$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: t/kfR79Oc2I6jx3JoHgwLRnYX0yyMUbdWSBy6afVlEc= Subject key identifier: 43:5D:15:00:63:F1:96:D0:00:C0:0A:21:40:9C:F8:25:1F:53:4F:8D Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 01A0D26E1CA0B17AC5595B176BC7E9B1BAFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 1A73 Signing time: Thu 24 Sep 2026 08:00:26 +0000 Manifest this update: Thu 24 Sep 2026 08:00:26 +0000 Manifest next update: Fri 25 Sep 2026 08:00:26 +0000 Files and hashes: 1: 286ljgduSQ23zXxMskYIQVpjxXw.roa (hash: 7kRo+hhGrmwGIHUv917EDTqyatYEBV1hJSeuWZhlap4=) 2: 4PDvFK89C4F409g_XmWPwr7q1a0.roa (hash: 9lF1IQm65iaYh5J0JpeOleT0SuGGi5cwQEdnoe/v5JQ=) 3: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: IIOgAERAGwR638d+faNakKPAJhdR2ZsVVFvjHOtiMXw=) 4: XpUefWEiJeIsRivUE_i8Xfs2GR8.roa (hash: PBHeI5NfF0k/v47sxglrYiZdodvTKkFHSpMBQlDcdXc=) 5: ZIFHSotu32VSRWz3yy7p-c2LO-A.roa (hash: HtmF/vHud7OvPwqTimOkx4Bd9iGAFPGDNsHwtbVJBZ0=) 6: Zc2NwjC7aoT6KGmTlpJCVRtAAxM.roa (hash: Lw8AgQnNa+u3srZTik73U4zlVyuicSwiTs/U27h1T58=) 7: a0ljWjjOMmlqv-KUZ9yfJ5o3o08.roa (hash: HgXqjfFgX4E4spO/gFoOPoWjpP4kI1tcmHiNguLieIw=) 8: bPL_MeYosxpJav1FZrlBnVGpssY.roa (hash: xbaf1MsiC38LB8r3yBiWSr3FjpTVnJNfGoxcFxBJEYM=) 9: oP5ts0FtfK91btZ3P7x-bBdVAcw.roa (hash: Hav/3aYz5+a57hb3pfiEZH2IAAqH/VmCtBV7UH/ck2A=) 10: tXhbIuVpYeE_jd1CU4lv2cgwfnw.roa (hash: lxyF6ei0/QTcu7Po0gkCzFazsZNHVkwJorFWOFgBWYI=) 11: vjXTFvPzZIb1zeRSL_kprTEdqbI.roa (hash: JwHjdybMdJ5oxvKoHkQM559e6BBUTavDx0DxnmOgdS0=) 12: yvxp8xW14Xp2PiR7kJbkc75G14A.roa (hash: o93DGCCTavhE3gLHe6hFNvurmN1iNt5bMJ8d0jqfGPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d2:6e:1c:a0:b1:7a:c5:59:5b:17:6b:c7:e9:b1:ba:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Sep 24 08:00:26 2026 GMT Not After : Sep 25 08:00:26 2026 GMT Subject: CN=435d150063f196d000c00a21409cf8251f534f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2f:e8:63:53:7a:a9:45:61:aa:db:fc:99:09: d4:be:78:29:05:82:bf:5c:ca:5c:b8:06:24:10:4e: c3:97:2e:fa:21:23:1e:0d:8b:9c:84:78:e2:71:89: f2:b9:3a:98:eb:f8:42:47:d4:42:6f:02:43:14:a5: 49:ac:49:c4:47:45:30:ca:03:de:e1:b8:81:fc:fe: bb:83:e7:34:f9:40:ae:25:b1:24:02:71:4e:ea:72: c0:95:ae:ef:c6:49:6b:29:f5:5c:44:6a:8a:d7:2f: e7:61:3c:05:f2:8c:53:44:79:d3:ce:5e:1f:2e:5b: a7:30:45:66:a7:7f:f4:cc:1a:ad:37:c0:e7:60:c2: f0:ab:85:49:64:07:60:80:6b:9a:4f:5b:2e:d3:bd: 14:51:f6:3e:d6:0d:b2:fb:70:ef:48:1f:18:e9:3b: 