$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: QSyyjsr9Nf3OcwQsgCqlVVEUIy/hxLj8ZKFSw62HHJ4= Subject key identifier: 85:17:B1:74:42:C9:59:4E:93:52:9F:83:66:F7:F7:DF:B6:28:63:BB Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 01A1DCEFF217138E70F8C43A86AFB0152BA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 1AFD Signing time: Sun 15 Nov 2026 02:01:14 +0000 Manifest this update: Sun 15 Nov 2026 02:01:14 +0000 Manifest next update: Mon 16 Nov 2026 02:01:14 +0000 Files and hashes: 1: 286ljgduSQ23zXxMskYIQVpjxXw.roa (hash: 7kRo+hhGrmwGIHUv917EDTqyatYEBV1hJSeuWZhlap4=) 2: 4PDvFK89C4F409g_XmWPwr7q1a0.roa (hash: 9lF1IQm65iaYh5J0JpeOleT0SuGGi5cwQEdnoe/v5JQ=) 3: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: ML2m8gfEflsLEvJmgeBibtHcq4HI6u00/xvOiHCVxqA=) 4: XpUefWEiJeIsRivUE_i8Xfs2GR8.roa (hash: PBHeI5NfF0k/v47sxglrYiZdodvTKkFHSpMBQlDcdXc=) 5: ZIFHSotu32VSRWz3yy7p-c2LO-A.roa (hash: HtmF/vHud7OvPwqTimOkx4Bd9iGAFPGDNsHwtbVJBZ0=) 6: Zc2NwjC7aoT6KGmTlpJCVRtAAxM.roa (hash: Lw8AgQnNa+u3srZTik73U4zlVyuicSwiTs/U27h1T58=) 7: a0ljWjjOMmlqv-KUZ9yfJ5o3o08.roa (hash: HgXqjfFgX4E4spO/gFoOPoWjpP4kI1tcmHiNguLieIw=) 8: bPL_MeYosxpJav1FZrlBnVGpssY.roa (hash: xbaf1MsiC38LB8r3yBiWSr3FjpTVnJNfGoxcFxBJEYM=) 9: oP5ts0FtfK91btZ3P7x-bBdVAcw.roa (hash: Hav/3aYz5+a57hb3pfiEZH2IAAqH/VmCtBV7UH/ck2A=) 10: tXhbIuVpYeE_jd1CU4lv2cgwfnw.roa (hash: lxyF6ei0/QTcu7Po0gkCzFazsZNHVkwJorFWOFgBWYI=) 11: vjXTFvPzZIb1zeRSL_kprTEdqbI.roa (hash: JwHjdybMdJ5oxvKoHkQM559e6BBUTavDx0DxnmOgdS0=) 12: yvxp8xW14Xp2PiR7kJbkc75G14A.roa (hash: o93DGCCTavhE3gLHe6hFNvurmN1iNt5bMJ8d0jqfGPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dc:ef:f2:17:13:8e:70:f8:c4:3a:86:af:b0:15:2b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Nov 15 02:01:14 2026 GMT Not After : Nov 16 02:01:14 2026 GMT Subject: CN=8517b17442c9594e93529f8366f7f7dfb62863bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:cb:c7:45:e9:b2:ff:10:d5:38:1d:1f:7a: 57:0a:39:e4:5b:39:9f:83:bf:53:4a:a6:25:33:92: 5a:84:55:23:e2:1f:bd:f0:1e:ae:ba:26:bc:fa:18: 0f:6b:c1:34:f9:de:f5:48:32:3d:12:42:fc:48:e1: b1:62:29:f8:db:d9:11:dd:26:83:25:9c:25:2a:ce: a8:a1:79:40:8d:6f:18:85:18:e3:5f:02:09:5e:00: 25:27:b5:a5:0d:c4:da:a4:50:9a:b9:4d:97:a0:85: 9c:fb:fa:f0:a4:37:18:4e:c8:e4:ba:bf:19:d9:e3: 32:07:d9:d6:84:32:94:fc:4c:e1:3e:8b:93:2a:33: 24:8d:e3:95:9d:b1:a3:57:72:74:3b:bf:ac:f9:8a: 2d:76:2b:fa:f3:44:31:f8:1f:a7:54:5c:8a:9e:37: