$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: pBs9q6qzeo1DKhbfrojCAWcn9BxQdWAfAy2mc5oXQi4= Subject key identifier: 38:D8:74:C5:FE:57:F3:83:C9:B2:44:EB:7A:BF:DC:A1:DD:1B:54:0B Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 01987CE52C49FFE0CD5596F4E4FB878099A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 12A1 Signing time: Wed 06 Aug 2025 01:00:50 +0000 Manifest this update: Wed 06 Aug 2025 01:00:50 +0000 Manifest next update: Thu 07 Aug 2025 01:00:50 +0000 Files and hashes: 1: 1-0RU5-UH22DOsQOFsaTxG_A9jv8.roa (hash: fqVefE6RlaYUPduGoWsI2YNic7R0MJ4+DTDKQ/JK4rc=) 2: 442VNKvpcunKVPnt4J7fMImKSJI.roa (hash: hAgVi/D80l9kyC+tR3RkdJ8V7/Xxnres0r1GBh0GLqk=) 3: 7lxVna_a0xg23I1zjghxq6R0RXo.roa (hash: tXqQs9pDj0utpLVKfAdmZ32ratdKDLdXwvY9QAYFHbQ=) 4: 8neCxhaAsYaJYU9S15NmrANTFco.roa (hash: 4Xxa8uO6V7yLYBbylJYWkJX0nrzIRa0JN8AeDSSd+ak=) 5: 8zCmtrRnMBfqD7huu00hKG-6dWU.roa (hash: BDm16YVWuKLeyxmSEyYqD51Mg/stzj242GbVHHagGik=) 6: BIV00WGdCsdMPZily9CzqPCb__g.roa (hash: 2Po5O5AX+uWN/KKrFaZyBDhCcTGjg4dn50nifm52n4M=) 7: J9EfRVewePQYGlLe8kNseKQHxJk.roa (hash: 9VVRmDPU/cfVWvE65Fl3QvG+s92pe334/sHSfdMSMFU=) 8: KiMYrb7_k5A1XChjZVkaZe03-J4.roa (hash: 30qTixTrPBopXsIzoLW1hBKkrCQ5vS3MAYgu2zCZ2kU=) 9: LouV9CNyeDg8LwFm0WQg3Epf8sM.roa (hash: riVTvdLY1eaWT/u45Jf1fSb9f2SlRG/qD/bZHRckGb8=) 10: TZnMCWCDD7gEt2iDrVgun6OOwPs.roa (hash: SXv2dOCtyEflvEs/51vkBcKAPnsJErnwyCUiGSJl1Gs=) 11: UJXvhibxw_8TtOKnD--xEYn-Zww.roa (hash: OjpDb9p6TT8FBXJ45Y7m0jK/9WUgig2slzPx0C3W9Ns=) 12: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: lCTWMS+I92DiwCXDSpUbL0WSkobabVAjHz6fkHKkvvQ=) 13: UqRTo9zfPVco3yYn5nw6sqcSIPY.roa (hash: /Dt51aOP8kus3h99adWYkONhAkJ+yJWSL0c8KmtagW0=) 14: VnKbkzMWAdNyZPCEQCwxH17zOTU.roa (hash: M1ZyqSf62mnrFwNeiW1+tjvlZxQ3ALH4X2u5wgU4NPE=) 15: Xmv46alzrB60JmjVYvB6COzgMjA.roa (hash: hA/zNdXVXqQjvFAUICGet5aUd1QUuqsgENdS1uEiVVY=) 16: aI5GW5CPH55A7yX3BGOcl-97zEA.roa (hash: 4xbmx+cb2TR/eXdAjmTz0JValmDbEUPRJLTaITS7FnE=) 17: aVFwHTvrBr3MaaT1GxfwFhQwlgc.roa (hash: Jx28FX3SHYUfXV2//LO+eZWptV/ZkvXBO4d6ecz0axc=) 18: ce8k7XCQyghvYHchvwALfCrVJwg.roa (hash: yQNx287pWR7HRDZfUEYypC3YO0EWbPD76GUoO2g6XzE=) 19: dK1BXPCUXOQRT5oOEUWvGxP9gQk.roa (hash: Ys5B95zExSqqxQNADZXH3Qy0NLQy7XLhKxBDY3n6xFE=) 20: jdQZdakevZhVtKrglfN2RFnzQcI.roa (hash: YWgCWrFOGK/KKipBlp5lhfep+s/kMG6GomEIbVictxA=) 21: mI-_CctqZI0K2tk6hRHxlecB4_0.roa (hash: L5SL5l2FWo7G2VvQUQ1QwP0hC9pB98xkcansR+H3uHU=) 22: ry5QBM2Eu4QVa3IbvVInNcRx-ao.roa (hash: mo2V1hYGi7uA3mmFMMTCShk3qAC1sKE08+9dYnb3F5w=) 23: s0b5Fwdu-zyh8O2GAm7qQ0wY_w0.roa (hash: Eks6tlyajlng306QOp1CtkVeuU4kzzJoAMHFpAAbNDE=) 24: w2mTXklqmB3KRUtzG9fxKD6ZDi4.roa (hash: DcW9Z2MnonH9MmcvaudchOkSRXJ7jGtdyGxCDchTggE=) 25: yz5Oj1IRN47m7-hfoNRLKR-QsFQ.roa (hash: AJUnhFM68923GYadc3urgh5yRRol8KdV+S2IVDVlxow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7c:e5:2c:49:ff:e0:cd:55:96:f4:e4:fb:87:80:99:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Aug 6 01:00:50 2025 GMT Not After : Aug 7 01:00:50 2025 GMT Subject: