$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: wCD5hK7esPxuOHXROCsPXC5q6Ez+iSxD5A9nBpRCQmg= Subject key identifier: AA:0B:8E:DE:1A:9C:06:88:00:55:AE:39:61:FC:CB:02:D7:C8:80:39 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 01A0E0CF356B0B706F6A05BFB2C5D33B73A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 1725 Signing time: Sun 27 Sep 2026 03:01:10 +0000 Manifest this update: Sun 27 Sep 2026 03:01:10 +0000 Manifest next update: Mon 28 Sep 2026 03:01:10 +0000 Files and hashes: 1: 4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa (hash: 1+Dj9DjkqqJBKSFukY3ZLUFpE2kBLC6OJYlV3ZzlDHE=) 2: 51RV5bLUK5swpjii_ClMr0Z0LK4.roa (hash: eaEFcr3Fzwqgey9xkzHTc526Wfs17vHkTkKlWZDr6V4=) 3: 7Gfdl5k6T4Nt-xZrQUmYT2Wb0Q4.roa (hash: praaG5V4IjeUDRh2H9CpWs4rx+iMgs/zDPv4j89TbtU=) 4: 7meu7s1H44zdKfP25MFBcQbtGHI.roa (hash: WvFf3T5R9dDcoqBxFhAiq7tVRoIpj2LekmR2mNGzL1E=) 5: 7u4RVlV52XWyTyDw_qznuD0UgXs.roa (hash: vYm6Nz0cS2O84RBnN+siuod691AUb0y3q4ys6CicPZI=) 6: 9sk7o3-J1zppXpr20oFx7pS_U0c.roa (hash: pBXnQfzjUWzJ2ZBcFMKN6xODjJ4zYHByfhzLBkNvrdQ=) 7: BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa (hash: Q2q3HL2ikSVxapYF8tEqUbGc2dsp+tUqOuJvpkTfgSw=) 8: EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa (hash: ZEu9nOF1kbSjWSpE4NcC/VjSw7SsIRZ4h2G/ZSkfcXA=) 9: GWUpBhLv0PHDsIV3w3GIbM6-96s.roa (hash: qr4GrREKG7A3hhdS3Agv52m1MsgGN/WZ20ATzaaaiuk=) 10: HxGP4RyCdmbtsC_X7rEOMPaadGs.roa (hash: E1pPUcXW5mPkpSrQhelqafY4OsK2tjQxSmKWda1vbOE=) 11: MZUJ_YtPrARksG8JiNeh9h5bxjU.roa (hash: gULv6+Niu5hf2ZuzY/CCoAvGjaEsELBZ6B3Mi+f8gPo=) 12: NNB2avyCldcIMCL0f0MRWjsmPGg.roa (hash: DEfqSuvzloP85jcJKk7ZgGBFiOXRfF0MqFeO19BqKn0=) 13: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: /sOqCztho8BGbHWpF6BsuPPrm83l0PaSjmUd1f5dNaU=) 14: ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa (hash: U8GSnZZoap+4gf9xVbyRxlPJkgOVmU3uHH07WIciOyM=) 15: bCdYO2D1pk-Sh6yPVxjaFkaTLV4.roa (hash: cUAnZwmDfvuC8Ml+3dgezXg7SEdjrMZVgimvYz6Sy2A=) 16: bKOziSP_XttR6KXVx43_hKvo5UM.roa (hash: 4QTv2mKHqsuXG6X8b61ridnXdKspO+S1hN2ZP7mulZY=) 17: fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa (hash: JpN5XVDZY1IahuGnYijyyeq5BW4QE/s6DEijCb+GpS0=) 18: j4qiTlmyE2UTELOd_dWPpgYgT7g.roa (hash: tL7gSkajUFv82zTjqwfcJA15HYbXtYeZkwl/AW0YDBU=) 19: nrPLRJPmPFUNnRKVYlt5xynJqbQ.roa (hash: I11fElTQunbRvyiT3+4v3tCdsssjfQCu5kwVzj1TuOs=) 20: ql7rOmZ_btr3d4A37f2Df8JDM0E.roa (hash: /SRzz/yYDf39iuJ35shny0PsFk2f1QMbJVc74yAIIqU=) 21: waLcrNH7uHQklmGVHpfmCMZcL3o.roa (hash: G6P6bFBr2kZHKhtwrt4aC293o8D2o+Zw99eQaBr2bOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 03:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e0:cf:35:6b:0b:70:6f:6a:05:bf:b2:c5:d3:3b:73:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Sep 27 03:01:10 2026 GMT Not After : Sep 28 03:01:10 2026 GMT Subject: CN=aa0b8ede1a9c06880055ae3961fccb02d7c88039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:75:4b:94:90:bc:14:ca:8d:66:4f:87:51:fb: