$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: hrFN+n79hjPLZ3ALO8WKpQrOo6CcGCwaDHml2kD0zkg= Subject key identifier: 22:DB:97:A7:0D:C8:1B:84:C0:CD:F9:74:5A:8E:B6:D5:55:60:BB:50 Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 01A0B576391D3C4E73222036E7B6458A937D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 1A64 Signing time: Fri 18 Sep 2026 17:00:18 +0000 Manifest this update: Fri 18 Sep 2026 17:00:18 +0000 Manifest next update: Sat 19 Sep 2026 17:00:18 +0000 Files and hashes: 1: 286ljgduSQ23zXxMskYIQVpjxXw.roa (hash: 7kRo+hhGrmwGIHUv917EDTqyatYEBV1hJSeuWZhlap4=) 2: 4PDvFK89C4F409g_XmWPwr7q1a0.roa (hash: 9lF1IQm65iaYh5J0JpeOleT0SuGGi5cwQEdnoe/v5JQ=) 3: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: aC0gk3Y/ka+yjXoZuO4TKWu+U3VBI9WCPBEDVt8gSxQ=) 4: XpUefWEiJeIsRivUE_i8Xfs2GR8.roa (hash: PBHeI5NfF0k/v47sxglrYiZdodvTKkFHSpMBQlDcdXc=) 5: ZIFHSotu32VSRWz3yy7p-c2LO-A.roa (hash: HtmF/vHud7OvPwqTimOkx4Bd9iGAFPGDNsHwtbVJBZ0=) 6: Zc2NwjC7aoT6KGmTlpJCVRtAAxM.roa (hash: Lw8AgQnNa+u3srZTik73U4zlVyuicSwiTs/U27h1T58=) 7: a0ljWjjOMmlqv-KUZ9yfJ5o3o08.roa (hash: HgXqjfFgX4E4spO/gFoOPoWjpP4kI1tcmHiNguLieIw=) 8: bPL_MeYosxpJav1FZrlBnVGpssY.roa (hash: xbaf1MsiC38LB8r3yBiWSr3FjpTVnJNfGoxcFxBJEYM=) 9: oP5ts0FtfK91btZ3P7x-bBdVAcw.roa (hash: Hav/3aYz5+a57hb3pfiEZH2IAAqH/VmCtBV7UH/ck2A=) 10: tXhbIuVpYeE_jd1CU4lv2cgwfnw.roa (hash: lxyF6ei0/QTcu7Po0gkCzFazsZNHVkwJorFWOFgBWYI=) 11: vjXTFvPzZIb1zeRSL_kprTEdqbI.roa (hash: JwHjdybMdJ5oxvKoHkQM559e6BBUTavDx0DxnmOgdS0=) 12: yvxp8xW14Xp2PiR7kJbkc75G14A.roa (hash: o93DGCCTavhE3gLHe6hFNvurmN1iNt5bMJ8d0jqfGPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:b5:76:39:1d:3c:4e:73:22:20:36:e7:b6:45:8a:93:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Sep 18 17:00:18 2026 GMT Not After : Sep 19 17:00:18 2026 GMT Subject: CN=22db97a70dc81b84c0cdf9745a8eb6d55560bb50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b2:32:cd:a4:9a:ec:65:24:8f:0d:7a:e7:a5: 30:97:3d:70:03:be:0a:85:71:75:9e:98:1c:d9:3d: 23:ea:7b:73:58:97:ca:27:32:fb:93:bf:01:5a:a5: a6:a7:d0:fd:c0:67:76:d2:cb:b4:5e:aa:43:51:d6: da:44:a6:1d:9a:0f:2d:75:8d:ec:93:91:a4:89:13: c9:06:cf:6e:d4:2c:8e:9b:4e:97:50:ad:e9:d6:81: 20:17:69:82:96:f5:20:40:47:09:d3:ad:5c:f2:65: 47:30:a8:c3:ff:8c:68:a8:e8:32:ce:55:66:4b:e1: a2:58:23:0e:e0:24:a6:68:76:d3:1e:6a:71:97:fc: 0b:22:ea:81:d1:72:9a:58:6d:eb:5f:68:60:96:0c: 71:79:de:fc:dd:c7:2e:73:21:55:46:f8:c9:68:37: d8:a5:92:fe:d8:88:12:f4:24:a5:92:95:bf:0d:c6: 39:21:b4:96:45:ef:c6:df:c8:79:d8:99:40:80:28: 89:78:ad:13:65:e8:a7:91:41:15:a4:a3:77:10:b1: 71:23:06:2c:54:a8:37:2d:5f:f3:e6:38:5f:9d:20: 3d:85:21:a5:85:bb:46:cc:66:e0:e1:98:c9:01:df: c7:eb:91:db:5f:81:1e:2e:58:f5:fe:e8:a6:0d:aa: 14:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DB:97:A7:0D:C8:1B:84:C0:CD:F9:74:5A:8E:B6:D5:55:60:BB:50 X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:75:0b:f1:00:bd:58:3c:14:86:17:a0:a8:f4:82:77:27:f5: 88:24:71:43:c8:bc:e8:26:35:7a:c4:88:83:d7:0c:97:e0:bf: 19:fc:be:3b:42:ee:61:7f:6b:e8:09:f2:fa:80:a7:28:ad:84: c3:60:4e:8e:79:6d:d7:47:4c:41:85:a7:9b:1d:d8:cf:6e:39: 43:bf:7d:88:8b:c4:61:49:96:93:1e:85:09:b4:71:4f:e2:cd: d8:82:51:cb:2b:e2:ad:4d:cf:a3:99:18:ef:3e:e7:6d:83:58: e9:93:f9:ba:fd:78:c9:11:f2:ed:f2:ed:52:07:7d:85:93:09: a1:4a:4c:e8:d6:fc:a6:dc:4b:37:f8:cd:93:01:c9:6b:b1:86: 2b:f9:df:02:e9:e6:59:6a:ce:8d:e5:8b:45:8d:c8:6d:20:27: bd:68:71:a9:63:18:4f:6e:30:c0:10:98:84:11:c7:9e:5f:a9: be:16:f6:61:86:ff:6d:5f:31:6e:26:1e:91:6f:bd:5f:5a:ba: c2:73:66:8b:2d:87:15:1d:28:01:d4:6b:42:9d:c5:ef:e8:d2: 26:85:c8:f9:da:10:7b:ca:01:d0:a1:70:35:a3:e7:12:39:bd: 36:1c:c5:f7:e1:6b:33:64:4f:dc:a5:97:57:e5:61:27:28:31: 2a:3d:ee:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC1djkdPE5zIiA257ZFipN9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjYwOTE4MTcwMDE4WhcNMjYwOTE5MTcwMDE4WjAzMTEwLwYDVQQD EygyMmRiOTdhNzBkYzgxYjg0YzBjZGY5NzQ1YThlYjZkNTU1NjBiYjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLIyzaSa7GUkjw1656Uwlz1wA74K hXF1npgc2T0j6ntzWJfKJzL7k78BWqWmp9D9wGd20su0XqpDUdbaRKYdmg8tdY3s k5GkiRPJBs9u1CyOm06XUK3p1oEgF2mClvUgQEcJ061c8mVHMKjD/4xoqOgyzlVm S+GiWCMO4CSmaHbTHmpxl/wLIuqB0XKaWG3rX2hglgxxed783ccucyFVRvjJaDfY pZL+2IgS9CSlkpW/DcY5IbSWRe/G38h52JlAgCiJeK0TZeinkUEVpKN3ELFxIwYs VKg3LV/z5jhfnSA9hSGlhbtGzGbg4ZjJAd/H65HbX4EeLlj1/uimDaoUnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLbl6cNyBuEwM35dFqOttVVYLtQMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHUL8QC9 WDwUhhegqPSCdyf1iCRxQ8i86CY1esSIg9cMl+C/Gfy+O0LuYX9r6Any+oCnKK2E w2BOjnlt10dMQYWnmx3Yz245Q799iIvEYUmWkx6FCbRxT+LN2IJRyyvirU3Po5kY 7z7nbYNY6ZP5uv14yRHy7fLtUgd9hZMJoUpM6Nb8ptxLN/jNkwHJa7GGK/nfAunm WWrOjeWLRY3IbSAnvWhxqWMYT24wwBCYhBHHnl+pvhb2YYb/bV8xbiYekW+9X1q6 wnNmiy2HFR0oAdRrQp3F7+jSJoXI+doQe8oB0KFwNaPnEjm9NhzF9+FrM2RP3KWX V+VhJygxKj3uaQ== -----END CERTIFICATE-----Generated at Fri Sep 18 23:02:30 2026 by rpki-client