$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: jbhguDmEnVY6SShFrl2AeP/kUBI95SaI8aGcARAfQfg= Subject key identifier: 8A:91:DF:2F:1A:B8:6B:C4:6B:DD:F5:F2:73:1F:FB:F5:91:F9:FC:13 Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 01A0C4E9CB916014F6018F18A0823D518439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 1A6C Signing time: Mon 21 Sep 2026 17:00:51 +0000 Manifest this update: Mon 21 Sep 2026 17:00:51 +0000 Manifest next update: Tue 22 Sep 2026 17:00:51 +0000 Files and hashes: 1: 286ljgduSQ23zXxMskYIQVpjxXw.roa (hash: 7kRo+hhGrmwGIHUv917EDTqyatYEBV1hJSeuWZhlap4=) 2: 4PDvFK89C4F409g_XmWPwr7q1a0.roa (hash: 9lF1IQm65iaYh5J0JpeOleT0SuGGi5cwQEdnoe/v5JQ=) 3: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: DgwESwkSUt999bGTfAhrVfC5mMCJ4ylVNjm3JAXGadg=) 4: XpUefWEiJeIsRivUE_i8Xfs2GR8.roa (hash: PBHeI5NfF0k/v47sxglrYiZdodvTKkFHSpMBQlDcdXc=) 5: ZIFHSotu32VSRWz3yy7p-c2LO-A.roa (hash: HtmF/vHud7OvPwqTimOkx4Bd9iGAFPGDNsHwtbVJBZ0=) 6: Zc2NwjC7aoT6KGmTlpJCVRtAAxM.roa (hash: Lw8AgQnNa+u3srZTik73U4zlVyuicSwiTs/U27h1T58=) 7: a0ljWjjOMmlqv-KUZ9yfJ5o3o08.roa (hash: HgXqjfFgX4E4spO/gFoOPoWjpP4kI1tcmHiNguLieIw=) 8: bPL_MeYosxpJav1FZrlBnVGpssY.roa (hash: xbaf1MsiC38LB8r3yBiWSr3FjpTVnJNfGoxcFxBJEYM=) 9: oP5ts0FtfK91btZ3P7x-bBdVAcw.roa (hash: Hav/3aYz5+a57hb3pfiEZH2IAAqH/VmCtBV7UH/ck2A=) 10: tXhbIuVpYeE_jd1CU4lv2cgwfnw.roa (hash: lxyF6ei0/QTcu7Po0gkCzFazsZNHVkwJorFWOFgBWYI=) 11: vjXTFvPzZIb1zeRSL_kprTEdqbI.roa (hash: JwHjdybMdJ5oxvKoHkQM559e6BBUTavDx0DxnmOgdS0=) 12: yvxp8xW14Xp2PiR7kJbkc75G14A.roa (hash: o93DGCCTavhE3gLHe6hFNvurmN1iNt5bMJ8d0jqfGPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 17:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c4:e9:cb:91:60:14:f6:01:8f:18:a0:82:3d:51:84:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Sep 21 17:00:51 2026 GMT Not After : Sep 22 17:00:51 2026 GMT Subject: CN=8a91df2f1ab86bc46bddf5f2731ffbf591f9fc13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:ec:1f:b2:34:19:b9:6d:f2:f8:96:8f:80: 63:39:1f:3f:8f:ca:33:61:a7:fe:7c:71:f2:9e:b1: eb:73:30:c2:a9:01:86:54:2a:6f:9b:ee:85:34:f3: ca:79:21:7e:66:0c:f6:3d:ab:35:64:9f:ee:35:3f: 34:a3:4a:80:29:63:79:49:68:44:4c:15:05:e1:94: 98:58:15:fb:73:d9:c2:b6:83:cf:6b:f5:d9:42:f8: 67:67:a9:d5:a6:de:83:e1:0a:59:c8:ff:9d:0d:b8: f9:40:51:78:10:95:30:f1:48:dc:d0:5a:e6:bc:dc: 2f:57:46:22:20:a8:c4:c4:ad:b2:f4:4b:14:c5:fd: b6:d8:0f:f3:3d:78:da:7c:31:af:a5:8e:63:fb:4c: 53:b6:47:09:9f:14:87:19:e5:35:10:a4:59:18:84: 