$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: 7lhM3N4/dboeJcWC9ATtM1N/EjnjDKOcaRibBu8wCcI= Subject key identifier: 38:B5:5D:DE:0A:04:2C:1A:C3:CF:AE:2B:51:1A:AC:DF:ED:82:8A:EF Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 01A0D64BBE4B6D069BD9D720C4DCB6E6DEBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 1A75 Signing time: Fri 25 Sep 2026 02:01:23 +0000 Manifest this update: Fri 25 Sep 2026 02:01:23 +0000 Manifest next update: Sat 26 Sep 2026 02:01:23 +0000 Files and hashes: 1: 286ljgduSQ23zXxMskYIQVpjxXw.roa (hash: 7kRo+hhGrmwGIHUv917EDTqyatYEBV1hJSeuWZhlap4=) 2: 4PDvFK89C4F409g_XmWPwr7q1a0.roa (hash: 9lF1IQm65iaYh5J0JpeOleT0SuGGi5cwQEdnoe/v5JQ=) 3: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: INCTycV9QSxLkGGE5jVAc2ffrnj9NGIavaWHsyojn8I=) 4: XpUefWEiJeIsRivUE_i8Xfs2GR8.roa (hash: PBHeI5NfF0k/v47sxglrYiZdodvTKkFHSpMBQlDcdXc=) 5: ZIFHSotu32VSRWz3yy7p-c2LO-A.roa (hash: HtmF/vHud7OvPwqTimOkx4Bd9iGAFPGDNsHwtbVJBZ0=) 6: Zc2NwjC7aoT6KGmTlpJCVRtAAxM.roa (hash: Lw8AgQnNa+u3srZTik73U4zlVyuicSwiTs/U27h1T58=) 7: a0ljWjjOMmlqv-KUZ9yfJ5o3o08.roa (hash: HgXqjfFgX4E4spO/gFoOPoWjpP4kI1tcmHiNguLieIw=) 8: bPL_MeYosxpJav1FZrlBnVGpssY.roa (hash: xbaf1MsiC38LB8r3yBiWSr3FjpTVnJNfGoxcFxBJEYM=) 9: oP5ts0FtfK91btZ3P7x-bBdVAcw.roa (hash: Hav/3aYz5+a57hb3pfiEZH2IAAqH/VmCtBV7UH/ck2A=) 10: tXhbIuVpYeE_jd1CU4lv2cgwfnw.roa (hash: lxyF6ei0/QTcu7Po0gkCzFazsZNHVkwJorFWOFgBWYI=) 11: vjXTFvPzZIb1zeRSL_kprTEdqbI.roa (hash: JwHjdybMdJ5oxvKoHkQM559e6BBUTavDx0DxnmOgdS0=) 12: yvxp8xW14Xp2PiR7kJbkc75G14A.roa (hash: o93DGCCTavhE3gLHe6hFNvurmN1iNt5bMJ8d0jqfGPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d6:4b:be:4b:6d:06:9b:d9:d7:20:c4:dc:b6:e6:de:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Sep 25 02:01:23 2026 GMT Not After : Sep 26 02:01:23 2026 GMT Subject: CN=38b55dde0a042c1ac3cfae2b511aacdfed828aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b5:da:0c:90:88:b3:2d:6c:3a:4a:ab:df:37: 80:ab:a8:77:db:09:5b:f7:58:af:1d:ea:53:3f:ce: 6d:ec:95:6b:bd:fc:2d:05:ad:48:24:f2:2a:db:bc: fe:be:64:13:f0:0b:7d:d4:9d:9f:9e:a2:56:56:aa: 40:f4:92:f0:76:f5:11:b7:00:0e:b3:70:d4:d3:b4: 3c:6a:33:58:a6:df:a0:90:af:9a:43:d5:e7:bb:20: e7:b5:bd:eb:b3:c1:d5:e2:dd:07:e5:50:b1:ac:cb: 61:71:c5:5c:f2:91:03:49:1b:8b:cf:8c:9e:5f:14: 13:e1:8a:49:53:44:b6:97:70:3f:c9:ff:fa:7c:ec: 1b:21:1e:e3:a3:1c:6c:c4:28:31:1b:22:be:62:76: 78:50:77:ef:21:37:8a:24:b1:59:b0:e1:d0:d1:1c: 