$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: aZCEzoosMOMssmOAJUziw1x832UYv+cJ5GV8TEY+/qE= Subject key identifier: F8:18:C5:7A:48:27:09:93:7F:EC:28:6D:14:E7:C9:BC:8E:85:F9:99 Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 0199FC587629466300BF0EF550632BDF3420 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 16E8 Signing time: Sun 19 Oct 2025 12:01:19 +0000 Manifest this update: Sun 19 Oct 2025 12:01:19 +0000 Manifest next update: Mon 20 Oct 2025 12:01:19 +0000 Files and hashes: 1: 9AkjaJRYRIOTmgf4F3gyV6pdFkQ.roa (hash: N1lZUtbJEJkRSUYDq/VJK4cR/RojBk8ALOORTw9wVk8=) 2: DUER2OIxuLfteK-5s9p125aHbHQ.roa (hash: MKxlsAlXCfnz4va2JwSTTtP5lv2QEgVXIYiD1U0P1iM=) 3: I5Dlj2iBXR78bV2NI4oXxT6DVcQ.roa (hash: pUPvPv3IMdPMN3mngjSRkbMNdszUqvQ/W+9CudZep1s=) 4: IKxEFfN_KNz819jDJF02u6P6vks.roa (hash: M1gfdLv0XPFzxrEqEMyJ47aUP/+uDTO64SIkdj54NaA=) 5: JcqV5Zbt-7BBvR25dnt58sZOVRw.roa (hash: Jyex6OZ5W2eO7E9m8v2xcJSNJuYcw9eBRYzL8fzsuKg=) 6: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: 8nagRvesH1Qx91L72VJ6aAmaQh+2VEaApbEw2ysGFwc=) 7: QeFtXb_2Jy97mUDOpmxAN1O437Q.roa (hash: pGsLweLJqx/P4hTPUc5m5Veo+2vG7HsRtDbmA1rHXlQ=) 8: YPwqy-r5Ds6zjUqs83c9wSrz4Xo.roa (hash: /OBWcwiTOuByZ0CFtuxP3jPnYcDQxuxVogbCk4BaZIM=) 9: _z_sTvwtZQKHpvup9rFWqFFhFKY.roa (hash: JVM6qUA4ZtDkSX81zJfuU5jJmnu8pCK2PaUHasgHRME=) 10: kUvUMMUm6A2S-PsLFuOoxFGjL2g.roa (hash: 43KKo4hB/OsGlhMLYdFrQhlx6kBqniKw+U0iCAYg2Qg=) 11: pOvELxmVMCJOREXgcbJwYPWQcLY.roa (hash: 8NAO5qgs1zoQcDKNETGRxihZubfEYTFA3QAx7BgtdEo=) 12: stpJENpG1HfxaYzx679NTwZFpZY.roa (hash: EMcugxArWnP7J9sItxl3gZsFeM8qrAvUxjSeKkZ4oao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:58:76:29:46:63:00:bf:0e:f5:50:63:2b:df:34:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Oct 19 12:01:19 2025 GMT Not After : Oct 20 12:01:19 2025 GMT Subject: CN=f818c57a482709937fec286d14e7c9bc8e85f999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:63:6c:2d:72:54:7a:c8:f2:48:d0:ca:b1: 2b:6b:98:b3:d8:99:9b:b5:0b:da:15:fc:31:7d:e7: e0:d6:3d:67:eb:6a:d0:4f:8f:c5:c6:71:a3:2d:90: 9d:de:36:28:9f:99:b5:9c:a9:ca:db:37:dd:d8:9d: 3c:41:b4:00:da:2a:31:3f:15:b1:60:4e:c2:d7:22: fb:57:6c:4e:f2:fe:b4:c6:d8:5b:1a:a8:96:0c:59: 7e:58:e1:84:59:d0:50:1c:c4:e1:e4:d2:8c:af:ac: 3a:59:95:36:f9:72:d1:e9:1a:ec:af:73:25:9e:42: 01:cb:17:8e:b2:d6:c3:94:5c:b6:fa:10:1c:a9:9a: 8f:9d:63:df:a5:d4:e2:3e:c3:7b:e6:48:d8:16:6a: 11:72:1c:2d:d2:dd:0f:62:8e:f7:af:c5:db:23:bf: 