$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: k+u9qLwXOt7E+1aLaJQCCP5+yCMrcCTzwQCxwE5vfQI= Subject key identifier: F5:E8:F4:E1:0C:C7:F2:DC:F9:8D:C0:A1:BC:52:ED:FF:0E:B0:BC:9B Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 019FACE3D888F8AB9EE4826FC329E8D12BCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 19DB Signing time: Wed 29 Jul 2026 08:00:40 +0000 Manifest this update: Wed 29 Jul 2026 08:00:40 +0000 Manifest next update: Thu 30 Jul 2026 08:00:40 +0000 Files and hashes: 1: 286ljgduSQ23zXxMskYIQVpjxXw.roa (hash: 7kRo+hhGrmwGIHUv917EDTqyatYEBV1hJSeuWZhlap4=) 2: 4PDvFK89C4F409g_XmWPwr7q1a0.roa (hash: 9lF1IQm65iaYh5J0JpeOleT0SuGGi5cwQEdnoe/v5JQ=) 3: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: wydGFqehpkSYDFC9ZFn0tsSDiagNC2NLkA2hwU7p9Zg=) 4: XpUefWEiJeIsRivUE_i8Xfs2GR8.roa (hash: PBHeI5NfF0k/v47sxglrYiZdodvTKkFHSpMBQlDcdXc=) 5: ZIFHSotu32VSRWz3yy7p-c2LO-A.roa (hash: HtmF/vHud7OvPwqTimOkx4Bd9iGAFPGDNsHwtbVJBZ0=) 6: Zc2NwjC7aoT6KGmTlpJCVRtAAxM.roa (hash: Lw8AgQnNa+u3srZTik73U4zlVyuicSwiTs/U27h1T58=) 7: a0ljWjjOMmlqv-KUZ9yfJ5o3o08.roa (hash: HgXqjfFgX4E4spO/gFoOPoWjpP4kI1tcmHiNguLieIw=) 8: bPL_MeYosxpJav1FZrlBnVGpssY.roa (hash: xbaf1MsiC38LB8r3yBiWSr3FjpTVnJNfGoxcFxBJEYM=) 9: oP5ts0FtfK91btZ3P7x-bBdVAcw.roa (hash: Hav/3aYz5+a57hb3pfiEZH2IAAqH/VmCtBV7UH/ck2A=) 10: tXhbIuVpYeE_jd1CU4lv2cgwfnw.roa (hash: lxyF6ei0/QTcu7Po0gkCzFazsZNHVkwJorFWOFgBWYI=) 11: vjXTFvPzZIb1zeRSL_kprTEdqbI.roa (hash: JwHjdybMdJ5oxvKoHkQM559e6BBUTavDx0DxnmOgdS0=) 12: yvxp8xW14Xp2PiR7kJbkc75G14A.roa (hash: o93DGCCTavhE3gLHe6hFNvurmN1iNt5bMJ8d0jqfGPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ac:e3:d8:88:f8:ab:9e:e4:82:6f:c3:29:e8:d1:2b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Jul 29 08:00:40 2026 GMT Not After : Jul 30 08:00:40 2026 GMT Subject: CN=f5e8f4e10cc7f2dcf98dc0a1bc52edff0eb0bc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:87:5d:9e:b1:b6:c2:47:8a:36:af:61:06:3f: 31:60:12:04:f7:79:43:54:48:59:05:a0:fb:6f:75: a6:8a:3f:0a:4f:19:6a:39:d3:52:21:1f:12:ec:6e: 57:34:39:75:d5:5e:d2:ca:37:67:ef:ad:ce:f7:b3: c9:d8:ae:3d:58:e2:3e:d4:f7:cf:c3:c3:76:5e:5c: 06:4f:4e:1b:91:f8:34:4e:1c:5a:f9:3e:a9:2a:80: 17:c4:83:45:5a:04:2d:b0:01:4b:02:3f:db:4d:08: 62:ce:0f:85:2f:65:b3:73:69:1a:5c:eb:43:ee:11: b2:4e:a0:d6:14:18:22:26:06:e9:58:1c:62:fe:8f: e3:fe:4e:97:e8:7e:c9:71:66:65:d1:c3:e9:b7:4e: ee:ca:7f:62:22:b7:32:c5:f6:ef:8e:23:a3:41:f4: d8:94:30:9c:12:91:97:54:10:fb:78:56:d3:34:f4: 71:36:b4:d5:7b:03:7d:ac:b6:dc:b3:a3:a6:19:eb: 8c:aa:51:9d:93:74:86:f4:51:d3:52:0b:1b:f1:e1: 77:11:f4:a8:b9:08:fa:03:1a:d8:f0:34:d5:4e:ea: ec:fc:ae:b0:10:b5:d8:90:8f:70:62:fd:f2:74:53: 6f:20:87:51:f6:7c:be:37:12:1c:ff:8c:f1:90:2a: 84:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E8:F4:E1:0C:C7:F2:DC:F9:8D:C0:A1:BC:52:ED:FF:0E:B0:BC:9B X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:9e:01:ff:68:fa:a3:8a:83:16:7f:58:24:ac:c2:70:7a:ba: 4d:fb:2f:3b:6b:9b:a7:92:78:01:56:2a:9b:f2:27:41:6e:32: ae:cc:51:53:9c:a3:7e:2c:2f:35:d9:0c:01:69:da:ed:1e:ac: e5:f8:67:f0:55:9a:79:4a:ce:bd:52:50:79:13:be:8b:86:f4: 6c:a3:75:9f:3b:75:a4:be:d8:1f:66:85:ef:e4:90:af:aa:77: a7:e3:c6:12:5e:2f:f4:d1:95:83:a4:23:04:3a:13:61:6d:18: 74:06:9c:08:4d:b8:2a:17:ea:6f:95:45:be:f5:3f:55:e7:d4: 8b:ef:64:72:02:c9:44:fb:fd:66:cb:83:23:71:91:49:38:11: 0e:a6:2e:7b:f0:25:a8:7d:48:b0:ab:de:3a:9e:51:35:4b:d8: 74:41:e5:1f:48:3e:bb:bc:a7:2b:49:7a:7c:24:54:c3:29:87: ac:c8:00:f4:e1:13:d0:ec:91:c2:97:b6:7b:26:bb:b5:e0:95: 30:e7:2b:83:c6:af:bc:aa:09:74:89:e2:f1:21:7c:88:b9:d5: b5:48:4c:87:ab:c1:a0:4d:68:78:72:53:41:fe:2c:ce:e2:02: a4:18:aa:64:96:c2:cd:83:87:e5:aa:a3:9a:a2:b1:d6:a9:24: 77:7d:4b:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+s49iI+Kue5IJvwyno0SvNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjYwNzI5MDgwMDQwWhcNMjYwNzMwMDgwMDQwWjAzMTEwLwYDVQQD EyhmNWU4ZjRlMTBjYzdmMmRjZjk4ZGMwYTFiYzUyZWRmZjBlYjBiYzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIddnrG2wkeKNq9hBj8xYBIE93lD VEhZBaD7b3Wmij8KTxlqOdNSIR8S7G5XNDl11V7Syjdn763O97PJ2K49WOI+1PfP w8N2XlwGT04bkfg0Thxa+T6pKoAXxINFWgQtsAFLAj/bTQhizg+FL2Wzc2kaXOtD 7hGyTqDWFBgiJgbpWBxi/o/j/k6X6H7JcWZl0cPpt07uyn9iIrcyxfbvjiOjQfTY lDCcEpGXVBD7eFbTNPRxNrTVewN9rLbcs6OmGeuMqlGdk3SG9FHTUgsb8eF3EfSo uQj6AxrY8DTVTurs/K6wELXYkI9wYv3ydFNvIIdR9ny+NxIc/4zxkCqEwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXo9OEMx/Lc+Y3AobxS7f8OsLybMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJ4B/2j6 o4qDFn9YJKzCcHq6TfsvO2ubp5J4AVYqm/InQW4yrsxRU5yjfiwvNdkMAWna7R6s 5fhn8FWaeUrOvVJQeRO+i4b0bKN1nzt1pL7YH2aF7+SQr6p3p+PGEl4v9NGVg6Qj BDoTYW0YdAacCE24Khfqb5VFvvU/VefUi+9kcgLJRPv9ZsuDI3GRSTgRDqYue/Al qH1IsKveOp5RNUvYdEHlH0g+u7ynK0l6fCRUwymHrMgA9OET0OyRwpe2eya7teCV MOcrg8avvKoJdIni8SF8iLnVtUhMh6vBoE1oeHJTQf4szuICpBiqZJbCzYOH5aqj mqKx1qkkd31L8A== -----END CERTIFICATE-----Generated at Wed Jul 29 10:59:19 2026 by rpki-client