$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: sJMjlJ1NSfF9+5S2dCxVW81hzQ5X68EiT5VmfRCTb1w= Subject key identifier: 22:B4:0A:7E:B7:09:AB:F6:C9:C6:6E:03:76:3E:44:F2:E4:0C:D0:F8 Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 019D281643BE73C8C1566B40D37A5C7A3720 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 188D Signing time: Thu 26 Mar 2026 03:00:40 +0000 Manifest this update: Thu 26 Mar 2026 03:00:40 +0000 Manifest next update: Fri 27 Mar 2026 03:00:40 +0000 Files and hashes: 1: 1FtPTBCuaFKFdfLMe7kvs8wBT2U.roa (hash: cKQ2d36EvAcAkY7lWf5+zr4pq/8g+Yc09UpRwXaS9fU=) 2: 286ljgduSQ23zXxMskYIQVpjxXw.roa (hash: 7kRo+hhGrmwGIHUv917EDTqyatYEBV1hJSeuWZhlap4=) 3: 4PDvFK89C4F409g_XmWPwr7q1a0.roa (hash: 9lF1IQm65iaYh5J0JpeOleT0SuGGi5cwQEdnoe/v5JQ=) 4: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: c2eVMWZz0JIg4iXObI7Xx5z4OG1juDhbGhf0Edd461o=) 5: XpUefWEiJeIsRivUE_i8Xfs2GR8.roa (hash: PBHeI5NfF0k/v47sxglrYiZdodvTKkFHSpMBQlDcdXc=) 6: ZIFHSotu32VSRWz3yy7p-c2LO-A.roa (hash: HtmF/vHud7OvPwqTimOkx4Bd9iGAFPGDNsHwtbVJBZ0=) 7: Zc2NwjC7aoT6KGmTlpJCVRtAAxM.roa (hash: Lw8AgQnNa+u3srZTik73U4zlVyuicSwiTs/U27h1T58=) 8: a0ljWjjOMmlqv-KUZ9yfJ5o3o08.roa (hash: HgXqjfFgX4E4spO/gFoOPoWjpP4kI1tcmHiNguLieIw=) 9: bPL_MeYosxpJav1FZrlBnVGpssY.roa (hash: xbaf1MsiC38LB8r3yBiWSr3FjpTVnJNfGoxcFxBJEYM=) 10: tXhbIuVpYeE_jd1CU4lv2cgwfnw.roa (hash: lxyF6ei0/QTcu7Po0gkCzFazsZNHVkwJorFWOFgBWYI=) 11: vjXTFvPzZIb1zeRSL_kprTEdqbI.roa (hash: JwHjdybMdJ5oxvKoHkQM559e6BBUTavDx0DxnmOgdS0=) 12: yvxp8xW14Xp2PiR7kJbkc75G14A.roa (hash: o93DGCCTavhE3gLHe6hFNvurmN1iNt5bMJ8d0jqfGPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:16:43:be:73:c8:c1:56:6b:40:d3:7a:5c:7a:37:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Mar 26 03:00:40 2026 GMT Not After : Mar 27 03:00:40 2026 GMT Subject: CN=22b40a7eb709abf6c9c66e03763e44f2e40cd0f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:34:d2:bf:31:c5:81:d2:a2:e0:65:1a:6e:a3: 6c:9c:d9:48:28:92:1d:54:48:5a:90:62:40:ee:9b: d1:e0:88:ac:53:70:9f:0f:39:fb:98:02:c9:7b:11: bc:7b:5a:89:29:15:38:80:8c:87:92:41:4f:e1:46: 4f:db:73:01:47:50:41:d7:88:53:95:02:d2:71:1a: 2c:fa:69:6d:07:56:50:2c:f3:6e:b5:28:c4:1d:38: 42:c7:5f:48:bb:ca:2a:9d:c9:02:1b:d2:d0:f9:5a: 7d:88:52:90:f6:e5:a7:e3:67:fc:c4:d8:d2:29:61: b3:83:ef:ce:69:8e:13:1d:04:21:35:20:e9:51:b1: 00:8b:9f:28:29:6d:46:a7:2e:17:59:b8:cd:67:93: 19:59:34:c3:5e:54:25:d4:4a:5b:c2:2f:ac:86:c1: 