80:74:bb:b9:fb:34:9a:e2:fb:26:d9:2c:8e:c4:7e: 26:bb:09:98:a2:18:c1:25:ec:a6:3b:91:07:d4:f5: 48:5e:3e:57:f4:2d:be:b6:39:7b:9e:c5:55:e6:d8: e3:82:0d:66:9f:08:53:63:06:f1:77:63:7a:fb:3a: fd:88:a5:97:25:25:92:be:81:73:93:e7:3a:59:0d: 90:6d:85:d5:23:db:32:66:d2:8f:94:f5:52:b6:a9: 29:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B5:5D:DE:0A:04:2C:1A:C3:CF:AE:2B:51:1A:AC:DF:ED:82:8A:EF X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:49:40:4b:20:90:85:cd:c8:99:a7:e6:5a:98:49:ce:3b:a9: c2:d7:69:6e:ee:00:1e:98:01:76:4e:e7:76:f8:ab:d4:70:e6: 62:58:5b:7d:dd:7d:3f:83:a0:db:da:de:4f:c3:92:a9:39:c5: 95:33:28:3e:29:b4:5d:db:ae:40:c2:55:0e:36:2e:5a:12:65: e0:eb:c4:ac:dd:9a:ee:c1:08:ed:a1:0a:f8:e9:5f:05:fb:4b: a8:76:71:21:4d:b5:51:06:af:cc:ca:6c:5d:97:f2:dc:8d:bb: 66:a1:4e:02:4f:9c:3e:fb:3c:df:2e:14:e3:ca:72:ad:9b:91: 71:84:ed:36:95:b1:83:33:35:2d:a2:2c:3a:63:94:93:60:98: d2:a6:24:9f:85:75:69:38:48:06:4b:f6:66:e3:ba:69:c0:38: 55:2e:2a:97:f7:b3:20:84:b7:bb:ee:41:4e:b3:fa:06:ee:9e: 71:1b:86:fe:07:c1:1a:63:c1:60:2b:9b:fb:d5:ca:fa:0a:32: 69:db:a5:94:3d:ea:1a:b7:37:58:64:8a:d6:38:a6:1c:77:2f: 90:14:4f:e5:dd:c2:f7:9c:ae:f5:d1:89:d4:fe:d4:85:df:49: 2f:9c:51:43:e0:6d:ef:9c:80:99:80:35:5b:39:83:a8:77:58: e2:1c:74:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDWS75LbQab2dcgxNy25t67MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjYwOTI1MDIwMTIzWhcNMjYwOTI2MDIwMTIzWjAzMTEwLwYDVQQD EygzOGI1NWRkZTBhMDQyYzFhYzNjZmFlMmI1MTFhYWNkZmVkODI4YWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorXaDJCIsy1sOkqr3zeAq6h32wlb 91ivHepTP85t7JVrvfwtBa1IJPIq27z+vmQT8At91J2fnqJWVqpA9JLwdvURtwAO s3DU07Q8ajNYpt+gkK+aQ9XnuyDntb3rs8HV4t0H5VCxrMthccVc8pEDSRuLz4ye XxQT4YpJU0S2l3A/yf/6fOwbIR7joxxsxCgxGyK+YnZ4UHfvITeKJLFZsOHQ0RyA dLu5+zSa4vsm2SyOxH4muwmYohjBJeymO5EH1PVIXj5X9C2+tjl7nsVV5tjjgg1m nwhTYwbxd2N6+zr9iKWXJSWSvoFzk+c6WQ2QbYXVI9syZtKPlPVStqkpTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDi1Xd4KBCwaw8+uK1EarN/tgorvMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUlASyCQ hc3ImafmWphJzjupwtdpbu4AHpgBdk7ndvir1HDmYlhbfd19P4Og29reT8OSqTnF lTMoPim0XduuQMJVDjYuWhJl4OvErN2a7sEI7aEK+OlfBftLqHZxIU21UQavzMps XZfy3I27ZqFOAk+cPvs83y4U48pyrZuRcYTtNpWxgzM1LaIsOmOUk2CY0qYkn4V1 aThIBkv2ZuO6acA4VS4ql/ezIIS3u+5BTrP6Bu6ecRuG/gfBGmPBYCub+9XK+goy adullD3qGrc3WGSK1jimHHcvkBRP5d3C95yu9dGJ1P7Uhd9JL5xRQ+Bt75yAmYA1 WzmDqHdY4hx0Cw== -----END CERTIFICATE-----Generated at Fri Sep 25 10:57:16 2026 by rpki-client