$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: uHH9C5l9x8PD4cg8f2tw6MdpXAdv6XVsW5vUGLd3Yao= Subject key identifier: 2B:C8:10:3B:54:12:80:37:BD:92:16:B6:01:D1:B6:2C:62:34:2E:1A Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 01A1DEDE5402A65E6F46E8646B4769C65715 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 1AFE Signing time: Sun 15 Nov 2026 11:01:14 +0000 Manifest this update: Sun 15 Nov 2026 11:01:14 +0000 Manifest next update: Mon 16 Nov 2026 11:01:14 +0000 Files and hashes: 1: 286ljgduSQ23zXxMskYIQVpjxXw.roa (hash: 7kRo+hhGrmwGIHUv917EDTqyatYEBV1hJSeuWZhlap4=) 2: 4PDvFK89C4F409g_XmWPwr7q1a0.roa (hash: 9lF1IQm65iaYh5J0JpeOleT0SuGGi5cwQEdnoe/v5JQ=) 3: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: aLDSnMaNWLMLsUp7OoVC4wMm522YDrHcF/npBIPlAvc=) 4: XpUefWEiJeIsRivUE_i8Xfs2GR8.roa (hash: PBHeI5NfF0k/v47sxglrYiZdodvTKkFHSpMBQlDcdXc=) 5: ZIFHSotu32VSRWz3yy7p-c2LO-A.roa (hash: HtmF/vHud7OvPwqTimOkx4Bd9iGAFPGDNsHwtbVJBZ0=) 6: Zc2NwjC7aoT6KGmTlpJCVRtAAxM.roa (hash: Lw8AgQnNa+u3srZTik73U4zlVyuicSwiTs/U27h1T58=) 7: a0ljWjjOMmlqv-KUZ9yfJ5o3o08.roa (hash: HgXqjfFgX4E4spO/gFoOPoWjpP4kI1tcmHiNguLieIw=) 8: bPL_MeYosxpJav1FZrlBnVGpssY.roa (hash: xbaf1MsiC38LB8r3yBiWSr3FjpTVnJNfGoxcFxBJEYM=) 9: oP5ts0FtfK91btZ3P7x-bBdVAcw.roa (hash: Hav/3aYz5+a57hb3pfiEZH2IAAqH/VmCtBV7UH/ck2A=) 10: tXhbIuVpYeE_jd1CU4lv2cgwfnw.roa (hash: lxyF6ei0/QTcu7Po0gkCzFazsZNHVkwJorFWOFgBWYI=) 11: vjXTFvPzZIb1zeRSL_kprTEdqbI.roa (hash: JwHjdybMdJ5oxvKoHkQM559e6BBUTavDx0DxnmOgdS0=) 12: yvxp8xW14Xp2PiR7kJbkc75G14A.roa (hash: o93DGCCTavhE3gLHe6hFNvurmN1iNt5bMJ8d0jqfGPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:de:54:02:a6:5e:6f:46:e8:64:6b:47:69:c6:57:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Nov 15 11:01:14 2026 GMT Not After : Nov 16 11:01:14 2026 GMT Subject: CN=2bc8103b54128037bd9216b601d1b62c62342e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:62:7f:fc:f1:4f:20:5c:b4:70:a3:bb:98:ef: ee:75:98:70:3a:e5:c5:87:f8:69:24:11:82:78:06: 34:cc:2f:03:1e:46:a3:df:bf:5b:79:8d:fe:60:79: 92:f7:a3:d1:d4:27:c2:fe:a2:e1:41:73:8a:55:4e: ab:2b:e0:e3:73:74:ba:7f:83:1b:a2:cf:57:b4:c1: b7:0d:e6:26:61:6a:48:45:b1:80:61:97:09:69:57: 1c:53:93:67:6a:59:32:fb:09:62:8f:e5:4a:e4:de: a6:9f:73:c4:ce:ad:79:c1:2d:cf:36:95:5b:2c:cc: 55:44:e6:4e:47:d3:4b:4b:a8:b4:5b:b5:93:9b:52: 07:cb:50:48:fb:f6:cb:e0:81:54:f5:cb:c9:0d:76: 84:2c:89:b0:54:51:cc:51:01:77:98:c0:c8:ac:07: 