$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: u8ygqw2OKMp/OXTsrxepcWENBzta/IFzfvB3OlkCwSQ= Subject key identifier: 1F:8A:00:58:54:75:88:88:76:1E:DC:4D:52:6A:0B:41:DC:F4:59:6B Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 0197741B24A2DE84D009DE6361AB760C0113 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 1212 Signing time: Sun 15 Jun 2025 15:00:25 +0000 Manifest this update: Sun 15 Jun 2025 15:00:25 +0000 Manifest next update: Mon 16 Jun 2025 15:00:25 +0000 Files and hashes: 1: 1-0RU5-UH22DOsQOFsaTxG_A9jv8.roa (hash: fqVefE6RlaYUPduGoWsI2YNic7R0MJ4+DTDKQ/JK4rc=) 2: 1-FdAmS5arjzjLAT6dSpDv5Zz5Yo.roa (hash: 5R9Ps8+XKEvJyKNmQySRtdXFtn/oxvTrhdjJdae+0Mc=) 3: 7lxVna_a0xg23I1zjghxq6R0RXo.roa (hash: tXqQs9pDj0utpLVKfAdmZ32ratdKDLdXwvY9QAYFHbQ=) 4: 7viCLe1Y9Nqrc0I57IyblPeJixA.roa (hash: CaVl3kWbQeGGiydAivqdXFTippcInjU78AwDYo4qHRU=) 5: 8neCxhaAsYaJYU9S15NmrANTFco.roa (hash: 4Xxa8uO6V7yLYBbylJYWkJX0nrzIRa0JN8AeDSSd+ak=) 6: BIV00WGdCsdMPZily9CzqPCb__g.roa (hash: 2Po5O5AX+uWN/KKrFaZyBDhCcTGjg4dn50nifm52n4M=) 7: J9EfRVewePQYGlLe8kNseKQHxJk.roa (hash: 9VVRmDPU/cfVWvE65Fl3QvG+s92pe334/sHSfdMSMFU=) 8: KiMYrb7_k5A1XChjZVkaZe03-J4.roa (hash: 30qTixTrPBopXsIzoLW1hBKkrCQ5vS3MAYgu2zCZ2kU=) 9: LouV9CNyeDg8LwFm0WQg3Epf8sM.roa (hash: riVTvdLY1eaWT/u45Jf1fSb9f2SlRG/qD/bZHRckGb8=) 10: TZnMCWCDD7gEt2iDrVgun6OOwPs.roa (hash: SXv2dOCtyEflvEs/51vkBcKAPnsJErnwyCUiGSJl1Gs=) 11: UJXvhibxw_8TtOKnD--xEYn-Zww.roa (hash: OjpDb9p6TT8FBXJ45Y7m0jK/9WUgig2slzPx0C3W9Ns=) 12: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: Pw016jQxpqqXTR8UhQelleNfKyzDojOb7wXYSz5cJAg=) 13: UqRTo9zfPVco3yYn5nw6sqcSIPY.roa (hash: /Dt51aOP8kus3h99adWYkONhAkJ+yJWSL0c8KmtagW0=) 14: VnKbkzMWAdNyZPCEQCwxH17zOTU.roa (hash: M1ZyqSf62mnrFwNeiW1+tjvlZxQ3ALH4X2u5wgU4NPE=) 15: Xmv46alzrB60JmjVYvB6COzgMjA.roa (hash: hA/zNdXVXqQjvFAUICGet5aUd1QUuqsgENdS1uEiVVY=) 16: ce8k7XCQyghvYHchvwALfCrVJwg.roa (hash: yQNx287pWR7HRDZfUEYypC3YO0EWbPD76GUoO2g6XzE=) 17: dK1BXPCUXOQRT5oOEUWvGxP9gQk.roa (hash: Ys5B95zExSqqxQNADZXH3Qy0NLQy7XLhKxBDY3n6xFE=) 18: dM23tRMrfeVMohMV97WFUTG8sLM.roa (hash: OTTmI9o/dreNgVKL2IIkBGf7NtGEVJVZuJN7RdVlcwY=) 19: g6O7wY63DyqDJHy27Gz3lHDxU5s.roa (hash: TrqIQ8Zbcjz8fNMvr1JTBGMIwXO8B6vc4Pif/pzevVU=) 20: jDWhRAsVH-ADWO3fPKwaSwkr-tc.roa (hash: Sroyv7+ckh5jogjuhwtX2u83187uWC92R69FscJrG3U=) 21: jdQZdakevZhVtKrglfN2RFnzQcI.roa (hash: YWgCWrFOGK/KKipBlp5lhfep+s/kMG6GomEIbVictxA=) 22: l7wxx1zLyo_Vp6Dh5EdYTFcM2nU.roa (hash: CxolEvFopBeQFh0sVq8DG+TsCtldic0vb/t6anZwnLM=) 23: mI-_CctqZI0K2tk6hRHxlecB4_0.roa (hash: L5SL5l2FWo7G2VvQUQ1QwP0hC9pB98xkcansR+H3uHU=) 24: ry5QBM2Eu4QVa3IbvVInNcRx-ao.roa (hash: mo2V1hYGi7uA3mmFMMTCShk3qAC1sKE08+9dYnb3F5w=) 25: w2mTXklqmB3KRUtzG9fxKD6ZDi4.roa (hash: DcW9Z2MnonH9MmcvaudchOkSRXJ7jGtdyGxCDchTggE=) 26: yz5Oj1IRN47m7-hfoNRLKR-QsFQ.roa (hash: AJUnhFM68923GYadc3urgh5yRRol8KdV+S2IVDVlxow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 13:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:74:1b:24:a2:de:84:d0:09:de:63:61:ab:76:0c:01:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jun 15 15:00:25 2025 