81:f1:9d:88:48:66:26:d7:e4:a3:28:6b:f0:74:5d: 8c:e9:52:73:be:df:bc:b4:54:8f:7d:b1:43:5b:bd: 95:00:56:d6:e2:82:d9:b2:e8:46:f1:13:cd:ec:8e: fd:6b:33:34:d5:13:7a:c8:26:4b:3d:35:5e:a5:4b: 21:00:e2:70:fb:97:50:8f:13:bc:f4:10:b7:57:08: 2b:65:e6:a9:62:3b:d0:b6:c3:f8:e7:52:cb:8c:d9: 87:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B4:0A:7E:B7:09:AB:F6:C9:C6:6E:03:76:3E:44:F2:E4:0C:D0:F8 X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:00:dd:c1:cd:1a:7c:c7:ce:f1:07:a0:d3:ed:f8:db:64:cc: 59:44:2f:b2:26:17:1c:51:34:89:18:56:4c:77:dc:46:0d:fd: c2:e0:24:8e:ea:b4:21:0a:19:30:62:5e:62:20:50:1f:ac:e0: 96:8f:29:09:72:ff:43:3c:04:e7:ff:07:d8:07:b5:cb:4c:74: 12:23:6d:12:e0:e5:50:e6:26:63:bb:7b:0f:99:fa:6f:5a:34: 54:a7:bd:95:f0:d5:ab:04:8d:d8:0f:21:cf:bf:35:89:df:ab: 3d:12:5b:94:99:f1:25:de:7c:3c:62:de:a1:5c:60:f8:ea:83: 01:c9:57:ee:d4:94:af:25:95:39:89:c5:17:0f:17:98:60:bc: 7a:9c:fd:32:3b:69:c7:bb:c0:70:bb:fb:7b:c8:27:3f:66:b8: cc:ce:14:4b:d0:a6:b5:f3:04:39:be:9d:82:3d:d7:5d:4f:ef: cf:d5:68:4c:0f:18:73:72:a5:05:ca:ef:e1:03:8f:8b:ad:46: 8f:ec:fd:35:a2:46:b5:a2:08:e9:94:b2:f5:e2:5d:22:a2:96: 23:b5:c2:eb:22:f0:2d:b7:69:88:b8:c4:ed:2d:88:20:48:ff: 81:c9:97:a2:f2:7f:9c:44:94:6d:b2:4a:dd:7d:4a:23:fb:3d: 3d:c6:bc:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oFkO+c8jBVmtA03pcejcgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjYwMzI2MDMwMDQwWhcNMjYwMzI3MDMwMDQwWjAzMTEwLwYDVQQD EygyMmI0MGE3ZWI3MDlhYmY2YzljNjZlMDM3NjNlNDRmMmU0MGNkMGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzTSvzHFgdKi4GUabqNsnNlIKJId VEhakGJA7pvR4IisU3CfDzn7mALJexG8e1qJKRU4gIyHkkFP4UZP23MBR1BB14hT lQLScRos+mltB1ZQLPNutSjEHThCx19Iu8oqnckCG9LQ+Vp9iFKQ9uWn42f8xNjS KWGzg+/OaY4THQQhNSDpUbEAi58oKW1Gpy4XWbjNZ5MZWTTDXlQl1Epbwi+shsGB 8Z2ISGYm1+SjKGvwdF2M6VJzvt+8tFSPfbFDW72VAFbW4oLZsuhG8RPN7I79azM0 1RN6yCZLPTVepUshAOJw+5dQjxO89BC3VwgrZeapYjvQtsP451LLjNmHzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCK0Cn63Cav2ycZuA3Y+RPLkDND4MB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcADdwc0a fMfO8Qeg0+3422TMWUQvsiYXHFE0iRhWTHfcRg39wuAkjuq0IQoZMGJeYiBQH6zg lo8pCXL/QzwE5/8H2Ae1y0x0EiNtEuDlUOYmY7t7D5n6b1o0VKe9lfDVqwSN2A8h z781id+rPRJblJnxJd58PGLeoVxg+OqDAclX7tSUryWVOYnFFw8XmGC8epz9Mjtp x7vAcLv7e8gnP2a4zM4US9CmtfMEOb6dgj3XXU/vz9VoTA8Yc3KlBcrv4QOPi61G j+z9NaJGtaII6ZSy9eJdIqKWI7XC6yLwLbdpiLjE7S2IIEj/gcmXovJ/nESUbbJK 3X1KI/s9Pca8Dw== -----END CERTIFICATE-----Generated at Thu Mar 26 11:25:25 2026 by rpki-client