b6:cb:ce:a7:04:75:1a:bc:39:8a:4b:a4:51:91:ca: c7:3d:71:ae:b7:13:df:23:97:24:07:42:4c:f4:f0: cb:56:8c:fe:46:2f:3d:64:5b:19:5f:aa:b6:4b:da: e8:c6:05:89:6d:bd:c3:2b:1f:0b:b1:b4:e2:ff:a0: 06:2d:c6:34:f9:58:6d:be:dd:0d:c4:51:1d:62:4d: 4c:72:ea:f5:60:7a:ba:04:d9:12:1c:9c:f8:99:ae: e0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:17:B1:74:42:C9:59:4E:93:52:9F:83:66:F7:F7:DF:B6:28:63:BB X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:c6:86:56:7c:dc:fa:3f:70:88:9f:3d:82:d1:df:b7:73:0b: 66:ed:91:4e:0d:c3:35:93:ea:c1:27:96:bb:55:34:c8:3d:74: f6:2f:a3:ea:40:06:52:90:be:01:26:04:95:8b:b2:6b:a4:87: 9b:27:11:ab:4f:0b:3c:38:5f:0d:f0:af:cc:1d:01:00:f8:2f: 5b:c8:92:c6:c8:8e:57:2a:83:74:be:26:59:3b:a1:56:1d:6a: b2:d7:de:04:3f:0c:d1:81:93:0d:39:68:bf:6a:24:84:79:86: 35:bf:88:17:13:39:5e:e0:82:77:32:8b:5f:4a:fc:b4:2b:00: 5b:b7:1f:4e:1b:8e:0b:a0:89:46:f3:24:4b:3d:9f:a8:7f:08: 4b:bb:a6:5e:73:82:55:42:40:a0:55:63:68:50:ae:4e:c3:e9: ae:f3:10:48:92:2f:b1:79:33:8c:df:c3:22:6d:dc:0d:c8:b9: 0a:23:18:dd:b6:13:ec:19:18:a2:6a:82:35:a0:63:ef:d0:53: ad:3c:e6:99:59:d3:63:04:3a:f6:f3:49:38:14:07:92:b5:88: 67:d1:1a:ad:41:8c:0f:62:1e:fd:fd:88:d8:8c:10:7d:d7:a7: 98:f5:77:84:72:ef:5e:e9:2b:e8:0a:c5:a6:d2:6f:bd:76:c8: 32:96:be:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHc7/IXE45w+MQ6hq+wFSupMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjYxMTE1MDIwMTE0WhcNMjYxMTE2MDIwMTE0WjAzMTEwLwYDVQQD Eyg4NTE3YjE3NDQyYzk1OTRlOTM1MjlmODM2NmY3ZjdkZmI2Mjg2M2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXLLx0Xpsv8Q1TgdH3pXCjnkWzmf g79TSqYlM5JahFUj4h+98B6uuia8+hgPa8E0+d71SDI9EkL8SOGxYin429kR3SaD JZwlKs6ooXlAjW8YhRjjXwIJXgAlJ7WlDcTapFCauU2XoIWc+/rwpDcYTsjkur8Z 2eMyB9nWhDKU/EzhPouTKjMkjeOVnbGjV3J0O7+s+Yotdiv680Qx+B+nVFyKnje2 y86nBHUavDmKS6RRkcrHPXGutxPfI5ckB0JM9PDLVoz+Ri89ZFsZX6q2S9roxgWJ bb3DKx8LsbTi/6AGLcY0+Vhtvt0NxFEdYk1Mcur1YHq6BNkSHJz4ma7goQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUXsXRCyVlOk1Kfg2b399+2KGO7MB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwcaGVnzc +j9wiJ89gtHft3MLZu2RTg3DNZPqwSeWu1U0yD109i+j6kAGUpC+ASYElYuya6SH mycRq08LPDhfDfCvzB0BAPgvW8iSxsiOVyqDdL4mWTuhVh1qstfeBD8M0YGTDTlo v2okhHmGNb+IFxM5XuCCdzKLX0r8tCsAW7cfThuOC6CJRvMkSz2fqH8IS7umXnOC VUJAoFVjaFCuTsPprvMQSJIvsXkzjN/DIm3cDci5CiMY3bYT7BkYomqCNaBj79BT rTzmmVnTYwQ69vNJOBQHkrWIZ9EarUGMD2Ie/f2I2IwQfdenmPV3hHLvXukr6ArF ptJvvXbIMpa+ZA== -----END CERTIFICATE-----Generated at Sun Nov 15 08:02:18 2026 by rpki-client