$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: 73WLu+OD5lwHCSmbExwMjsejcizVLHzuxoS9QcFzO90= Subject key identifier: 77:70:90:07:6C:C0:4F:81:A1:F3:11:84:B7:41:83:58:AA:7D:51:E3 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019671C22FCC5FBD98132D824B3C3E275E18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 1188 Signing time: Sat 26 Apr 2025 11:01:13 +0000 Manifest this update: Sat 26 Apr 2025 11:01:13 +0000 Manifest next update: Sun 27 Apr 2025 11:01:13 +0000 Files and hashes: 1: 1-0RU5-UH22DOsQOFsaTxG_A9jv8.roa (hash: fqVefE6RlaYUPduGoWsI2YNic7R0MJ4+DTDKQ/JK4rc=) 2: 1-FdAmS5arjzjLAT6dSpDv5Zz5Yo.roa (hash: 5R9Ps8+XKEvJyKNmQySRtdXFtn/oxvTrhdjJdae+0Mc=) 3: 3zDvKjYX5qyyRWMCbEyCJb1whcI.roa (hash: UgMcPhJl2XRyl5iipWHUcO/ZAIUXrG8hPqC4bk4RBnI=) 4: 7lxVna_a0xg23I1zjghxq6R0RXo.roa (hash: tXqQs9pDj0utpLVKfAdmZ32ratdKDLdXwvY9QAYFHbQ=) 5: 8neCxhaAsYaJYU9S15NmrANTFco.roa (hash: 4Xxa8uO6V7yLYBbylJYWkJX0nrzIRa0JN8AeDSSd+ak=) 6: G71A0KnC09evxucNClMqoIzm0gk.roa (hash: xmVP8Or773i49cOPEZFSShv2rrcCsXJL/4gK3rngMPc=) 7: J9EfRVewePQYGlLe8kNseKQHxJk.roa (hash: 9VVRmDPU/cfVWvE65Fl3QvG+s92pe334/sHSfdMSMFU=) 8: KiMYrb7_k5A1XChjZVkaZe03-J4.roa (hash: 30qTixTrPBopXsIzoLW1hBKkrCQ5vS3MAYgu2zCZ2kU=) 9: KpqhmDN4PwGeQOyx1F2chMnA50g.roa (hash: DNgLDFTg3cwMMhN86OnAoSqZ+ZXAhdxntU2zCCbmG4E=) 10: LouV9CNyeDg8LwFm0WQg3Epf8sM.roa (hash: riVTvdLY1eaWT/u45Jf1fSb9f2SlRG/qD/bZHRckGb8=) 11: TZnMCWCDD7gEt2iDrVgun6OOwPs.roa (hash: SXv2dOCtyEflvEs/51vkBcKAPnsJErnwyCUiGSJl1Gs=) 12: UJXvhibxw_8TtOKnD--xEYn-Zww.roa (hash: OjpDb9p6TT8FBXJ45Y7m0jK/9WUgig2slzPx0C3W9Ns=) 13: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: uqCO74hPyL1WAd8doNC93Kw1miL2qAuWZ2chj7ifQE8=) 14: UqRTo9zfPVco3yYn5nw6sqcSIPY.roa (hash: /Dt51aOP8kus3h99adWYkONhAkJ+yJWSL0c8KmtagW0=) 15: VnKbkzMWAdNyZPCEQCwxH17zOTU.roa (hash: M1ZyqSf62mnrFwNeiW1+tjvlZxQ3ALH4X2u5wgU4NPE=) 16: Xmv46alzrB60JmjVYvB6COzgMjA.roa (hash: hA/zNdXVXqQjvFAUICGet5aUd1QUuqsgENdS1uEiVVY=) 17: ce8k7XCQyghvYHchvwALfCrVJwg.roa (hash: yQNx287pWR7HRDZfUEYypC3YO0EWbPD76GUoO2g6XzE=) 18: dK1BXPCUXOQRT5oOEUWvGxP9gQk.roa (hash: Ys5B95zExSqqxQNADZXH3Qy0NLQy7XLhKxBDY3n6xFE=) 19: dM23tRMrfeVMohMV97WFUTG8sLM.roa (hash: OTTmI9o/dreNgVKL2IIkBGf7NtGEVJVZuJN7RdVlcwY=) 20: g6O7wY63DyqDJHy27Gz3lHDxU5s.roa (hash: TrqIQ8Zbcjz8fNMvr1JTBGMIwXO8B6vc4Pif/pzevVU=) 21: j-nqL0xN6WbmkmqvTYJrSA6qGCQ.roa (hash: Qw7R/IgYTVpT3XgGSpkjT+8JID4fe8wv1odGKPFhq/M=) 22: jDWhRAsVH-ADWO3fPKwaSwkr-tc.roa (hash: Sroyv7+ckh5jogjuhwtX2u83187uWC92R69FscJrG3U=) 23: jdQZdakevZhVtKrglfN2RFnzQcI.roa (hash: YWgCWrFOGK/KKipBlp5lhfep+s/kMG6GomEIbVictxA=) 24: mI-_CctqZI0K2tk6hRHxlecB4_0.roa (hash: L5SL5l2FWo7G2VvQUQ1QwP0hC9pB98xkcansR+H3uHU=) 25: ry5QBM2Eu4QVa3IbvVInNcRx-ao.roa (hash: mo2V1hYGi7uA3mmFMMTCShk3qAC1sKE08+9dYnb3F5w=) 26: yz5Oj1IRN47m7-hfoNRLKR-QsFQ.roa (hash: AJUnhFM68923GYadc3urgh5yRRol8KdV+S2IVDVlxow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:c2:2f:cc:5f:bd:98:13:2d:82:4b:3c:3e:27:5e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Apr 26 11:01:13 2025 GMT Not After : Apr 27 11:01:13 