$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: WxT+1p0S/TACX1Hs9HZ3QaBbQGsRn9NF6DfYx9SJQnw= Subject key identifier: 53:DB:97:28:8D:00:06:90:03:E5:96:AA:45:B9:E8:44:8C:1E:C8:3D Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 0199394B4A5D9FE5A46DCE0CF7CD4DCD9A42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 1683 Signing time: Thu 11 Sep 2025 15:00:59 +0000 Manifest this update: Thu 11 Sep 2025 15:00:59 +0000 Manifest next update: Fri 12 Sep 2025 15:00:59 +0000 Files and hashes: 1: 9AkjaJRYRIOTmgf4F3gyV6pdFkQ.roa (hash: N1lZUtbJEJkRSUYDq/VJK4cR/RojBk8ALOORTw9wVk8=) 2: DUER2OIxuLfteK-5s9p125aHbHQ.roa (hash: MKxlsAlXCfnz4va2JwSTTtP5lv2QEgVXIYiD1U0P1iM=) 3: I5Dlj2iBXR78bV2NI4oXxT6DVcQ.roa (hash: pUPvPv3IMdPMN3mngjSRkbMNdszUqvQ/W+9CudZep1s=) 4: IKxEFfN_KNz819jDJF02u6P6vks.roa (hash: M1gfdLv0XPFzxrEqEMyJ47aUP/+uDTO64SIkdj54NaA=) 5: JcqV5Zbt-7BBvR25dnt58sZOVRw.roa (hash: Jyex6OZ5W2eO7E9m8v2xcJSNJuYcw9eBRYzL8fzsuKg=) 6: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: QWRh1R8EIMku4IMN+DNB74G6bvePrxykJiIg6Pclc9Q=) 7: QeFtXb_2Jy97mUDOpmxAN1O437Q.roa (hash: pGsLweLJqx/P4hTPUc5m5Veo+2vG7HsRtDbmA1rHXlQ=) 8: YPwqy-r5Ds6zjUqs83c9wSrz4Xo.roa (hash: /OBWcwiTOuByZ0CFtuxP3jPnYcDQxuxVogbCk4BaZIM=) 9: _z_sTvwtZQKHpvup9rFWqFFhFKY.roa (hash: JVM6qUA4ZtDkSX81zJfuU5jJmnu8pCK2PaUHasgHRME=) 10: kUvUMMUm6A2S-PsLFuOoxFGjL2g.roa (hash: 43KKo4hB/OsGlhMLYdFrQhlx6kBqniKw+U0iCAYg2Qg=) 11: pOvELxmVMCJOREXgcbJwYPWQcLY.roa (hash: 8NAO5qgs1zoQcDKNETGRxihZubfEYTFA3QAx7BgtdEo=) 12: stpJENpG1HfxaYzx679NTwZFpZY.roa (hash: EMcugxArWnP7J9sItxl3gZsFeM8qrAvUxjSeKkZ4oao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Sep 2025 14:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:39:4b:4a:5d:9f:e5:a4:6d:ce:0c:f7:cd:4d:cd:9a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Sep 11 15:00:59 2025 GMT Not After : Sep 12 15:00:59 2025 GMT Subject: CN=53db97288d00069003e596aa45b9e8448c1ec83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e8:f7:02:4c:17:98:dc:14:6e:41:5c:f3:2b: 22:af:d7:df:b1:5e:b2:2d:c7:47:89:64:5a:9e:cb: 69:a8:a4:ad:92:92:ca:6a:df:68:2b:0e:15:2f:11: 6b:af:2b:da:c1:1f:2e:1d:59:a3:ec:84:ad:0b:7b: 7b:a7:6d:80:95:ca:31:2d:88:f3:27:9b:61:73:7a: bf:d2:09:a7:52:91:dd:3f:46:e4:cd:92:f5:fd:aa: f4:0b:46:bb:81:ad:70:68:8a:41:70:86:c3:11:ed: 41:c8:fe:e2:dc:b8:a3:89:57:24:f9:22:1f:b2:eb: 1c:af:05:8f:60:5c:2a:96:4d:47:19:1d:f5:64:dd: fb:1b:31:62:6a:09:a6:c6:86:c1:23:5d:8a:b6:44: ab:77:51:32:a9:0b:62:21:a0:ef:d3:0f:f5:fe:52: 