49:49:33:cd:a8:c5:ed:b8:a2:ce:12:0c:8c:59:91: cc:25:bd:fc:2d:1b:2a:13:43:03:51:f7:dc:f0:97: 60:7b:61:7b:85:e0:f8:8b:a0:d0:fc:03:19:46:3c: 34:85:36:50:92:fa:a3:f4:af:7e:50:40:3b:93:c8: b5:10:c2:c9:90:8f:5c:9f:79:96:ea:21:66:79:0e: d2:9b:26:38:75:fa:7d:34:b6:38:2a:19:4e:3c:4a: a6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5D:15:00:63:F1:96:D0:00:C0:0A:21:40:9C:F8:25:1F:53:4F:8D X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:cf:c0:2d:50:e9:99:26:ed:08:18:93:e2:0b:47:6c:37:5c: 8e:1b:00:06:5a:12:8f:a3:40:8b:82:69:4d:c8:6a:1c:1a:3e: 2f:15:73:8d:94:6d:2e:89:83:06:e1:de:d0:f2:dd:71:a2:a1: 40:a7:b8:7e:cf:9f:63:f5:83:f6:90:29:fc:05:8a:89:3a:47: f9:5e:c4:74:c3:79:20:7b:75:81:e9:8d:f9:da:29:e8:1e:27: e8:2c:3e:0b:0e:24:62:6b:8f:c2:27:e9:d0:74:ba:65:55:1f: e0:d6:c6:22:6f:4e:c8:02:5a:e2:7c:29:6a:3f:0f:9c:9d:22: 64:3e:df:b9:0d:f5:a9:79:69:56:61:72:e7:d0:27:d8:9d:a1: d7:0c:6d:44:e9:50:16:1d:45:da:b0:99:52:f1:e5:65:1b:07: 15:76:63:7a:65:bb:4f:ba:bc:71:71:0b:1e:19:10:6d:22:23: d4:eb:84:f2:4b:43:8c:e2:3b:62:55:b5:e9:d0:b8:96:af:d3: f0:f1:80:1e:62:b3:11:2f:d9:45:17:97:66:54:b6:63:df:1d: 2b:64:86:82:42:61:03:6f:29:9b:21:74:97:58:d9:a4:ce:26: 31:d5:fa:a3:eb:16:e3:f5:97:c6:2b:29:8e:98:c3:a7:c0:f0: 6f:d0:bc:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDSbhygsXrFWVsXa8fpsbr6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjYwOTI0MDgwMDI2WhcNMjYwOTI1MDgwMDI2WjAzMTEwLwYDVQQD Eyg0MzVkMTUwMDYzZjE5NmQwMDBjMDBhMjE0MDljZjgyNTFmNTM0ZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5C/oY1N6qUVhqtv8mQnUvngpBYK/ XMpcuAYkEE7Dly76ISMeDYuchHjicYnyuTqY6/hCR9RCbwJDFKVJrEnER0UwygPe 4biB/P67g+c0+UCuJbEkAnFO6nLAla7vxklrKfVcRGqK1y/nYTwF8oxTRHnTzl4f LlunMEVmp3/0zBqtN8DnYMLwq4VJZAdggGuaT1su070UUfY+1g2y+3DvSB8Y6TtJ STPNqMXtuKLOEgyMWZHMJb38LRsqE0MDUffc8Jdge2F7heD4i6DQ/AMZRjw0hTZQ kvqj9K9+UEA7k8i1EMLJkI9cn3mW6iFmeQ7SmyY4dfp9NLY4KhlOPEqmDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENdFQBj8ZbQAMAKIUCc+CUfU0+NMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHs/ALVDp mSbtCBiT4gtHbDdcjhsABloSj6NAi4JpTchqHBo+LxVzjZRtLomDBuHe0PLdcaKh QKe4fs+fY/WD9pAp/AWKiTpH+V7EdMN5IHt1gemN+dop6B4n6Cw+Cw4kYmuPwifp 0HS6ZVUf4NbGIm9OyAJa4nwpaj8PnJ0iZD7fuQ31qXlpVmFy59An2J2h1wxtROlQ Fh1F2rCZUvHlZRsHFXZjemW7T7q8cXELHhkQbSIj1OuE8ktDjOI7YlW16dC4lq/T 8PGAHmKzES/ZRReXZlS2Y98dK2SGgkJhA28pmyF0l1jZpM4mMdX6o+sW4/WXxisp jpjDp8Dwb9C8Ng== -----END CERTIFICATE-----Generated at Thu Sep 24 17:06:58 2026 by rpki-client