$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: 6DO/MHd2itHU0f5w5Fyfey+MI4nVP9TjPNkaycEdVC0= Subject key identifier: 15:F3:81:60:40:D5:A1:CF:EC:1F:72:D1:E4:65:87:DF:28:B9:48:AE Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 0198D4E0486F6FD06ECB3421B7FA274F8A3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 164F Signing time: Sat 23 Aug 2025 03:02:05 +0000 Manifest this update: Sat 23 Aug 2025 03:02:05 +0000 Manifest next update: Sun 24 Aug 2025 03:02:05 +0000 Files and hashes: 1: 9AkjaJRYRIOTmgf4F3gyV6pdFkQ.roa (hash: N1lZUtbJEJkRSUYDq/VJK4cR/RojBk8ALOORTw9wVk8=) 2: DUER2OIxuLfteK-5s9p125aHbHQ.roa (hash: MKxlsAlXCfnz4va2JwSTTtP5lv2QEgVXIYiD1U0P1iM=) 3: I5Dlj2iBXR78bV2NI4oXxT6DVcQ.roa (hash: pUPvPv3IMdPMN3mngjSRkbMNdszUqvQ/W+9CudZep1s=) 4: IKxEFfN_KNz819jDJF02u6P6vks.roa (hash: M1gfdLv0XPFzxrEqEMyJ47aUP/+uDTO64SIkdj54NaA=) 5: JcqV5Zbt-7BBvR25dnt58sZOVRw.roa (hash: Jyex6OZ5W2eO7E9m8v2xcJSNJuYcw9eBRYzL8fzsuKg=) 6: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: 0wBz8l+1Uy9pJyNnSAVXQyKR/xuQNqnegz8LPVNGtjc=) 7: QeFtXb_2Jy97mUDOpmxAN1O437Q.roa (hash: pGsLweLJqx/P4hTPUc5m5Veo+2vG7HsRtDbmA1rHXlQ=) 8: YPwqy-r5Ds6zjUqs83c9wSrz4Xo.roa (hash: /OBWcwiTOuByZ0CFtuxP3jPnYcDQxuxVogbCk4BaZIM=) 9: _z_sTvwtZQKHpvup9rFWqFFhFKY.roa (hash: JVM6qUA4ZtDkSX81zJfuU5jJmnu8pCK2PaUHasgHRME=) 10: kUvUMMUm6A2S-PsLFuOoxFGjL2g.roa (hash: 43KKo4hB/OsGlhMLYdFrQhlx6kBqniKw+U0iCAYg2Qg=) 11: pOvELxmVMCJOREXgcbJwYPWQcLY.roa (hash: 8NAO5qgs1zoQcDKNETGRxihZubfEYTFA3QAx7BgtdEo=) 12: stpJENpG1HfxaYzx679NTwZFpZY.roa (hash: EMcugxArWnP7J9sItxl3gZsFeM8qrAvUxjSeKkZ4oao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 03:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:e0:48:6f:6f:d0:6e:cb:34:21:b7:fa:27:4f:8a:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Aug 23 03:02:05 2025 GMT Not After : Aug 24 03:02:05 2025 GMT Subject: CN=15f3816040d5a1cfec1f72d1e46587df28b948ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a6:c3:3b:a4:9e:a3:ef:64:57:75:d1:8b:87: 7d:6a:9b:de:98:5e:ce:73:f9:b5:37:a2:ee:39:c9: 82:ba:c4:d6:16:3c:43:a2:02:4a:9c:82:93:6a:64: 39:dc:f2:94:4f:00:12:75:eb:ff:85:cc:a9:3d:b9: 9b:b4:3b:35:02:14:e8:c9:62:12:d0:15:39:04:f9: 55:b4:0a:e9:cc:01:64:ab:07:d2:75:c5:fb:de:07: e8:c2:34:a9:51:90:f2:d1:56:76:88:60:98:70:66: fc:ba:4f:5f:e3:82:94:29:ea:e8:95:32:8d:6d:ec: d2:1d:c0:98:50:06:27:89:ea:a0:a1:7d:de:53:26: 2f:af:81:c2:85:32:85:a8:be:90:14:cc:71:8c:8e: 29:3e:b2:2f:1e:33:6d:cf:87:4a:fd:dd:62:82:7b: 