15:0d:fb:23:50:2f:5f:28:29:45:89:27:3e:99:75: 2d:5c:f0:34:c5:b8:21:d1:09:23:4b:bf:a7:de:48: ea:20:d0:13:fe:f2:99:37:29:2e:13:a0:b6:9b:fa: 9a:08:bc:0f:12:7c:06:ff:ab:e7:15:eb:20:4f:a5: 2b:6f:46:e8:6c:39:af:1d:d6:96:e7:18:e2:d1:0e: f4:a1:80:d5:59:82:5e:30:4b:2a:7e:d3:10:0f:7e: 03:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C8:10:3B:54:12:80:37:BD:92:16:B6:01:D1:B6:2C:62:34:2E:1A X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e2:6f:3f:78:3b:aa:06:92:56:ae:4e:cc:72:b2:19:d4:cb: 21:6b:a1:34:42:e2:be:90:b3:6a:9b:f8:6d:7b:39:4c:a4:65: a2:8c:59:5d:d2:49:fe:9f:56:03:0d:4d:e0:8d:26:18:1b:06: 36:e4:d6:ae:f1:8e:ed:63:f3:e6:a0:ba:8d:06:09:cb:5b:50: fe:6d:33:b6:5b:87:28:e1:38:da:1f:85:b3:2c:bb:f7:14:cc: 8a:4a:ce:d9:44:0a:db:ae:15:9f:d1:af:41:e9:5d:69:5a:d6: 99:d7:36:93:a7:1e:82:3e:41:75:e2:72:77:02:7a:64:f7:98: d4:54:c1:d0:86:a1:54:6c:7b:ad:9a:fd:4f:54:68:07:fc:2c: 23:03:dd:39:d7:d8:13:47:b1:3a:00:68:02:59:f5:d5:f2:20: 5a:aa:50:99:e0:e2:03:01:fd:d4:ec:fa:e3:95:a6:1a:28:0a: 30:1b:a0:c7:17:c3:b4:3c:ca:c1:78:ec:21:b5:65:b4:0d:26: 70:a7:62:90:05:d7:33:89:2d:25:f7:18:73:a2:f3:e4:72:c2: b4:6c:4f:8a:56:74:95:da:1f:15:53:82:7d:c6:fb:21:5f:4c: dd:5c:d6:31:06:42:07:35:1f:1d:fe:64:f3:d7:c1:33:3d:87: c4:47:5f:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHe3lQCpl5vRuhka0dpxlcVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjYxMTE1MTEwMTE0WhcNMjYxMTE2MTEwMTE0WjAzMTEwLwYDVQQD EygyYmM4MTAzYjU0MTI4MDM3YmQ5MjE2YjYwMWQxYjYyYzYyMzQyZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GJ//PFPIFy0cKO7mO/udZhwOuXF h/hpJBGCeAY0zC8DHkaj379beY3+YHmS96PR1CfC/qLhQXOKVU6rK+Djc3S6f4Mb os9XtMG3DeYmYWpIRbGAYZcJaVccU5Nnalky+wlij+VK5N6mn3PEzq15wS3PNpVb LMxVROZOR9NLS6i0W7WTm1IHy1BI+/bL4IFU9cvJDXaELImwVFHMUQF3mMDIrAcV DfsjUC9fKClFiSc+mXUtXPA0xbgh0QkjS7+n3kjqINAT/vKZNykuE6C2m/qaCLwP EnwG/6vnFesgT6Urb0bobDmvHdaW5xji0Q70oYDVWYJeMEsqftMQD34DFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvIEDtUEoA3vZIWtgHRtixiNC4aMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauJvP3g7 qgaSVq5OzHKyGdTLIWuhNELivpCzapv4bXs5TKRlooxZXdJJ/p9WAw1N4I0mGBsG NuTWrvGO7WPz5qC6jQYJy1tQ/m0ztluHKOE42h+Fsyy79xTMikrO2UQK264Vn9Gv QeldaVrWmdc2k6cegj5BdeJydwJ6ZPeY1FTB0IahVGx7rZr9T1RoB/wsIwPdOdfY E0exOgBoAln11fIgWqpQmeDiAwH91Oz645WmGigKMBugxxfDtDzKwXjsIbVltA0m cKdikAXXM4ktJfcYc6Lz5HLCtGxPilZ0ldofFVOCfcb7IV9M3VzWMQZCBzUfHf5k 89fBMz2HxEdfHQ== -----END CERTIFICATE-----Generated at Sun Nov 15 17:27:27 2026 by rpki-client