2025 GMT Subject: CN=777090076cc04f81a1f31184b7418358aa7d51e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7d:9d:d6:44:37:98:22:59:36:03:9a:be:56: c1:91:e7:30:73:f7:54:f6:c4:32:fe:7b:8b:f9:39: 56:10:48:f0:cb:33:a0:2b:a5:da:9e:80:cf:a8:06: ac:04:6f:a0:12:2b:6f:e4:3e:aa:55:2d:3b:c7:fa: 41:d4:c0:7b:ae:dc:6e:f4:7d:63:93:5f:17:5b:2d: 5c:11:a3:06:f0:fe:95:44:66:83:64:2b:0b:fe:53: ac:de:a1:5a:01:83:b3:9d:f0:f9:11:48:70:07:b5: 3c:e7:22:df:a8:91:b5:da:e6:bf:91:3c:b4:f8:4d: 22:ea:cc:52:49:7a:34:e2:97:4c:ea:c8:be:c6:a1: 86:ff:16:d1:32:0f:8d:4e:b0:43:0e:da:57:d7:8d: 24:e6:af:c7:6c:1b:b1:6d:27:c8:51:ee:9c:61:47: af:78:bc:5e:0f:d7:33:91:d5:c6:ed:f9:70:80:09: a0:08:00:12:65:0a:28:24:6f:0e:5a:58:41:91:13: 8d:3b:22:99:29:f9:a7:d4:66:de:39:ef:51:d9:0f: 12:42:40:52:b7:d9:0a:0b:ed:6b:7a:f1:c6:29:b8: 2a:02:57:78:f9:16:df:08:09:52:04:eb:8c:04:66: 95:c5:b3:a4:e0:96:92:d9:12:a8:98:c8:9a:2d:ff: 4f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:70:90:07:6C:C0:4F:81:A1:F3:11:84:B7:41:83:58:AA:7D:51:E3 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:77:81:77:1b:ec:d8:34:26:2f:2d:c5:40:7a:80:02:ae:a2: a9:86:2a:ad:f5:61:bd:8d:bc:69:b1:7b:1b:fb:5d:da:46:a2: 3c:27:83:21:52:7e:8b:2e:0d:2b:97:f5:ea:86:59:4c:9b:29: 55:3b:8f:91:a2:7c:8e:93:6d:33:50:0c:41:65:e3:3c:01:04: b6:57:64:43:56:be:5c:bc:74:82:4f:80:2e:b1:f6:a4:29:73: d2:78:79:5c:1c:ef:fd:35:b8:56:fd:77:a9:d4:19:6b:9e:e0: 27:05:9b:84:81:9c:60:f5:17:f2:9d:f2:f3:3e:33:49:1f:94: f8:7c:13:5f:d4:bb:3b:dc:4c:e8:b4:81:f8:e5:74:63:77:da: 42:73:b3:d6:4b:b1:40:22:64:26:32:7c:63:57:7c:1f:f7:db: da:08:32:1c:cf:16:fd:2f:8a:38:79:87:56:a9:06:ce:aa:bf: 74:97:29:48:d2:87:06:f7:01:04:91:be:e2:b1:85:c4:71:77: c1:9c:f6:9c:bf:f6:4c:57:30:07:65:a5:dd:43:75:f0:4d:49: 95:a2:6d:23:5a:18:ec:dd:f4:31:0c:59:c5:79:ab:87:ef:83: c5:be:c6:68:5c:2a:cc:ce:8c:d8:4e:a0:aa:ec:d9:01:0d:ef: e1:14:c3:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxwi/MX72YEy2CSzw+J14YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjUwNDI2MTEwMTEzWhcNMjUwNDI3MTEwMTEzWjAzMTEwLwYDVQQD Eyg3NzcwOTAwNzZjYzA0ZjgxYTFmMzExODRiNzQxODM1OGFhN2Q1MWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n2d1kQ3mCJZNgOavlbBkecwc/dU 9sQy/nuL+TlWEEjwyzOgK6XanoDPqAasBG+gEitv5D6qVS07x/pB1MB7rtxu9H1j k18XWy1cEaMG8P6VRGaDZCsL/lOs3qFaAYOznfD5EUhwB7U85yLfqJG12ua/kTy0 +E0i6sxSSXo04pdM6si+xqGG/xbRMg+NTrBDDtpX140k5q/HbBuxbSfIUe6cYUev eLxeD9czkdXG7flwgAmgCAASZQooJG8OWlhBkRONOyKZKfmn1GbeOe9R2Q8SQkBS t9kKC+1revHGKbgqAld4+RbfCAlSBOuMBGaVxbOk4JaS2RKomMiaLf9P/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdwkAdswE+BofMRhLdBg1iqfVHjMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3eBdxvs 2DQmLy3FQHqAAq6iqYYqrfVhvY28abF7G/td2kaiPCeDIVJ+iy4NK5f16oZZTJsp VTuPkaJ8jpNtM1AMQWXjPAEEtldkQ1a+XLx0gk+ALrH2pClz0nh5XBzv/TW4Vv13 qdQZa57gJwWbhIGcYPUX8p3y8z4zSR+U+HwTX9S7O9xM6LSB+OV0Y3faQnOz1kux QCJkJjJ8Y1d8H/fb2ggyHM8W/S+KOHmHVqkGzqq/dJcpSNKHBvcBBJG+4rGFxHF3 wZz2nL/2TFcwB2Wl3UN18E1JlaJtI1oY7N30MQxZxXmrh++Dxb7GaFwqzM6M2E6g quzZAQ3v4RTDEA== -----END CERTIFICATE-----Generated at Sat Apr 26 19:24:23 2025 by rpki-client