46:c6:92:37:0d:9d:ce:1a:f5:e2:44:3f:f3:05:39: 66:3b:bf:f2:4f:11:1d:fb:06:38:c1:b4:41:9e:8e: fa:2a:e3:17:41:2e:cd:d3:5c:38:c2:6d:fe:37:26: 6d:05:f1:5a:21:79:b6:8d:ca:56:aa:d5:9b:1a:29: a4:f3:95:54:9d:32:91:33:35:02:bb:bd:2f:54:a3: 0f:6b:a7:f4:d3:0e:da:4f:37:5d:76:2c:53:53:ed: a6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F3:81:60:40:D5:A1:CF:EC:1F:72:D1:E4:65:87:DF:28:B9:48:AE X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:dc:39:a5:fa:af:35:57:88:4e:c4:25:af:29:c7:45:20:4a: 21:67:04:6c:87:ee:0f:9a:d2:d0:c5:0b:08:b9:cc:64:35:b5: da:51:7d:f8:e3:c5:73:ac:6a:84:83:f5:b2:57:be:e9:09:cf: e0:5b:df:ad:64:84:5e:e8:6a:8c:5a:b8:0f:67:63:94:5a:33: 06:34:61:08:eb:76:90:92:9f:57:f3:cb:52:57:52:e7:be:e2: 40:8d:0f:56:d1:a1:5f:7d:da:44:23:88:95:52:d6:b7:ea:8d: 1d:a5:84:56:ef:89:fc:74:e0:6c:f4:ec:07:e1:58:5a:28:12: 9e:85:d5:4e:ee:9d:cb:db:27:3b:d1:f7:b7:dd:8a:fe:8c:65: 86:ae:8d:66:1b:5b:b0:37:9e:c8:fa:9a:2e:61:85:49:93:e5: b3:33:12:59:91:4f:96:68:58:68:c2:75:e7:b5:aa:8d:7d:40: ab:4a:c3:c0:3c:ea:b0:dc:2d:b8:ec:ce:06:c1:35:bc:8f:57: 68:9e:ff:8a:cd:5a:d6:10:f1:a4:96:b5:6b:62:bc:8a:3b:06: 20:ac:e2:68:16:87:43:a9:f3:1b:58:76:1d:0b:70:97:6f:16: af:4e:0e:2b:c6:da:5e:b3:89:73:ae:0c:ef:9e:5b:26:fb:3e: 8f:6f:a1:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU4Ehvb9BuyzQht/onT4o7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjUwODIzMDMwMjA1WhcNMjUwODI0MDMwMjA1WjAzMTEwLwYDVQQD EygxNWYzODE2MDQwZDVhMWNmZWMxZjcyZDFlNDY1ODdkZjI4Yjk0OGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKbDO6Seo+9kV3XRi4d9apvemF7O c/m1N6LuOcmCusTWFjxDogJKnIKTamQ53PKUTwASdev/hcypPbmbtDs1AhToyWIS 0BU5BPlVtArpzAFkqwfSdcX73gfowjSpUZDy0VZ2iGCYcGb8uk9f44KUKerolTKN bezSHcCYUAYnieqgoX3eUyYvr4HChTKFqL6QFMxxjI4pPrIvHjNtz4dK/d1igntG xpI3DZ3OGvXiRD/zBTlmO7/yTxEd+wY4wbRBno76KuMXQS7N01w4wm3+NyZtBfFa IXm2jcpWqtWbGimk85VUnTKRMzUCu70vVKMPa6f00w7aTzdddixTU+2muQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXzgWBA1aHP7B9y0eRlh98ouUiuMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtw5pfqv NVeITsQlrynHRSBKIWcEbIfuD5rS0MULCLnMZDW12lF9+OPFc6xqhIP1sle+6QnP 4FvfrWSEXuhqjFq4D2djlFozBjRhCOt2kJKfV/PLUldS577iQI0PVtGhX33aRCOI lVLWt+qNHaWEVu+J/HTgbPTsB+FYWigSnoXVTu6dy9snO9H3t92K/oxlhq6NZhtb sDeeyPqaLmGFSZPlszMSWZFPlmhYaMJ157WqjX1Aq0rDwDzqsNwtuOzOBsE1vI9X aJ7/is1a1hDxpJa1a2K8ijsGIKziaBaHQ6nzG1h2HQtwl28Wr04OK8baXrOJc64M 755bJvs+j2+h2w== -----END CERTIFICATE-----Generated at Sat Aug 23 10:52:23 2025 by rpki-client