$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: Abakd3PH8k4sPEVj0UIQKxdwgOxPwVG5DZscV/MiWV4= Subject key identifier: 71:09:DE:97:57:3C:CC:C4:7A:81:2F:F6:11:25:C1:1A:BB:3B:F9:E4 Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 01977188A8015DCDBA260F9115D5C7D3A466 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 1597 Signing time: Sun 15 Jun 2025 03:01:10 +0000 Manifest this update: Sun 15 Jun 2025 03:01:10 +0000 Manifest next update: Mon 16 Jun 2025 03:01:10 +0000 Files and hashes: 1: 9AkjaJRYRIOTmgf4F3gyV6pdFkQ.roa (hash: N1lZUtbJEJkRSUYDq/VJK4cR/RojBk8ALOORTw9wVk8=) 2: DUER2OIxuLfteK-5s9p125aHbHQ.roa (hash: MKxlsAlXCfnz4va2JwSTTtP5lv2QEgVXIYiD1U0P1iM=) 3: I5Dlj2iBXR78bV2NI4oXxT6DVcQ.roa (hash: pUPvPv3IMdPMN3mngjSRkbMNdszUqvQ/W+9CudZep1s=) 4: IKxEFfN_KNz819jDJF02u6P6vks.roa (hash: M1gfdLv0XPFzxrEqEMyJ47aUP/+uDTO64SIkdj54NaA=) 5: JcqV5Zbt-7BBvR25dnt58sZOVRw.roa (hash: Jyex6OZ5W2eO7E9m8v2xcJSNJuYcw9eBRYzL8fzsuKg=) 6: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: YzrCyb3L0jlEbYLNkkZnlFEjPIyADWAieGoedqq6oDY=) 7: QeFtXb_2Jy97mUDOpmxAN1O437Q.roa (hash: pGsLweLJqx/P4hTPUc5m5Veo+2vG7HsRtDbmA1rHXlQ=) 8: YPwqy-r5Ds6zjUqs83c9wSrz4Xo.roa (hash: /OBWcwiTOuByZ0CFtuxP3jPnYcDQxuxVogbCk4BaZIM=) 9: _z_sTvwtZQKHpvup9rFWqFFhFKY.roa (hash: JVM6qUA4ZtDkSX81zJfuU5jJmnu8pCK2PaUHasgHRME=) 10: kUvUMMUm6A2S-PsLFuOoxFGjL2g.roa (hash: 43KKo4hB/OsGlhMLYdFrQhlx6kBqniKw+U0iCAYg2Qg=) 11: pOvELxmVMCJOREXgcbJwYPWQcLY.roa (hash: 8NAO5qgs1zoQcDKNETGRxihZubfEYTFA3QAx7BgtdEo=) 12: stpJENpG1HfxaYzx679NTwZFpZY.roa (hash: EMcugxArWnP7J9sItxl3gZsFeM8qrAvUxjSeKkZ4oao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 22:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:71:88:a8:01:5d:cd:ba:26:0f:91:15:d5:c7:d3:a4:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Jun 15 03:01:10 2025 GMT Not After : Jun 16 03:01:10 2025 GMT Subject: CN=7109de97573cccc47a812ff61125c11abb3bf9e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ce:69:05:2a:b5:f6:b0:ce:20:7f:96:aa:95: 1d:b3:f8:35:59:b2:02:fd:e7:e6:0e:e7:89:3c:a9: 03:05:9c:7e:d8:f9:d5:40:9c:71:5e:c9:7d:34:00: f9:b9:9a:ed:5b:a3:12:d0:26:d3:89:15:e9:a1:e5: e2:65:a5:80:05:42:28:08:f9:9f:57:a5:48:3a:80: 0e:8c:74:aa:6b:6c:a8:0a:ca:53:ba:79:c8:09:ec: 10:2d:db:06:8d:fd:1c:ab:6d:1d:09:97:b5:9c:b8: 9d:8e:d3:59:34:3d:0e:ef:44:c8:67:3c:51:a2:c2: d6:6a:81:08:cd:12:f3:c8:b2:7e:54:84:01:63:4b: 06:2e:b5:ba:da:ff:c6:ac:10:9e:9b:ec:2b:28:21: c7:41:a9:19:ec:13:e4:34:30:28:79:df:31:10:a8: