$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: +3GMRWAwbJpW1c3SjciAO3LGlqIG96fCmDKLdcXhIkc= Subject key identifier: 56:7D:FD:54:34:9D:6F:98:FE:27:1A:21:CD:75:92:68:26:1F:77:58 Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 01987C09B494B382B1ECDE03D177B64F7BAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 1621 Signing time: Tue 05 Aug 2025 21:01:07 +0000 Manifest this update: Tue 05 Aug 2025 21:01:07 +0000 Manifest next update: Wed 06 Aug 2025 21:01:07 +0000 Files and hashes: 1: 9AkjaJRYRIOTmgf4F3gyV6pdFkQ.roa (hash: N1lZUtbJEJkRSUYDq/VJK4cR/RojBk8ALOORTw9wVk8=) 2: DUER2OIxuLfteK-5s9p125aHbHQ.roa (hash: MKxlsAlXCfnz4va2JwSTTtP5lv2QEgVXIYiD1U0P1iM=) 3: I5Dlj2iBXR78bV2NI4oXxT6DVcQ.roa (hash: pUPvPv3IMdPMN3mngjSRkbMNdszUqvQ/W+9CudZep1s=) 4: IKxEFfN_KNz819jDJF02u6P6vks.roa (hash: M1gfdLv0XPFzxrEqEMyJ47aUP/+uDTO64SIkdj54NaA=) 5: JcqV5Zbt-7BBvR25dnt58sZOVRw.roa (hash: Jyex6OZ5W2eO7E9m8v2xcJSNJuYcw9eBRYzL8fzsuKg=) 6: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: OPBoE/ks99biDLOiNb5i8hYsqPdr7sn3SGs8Jj/B7PU=) 7: QeFtXb_2Jy97mUDOpmxAN1O437Q.roa (hash: pGsLweLJqx/P4hTPUc5m5Veo+2vG7HsRtDbmA1rHXlQ=) 8: YPwqy-r5Ds6zjUqs83c9wSrz4Xo.roa (hash: /OBWcwiTOuByZ0CFtuxP3jPnYcDQxuxVogbCk4BaZIM=) 9: _z_sTvwtZQKHpvup9rFWqFFhFKY.roa (hash: JVM6qUA4ZtDkSX81zJfuU5jJmnu8pCK2PaUHasgHRME=) 10: kUvUMMUm6A2S-PsLFuOoxFGjL2g.roa (hash: 43KKo4hB/OsGlhMLYdFrQhlx6kBqniKw+U0iCAYg2Qg=) 11: pOvELxmVMCJOREXgcbJwYPWQcLY.roa (hash: 8NAO5qgs1zoQcDKNETGRxihZubfEYTFA3QAx7BgtdEo=) 12: stpJENpG1HfxaYzx679NTwZFpZY.roa (hash: EMcugxArWnP7J9sItxl3gZsFeM8qrAvUxjSeKkZ4oao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 21:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7c:09:b4:94:b3:82:b1:ec:de:03:d1:77:b6:4f:7b:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Aug 5 21:01:07 2025 GMT Not After : Aug 6 21:01:07 2025 GMT Subject: CN=567dfd54349d6f98fe271a21cd759268261f7758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0e:dd:ab:c2:eb:01:f2:22:09:23:67:15:b1: ca:1e:0c:d5:97:57:54:63:37:ad:91:55:11:5d:c7: 31:4f:8e:cc:e5:cf:19:4a:f6:7e:db:3f:26:47:dc: ec:bc:cd:a7:68:e4:47:05:18:e3:cd:be:42:ba:2e: 02:7a:f6:08:56:3a:e8:dd:4e:e1:cd:52:c5:25:20: f7:ac:61:5d:e8:12:4e:63:71:6a:c0:bc:6c:ce:97: 7a:08:4b:b5:19:bf:81:55:34:e7:ba:dc:e6:e1:1f: f9:96:93:c7:c4:ba:f5:05:a2:6c:9c:6a:4d:df:5f: c8:aa:00:db:d1:2c:59:d6:6b:2f:7d:b1:03:3c:e4: 3b:11:69:44:90:8b:7d:69:75:b2:e4:48:71:65:4e: 86:49:3d:17:a5:46:00:c1:2b:e9:b6:2d:02:81:83: 