26:55:00:c4:f2:83:e5:a9:0c:40:aa:72:cc:ad:6e: a6:71:4c:55:63:77:9f:1e:94:42:d5:92:2a:b0:51: 61:0c:b7:14:6b:91:2b:c8:f3:16:82:51:cc:e5:98: 88:43:a5:ef:5d:58:e3:ed:33:f1:8e:6d:e3:c4:52: 51:c7:2e:63:35:19:97:78:71:3e:b8:01:c9:ca:65: 1c:4f:11:4b:27:4e:de:47:88:31:ec:26:70:fb:41: f6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DB:97:28:8D:00:06:90:03:E5:96:AA:45:B9:E8:44:8C:1E:C8:3D X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:2a:2e:6b:f2:3b:0b:cd:f8:66:aa:96:7d:50:99:11:8c:aa: ca:d5:ad:dd:97:4f:af:b3:ec:c4:43:34:22:e9:8b:45:f0:aa: fa:e9:22:ff:31:2e:0a:44:8a:41:29:f3:35:72:1c:c5:46:ec: 46:44:5d:b6:73:ea:7d:6f:24:32:46:fb:37:41:e1:93:03:41: 7d:aa:e6:06:ff:17:e0:60:9a:2f:10:35:96:b6:0c:88:c4:3c: 03:fc:a0:93:bc:08:31:45:4a:65:b6:14:f9:13:82:ad:af:2e: d9:e0:1c:aa:3b:69:e8:b0:d7:8d:65:7b:00:1f:60:ff:0f:7d: 55:85:3e:c1:60:dc:4d:aa:a5:2f:e9:0f:0b:2e:5d:4e:ab:fb: de:12:e7:4c:02:2c:42:89:4d:63:63:b1:60:2e:ba:58:a9:2c: 11:99:cb:31:85:44:21:3a:a8:f5:ec:dd:ba:fc:73:61:43:9f: 14:ff:74:1e:2f:e1:e1:8a:65:9e:58:11:15:6e:90:75:16:17: fa:4e:33:b1:93:af:56:ce:d3:46:54:8c:9d:27:75:1a:a2:06: 6b:ea:7f:da:2f:3d:eb:d0:75:5c:05:28:a7:9a:85:30:69:ab: c4:e7:7f:da:d2:c8:a6:fe:34:7a:8f:ae:c7:c6:d9:5c:ba:15: e5:20:9f:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk5S0pdn+Wkbc4M981NzZpCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjUwOTExMTUwMDU5WhcNMjUwOTEyMTUwMDU5WjAzMTEwLwYDVQQD Eyg1M2RiOTcyODhkMDAwNjkwMDNlNTk2YWE0NWI5ZTg0NDhjMWVjODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtej3AkwXmNwUbkFc8ysir9ffsV6y LcdHiWRanstpqKStkpLKat9oKw4VLxFrryvawR8uHVmj7IStC3t7p22AlcoxLYjz J5thc3q/0gmnUpHdP0bkzZL1/ar0C0a7ga1waIpBcIbDEe1ByP7i3LijiVck+SIf suscrwWPYFwqlk1HGR31ZN37GzFiagmmxobBI12KtkSrd1EyqQtiIaDv0w/1/lIm VQDE8oPlqQxAqnLMrW6mcUxVY3efHpRC1ZIqsFFhDLcUa5EryPMWglHM5ZiIQ6Xv XVjj7TPxjm3jxFJRxy5jNRmXeHE+uAHJymUcTxFLJ07eR4gx7CZw+0H2EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPblyiNAAaQA+WWqkW56ESMHsg9MB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyoua/I7 C834ZqqWfVCZEYyqytWt3ZdPr7PsxEM0IumLRfCq+uki/zEuCkSKQSnzNXIcxUbs RkRdtnPqfW8kMkb7N0HhkwNBfarmBv8X4GCaLxA1lrYMiMQ8A/ygk7wIMUVKZbYU +ROCra8u2eAcqjtp6LDXjWV7AB9g/w99VYU+wWDcTaqlL+kPCy5dTqv73hLnTAIs QolNY2OxYC66WKksEZnLMYVEITqo9ezduvxzYUOfFP90Hi/h4YplnlgRFW6QdRYX +k4zsZOvVs7TRlSMnSd1GqIGa+p/2i8969B1XAUop5qFMGmrxOd/2tLIpv40eo+u x8bZXLoV5SCfZQ== -----END CERTIFICATE-----Generated at Thu Sep 11 16:56:07 2025 by rpki-client