ba:82:0c:b6:fe:02:34:fa:6c:96:30:5a:28:de:41: de:57:59:92:b2:f5:9e:7c:0e:c7:62:a7:60:1d:0a: b6:ea:a9:e3:ce:86:93:42:f7:f8:1a:68:d5:09:e6: da:91:0f:79:57:ad:b5:fe:73:2b:90:2d:2d:f8:eb: 6e:b8:42:65:95:32:d5:8d:7d:1a:65:3f:8a:1d:8b: bb:da:f4:53:ca:1c:70:48:fc:b4:b0:7d:6c:14:36: 65:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:09:DE:97:57:3C:CC:C4:7A:81:2F:F6:11:25:C1:1A:BB:3B:F9:E4 X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:6e:6d:6d:8f:7d:84:03:79:3a:84:c4:85:30:9e:49:3a:c0: 52:25:2a:39:8e:dc:53:84:85:08:96:d8:aa:a6:ff:14:64:6a: 39:eb:15:a0:9c:d5:69:2e:7a:09:6a:36:83:f3:4a:d3:b2:67: d4:23:b1:ac:70:c3:f2:c5:cd:44:22:c4:54:04:7d:25:90:1a: 50:eb:96:f7:b8:06:d9:a6:f2:e6:4e:39:7f:e7:dd:70:70:2d: 7e:69:7b:79:b1:40:fe:1b:be:3f:23:47:70:1d:28:f6:0b:fb: 73:a5:c8:87:01:28:a2:14:44:d1:24:a4:05:67:5f:d5:f2:66: 6d:02:b4:8c:be:ad:a2:c0:c5:a3:0f:43:9d:5a:b3:52:31:70: eb:cd:ed:75:87:ec:e6:f1:50:92:81:79:31:10:a6:2d:3e:94: e3:04:d9:7e:b9:e3:d9:19:97:a2:dd:47:36:0f:04:3d:3b:92: c2:71:03:0c:38:74:6f:6f:ad:c0:76:b9:8a:9b:32:59:34:d6: 87:6b:f2:85:09:0a:e4:03:61:73:62:32:b8:a6:fd:2a:7c:5f: b3:df:02:be:74:3f:1a:d9:3a:3c:40:3a:a3:d3:fc:0c:b1:f0: 05:fd:4e:53:0e:31:78:51:8c:c2:6d:cb:58:6b:4a:0e:03:35: e8:59:a1:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdxiKgBXc26Jg+RFdXH06RmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjUwNjE1MDMwMTEwWhcNMjUwNjE2MDMwMTEwWjAzMTEwLwYDVQQD Eyg3MTA5ZGU5NzU3M2NjY2M0N2E4MTJmZjYxMTI1YzExYWJiM2JmOWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc5pBSq19rDOIH+WqpUds/g1WbIC /efmDueJPKkDBZx+2PnVQJxxXsl9NAD5uZrtW6MS0CbTiRXpoeXiZaWABUIoCPmf V6VIOoAOjHSqa2yoCspTunnICewQLdsGjf0cq20dCZe1nLidjtNZND0O70TIZzxR osLWaoEIzRLzyLJ+VIQBY0sGLrW62v/GrBCem+wrKCHHQakZ7BPkNDAoed8xEKi6 ggy2/gI0+myWMFoo3kHeV1mSsvWefA7HYqdgHQq26qnjzoaTQvf4GmjVCebakQ95 V621/nMrkC0t+OtuuEJllTLVjX0aZT+KHYu72vRTyhxwSPy0sH1sFDZl5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEJ3pdXPMzEeoEv9hElwRq7O/nkMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeW5tbY99 hAN5OoTEhTCeSTrAUiUqOY7cU4SFCJbYqqb/FGRqOesVoJzVaS56CWo2g/NK07Jn 1COxrHDD8sXNRCLEVAR9JZAaUOuW97gG2aby5k45f+fdcHAtfml7ebFA/hu+PyNH cB0o9gv7c6XIhwEoohRE0SSkBWdf1fJmbQK0jL6tosDFow9DnVqzUjFw683tdYfs 5vFQkoF5MRCmLT6U4wTZfrnj2RmXot1HNg8EPTuSwnEDDDh0b2+twHa5ipsyWTTW h2vyhQkK5ANhc2IyuKb9Knxfs98CvnQ/Gtk6PEA6o9P8DLHwBf1OUw4xeFGMwm3L WGtKDgM16Fmh5A== -----END CERTIFICATE-----Generated at Sun Jun 15 07:38:11 2025 by rpki-client