$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: wUQcT7vK/tBY1zG5Yv4DlAAqs56fYuM3rNkCeNZC5IM= Subject key identifier: 14:A9:60:5D:EA:F9:40:5A:F1:D6:7A:C4:CF:05:B4:32:36:19:97:CE Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 019D981895A6EF7216082D025BA6390F36C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 18C7 Signing time: Thu 16 Apr 2026 21:00:41 +0000 Manifest this update: Thu 16 Apr 2026 21:00:41 +0000 Manifest next update: Fri 17 Apr 2026 21:00:41 +0000 Files and hashes: 1: 1FtPTBCuaFKFdfLMe7kvs8wBT2U.roa (hash: cKQ2d36EvAcAkY7lWf5+zr4pq/8g+Yc09UpRwXaS9fU=) 2: 286ljgduSQ23zXxMskYIQVpjxXw.roa (hash: 7kRo+hhGrmwGIHUv917EDTqyatYEBV1hJSeuWZhlap4=) 3: 4PDvFK89C4F409g_XmWPwr7q1a0.roa (hash: 9lF1IQm65iaYh5J0JpeOleT0SuGGi5cwQEdnoe/v5JQ=) 4: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: TRYfr4coUBUlVl7H7c0dLoulZrNMbY3/IsTTyKQXdtM=) 5: XpUefWEiJeIsRivUE_i8Xfs2GR8.roa (hash: PBHeI5NfF0k/v47sxglrYiZdodvTKkFHSpMBQlDcdXc=) 6: ZIFHSotu32VSRWz3yy7p-c2LO-A.roa (hash: HtmF/vHud7OvPwqTimOkx4Bd9iGAFPGDNsHwtbVJBZ0=) 7: Zc2NwjC7aoT6KGmTlpJCVRtAAxM.roa (hash: Lw8AgQnNa+u3srZTik73U4zlVyuicSwiTs/U27h1T58=) 8: a0ljWjjOMmlqv-KUZ9yfJ5o3o08.roa (hash: HgXqjfFgX4E4spO/gFoOPoWjpP4kI1tcmHiNguLieIw=) 9: bPL_MeYosxpJav1FZrlBnVGpssY.roa (hash: xbaf1MsiC38LB8r3yBiWSr3FjpTVnJNfGoxcFxBJEYM=) 10: tXhbIuVpYeE_jd1CU4lv2cgwfnw.roa (hash: lxyF6ei0/QTcu7Po0gkCzFazsZNHVkwJorFWOFgBWYI=) 11: vjXTFvPzZIb1zeRSL_kprTEdqbI.roa (hash: JwHjdybMdJ5oxvKoHkQM559e6BBUTavDx0DxnmOgdS0=) 12: yvxp8xW14Xp2PiR7kJbkc75G14A.roa (hash: o93DGCCTavhE3gLHe6hFNvurmN1iNt5bMJ8d0jqfGPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:18:95:a6:ef:72:16:08:2d:02:5b:a6:39:0f:36:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Apr 16 21:00:41 2026 GMT Not After : Apr 17 21:00:41 2026 GMT Subject: CN=14a9605deaf9405af1d67ac4cf05b432361997ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2e:d7:83:18:e0:f6:47:2d:3d:18:21:7f:a7: 59:7d:a1:71:f4:67:6a:3a:67:32:ed:54:be:cf:5d: 70:fe:e2:f2:d8:21:2e:6e:30:8e:83:29:1c:ec:ea: 28:c9:10:07:44:d8:e6:89:b1:c1:a9:d5:72:a9:70: 27:e3:55:ef:39:7c:77:a8:5f:14:16:4c:ff:9f:73: 29:ee:0d:63:8d:42:32:98:2f:10:74:1d:47:94:f6: 40:85:bd:58:b4:9a:37:3b:78:f8:80:1a:e9:e8:98: 56:c5:c8:fe:f4:b3:56:89:30:eb:29:1a:79:b5:03: 31:72:8f:18:5d:f6:c8:62:df:c8:41:60:2a:92:2d: fd:6a:41:4e:8a:e7:ac:c6:e4:c8:7c:32:0c:fc:e6: 47:63:0c:b8:a8:3a:0a:9b:e4:4b:cc:f4:13:49:70: 