36:25:d6:df:c1:f0:b2:8d:08:d4:f4:da:a5:f6:54: 4a:c2:df:b4:58:7c:35:52:d2:3a:be:7c:d1:90:91: 13:d5:ce:1f:da:aa:09:51:dc:06:49:40:fd:d3:fa: 3b:60:7d:7c:17:8c:84:25:2f:8d:ec:2b:1b:3d:ce: 1f:12:fb:93:3e:65:6a:ad:1a:44:78:f3:81:80:d8: 06:7a:11:ee:4c:1c:3b:57:e5:ce:52:60:e7:56:c5: 49:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:18:C5:7A:48:27:09:93:7F:EC:28:6D:14:E7:C9:BC:8E:85:F9:99 X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:e1:bb:e4:9d:41:d1:20:d6:5d:89:1e:4b:7d:e3:ef:6c:08: 2f:1f:a1:b7:55:ca:63:b0:6f:eb:9c:e5:80:6e:30:fe:6e:0c: e8:00:98:f4:a2:73:ae:59:8c:75:ee:93:ef:16:9e:21:d4:88: 12:ca:31:c2:f4:22:4b:66:c3:f7:cc:15:bf:41:e5:76:a5:c6: b5:97:c2:d3:2b:8b:80:44:ab:de:e0:1c:13:d1:18:a4:fa:8b: d3:bc:b7:84:3c:ae:1d:a2:6b:ea:a7:df:10:2a:71:d7:04:ad: 36:5c:eb:12:91:41:61:67:88:de:c7:d9:77:91:c5:ed:97:ba: ae:64:31:f1:eb:4e:14:2d:aa:ec:f9:7e:72:66:6e:ff:9d:3b: 3a:29:8d:cd:b6:b2:68:30:1f:b5:07:4e:f4:83:24:3a:99:c9: 6f:55:ca:a8:dd:43:5f:15:52:da:5a:d7:b9:54:ee:54:9f:14: f6:77:5a:69:71:41:d5:16:d1:03:0e:d9:a8:99:eb:1b:4f:ff: 33:ea:5f:6b:3b:1c:8d:bd:ab:a6:bf:30:ff:ce:2f:64:77:6a: 97:84:f5:ce:7c:a0:cd:8e:3d:34:45:c2:e1:2b:ac:b2:51:7f: ce:ac:94:fc:98:fc:a8:4c:fd:40:a9:4a:9f:9e:55:c2:a3:0f: df:ee:89:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WHYpRmMAvw71UGMr3zQgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjUxMDE5MTIwMTE5WhcNMjUxMDIwMTIwMTE5WjAzMTEwLwYDVQQD EyhmODE4YzU3YTQ4MjcwOTkzN2ZlYzI4NmQxNGU3YzliYzhlODVmOTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHRjbC1yVHrI8kjQyrEra5iz2Jmb tQvaFfwxfefg1j1n62rQT4/FxnGjLZCd3jYon5m1nKnK2zfd2J08QbQA2ioxPxWx YE7C1yL7V2xO8v60xthbGqiWDFl+WOGEWdBQHMTh5NKMr6w6WZU2+XLR6Rrsr3Ml nkIByxeOstbDlFy2+hAcqZqPnWPfpdTiPsN75kjYFmoRchwt0t0PYo73r8XbI782 JdbfwfCyjQjU9Nql9lRKwt+0WHw1UtI6vnzRkJET1c4f2qoJUdwGSUD90/o7YH18 F4yEJS+N7CsbPc4fEvuTPmVqrRpEePOBgNgGehHuTBw7V+XOUmDnVsVJGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgYxXpIJwmTf+wobRTnybyOhfmZMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOG75J1B 0SDWXYkeS33j72wILx+ht1XKY7Bv65zlgG4w/m4M6ACY9KJzrlmMde6T7xaeIdSI EsoxwvQiS2bD98wVv0HldqXGtZfC0yuLgESr3uAcE9EYpPqL07y3hDyuHaJr6qff ECpx1wStNlzrEpFBYWeI3sfZd5HF7Ze6rmQx8etOFC2q7Pl+cmZu/507OimNzbay aDAftQdO9IMkOpnJb1XKqN1DXxVS2lrXuVTuVJ8U9ndaaXFB1RbRAw7ZqJnrG0// M+pfazscjb2rpr8w/84vZHdql4T1znygzY49NEXC4SusslF/zqyU/Jj8qEz9QKlK n55VwqMP3+6JrQ== -----END CERTIFICATE-----Generated at Sun Oct 19 15:05:25 2025 by rpki-client