77:e2:fe:88:a1:b5:e0:9d:95:ab:96:bb:83:33:99: e7:1d:1d:4b:a6:28:3c:b9:c3:1f:44:43:e4:9b:6d: 4a:a4:1b:64:e2:7b:8e:dc:00:56:1a:5e:07:c0:c9: cc:82:d3:96:9a:3d:66:ca:47:78:7e:48:98:a0:a3: 07:7b:38:e4:f7:ab:6f:b0:44:9b:71:bc:aa:44:55: 49:be:4f:26:a9:2c:37:44:3e:5a:04:b1:f3:36:09: ee:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7D:FD:54:34:9D:6F:98:FE:27:1A:21:CD:75:92:68:26:1F:77:58 X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:69:6b:25:03:06:3f:f1:24:ad:a1:01:cc:cb:65:25:03:76: 9d:77:18:7d:63:09:83:0c:9b:40:8e:22:cb:f7:91:f0:1c:e7: 81:4f:74:3a:00:18:d8:ed:51:25:83:a0:ae:6d:24:c4:6a:51: be:84:d2:4d:e8:d9:b5:ea:d4:2d:35:a2:09:d0:90:fb:2f:17: 3c:cd:32:e2:5d:0a:75:2b:52:9b:94:f8:d6:53:59:af:12:ee: e7:8a:f7:f8:03:97:6b:4b:07:ec:76:cd:0b:8f:3a:52:34:29: 5f:ad:be:37:69:70:93:e5:58:a4:9d:21:1d:38:f9:c7:e4:4d: cc:28:67:43:88:1d:84:9e:e7:1c:7b:bb:eb:3b:4d:f2:a7:a0: 21:d8:4e:87:78:25:e1:98:20:22:14:30:27:a1:ae:ba:91:30: b1:ac:03:4a:fc:03:eb:07:96:87:a4:28:17:48:8b:93:93:8f: 26:e4:06:6e:61:70:c4:30:5f:72:26:ec:d7:84:d2:e6:bb:ad: 34:a8:d8:de:30:c8:fb:97:dd:af:95:e4:d5:db:07:dd:91:55: 4d:8d:72:f3:25:15:08:2e:d9:18:b1:f1:7a:08:6c:cf:f0:b2: 04:89:67:44:47:40:92:c3:8c:a3:34:78:15:7b:79:70:ec:70: a7:6e:c7:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh8CbSUs4Kx7N4D0Xe2T3urMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjUwODA1MjEwMTA3WhcNMjUwODA2MjEwMTA3WjAzMTEwLwYDVQQD Eyg1NjdkZmQ1NDM0OWQ2Zjk4ZmUyNzFhMjFjZDc1OTI2ODI2MWY3NzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g7dq8LrAfIiCSNnFbHKHgzVl1dU YzetkVURXccxT47M5c8ZSvZ+2z8mR9zsvM2naORHBRjjzb5Cui4CevYIVjro3U7h zVLFJSD3rGFd6BJOY3FqwLxszpd6CEu1Gb+BVTTnutzm4R/5lpPHxLr1BaJsnGpN 31/IqgDb0SxZ1msvfbEDPOQ7EWlEkIt9aXWy5EhxZU6GST0XpUYAwSvpti0CgYN3 4v6IobXgnZWrlruDM5nnHR1Lpig8ucMfREPkm21KpBtk4nuO3ABWGl4HwMnMgtOW mj1mykd4fkiYoKMHezjk96tvsESbcbyqRFVJvk8mqSw3RD5aBLHzNgnuEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZ9/VQ0nW+Y/icaIc11kmgmH3dYMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmlrJQMG P/EkraEBzMtlJQN2nXcYfWMJgwybQI4iy/eR8BzngU90OgAY2O1RJYOgrm0kxGpR voTSTejZterULTWiCdCQ+y8XPM0y4l0KdStSm5T41lNZrxLu54r3+AOXa0sH7HbN C486UjQpX62+N2lwk+VYpJ0hHTj5x+RNzChnQ4gdhJ7nHHu76ztN8qegIdhOh3gl 4ZggIhQwJ6GuupEwsawDSvwD6weWh6QoF0iLk5OPJuQGbmFwxDBfcibs14TS5rut NKjY3jDI+5fdr5Xk1dsH3ZFVTY1y8yUVCC7ZGLHxeghsz/CyBIlnREdAksOMozR4 FXt5cOxwp27HYg== -----END CERTIFICATE-----Generated at Wed Aug 6 05:50:53 2025 by rpki-client