25:09:68:19:09:58:da:c6:db:b9:ee:4e:9a:46:2d: 7b:55:45:4e:52:14:3e:f7:16:05:eb:ca:f4:bf:4b: 92:b5:03:a9:d0:ab:db:bb:df:87:9e:d4:65:f8:93: 49:69:40:50:81:75:41:a3:4a:79:46:62:de:ed:48: bc:2a:bc:90:ab:61:40:3b:12:18:8c:1e:64:c0:72: 55:71:25:07:40:b1:c3:55:4e:f0:b2:55:ee:4f:3f: aa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:91:DF:2F:1A:B8:6B:C4:6B:DD:F5:F2:73:1F:FB:F5:91:F9:FC:13 X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ec:51:3e:75:b4:7b:5e:01:8e:09:24:83:1a:4a:23:41:5c: be:34:4b:7d:6a:45:ce:ea:7c:f1:a4:7d:ed:83:17:48:b8:b1: 61:f0:ff:b2:75:8b:fd:9d:0f:6d:f3:6e:68:61:a7:8f:03:5e: dd:9e:cf:a8:4d:da:ed:63:0a:a0:28:07:3d:55:dc:08:cd:7a: c0:88:0b:d5:a5:6b:49:3c:d9:74:ae:eb:ca:4c:75:bc:ff:23: 7a:a4:14:91:be:a2:ff:47:f2:fe:db:c6:8d:91:99:07:af:b6: 34:34:f2:ba:6c:f5:80:ce:36:5b:a1:d4:f9:e5:5c:51:84:c9: 11:9e:52:f0:59:57:db:50:2c:6c:7f:83:59:7f:73:87:8a:ea: 73:40:d5:a7:c0:3d:d3:c6:b5:3c:4b:bc:1b:e9:a7:36:3d:93: 4a:25:03:49:9a:df:98:e7:86:89:9e:65:01:ce:3f:00:ed:8c: 2a:3a:ed:c2:4a:5c:00:c3:ac:16:9c:a1:12:d3:9f:49:b2:00: e5:e7:43:c2:ff:21:88:1c:fa:be:4f:a1:28:c9:b7:5e:95:94: 57:5f:4c:96:ef:cf:6d:49:73:5e:7b:a4:2a:84:7b:3c:d3:11: d8:77:39:e0:e8:1e:22:4a:18:ba:62:68:30:00:51:a6:71:77: ad:97:70:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDE6cuRYBT2AY8YoII9UYQ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjYwOTIxMTcwMDUxWhcNMjYwOTIyMTcwMDUxWjAzMTEwLwYDVQQD Eyg4YTkxZGYyZjFhYjg2YmM0NmJkZGY1ZjI3MzFmZmJmNTkxZjlmYzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrLsH7I0Gblt8viWj4BjOR8/j8oz Yaf+fHHynrHrczDCqQGGVCpvm+6FNPPKeSF+Zgz2Pas1ZJ/uNT80o0qAKWN5SWhE TBUF4ZSYWBX7c9nCtoPPa/XZQvhnZ6nVpt6D4QpZyP+dDbj5QFF4EJUw8Ujc0Frm vNwvV0YiIKjExK2y9EsUxf222A/zPXjafDGvpY5j+0xTtkcJnxSHGeU1EKRZGIQl CWgZCVjaxtu57k6aRi17VUVOUhQ+9xYF68r0v0uStQOp0Kvbu9+HntRl+JNJaUBQ gXVBo0p5RmLe7Ui8KryQq2FAOxIYjB5kwHJVcSUHQLHDVU7wslXuTz+q0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqR3y8auGvEa9318nMf+/WR+fwTMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuxRPnW0 e14BjgkkgxpKI0FcvjRLfWpFzup88aR97YMXSLixYfD/snWL/Z0PbfNuaGGnjwNe 3Z7PqE3a7WMKoCgHPVXcCM16wIgL1aVrSTzZdK7rykx1vP8jeqQUkb6i/0fy/tvG jZGZB6+2NDTyumz1gM42W6HU+eVcUYTJEZ5S8FlX21AsbH+DWX9zh4rqc0DVp8A9 08a1PEu8G+mnNj2TSiUDSZrfmOeGiZ5lAc4/AO2MKjrtwkpcAMOsFpyhEtOfSbIA 5edDwv8hiBz6vk+hKMm3XpWUV19Mlu/PbUlzXnukKoR7PNMR2Hc54OgeIkoYumJo MABRpnF3rZdwog== -----END CERTIFICATE-----Generated at Tue Sep 22 03:19:23 2026 by rpki-client