CN=38d874c5fe57f383c9b244eb7abfdca1dd1b540b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:61:42:66:59:43:a1:c8:85:a6:41:51:60:38: 90:bd:49:e6:42:35:ab:90:3c:c6:03:12:d6:06:67: bf:5e:1b:f4:df:2c:f3:68:1e:35:0a:a9:c2:a0:94: 98:5c:21:60:0b:91:bf:d5:05:b8:85:d7:78:9c:de: f9:99:52:dc:75:cc:e1:62:14:ae:4e:a2:91:de:4b: a0:09:11:87:ab:d8:d7:b5:fd:88:1a:ec:dc:d3:af: 33:44:13:40:5d:db:9f:3e:5f:3f:e3:71:04:6b:57: 0d:6a:3b:e4:22:85:21:3f:7f:40:ed:d4:65:bc:3f: 1d:a1:29:39:a8:8f:c7:f6:b0:d4:3d:79:1c:c5:28: e3:11:ec:b6:13:6c:9c:28:9a:aa:ce:6b:8d:ed:6f: 34:73:e8:52:75:06:1b:59:90:4c:91:4e:a0:1e:de: ce:b5:0d:01:51:76:76:85:71:aa:b8:42:01:57:90: 3a:3f:4d:d8:a2:f2:1b:db:1e:37:93:cb:e1:b2:43: 5f:31:03:59:9b:b7:c4:94:51:ff:c1:08:00:36:04: f9:96:16:f1:8d:ce:71:24:48:e8:8c:b5:dd:db:f6: 0a:b4:ac:ef:e0:13:ed:64:a6:f2:b4:1f:be:18:05: ba:a1:62:ff:37:76:42:da:91:0d:2a:17:a0:29:7b: 4d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D8:74:C5:FE:57:F3:83:C9:B2:44:EB:7A:BF:DC:A1:DD:1B:54:0B X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:2a:14:02:19:8c:f2:99:8a:bf:96:70:43:78:49:eb:46:2c: b2:ec:c8:17:70:a7:33:8e:e4:5a:70:49:70:5c:56:39:c3:f3: a8:8e:01:c5:63:11:ac:d3:7b:e8:b8:5b:1d:54:c4:8d:b1:bf: 83:2d:e4:3d:ca:8e:08:91:1d:88:7e:f3:74:8e:6b:52:05:eb: b8:d6:69:e4:1a:4b:11:c0:9b:f0:d2:43:73:88:b1:cb:82:44: 8d:8f:f4:12:b5:48:83:11:4d:a1:aa:0e:d1:ea:f8:9d:9b:de: bd:84:18:3a:a0:10:71:15:5f:de:12:b9:c6:24:ef:ee:ec:e0: 1d:d0:b7:59:ed:c1:8f:19:37:ab:fc:74:67:40:8d:36:df:d8: 3c:99:b2:e3:29:80:c1:aa:04:e5:fc:54:33:6b:1e:0a:b3:76: 19:e5:6b:1a:20:4c:b2:3a:da:87:aa:cb:88:64:b1:f2:46:0f: f7:e9:b5:7c:fa:62:89:4e:72:f0:64:4d:32:e5:44:c9:82:ca: 89:11:24:a0:dc:c0:ba:0a:47:0c:a6:d2:90:bb:01:f2:ab:12: be:08:64:4a:1c:ef:fb:76:da:87:fc:fb:7b:80:59:e0:56:e2: ce:cd:aa:a1:68:2c:9f:2d:ce:9d:b9:27:b2:1a:50:a8:74:29: f8:3f:97:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh85SxJ/+DNVZb05PuHgJmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjUwODA2MDEwMDUwWhcNMjUwODA3MDEwMDUwWjAzMTEwLwYDVQQD EygzOGQ4NzRjNWZlNTdmMzgzYzliMjQ0ZWI3YWJmZGNhMWRkMWI1NDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WFCZllDociFpkFRYDiQvUnmQjWr kDzGAxLWBme/Xhv03yzzaB41CqnCoJSYXCFgC5G/1QW4hdd4nN75mVLcdczhYhSu TqKR3kugCRGHq9jXtf2IGuzc068zRBNAXdufPl8/43EEa1cNajvkIoUhP39A7dRl vD8doSk5qI/H9rDUPXkcxSjjEey2E2ycKJqqzmuN7W80c+hSdQYbWZBMkU6gHt7O tQ0BUXZ2hXGquEIBV5A6P03YovIb2x43k8vhskNfMQNZm7fElFH/wQgANgT5lhbx jc5xJEjojLXd2/YKtKzv4BPtZKbytB++GAW6oWL/N3ZC2pENKhegKXtN4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjYdMX+V/ODybJE63q/3KHdG1QLMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSoUAhmM 8pmKv5ZwQ3hJ60YssuzIF3CnM47kWnBJcFxWOcPzqI4BxWMRrNN76LhbHVTEjbG/ gy3kPcqOCJEdiH7zdI5rUgXruNZp5BpLEcCb8NJDc4ixy4JEjY/0ErVIgxFNoaoO 0er4nZvevYQYOqAQcRVf3hK5xiTv7uzgHdC3We3Bjxk3q/x0Z0CNNt/YPJmy4ymA waoE5fxUM2seCrN2GeVrGiBMsjrah6rLiGSx8kYP9+m1fPpiiU5y8GRNMuVEyYLK iREkoNzAugpHDKbSkLsB8qsSvghkShzv+3bah/z7e4BZ4Fbizs2qoWgsny3Onbkn shpQqHQp+D+XCQ== -----END CERTIFICATE-----Generated at Wed Aug 6 06:06:01 2025 by rpki-client