$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: q4ex+tczb7Demq9CiTaeRNuFb+WZyfdHl739G1mckmI= Subject key identifier: 64:E1:12:23:3C:D4:9C:33:00:32:B6:73:07:7C:59:A4:66:88:B6:4B Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019EBDA31155F73DE42F30913CDD4D86F413 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 1601 Signing time: Fri 12 Jun 2026 21:00:41 +0000 Manifest this update: Fri 12 Jun 2026 21:00:41 +0000 Manifest next update: Sat 13 Jun 2026 21:00:41 +0000 Files and hashes: 1: 4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa (hash: 1+Dj9DjkqqJBKSFukY3ZLUFpE2kBLC6OJYlV3ZzlDHE=) 2: 51RV5bLUK5swpjii_ClMr0Z0LK4.roa (hash: eaEFcr3Fzwqgey9xkzHTc526Wfs17vHkTkKlWZDr6V4=) 3: 7Gfdl5k6T4Nt-xZrQUmYT2Wb0Q4.roa (hash: praaG5V4IjeUDRh2H9CpWs4rx+iMgs/zDPv4j89TbtU=) 4: 7meu7s1H44zdKfP25MFBcQbtGHI.roa (hash: WvFf3T5R9dDcoqBxFhAiq7tVRoIpj2LekmR2mNGzL1E=) 5: 94dyBOLbRDpnRcB1TDzaqi0P_7E.roa (hash: 4anumJNiQjV3dDe2I41pvRC721HOGi/G29AUYm2u5e4=) 6: 9sk7o3-J1zppXpr20oFx7pS_U0c.roa (hash: pBXnQfzjUWzJ2ZBcFMKN6xODjJ4zYHByfhzLBkNvrdQ=) 7: AHlPOn0Qib_wJIW66ddXuyJjfCE.roa (hash: yQg+n6qV5FpQdhBVTxyS432zZ8vWKSmOgzEpXjNwCzk=) 8: BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa (hash: Q2q3HL2ikSVxapYF8tEqUbGc2dsp+tUqOuJvpkTfgSw=) 9: EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa (hash: ZEu9nOF1kbSjWSpE4NcC/VjSw7SsIRZ4h2G/ZSkfcXA=) 10: HxGP4RyCdmbtsC_X7rEOMPaadGs.roa (hash: E1pPUcXW5mPkpSrQhelqafY4OsK2tjQxSmKWda1vbOE=) 11: Kc8ZHHbk_PBSGznngLuoCM598QE.roa (hash: YQBcqN+Kh6CQlAY3/VB4fYON+e9pmHc9Jguh5FAoenk=) 12: MZUJ_YtPrARksG8JiNeh9h5bxjU.roa (hash: gULv6+Niu5hf2ZuzY/CCoAvGjaEsELBZ6B3Mi+f8gPo=) 13: NNB2avyCldcIMCL0f0MRWjsmPGg.roa (hash: DEfqSuvzloP85jcJKk7ZgGBFiOXRfF0MqFeO19BqKn0=) 14: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: vv3sEivNnn9l4ShWvJpaMEQkDa+bWlWpuKbdfBB7drk=) 15: WXitulZE6XZAWLN9EH7AUrKlJFA.roa (hash: WUGgSZ27pj+bCnK3yWkRpPdHgH/Lrga3crrfT495xGI=) 16: ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa (hash: U8GSnZZoap+4gf9xVbyRxlPJkgOVmU3uHH07WIciOyM=) 17: bToR6umJYInit4YmCjsW758Knfc.roa (hash: 37BGec+qdTp+UnRV0AER+V8DA3MB50nkwTf82xMXRJw=) 18: dDV9cw2CeKzJ-llu__WQtBWBaBY.roa (hash: 0lA5AjVyBh2dMfH3N8bdN7kVkHk/r4peFpEI1RzOKJs=) 19: fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa (hash: JpN5XVDZY1IahuGnYijyyeq5BW4QE/s6DEijCb+GpS0=) 20: j4qiTlmyE2UTELOd_dWPpgYgT7g.roa (hash: tL7gSkajUFv82zTjqwfcJA15HYbXtYeZkwl/AW0YDBU=) 21: nrPLRJPmPFUNnRKVYlt5xynJqbQ.roa (hash: I11fElTQunbRvyiT3+4v3tCdsssjfQCu5kwVzj1TuOs=) 22: ocvs0xJgvnYOlkU7g_PsYJ8jzkI.roa (hash: NDkizho/VVHKiL/ocU+qMBQwzE5gvlQ/xJmsHF69Dig=) 23: w2EbvbMlk1vQVS1L_gh7f8JcQII.roa (hash: 0r3piY21wjYG6/bd5paELk5vAN9xgo5tcM9Ea+Ly8ns=) 24: waLcrNH7uHQklmGVHpfmCMZcL3o.roa (hash: G6P6bFBr2kZHKhtwrt4aC293o8D2o+Zw99eQaBr2bOo=) 25: wsRgR45KaT49poTA_W1Ls5MLbfs.roa (hash: ViM4U6kU9YALqeWbdS/cNkJpeVULZz246+oAFPxJ4Yc=) 26: yesLs1SlY3ejovzHu7Whv86pe8U.roa (hash: JOd8FqDPpZ3eE0/Ly1351P1HFKq63GtasaJ8OjQUrwU=) 27: zRZZ6UwPjjxw58VaB1rpkI5mlKo.roa (hash: n+9o/e8utiREiQm1EccaQwJdw3Xtg72tou+ySQuFAbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bd:a3:11:55:f7:3d:e4:2f:30:91:3c:dd:4d:86:f4:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jun 