$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: KuLSxGmnBo8JBnY7eYvf70lHdeyRr/X/v4vOe+yHAZU= Subject key identifier: AC:BD:CF:5A:AD:BA:64:1A:42:D5:FD:14:E1:86:C6:24:39:E9:C6:F4 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019A4E18C99C5194FC59048FC03F1222EB7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 13A2 Signing time: Tue 04 Nov 2025 09:00:38 +0000 Manifest this update: Tue 04 Nov 2025 09:00:38 +0000 Manifest next update: Wed 05 Nov 2025 09:00:38 +0000 Files and hashes: 1: 0AAn3llxCcbl8stwuSFJ2MvQ2gY.roa (hash: 3bkhfAAiYAhb7qdEJOkeD/JnCkQjoYFRgKNN1lNI4YU=) 2: 1-0RU5-UH22DOsQOFsaTxG_A9jv8.roa (hash: fqVefE6RlaYUPduGoWsI2YNic7R0MJ4+DTDKQ/JK4rc=) 3: 1z54-R2eueuH54PTbLjKQAuYZZc.roa (hash: na8VleR3QcCgQLwEPa245cMk4lobIy28u3ve1B3bHSc=) 4: 7lxVna_a0xg23I1zjghxq6R0RXo.roa (hash: tXqQs9pDj0utpLVKfAdmZ32ratdKDLdXwvY9QAYFHbQ=) 5: BIV00WGdCsdMPZily9CzqPCb__g.roa (hash: 2Po5O5AX+uWN/KKrFaZyBDhCcTGjg4dn50nifm52n4M=) 6: CJRfADFE4-QkJg5dtABKS-ENn_0.roa (hash: KKiunGLLWijfm7wRv3Jxw+wzFAgL59bXip4yBbIw5wM=) 7: IM58WB6oRVSvth3T7GBmopm97NY.roa (hash: INk1QBtFJkQWxAphCXnUNmrjrSk0YRYITXcjMt0RgK4=) 8: J9EfRVewePQYGlLe8kNseKQHxJk.roa (hash: 9VVRmDPU/cfVWvE65Fl3QvG+s92pe334/sHSfdMSMFU=) 9: KiMYrb7_k5A1XChjZVkaZe03-J4.roa (hash: 30qTixTrPBopXsIzoLW1hBKkrCQ5vS3MAYgu2zCZ2kU=) 10: LO3Dmh76o3yUP4OdafCd70xCYL4.roa (hash: 2kNEWUMSLr9EsTWZSZq6yn8Fzkq0/lSxUPtBhfFtAkQ=) 11: LouV9CNyeDg8LwFm0WQg3Epf8sM.roa (hash: riVTvdLY1eaWT/u45Jf1fSb9f2SlRG/qD/bZHRckGb8=) 12: N8DREp9r8mOMTx82dCznYOBmi0U.roa (hash: U1YNu1TATTo2GJ7jthgUIu3jxffhrfvRRPtT3JsQMh8=) 13: R0Hwt2TjrZqW1C7ySxLTYzMnXrc.roa (hash: s6HOXG1qMIRlgT7xfEGOeNiratV5XemVYRhMFOe3pX8=) 14: TZnMCWCDD7gEt2iDrVgun6OOwPs.roa (hash: SXv2dOCtyEflvEs/51vkBcKAPnsJErnwyCUiGSJl1Gs=) 15: UJXvhibxw_8TtOKnD--xEYn-Zww.roa (hash: OjpDb9p6TT8FBXJ45Y7m0jK/9WUgig2slzPx0C3W9Ns=) 16: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: b/X6DnlgxoAV6Dc8rqJ2/QTZS6gAPFgqWxUBvwdoTWI=) 17: UqRTo9zfPVco3yYn5nw6sqcSIPY.roa (hash: /Dt51aOP8kus3h99adWYkONhAkJ+yJWSL0c8KmtagW0=) 18: VnKbkzMWAdNyZPCEQCwxH17zOTU.roa (hash: M1ZyqSf62mnrFwNeiW1+tjvlZxQ3ALH4X2u5wgU4NPE=) 19: Xmv46alzrB60JmjVYvB6COzgMjA.roa (hash: hA/zNdXVXqQjvFAUICGet5aUd1QUuqsgENdS1uEiVVY=) 20: arl_yEtpP4DDXrmQ6KVg-jQ2qHc.roa (hash: 5M1R6GNVKpG+HzSwMNPMjsqeNhJUUjm69hOu68qG2wo=) 21: dK1BXPCUXOQRT5oOEUWvGxP9gQk.roa (hash: Ys5B95zExSqqxQNADZXH3Qy0NLQy7XLhKxBDY3n6xFE=) 22: jdQZdakevZhVtKrglfN2RFnzQcI.roa (hash: YWgCWrFOGK/KKipBlp5lhfep+s/kMG6GomEIbVictxA=) 23: s0b5Fwdu-zyh8O2GAm7qQ0wY_w0.roa (hash: Eks6tlyajlng306QOp1CtkVeuU4kzzJoAMHFpAAbNDE=) 24: w2mTXklqmB3KRUtzG9fxKD6ZDi4.roa (hash: DcW9Z2MnonH9MmcvaudchOkSRXJ7jGtdyGxCDchTggE=) 25: yz5Oj1IRN47m7-hfoNRLKR-QsFQ.roa (hash: AJUnhFM68923GYadc3urgh5yRRol8KdV+S2IVDVlxow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:18:c9:9c:51:94:fc:59:04:8f:c0:3f:12:22:eb:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Nov 4 09:00:38 2025 GMT Not After : Nov 5 09:00:38 2025 GMT Subject: CN=acbdcf5aadba641a42d5fd14e186c62439e9c6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2e:5a:e1:5a:63:dd:a9:76:51:d5:6b:06:dd: 12:26:91:1a:b0:f3:05:17:c7:e9:6e:72:a5:c7:61: ac:8e:4b:00:f8:45:2a:e8:9c:76:06:49:64:54:bf: 72:cf:46:0a:d1:22:90:04:5e:bb:f5:d4:ac:93:c5: 5c:34:b4:26:bf:e8:5b:d9:75:9f:87:e8:a7:d8:65: b2:f5:13:26:58:8d:e7:cb:49:95:48:d2:a7:42:5c: a0:7c:7a:4c:f5:e7:39:96:60:4b:d4:c5:d6:43:43: 9f:24:b4:bf:f3:12:05:99:e4:97:e2:cb:6c:97:9e: 10:9d:8a:58:a6:8c:64:12:8f:f3:86:48:0e:c5:64: 54:fc:90:f0:0a:21:9a:4c:25:9d:c1:21:e8:c2:69: 45:07:7a:70:7d:a6:8b:53:a1:cc:ef:8f:2d:1b:31: bb:5d:76:18:2a:12:80:25:83:1d:1f:12:f2:0a:06: b2:02:04:13:ae:86:f0:86:f8:50:47:a3:7e:3f:43: a0:55:22:2b:2b:ee:f6:1e:e0:52:92:1b:f2:6d:e4: 69:44:55:2d:6f:ea:6e:fd:f5:2f:91:5a:64:3a:51: 14:ca:6d:16:96:40:f1:3d:bf:4e:dd:94:64:46:e4: 44:43:70:17:ea:8f:fb:eb:f6:5a:39:73:3d:04:d6: 1d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BD:CF:5A:AD:BA:64:1A:42:D5:FD:14:E1:86:C6:24:39:E9:C6:F4 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:1d:99:74:90:12:72:c5:55:8d:6f:1c:53:c2:79:e7:38:c6: fa:20:a8:1c:f7:3c:e8:a6:70:b3:e2:74:c8:ee:97:74:41:06: 09:e4:64:ce:ca:11:78:61:bf:14:9a:b0:d4:3e:4b:4f:b0:ea: e3:6c:93:d9:51:7c:79:8c:12:a0:0a:c1:77:ac:68:8c:93:0a: 5d:d8:20:c0:25:1a:a5:fa:62:ce:26:a0:37:4e:ff:65:37:fa: 4e:c4:da:8f:e7:40:7e:a9:57:3d:1b:a5:e8:96:4e:93:9e:6e: cb:e3:56:c0:a3:a4:d9:fb:c6:39:2e:3a:4f:cb:37:78:73:99: 8a:7c:30:54:ed:ee:ba:8c:7b:05:4b:8c:fa:51:7e:3c:f2:16: d0:ba:bc:90:a6:97:ed:1d:54:db:9b:d4:a4:b3:35:f1:14:19: 3c:96:59:57:1d:2e:6d:a8:c2:ce:4f:95:d5:54:7d:cb:0d:65: 60:29:d4:9b:e6:8f:f3:17:a8:91:27:33:bb:68:87:4b:ab:8d: 67:98:85:1c:75:03:d3:64:fd:8f:b7:dd:69:32:71:c1:c1:b1: 04:b4:fe:b4:65:d9:2f:37:01:8c:cd:63:7d:8d:57:77:19:ef: 5b:ee:5c:fd:cb:39:89:a1:c2:38:a6:e7:ce:f1:ba:1d:b3:30: bf:c9:d0:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOGMmcUZT8WQSPwD8SIut8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjUxMTA0MDkwMDM4WhcNMjUxMTA1MDkwMDM4WjAzMTEwLwYDVQQD EyhhY2JkY2Y1YWFkYmE2NDFhNDJkNWZkMTRlMTg2YzYyNDM5ZTljNmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS5a4Vpj3al2UdVrBt0SJpEasPMF F8fpbnKlx2GsjksA+EUq6Jx2BklkVL9yz0YK0SKQBF679dSsk8VcNLQmv+hb2XWf h+in2GWy9RMmWI3ny0mVSNKnQlygfHpM9ec5lmBL1MXWQ0OfJLS/8xIFmeSX4sts l54QnYpYpoxkEo/zhkgOxWRU/JDwCiGaTCWdwSHowmlFB3pwfaaLU6HM748tGzG7 XXYYKhKAJYMdHxLyCgayAgQTrobwhvhQR6N+P0OgVSIrK+72HuBSkhvybeRpRFUt b+pu/fUvkVpkOlEUym0WlkDxPb9O3ZRkRuREQ3AX6o/76/ZaOXM9BNYdHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKy9z1qtumQaQtX9FOGGxiQ56cb0MB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjx2ZdJAS csVVjW8cU8J55zjG+iCoHPc86KZws+J0yO6XdEEGCeRkzsoReGG/FJqw1D5LT7Dq 42yT2VF8eYwSoArBd6xojJMKXdggwCUapfpiziagN07/ZTf6TsTaj+dAfqlXPRul 6JZOk55uy+NWwKOk2fvGOS46T8s3eHOZinwwVO3uuox7BUuM+lF+PPIW0Lq8kKaX 7R1U25vUpLM18RQZPJZZVx0ubajCzk+V1VR9yw1lYCnUm+aP8xeokSczu2iHS6uN Z5iFHHUD02T9j7fdaTJxwcGxBLT+tGXZLzcBjM1jfY1XdxnvW+5c/cs5iaHCOKbn zvG6HbMwv8nQ0Q== -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:48 2025 by rpki-client