4e:7e:bd:fb:72:5a:ac:3d:06:62:97:29:aa:d4:92: 1e:50:d0:e8:34:66:a9:91:eb:48:fd:42:3e:99:af: 07:bf:20:33:e3:86:d2:0b:d1:6f:4f:f3:31:07:9b: d5:6a:8f:29:1a:37:38:60:51:9b:1e:d6:62:e1:42: a3:a4:a6:e3:2a:9d:93:38:b9:54:b3:a4:34:cb:22: 07:3e:2c:83:e4:62:50:d9:06:be:45:68:e3:a5:9f: 66:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A9:60:5D:EA:F9:40:5A:F1:D6:7A:C4:CF:05:B4:32:36:19:97:CE X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:d6:c4:8e:a7:d2:9b:f3:2b:58:5f:5d:6c:5d:87:4c:d0:8c: f7:b3:2d:fd:b1:b6:59:aa:f1:bd:5a:7d:a3:61:83:9c:6e:95: 4b:74:ee:c5:3f:e7:6e:7c:d8:af:65:cb:7c:d0:5b:3f:f2:c0: f8:bf:fa:b5:a7:10:8a:ef:f3:23:c5:d8:d0:2b:b0:ed:0c:8c: 49:84:88:55:e1:38:c8:01:64:45:d2:06:ec:a2:0b:ca:5b:bb: 60:f0:7d:5e:e2:22:2c:82:34:cd:71:b4:7e:01:96:bb:31:09: d5:c5:aa:a0:ed:9c:42:30:4e:6f:cd:f8:16:31:8e:0b:7f:fc: 97:2f:e0:05:71:3c:97:c1:28:9e:99:9e:d1:77:49:64:7e:ee: bc:ab:4c:43:e3:3d:24:5c:50:bf:19:89:94:65:c9:41:bb:2e: cf:b6:88:05:0e:63:53:00:a3:9a:94:51:29:4a:6b:19:05:1e: 81:2b:3c:86:73:bc:2a:d6:fc:a6:00:4e:da:c1:6b:6d:c6:28: 79:21:f1:33:38:2c:07:7c:e2:a6:8c:e7:b3:4c:c8:23:2a:c6: ee:d9:77:69:3d:68:b6:0b:25:25:fd:9a:14:e4:fd:41:1d:42: d6:cf:19:27:89:95:5c:2d:d4:8f:fa:03:1a:df:29:b0:7f:c6: 7a:9e:94:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YGJWm73IWCC0CW6Y5DzbBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjYwNDE2MjEwMDQxWhcNMjYwNDE3MjEwMDQxWjAzMTEwLwYDVQQD EygxNGE5NjA1ZGVhZjk0MDVhZjFkNjdhYzRjZjA1YjQzMjM2MTk5N2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky7Xgxjg9kctPRghf6dZfaFx9Gdq Omcy7VS+z11w/uLy2CEubjCOgykc7OooyRAHRNjmibHBqdVyqXAn41XvOXx3qF8U Fkz/n3Mp7g1jjUIymC8QdB1HlPZAhb1YtJo3O3j4gBrp6JhWxcj+9LNWiTDrKRp5 tQMxco8YXfbIYt/IQWAqki39akFOiuesxuTIfDIM/OZHYwy4qDoKm+RLzPQTSXBO fr37clqsPQZilymq1JIeUNDoNGapketI/UI+ma8HvyAz44bSC9FvT/MxB5vVao8p Gjc4YFGbHtZi4UKjpKbjKp2TOLlUs6Q0yyIHPiyD5GJQ2Qa+RWjjpZ9mzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSpYF3q+UBa8dZ6xM8FtDI2GZfOMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsNbEjqfS m/MrWF9dbF2HTNCM97Mt/bG2WarxvVp9o2GDnG6VS3TuxT/nbnzYr2XLfNBbP/LA +L/6tacQiu/zI8XY0Cuw7QyMSYSIVeE4yAFkRdIG7KILylu7YPB9XuIiLII0zXG0 fgGWuzEJ1cWqoO2cQjBOb834FjGOC3/8ly/gBXE8l8Eonpme0XdJZH7uvKtMQ+M9 JFxQvxmJlGXJQbsuz7aIBQ5jUwCjmpRRKUprGQUegSs8hnO8Ktb8pgBO2sFrbcYo eSHxMzgsB3zipozns0zIIyrG7tl3aT1otgslJf2aFOT9QR1C1s8ZJ4mVXC3Uj/oD Gt8psH/Gep6UIg== -----END CERTIFICATE-----Generated at Fri Apr 17 08:03:13 2026 by rpki-client