12 21:00:41 2026 GMT Not After : Jun 13 21:00:41 2026 GMT Subject: CN=64e112233cd49c330032b673077c59a46688b64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:96:8f:df:40:44:88:ee:41:ec:75:14:0f: 2d:79:e0:cd:60:00:af:02:c0:a4:31:74:7b:b9:c7: 77:27:2e:35:36:89:24:b1:12:1d:4a:fc:dc:3b:d0: d3:b2:e5:d7:9e:8b:50:68:41:96:6b:d0:03:2d:a7: a2:57:20:6f:3d:62:e3:3b:20:51:53:b3:a2:ed:7c: b3:08:42:3e:56:44:c3:18:94:65:28:94:d0:97:5e: fc:5b:f9:be:bc:10:72:05:98:ca:12:b7:c0:a3:1b: 6f:4c:a5:a5:89:c4:3e:98:2f:7f:4c:2c:72:a4:66: 49:6e:19:3a:b4:6e:15:11:4b:57:21:ea:60:34:1b: aa:9e:61:f5:17:af:53:db:35:92:4e:f9:e0:73:66: 65:7e:35:6d:20:30:b8:19:d6:eb:0c:b6:7d:14:e2: bb:63:1c:14:de:6f:c8:c8:21:14:9b:d5:79:b3:20: d5:55:0d:ae:3e:84:f3:5d:aa:90:1c:6d:d8:35:f2: e1:83:df:33:c6:1c:b8:a0:ba:74:b1:09:a2:d8:f8: db:84:7b:9d:6c:f2:14:8d:5a:24:5d:4b:a7:ed:ea: 4a:f4:4b:b8:ee:7f:66:f4:1b:4b:4b:8c:0b:6f:84: a0:cd:b3:d8:98:23:2a:4c:5f:05:bf:bc:91:5e:65: a3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E1:12:23:3C:D4:9C:33:00:32:B6:73:07:7C:59:A4:66:88:B6:4B X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:fa:de:bb:b2:87:df:c0:6f:86:3f:47:0b:91:6c:78:18:c7: a4:82:96:e6:76:f8:56:e4:f7:0c:a5:53:4f:f7:4c:e2:0d:d9: b6:20:5e:be:8d:79:da:d4:a4:b4:b3:af:47:a1:2d:a8:d7:4b: ff:05:aa:18:d5:aa:0b:86:d0:fe:98:62:ce:26:08:9e:f7:71: a0:f5:37:e8:e1:8d:62:46:97:e7:b7:73:0f:d9:e4:7a:f6:fc: a3:21:dd:6a:cb:00:c2:4d:27:64:c9:38:aa:d6:88:30:f9:ca: c4:a3:36:b8:8d:a1:9e:2e:4c:cd:ef:6d:4d:20:b7:19:3d:74: d7:e3:dc:6b:9e:d1:f5:d6:4b:22:6c:b0:eb:7b:88:0b:aa:f2: b0:ce:c0:f3:80:20:c3:2b:f3:ef:00:4a:c7:68:12:06:33:8c: 27:03:f7:08:79:97:02:1a:00:b3:2e:6e:28:ac:28:16:ca:a6: d2:6c:c5:50:35:a4:20:92:b7:90:66:7a:3f:1f:71:5a:97:0b: 2e:f1:eb:b8:10:68:db:cb:1e:d0:c1:49:52:27:8f:cb:b5:8c: 3b:03:b7:50:0e:a7:f9:c6:c4:95:90:80:66:4b:46:a4:ed:28: 3e:eb:e4:dd:07:40:04:a8:fb:53:ea:36:8b:6a:8c:99:67:c8: 37:bb:e1:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ69oxFV9z3kLzCRPN1NhvQTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwNjEyMjEwMDQxWhcNMjYwNjEzMjEwMDQxWjAzMTEwLwYDVQQD Eyg2NGUxMTIyMzNjZDQ5YzMzMDAzMmI2NzMwNzdjNTlhNDY2ODhiNjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4GWj99ARIjuQex1FA8teeDNYACv AsCkMXR7ucd3Jy41NokksRIdSvzcO9DTsuXXnotQaEGWa9ADLaeiVyBvPWLjOyBR U7Oi7XyzCEI+VkTDGJRlKJTQl178W/m+vBByBZjKErfAoxtvTKWlicQ+mC9/TCxy pGZJbhk6tG4VEUtXIepgNBuqnmH1F69T2zWSTvngc2ZlfjVtIDC4GdbrDLZ9FOK7 YxwU3m/IyCEUm9V5syDVVQ2uPoTzXaqQHG3YNfLhg98zxhy4oLp0sQmi2PjbhHud bPIUjVokXUun7epK9Eu47n9m9BtLS4wLb4SgzbPYmCMqTF8Fv7yRXmWjdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGThEiM81JwzADK2cwd8WaRmiLZLMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvreu7KH 38Bvhj9HC5FseBjHpIKW5nb4VuT3DKVTT/dM4g3ZtiBevo152tSktLOvR6EtqNdL /wWqGNWqC4bQ/phiziYInvdxoPU36OGNYkaX57dzD9nkevb8oyHdassAwk0nZMk4 qtaIMPnKxKM2uI2hni5Mze9tTSC3GT101+Pca57R9dZLImyw63uIC6rysM7A84Ag wyvz7wBKx2gSBjOMJwP3CHmXAhoAsy5uKKwoFsqm0mzFUDWkIJK3kGZ6Px9xWpcL LvHruBBo28se0MFJUiePy7WMOwO3UA6n+cbElZCAZktGpO0oPuvk3QdABKj7U+o2 i2qMmWfIN7vh4g== -----END CERTIFICATE-----Generated at Sat Jun 13 07:20:03 2026 by rpki-client