$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: XkR9jegtImfN9zuvjRUuSKj956C+TVB9nt7N7X+/Df0= Subject key identifier: 30:55:0F:39:E3:FF:A9:D4:6C:B1:80:E4:89:9C:F6:E6:D0:20:E4:25 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019FA9E29EB938DCA3DCA287BB96DFFC39F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 1680 Signing time: Tue 28 Jul 2026 18:00:29 +0000 Manifest this update: Tue 28 Jul 2026 18:00:29 +0000 Manifest next update: Wed 29 Jul 2026 18:00:29 +0000 Files and hashes: 1: 4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa (hash: 1+Dj9DjkqqJBKSFukY3ZLUFpE2kBLC6OJYlV3ZzlDHE=) 2: 51RV5bLUK5swpjii_ClMr0Z0LK4.roa (hash: eaEFcr3Fzwqgey9xkzHTc526Wfs17vHkTkKlWZDr6V4=) 3: 7Gfdl5k6T4Nt-xZrQUmYT2Wb0Q4.roa (hash: praaG5V4IjeUDRh2H9CpWs4rx+iMgs/zDPv4j89TbtU=) 4: 7meu7s1H44zdKfP25MFBcQbtGHI.roa (hash: WvFf3T5R9dDcoqBxFhAiq7tVRoIpj2LekmR2mNGzL1E=) 5: 7u4RVlV52XWyTyDw_qznuD0UgXs.roa (hash: vYm6Nz0cS2O84RBnN+siuod691AUb0y3q4ys6CicPZI=) 6: 94dyBOLbRDpnRcB1TDzaqi0P_7E.roa (hash: 4anumJNiQjV3dDe2I41pvRC721HOGi/G29AUYm2u5e4=) 7: 9sk7o3-J1zppXpr20oFx7pS_U0c.roa (hash: pBXnQfzjUWzJ2ZBcFMKN6xODjJ4zYHByfhzLBkNvrdQ=) 8: Ac4tNrQugLPaGq4xz6HWInHCm6M.roa (hash: siaEigQ+ejfWwE/knI+4/nv5Jzojs+pIiSVBiWGlM3E=) 9: BiM5LxW5qvRjEp2keJNzm9u7VPc.roa (hash: +2yiPexL5iLD0vdODbDPQRtRM0VrKm5eDi0szvUR44s=) 10: BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa (hash: Q2q3HL2ikSVxapYF8tEqUbGc2dsp+tUqOuJvpkTfgSw=) 11: EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa (hash: ZEu9nOF1kbSjWSpE4NcC/VjSw7SsIRZ4h2G/ZSkfcXA=) 12: GWUpBhLv0PHDsIV3w3GIbM6-96s.roa (hash: qr4GrREKG7A3hhdS3Agv52m1MsgGN/WZ20ATzaaaiuk=) 13: HxGP4RyCdmbtsC_X7rEOMPaadGs.roa (hash: E1pPUcXW5mPkpSrQhelqafY4OsK2tjQxSmKWda1vbOE=) 14: MZUJ_YtPrARksG8JiNeh9h5bxjU.roa (hash: gULv6+Niu5hf2ZuzY/CCoAvGjaEsELBZ6B3Mi+f8gPo=) 15: NNB2avyCldcIMCL0f0MRWjsmPGg.roa (hash: DEfqSuvzloP85jcJKk7ZgGBFiOXRfF0MqFeO19BqKn0=) 16: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: rZ2EbUnPVcYCDHURzMLQLlSDJfxHHYmnojYlezuURhw=) 17: XPnc98u3CUN5obEHzxurP6rkBVw.roa (hash: 4m3ABUbVfJN36M772cp8y6/T3l68sMul8PuOrR8yh5I=) 18: ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa (hash: U8GSnZZoap+4gf9xVbyRxlPJkgOVmU3uHH07WIciOyM=) 19: dDV9cw2CeKzJ-llu__WQtBWBaBY.roa (hash: 0lA5AjVyBh2dMfH3N8bdN7kVkHk/r4peFpEI1RzOKJs=) 20: fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa (hash: JpN5XVDZY1IahuGnYijyyeq5BW4QE/s6DEijCb+GpS0=) 21: j4qiTlmyE2UTELOd_dWPpgYgT7g.roa (hash: tL7gSkajUFv82zTjqwfcJA15HYbXtYeZkwl/AW0YDBU=) 22: nrPLRJPmPFUNnRKVYlt5xynJqbQ.roa (hash: I11fElTQunbRvyiT3+4v3tCdsssjfQCu5kwVzj1TuOs=) 23: ocvs0xJgvnYOlkU7g_PsYJ8jzkI.roa (hash: NDkizho/VVHKiL/ocU+qMBQwzE5gvlQ/xJmsHF69Dig=) 24: ql7rOmZ_btr3d4A37f2Df8JDM0E.roa (hash: /SRzz/yYDf39iuJ35shny0PsFk2f1QMbJVc74yAIIqU=) 25: w2EbvbMlk1vQVS1L_gh7f8JcQII.roa (hash: 0r3piY21wjYG6/bd5paELk5vAN9xgo5tcM9Ea+Ly8ns=) 26: waLcrNH7uHQklmGVHpfmCMZcL3o.roa (hash: G6P6bFBr2kZHKhtwrt4aC293o8D2o+Zw99eQaBr2bOo=) 27: zRZZ6UwPjjxw58VaB1rpkI5mlKo.roa (hash: n+9o/e8utiREiQm1EccaQwJdw3Xtg72tou+ySQuFAbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:e2:9e:b9:38:dc:a3:dc:a2:87:bb:96:df:fc:39:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jul 