$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: qemkTTwh6SRs36euchyjTq0hFr/2sHc3FElDDY9/9Ng= Subject key identifier: 94:24:3C:F2:CF:78:53:2D:49:80:60:69:CA:C6:B0:AB:13:3C:84:D0 Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 019849D37069C4D4606B05CB55B5FDF5FFAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 1607 Signing time: Sun 27 Jul 2025 03:00:50 +0000 Manifest this update: Sun 27 Jul 2025 03:00:50 +0000 Manifest next update: Mon 28 Jul 2025 03:00:50 +0000 Files and hashes: 1: 9AkjaJRYRIOTmgf4F3gyV6pdFkQ.roa (hash: N1lZUtbJEJkRSUYDq/VJK4cR/RojBk8ALOORTw9wVk8=) 2: DUER2OIxuLfteK-5s9p125aHbHQ.roa (hash: MKxlsAlXCfnz4va2JwSTTtP5lv2QEgVXIYiD1U0P1iM=) 3: I5Dlj2iBXR78bV2NI4oXxT6DVcQ.roa (hash: pUPvPv3IMdPMN3mngjSRkbMNdszUqvQ/W+9CudZep1s=) 4: IKxEFfN_KNz819jDJF02u6P6vks.roa (hash: M1gfdLv0XPFzxrEqEMyJ47aUP/+uDTO64SIkdj54NaA=) 5: JcqV5Zbt-7BBvR25dnt58sZOVRw.roa (hash: Jyex6OZ5W2eO7E9m8v2xcJSNJuYcw9eBRYzL8fzsuKg=) 6: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: UcV1xri/ZJyr6HcfABKm6saBC1fYtkKA57GjZ25DXVY=) 7: QeFtXb_2Jy97mUDOpmxAN1O437Q.roa (hash: pGsLweLJqx/P4hTPUc5m5Veo+2vG7HsRtDbmA1rHXlQ=) 8: YPwqy-r5Ds6zjUqs83c9wSrz4Xo.roa (hash: /OBWcwiTOuByZ0CFtuxP3jPnYcDQxuxVogbCk4BaZIM=) 9: _z_sTvwtZQKHpvup9rFWqFFhFKY.roa (hash: JVM6qUA4ZtDkSX81zJfuU5jJmnu8pCK2PaUHasgHRME=) 10: kUvUMMUm6A2S-PsLFuOoxFGjL2g.roa (hash: 43KKo4hB/OsGlhMLYdFrQhlx6kBqniKw+U0iCAYg2Qg=) 11: pOvELxmVMCJOREXgcbJwYPWQcLY.roa (hash: 8NAO5qgs1zoQcDKNETGRxihZubfEYTFA3QAx7BgtdEo=) 12: stpJENpG1HfxaYzx679NTwZFpZY.roa (hash: EMcugxArWnP7J9sItxl3gZsFeM8qrAvUxjSeKkZ4oao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 00:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:49:d3:70:69:c4:d4:60:6b:05:cb:55:b5:fd:f5:ff:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Jul 27 03:00:50 2025 GMT Not After : Jul 28 03:00:50 2025 GMT Subject: CN=94243cf2cf78532d49806069cac6b0ab133c84d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d1:ba:0f:c9:b8:54:7f:81:b3:12:33:a3:01: 7d:85:fd:f6:34:d8:da:55:49:a4:48:77:2e:9b:53: 55:8f:7d:30:1b:17:20:bd:ff:cd:60:80:4e:4d:0b: ec:20:56:8b:dd:59:58:c9:c2:a4:a5:32:29:eb:fa: 89:f8:84:3b:59:74:47:df:5a:24:1d:0f:b2:29:03: f1:f8:4e:fa:59:16:6d:a5:a9:63:22:2e:bb:0e:21: b2:1b:0f:21:d8:18:34:82:a4:7e:06:28:d4:1a:5c: 94:cb:02:8a:3a:0f:b1:83:eb:b6:8b:cc:54:1a:3b: b5:9d:5c:c2:7e:45:ef:b7:53:19:95:b8:f3:0f:4f: f2:d7:f6:96:a8:48:fd:0c:2d:16:e2:35:00:9d:f8: 1e:de:ac:b6:b4:9e:9d:05:25:b3:3e:83:9a:bb:b6: