:ae:ae:2c: 6c:9f:80:02:e6:8b:c1:0b:bd:fb:d6:3d:ad:9f:4b: 3f:59:a0:ef:8f:ce:d9:36:2a:c3:65:7b:7c:35:d5: 72:29:e5:41:5b:71:c0:dc:1e:cd:9d:57:02:88:7a: c1:d5:91:08:ea:fa:1c:45:30:1c:e2:9a:28:fb:b6: 52:fe:0f:e5:11:61:ff:41:f7:d6:30:f3:94:e8:eb: 06:5c:5a:e3:6c:e7:7f:57:f9:1e:62:9d:be:91:8a: 3e:31:27:98:8c:89:c0:5d:24:5f:a5:ef:75:b7:9e: ab:54:9d:76:a0:7c:94:f7:8b:83:92:77:37:97:69: d1:8a:ef:b1:81:33:64:44:9d:21:18:82:87:5d:84: 81:9b:ed:48:fa:e2:00:c2:64:2c:3a:e0:de:25:86: 1a:2d:28:11:12:de:97:e3:c3:d1:fb:9a:5d:22:a4: a6:f3:b0:b4:1e:a3:61:95:43:07:93:37:66:b5:51: e1:75:df:d1:3d:90:77:10:ae:b0:ee:da:9d:00:74: c9:07:9e:9a:e6:1b:72:b5:6b:0d:41:90:6e:1d:b2: 86:fe:e2:94:1b:e2:7e:53:7f:92:18:64:75:64:54: 23:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CC:2B:3B:E7:77:BC:29:2A:CF:0C:26:3C:4F:0F:90:E5:AD:35:8E X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:fe:14:f1:49:7f:bf:7d:e7:88:02:d7:47:fa:e4:3b:77:aa: 03:3b:f9:8b:6b:4b:bd:2d:14:80:cb:45:ff:55:db:07:bd:2a: 93:f7:5b:10:df:98:ef:49:3a:71:4b:df:37:60:c7:e3:e0:c2: fa:5e:29:35:69:85:9e:a8:78:af:10:41:a1:99:82:50:5a:24: 60:04:1a:7b:61:44:b0:a7:1d:46:ef:17:35:00:52:41:f7:9c: 65:d3:4c:b5:52:7b:d0:3e:38:dc:84:92:a5:5b:ed:07:dd:2a: 77:47:c4:cc:3d:ed:4b:71:65:1c:64:05:48:1c:18:30:32:50: 64:12:c0:21:8c:00:00:0d:3b:9f:3d:43:bb:b1:f4:35:f0:d7: bc:ad:10:db:45:5d:76:f8:70:67:f9:19:ae:81:ca:fc:9f:5a: ab:1d:d0:56:8b:54:44:59:99:2a:6a:a9:20:d8:20:ae:f8:63: 01:62:b1:fb:37:89:aa:d4:44:77:64:66:22:7b:cf:fd:3e:a7: 1c:ae:f5:f0:20:c3:c8:f4:af:a2:18:82:23:75:b0:19:0d:fa: c5:a2:2f:47:e2:74:c7:fc:55:2f:86:1e:3b:a1:b9:f2:eb:04: e2:6a:14:0f:78:05:b5:a9:80:a6:25:c5:ae:53:65:16:c7:57: 8e:50:9c:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2a4mi4nkDFjaYAGSHAQ8+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwNDE3MTAwMDIyWhcNMjYwNDE4MTAwMDIyWjAzMTEwLwYDVQQD EyhiYWNjMmIzYmU3NzdiYzI5MmFjZjBjMjYzYzRmMGY5MGU1YWQzNThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPwSfvXurbawN/RK0DNaTFyiwPy/ ccyoVf+urixsn4AC5ovBC7371j2tn0s/WaDvj87ZNirDZXt8NdVyKeVBW3HA3B7N nVcCiHrB1ZEI6vocRTAc4poo+7ZS/g/lEWH/QffWMPOU6OsGXFrjbOd/V/keYp2+ kYo+MSeYjInAXSRfpe91t56rVJ12oHyU94uDknc3l2nRiu+xgTNkRJ0hGIKHXYSB m+1I+uIAwmQsOuDeJYYaLSgREt6X48PR+5pdIqSm87C0HqNhlUMHkzdmtVHhdd/R PZB3EK6w7tqdAHTJB56a5htytWsNQZBuHbKG/uKUG+J+U3+SGGR1ZFQj1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrMKzvnd7wpKs8MJjxPD5DlrTWOMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaP4U8Ul/ v33niALXR/rkO3eqAzv5i2tLvS0UgMtF/1XbB70qk/dbEN+Y70k6cUvfN2DH4+DC +l4pNWmFnqh4rxBBoZmCUFokYAQae2FEsKcdRu8XNQBSQfecZdNMtVJ70D443ISS pVvtB90qd0fEzD3tS3FlHGQFSBwYMDJQZBLAIYwAAA07nz1Du7H0NfDXvK0Q20Vd dvhwZ/kZroHK/J9aqx3QVotURFmZKmqpINggrvhjAWKx+zeJqtREd2RmInvP/T6n HK718CDDyPSvohiCI3WwGQ36xaIvR+J0x/xVL4YeO6G58usE4moUD3gFtamApiXF rlNlFsdXjlCcdw== -----END CERTIFICATE-----Generated at Fri Apr 17 13:13:57 2026 by rpki-client