c2:4b:a7:f4:f1:c3:c2:59:24:d2:1c:25:3a:1b:25: 4d:ad:1e:41:82:30:42:71:e4:1c:5e:29:43:39:0c: 7b:83:81:8b:4e:68:a8:2c:b5:ae:6f:1c:7b:6f:a3: f8:8b:6a:cb:2c:02:b8:b7:cd:4a:c7:4e:5b:20:ce: 77:3b:59:55:9f:4a:43:bf:48:7f:f6:8d:a6:7f:77: fd:f4:8b:4a:7b:2a:d8:50:59:6c:8a:78:87:c6:e4: a8:7f:05:ad:00:06:f3:2c:c7:41:fc:cc:29:87:51: 0a:ed:ef:2f:92:10:95:88:03:9e:53:4d:1c:2d:5b: 3a:b6:42:2c:68:30:09:94:aa:f2:2c:c0:14:34:5c: 1f:07:2c:27:34:ed:da:55:bc:e7:f2:4d:05:c2:29: ce:41:93:85:83:9f:ca:cd:c5:07:a4:7a:b2:ad:fe: d9:f2:9b:60:68:f4:03:37:82:38:d1:73:07:91:c9: 13:16:c6:ba:eb:ab:58:69:2b:00:fe:9f:44:1c:0e: 9f:4a:68:8c:48:81:28:16:b5:7f:77:44:e5:f4:b1: 77:23:9d:d8:51:b8:7c:dc:c9:cd:1a:d9:40:0d:a6: 51:da:1c:15:4f:a2:1c:19:c9:2d:ae:81:54:6c:92: 08:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0B:8E:DE:1A:9C:06:88:00:55:AE:39:61:FC:CB:02:D7:C8:80:39 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:87:04:26:0b:00:f0:77:ed:7f:77:e5:83:92:2f:c3:5b:1b: b5:f7:d9:9f:07:44:d5:e8:10:c7:4d:3a:81:ea:73:53:39:d7: be:26:30:75:2d:e5:12:a7:2b:96:c1:fd:ad:15:5c:aa:36:a2: e5:fd:95:34:cc:75:71:25:e7:af:01:51:94:1e:8c:48:85:00: 7e:51:b5:c5:eb:02:87:7b:84:4a:66:ce:a9:f1:e2:15:45:75: 5d:da:fe:24:d3:15:d0:49:f7:16:e7:2f:13:2f:96:13:d5:24: f6:80:57:64:40:4a:8b:ec:71:d4:0f:6b:89:f9:06:fe:c5:97: 72:d7:95:70:8d:70:61:ae:71:ae:68:66:e0:77:07:da:d8:46: c5:b4:ab:d1:f0:55:d3:9f:42:15:03:c5:e1:0b:e6:b6:63:2d: 1b:4b:34:e3:5d:c0:71:68:23:a7:12:38:7d:54:77:ae:3c:5d: c1:9c:b8:95:8a:a9:ec:c1:e9:44:0a:97:23:d9:d5:71:59:57: 51:44:be:2a:97:1f:3c:99:e3:da:7b:61:a5:94:bc:d9:d2:23: e0:f7:3b:89:a8:92:5f:fb:f6:56:f3:ed:e9:84:99:19:9a:b4: 46:fb:eb:e7:bf:80:92:76:ad:f6:d8:0e:c2:7f:89:77:dd:7a: 84:87:7e:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDgzzVrC3BvagW/ssXTO3OoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwOTI3MDMwMTEwWhcNMjYwOTI4MDMwMTEwWjAzMTEwLwYDVQQD EyhhYTBiOGVkZTFhOWMwNjg4MDA1NWFlMzk2MWZjY2IwMmQ3Yzg4MDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnVLlJC8FMqNZk+HUfvCS6f08cPC WSTSHCU6GyVNrR5BgjBCceQcXilDOQx7g4GLTmioLLWubxx7b6P4i2rLLAK4t81K x05bIM53O1lVn0pDv0h/9o2mf3f99ItKeyrYUFlsiniHxuSofwWtAAbzLMdB/Mwp h1EK7e8vkhCViAOeU00cLVs6tkIsaDAJlKryLMAUNFwfBywnNO3aVbzn8k0FwinO QZOFg5/KzcUHpHqyrf7Z8ptgaPQDN4I40XMHkckTFsa666tYaSsA/p9EHA6fSmiM SIEoFrV/d0Tl9LF3I53YUbh83MnNGtlADaZR2hwVT6IcGcktroFUbJIITwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoLjt4anAaIAFWuOWH8ywLXyIA5MB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeocEJgsA 8Hftf3flg5Ivw1sbtffZnwdE1egQx006gepzUznXviYwdS3lEqcrlsH9rRVcqjai 5f2VNMx1cSXnrwFRlB6MSIUAflG1xesCh3uESmbOqfHiFUV1Xdr+JNMV0En3Fucv Ey+WE9Uk9oBXZEBKi+xx1A9rifkG/sWXcteVcI1wYa5xrmhm4HcH2thGxbSr0fBV 059CFQPF4QvmtmMtG0s0413AcWgjpxI4fVR3rjxdwZy4lYqp7MHpRAqXI9nVcVlX UUS+KpcfPJnj2nthpZS82dIj4Pc7iaiSX/v2VvPt6YSZGZq0Rvvr57+Aknat9tgO wn+Jd916hId+aw== -----END CERTIFICATE-----Generated at Sun Sep 27 07:08:28 2026 by rpki-client