28 18:00:29 2026 GMT Not After : Jul 29 18:00:29 2026 GMT Subject: CN=30550f39e3ffa9d46cb180e4899cf6e6d020e425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f7:94:2c:9d:19:c7:e5:58:6c:90:50:58:c7: 42:ce:c4:13:d3:cd:65:1a:58:62:01:6f:ec:7f:17: 23:ad:71:32:85:eb:ed:e5:33:27:60:6d:fe:90:56: 7e:eb:18:29:70:f7:e7:ae:b8:c2:c1:5e:d2:30:66: aa:41:d1:95:fe:bb:f6:ab:dc:ec:a8:d7:09:01:f4: d5:af:4d:5c:ec:dd:e0:6a:3f:86:dc:bc:d7:21:87: 79:65:89:08:72:5d:69:25:49:e8:98:0e:93:86:0c: a0:72:58:9e:32:0a:d7:35:6d:90:74:e4:b0:98:4c: d7:6e:58:19:ea:bc:3b:0f:20:61:81:f3:9b:15:df: 5e:a3:ee:bb:f4:a5:48:de:a7:87:98:24:16:ce:25: e3:d8:ef:3b:49:ed:ef:42:b4:0c:30:01:d9:79:5c: f6:6d:6f:ae:b8:98:09:19:7a:be:c3:48:90:da:5e: 71:56:f6:b1:1b:26:7b:ab:2b:3e:04:e1:00:e9:60: 1a:af:f0:7b:67:54:c4:ea:fa:5b:b7:2c:03:d6:df: 33:72:05:50:3a:2b:ea:d9:10:f0:a5:07:91:d6:64: 6e:06:23:e3:aa:8d:8e:22:6a:82:e6:03:68:50:a6: 4f:e2:20:fb:3b:bc:3f:91:cc:62:e1:9b:0c:fa:cc: 23:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:55:0F:39:E3:FF:A9:D4:6C:B1:80:E4:89:9C:F6:E6:D0:20:E4:25 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:0a:e9:57:e8:6a:3e:d0:2e:c4:03:83:bd:ca:76:de:b3:2f: c2:51:ad:f8:c0:e7:4a:ca:bc:27:95:1f:65:40:f4:fb:01:12: d4:6d:26:19:85:f0:a0:24:ad:29:ae:7c:8b:61:0a:0f:4d:5e: 5e:2b:8b:72:6d:ea:7e:cb:19:ef:b3:e7:1d:95:ce:20:95:ea: eb:28:49:41:a0:b1:b8:10:30:c9:f2:68:10:1d:fb:ac:92:c8: fb:0b:5c:37:02:ac:85:34:b7:f1:68:4c:a3:f3:a3:88:9d:ff: d9:75:bf:97:79:c3:4a:57:79:5d:52:dc:46:ba:a4:ba:f9:b9: c6:44:e0:d9:85:8d:e7:e3:11:1d:96:0f:ea:b9:e3:42:ec:ce: f8:3f:f7:71:3b:5e:13:6f:90:be:93:55:d0:f7:b2:86:ce:57: ef:6b:38:e5:00:ed:ac:04:a1:eb:96:79:02:9b:2f:68:67:23: 89:56:d2:73:cd:be:d2:94:b4:56:63:07:85:83:a5:f4:69:13: 83:eb:22:8f:cc:52:d1:4e:cf:83:88:b2:35:97:4c:aa:a5:b7: b4:ce:74:49:5a:3c:bf:dc:fd:cc:7a:55:de:30:70:8b:fe:c1: 7e:23:48:03:8b:bf:cc:bc:58:28:8e:c3:18:22:87:27:b3:2c: 3d:d1:60:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+p4p65ONyj3KKHu5bf/Dn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwNzI4MTgwMDI5WhcNMjYwNzI5MTgwMDI5WjAzMTEwLwYDVQQD EygzMDU1MGYzOWUzZmZhOWQ0NmNiMTgwZTQ4OTljZjZlNmQwMjBlNDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/eULJ0Zx+VYbJBQWMdCzsQT081l GlhiAW/sfxcjrXEyhevt5TMnYG3+kFZ+6xgpcPfnrrjCwV7SMGaqQdGV/rv2q9zs qNcJAfTVr01c7N3gaj+G3LzXIYd5ZYkIcl1pJUnomA6ThgygclieMgrXNW2QdOSw mEzXblgZ6rw7DyBhgfObFd9eo+679KVI3qeHmCQWziXj2O87Se3vQrQMMAHZeVz2 bW+uuJgJGXq+w0iQ2l5xVvaxGyZ7qys+BOEA6WAar/B7Z1TE6vpbtywD1t8zcgVQ Oivq2RDwpQeR1mRuBiPjqo2OImqC5gNoUKZP4iD7O7w/kcxi4ZsM+swjPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBVDznj/6nUbLGA5Imc9ubQIOQlMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUArpV+hq PtAuxAODvcp23rMvwlGt+MDnSsq8J5UfZUD0+wES1G0mGYXwoCStKa58i2EKD01e XiuLcm3qfssZ77PnHZXOIJXq6yhJQaCxuBAwyfJoEB37rJLI+wtcNwKshTS38WhM o/OjiJ3/2XW/l3nDSld5XVLcRrqkuvm5xkTg2YWN5+MRHZYP6rnjQuzO+D/3cTte E2+QvpNV0Peyhs5X72s45QDtrASh65Z5ApsvaGcjiVbSc82+0pS0VmMHhYOl9GkT g+sij8xS0U7Pg4iyNZdMqqW3tM50SVo8v9z9zHpV3jBwi/7BfiNIA4u/zLxYKI7D GCKHJ7MsPdFgRQ== -----END CERTIFICATE-----Generated at Tue Jul 28 20:43:02 2026 by rpki-client