fd:7a:fe:2e:2b:67:db:8b:42:9d:ad:b7:5c:ee:b5: 24:af:03:ad:dd:20:fc:0d:b4:68:3c:3d:3c:dc:9d: be:fd:f5:a5:0d:a6:fa:34:50:cf:13:5f:0b:75:c4: 9e:d8:86:72:26:32:f9:59:69:96:9c:87:61:74:a2: ae:8c:81:fd:4e:81:3c:b5:7d:a0:c0:ee:9a:99:fc: ed:89:55:34:29:82:85:f3:b4:98:00:f8:61:fc:cd: 06:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:24:3C:F2:CF:78:53:2D:49:80:60:69:CA:C6:B0:AB:13:3C:84:D0 X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:fc:86:fc:6e:f3:ec:32:25:54:88:97:9c:63:ce:9d:df:eb: 78:ed:49:e0:77:dc:ef:56:8f:bc:db:ec:04:2d:48:91:1f:b9: 93:c1:f5:6b:60:fd:e8:6e:b9:08:a3:d8:ab:ee:d9:96:5f:e8: 30:ca:cf:40:40:15:36:52:22:04:d4:32:f9:b8:bd:58:32:37: 53:6b:0c:f1:85:30:1a:1b:17:12:6e:64:43:b1:e9:67:2a:30: 01:a7:37:0d:1a:e0:dc:c4:de:42:a9:b9:d6:ad:d2:ed:cd:3b: 0c:32:dc:e5:77:ed:31:ff:42:b2:bc:ba:55:6d:22:f0:26:88: 54:01:0b:ef:2e:37:f6:f4:c9:8b:11:48:ef:15:2d:ed:13:f1: 98:c2:f5:17:be:c1:10:03:bf:3b:ad:33:d2:37:ac:43:04:8a: 2a:fd:0f:1b:7e:f8:a5:32:fc:38:2e:a8:27:24:c0:84:6b:c5: 7b:80:5d:b1:26:60:e0:8e:ec:e7:bf:31:fa:20:a2:2c:e7:5e: c8:c5:83:f5:ea:c3:02:0a:11:af:a3:bf:13:76:c6:49:81:06: b7:73:cc:6e:f1:50:5f:ad:7f:d8:67:82:3e:d9:3b:f9:1f:11: e2:1f:35:e4:8c:d1:03:e3:c0:fb:9c:80:cd:be:4b:f2:b1:f6: 8f:16:36:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhJ03BpxNRgawXLVbX99f+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjUwNzI3MDMwMDUwWhcNMjUwNzI4MDMwMDUwWjAzMTEwLwYDVQQD Eyg5NDI0M2NmMmNmNzg1MzJkNDk4MDYwNjljYWM2YjBhYjEzM2M4NGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdG6D8m4VH+BsxIzowF9hf32NNja VUmkSHcum1NVj30wGxcgvf/NYIBOTQvsIFaL3VlYycKkpTIp6/qJ+IQ7WXRH31ok HQ+yKQPx+E76WRZtpaljIi67DiGyGw8h2Bg0gqR+BijUGlyUywKKOg+xg+u2i8xU Gju1nVzCfkXvt1MZlbjzD0/y1/aWqEj9DC0W4jUAnfge3qy2tJ6dBSWzPoOau7b9 ev4uK2fbi0Kdrbdc7rUkrwOt3SD8DbRoPD083J2+/fWlDab6NFDPE18LdcSe2IZy JjL5WWmWnIdhdKKujIH9ToE8tX2gwO6amfztiVU0KYKF87SYAPhh/M0GAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQkPPLPeFMtSYBgacrGsKsTPITQMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq/yG/G7z 7DIlVIiXnGPOnd/reO1J4Hfc71aPvNvsBC1IkR+5k8H1a2D96G65CKPYq+7Zll/o MMrPQEAVNlIiBNQy+bi9WDI3U2sM8YUwGhsXEm5kQ7HpZyowAac3DRrg3MTeQqm5 1q3S7c07DDLc5XftMf9Csry6VW0i8CaIVAEL7y439vTJixFI7xUt7RPxmML1F77B EAO/O60z0jesQwSKKv0PG374pTL8OC6oJyTAhGvFe4BdsSZg4I7s578x+iCiLOde yMWD9erDAgoRr6O/E3bGSYEGt3PMbvFQX61/2GeCPtk7+R8R4h815IzRA+PA+5yA zb5L8rH2jxY28w== -----END CERTIFICATE-----Generated at Sun Jul 27 08:27:40 2025 by rpki-client