GMT Not After : Jun 16 15:00:25 2025 GMT Subject: CN=1f8a005854758888761edc4d526a0b41dcf4596b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:64:71:5e:24:19:d5:d4:68:f6:f8:15:b4: a8:55:81:ee:9d:c8:b5:8a:c0:84:a6:8a:95:3d:55: 19:86:a9:f8:d8:3d:82:c6:79:7c:0e:74:fe:92:c6: 8a:af:8f:00:7b:3e:da:1d:a3:09:78:12:6d:48:43: 73:57:5d:90:ce:f3:0d:b0:6b:d6:be:8b:d3:d9:2e: a9:3b:96:14:ef:e4:c7:a3:e3:51:5f:2b:3b:57:1e: a8:65:a7:90:6c:23:3c:7b:ec:46:85:0b:58:7d:a8: 8d:05:78:73:32:8d:0b:4f:3d:8e:07:8f:96:7c:49: e2:6f:b7:a4:b1:31:43:11:df:91:f2:29:bd:83:5c: 0c:35:96:5b:db:06:1d:50:5f:6c:fa:0e:cd:3b:a9: 12:c8:67:0d:fd:4c:88:a2:18:d6:85:a5:3b:47:9a: 70:aa:b9:7c:66:11:7e:da:bc:07:d2:e6:96:ad:c5: 3a:6e:a7:1e:ed:81:67:86:ec:4a:34:91:31:4e:97: f5:61:bf:61:1d:c8:d8:fd:03:27:09:44:ba:24:5b: 57:54:ee:f2:b9:5a:14:ab:24:27:0e:91:81:39:e1: 13:0e:f7:dc:91:15:54:04:c2:1f:87:01:72:a1:fa: 2b:60:dd:df:e0:b9:d3:b8:ee:4a:06:17:e1:63:5f: d4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8A:00:58:54:75:88:88:76:1E:DC:4D:52:6A:0B:41:DC:F4:59:6B X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bb:ab:43:75:a7:cd:fd:f3:e1:0d:69:6e:f6:b8:09:2b:08: 57:36:5a:bf:00:5f:4b:8e:c9:49:a7:58:4d:51:77:81:4f:c9: 39:02:f6:51:a2:6b:ea:c2:51:ab:8c:10:18:7e:e2:45:bb:4c: 69:2a:c2:ab:b4:74:8b:e2:2d:36:14:8d:14:4f:d6:83:cb:f5: 58:00:23:65:b8:2e:85:96:1d:0c:ca:3e:53:33:72:1b:c0:df: 7e:5e:f3:d4:28:38:ab:99:4d:a3:51:33:07:17:92:98:1f:eb: 0c:21:a9:d4:ce:03:f8:4d:65:2a:56:2d:10:1a:c3:ae:c1:99: e9:b0:21:68:14:e3:41:3e:12:b2:53:b9:9e:75:2d:a4:bd:10: 29:be:7a:17:b1:8b:84:80:1a:d9:6a:75:f4:12:31:40:6d:03: b4:90:4a:48:8a:3d:68:fb:2e:63:bd:a4:c2:9b:4a:cc:fb:fe: c7:fc:81:ff:5d:40:a0:4e:1f:0b:84:98:f8:3e:7f:90:58:cb: df:fa:01:6d:8b:e1:7b:87:e4:61:70:de:f9:33:54:80:89:3d: 18:69:6f:93:a4:5f:28:1f:3f:88:b3:79:ae:e8:2a:5f:87:0e: 42:ca:a8:01:c6:57:62:a8:14:6c:64:be:99:49:9a:b1:62:95: 26:3d:3b:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd0GySi3oTQCd5jYat2DAETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjUwNjE1MTUwMDI1WhcNMjUwNjE2MTUwMDI1WjAzMTEwLwYDVQQD EygxZjhhMDA1ODU0NzU4ODg4NzYxZWRjNGQ1MjZhMGI0MWRjZjQ1OTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj1kcV4kGdXUaPb4FbSoVYHunci1 isCEpoqVPVUZhqn42D2Cxnl8DnT+ksaKr48Aez7aHaMJeBJtSENzV12QzvMNsGvW vovT2S6pO5YU7+THo+NRXys7Vx6oZaeQbCM8e+xGhQtYfaiNBXhzMo0LTz2OB4+W fEnib7eksTFDEd+R8im9g1wMNZZb2wYdUF9s+g7NO6kSyGcN/UyIohjWhaU7R5pw qrl8ZhF+2rwH0uaWrcU6bqce7YFnhuxKNJExTpf1Yb9hHcjY/QMnCUS6JFtXVO7y uVoUqyQnDpGBOeETDvfckRVUBMIfhwFyoforYN3f4LnTuO5KBhfhY1/UkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+KAFhUdYiIdh7cTVJqC0Hc9FlrMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLurQ3Wn zf3z4Q1pbva4CSsIVzZavwBfS47JSadYTVF3gU/JOQL2UaJr6sJRq4wQGH7iRbtM aSrCq7R0i+ItNhSNFE/Wg8v1WAAjZbguhZYdDMo+UzNyG8Dffl7z1Cg4q5lNo1Ez BxeSmB/rDCGp1M4D+E1lKlYtEBrDrsGZ6bAhaBTjQT4SslO5nnUtpL0QKb56F7GL hIAa2Wp19BIxQG0DtJBKSIo9aPsuY72kwptKzPv+x/yB/11AoE4fC4SY+D5/kFjL 3/oBbYvhe4fkYXDe+TNUgIk9GGlvk6RfKB8/iLN5rugqX4cOQsqoAcZXYqgUbGS+ mUmasWKVJj07Jw== -----END CERTIFICATE-----Generated at Sun Jun 15 20:40:04 2025 by rpki-client