$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: Cl5uYG7NEnPWKw9TybEL1FxQ2//CEbHWOJEzNjpJriE= Subject key identifier: 3C:CF:BD:86:AC:B2:08:A8:89:5C:DA:36:FC:FB:EE:6D:B2:38:8F:83 Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 019DD5E5A0E02D12B1F7E6A47D7BEA18F078 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 18E7 Signing time: Tue 28 Apr 2026 21:01:29 +0000 Manifest this update: Tue 28 Apr 2026 21:01:29 +0000 Manifest next update: Wed 29 Apr 2026 21:01:29 +0000 Files and hashes: 1: 1FtPTBCuaFKFdfLMe7kvs8wBT2U.roa (hash: cKQ2d36EvAcAkY7lWf5+zr4pq/8g+Yc09UpRwXaS9fU=) 2: 286ljgduSQ23zXxMskYIQVpjxXw.roa (hash: 7kRo+hhGrmwGIHUv917EDTqyatYEBV1hJSeuWZhlap4=) 3: 4PDvFK89C4F409g_XmWPwr7q1a0.roa (hash: 9lF1IQm65iaYh5J0JpeOleT0SuGGi5cwQEdnoe/v5JQ=) 4: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: LK/i7VqOK90nxq69DJSwaaygkJ0jSrRGuOEB8AyjQRY=) 5: XpUefWEiJeIsRivUE_i8Xfs2GR8.roa (hash: PBHeI5NfF0k/v47sxglrYiZdodvTKkFHSpMBQlDcdXc=) 6: ZIFHSotu32VSRWz3yy7p-c2LO-A.roa (hash: HtmF/vHud7OvPwqTimOkx4Bd9iGAFPGDNsHwtbVJBZ0=) 7: Zc2NwjC7aoT6KGmTlpJCVRtAAxM.roa (hash: Lw8AgQnNa+u3srZTik73U4zlVyuicSwiTs/U27h1T58=) 8: a0ljWjjOMmlqv-KUZ9yfJ5o3o08.roa (hash: HgXqjfFgX4E4spO/gFoOPoWjpP4kI1tcmHiNguLieIw=) 9: bPL_MeYosxpJav1FZrlBnVGpssY.roa (hash: xbaf1MsiC38LB8r3yBiWSr3FjpTVnJNfGoxcFxBJEYM=) 10: tXhbIuVpYeE_jd1CU4lv2cgwfnw.roa (hash: lxyF6ei0/QTcu7Po0gkCzFazsZNHVkwJorFWOFgBWYI=) 11: vjXTFvPzZIb1zeRSL_kprTEdqbI.roa (hash: JwHjdybMdJ5oxvKoHkQM559e6BBUTavDx0DxnmOgdS0=) 12: yvxp8xW14Xp2PiR7kJbkc75G14A.roa (hash: o93DGCCTavhE3gLHe6hFNvurmN1iNt5bMJ8d0jqfGPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Apr 2026 21:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:d5:e5:a0:e0:2d:12:b1:f7:e6:a4:7d:7b:ea:18:f0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Apr 28 21:01:29 2026 GMT Not After : Apr 29 21:01:29 2026 GMT Subject: CN=3ccfbd86acb208a8895cda36fcfbee6db2388f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:01:e1:86:c5:0a:44:6d:48:b9:46:ec:46:f8: 9b:dc:92:4d:9a:47:0f:cd:9b:59:67:39:23:fe:e6: 07:cc:dc:61:0e:e7:b6:b7:93:05:17:ce:2d:b1:43: 3b:ac:8a:d8:7f:3f:49:77:cd:23:23:11:ee:ab:cf: 95:00:f7:86:c4:ab:ef:89:3c:b2:18:00:75:83:cc: 79:9f:7e:5a:f0:83:37:23:ea:65:d5:32:6d:0f:55: 28:b2:72:7b:8d:8a:75:50:ab:9e:0f:72:ab:22:e1: f1:b8:58:1b:64:9a:db:a7:e2:61:30:52:b5:4c:22: 3a:de:42:aa:f1:7b:34:76:0a:22:ba:a2:7f:c7:7c: 7a:7a:64:5a:0d:52:f5:ab:27:3e:57:c6:82:98:15: 6e:29:56:15:a2:41:fc:90:2c:2c:e5:af:be:86:5e: 72:f3:8f:17:42:38:12:fd:53:e0:12:49:05:86:a4: 65:26:38:e9:84:c7:4a:97:76:f6:f4:30:2a:20:a3: 1f:a3:fd:c9:ab:26:42:4b:09:fb:f7:7a:f0:52:24: d6:36:a4:15:b4:37:35:7e:b8:e0:43:87:53:cb:e2: 0f:ed:74:87:20:90:d1:03:3c:79:88:46:c0:ce:d4: 54:ce:30:1c:8b:95:6f:f9:c4:f1:58:98:eb:39:83: ce:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CF:BD:86:AC:B2:08:A8:89:5C:DA:36:FC:FB:EE:6D:B2:38:8F:83 X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:15:10:20:55:1d:4e:57:cd:ee:5a:cc:38:9a:52:bb:26:ec: e0:d4:3b:e8:d5:98:12:14:01:69:d6:b6:54:48:3c:37:3a:08: e3:f6:a8:64:27:fa:db:83:7e:ac:6b:6f:58:39:d1:0d:62:0f: 66:8a:d4:50:85:55:3f:85:5c:fe:5e:30:f4:16:b4:0d:3a:01: 4e:8a:95:d3:d0:55:0a:62:af:2f:63:68:6e:46:d5:36:89:d2: 4e:a7:f9:76:71:20:e1:d3:6f:a3:17:4b:37:b1:e9:9e:75:ba: f8:76:d8:02:e0:0b:f6:3d:f7:19:79:7e:34:22:66:b2:a7:19: 7a:34:25:b7:ac:f2:08:b7:e2:9d:23:7a:87:82:63:b2:7d:f7: eb:8b:3c:34:8b:b8:f1:b3:46:16:f7:f0:0e:e4:da:d2:0c:c2: 87:36:d3:0c:70:5a:92:10:f4:c7:03:53:ac:b1:e7:eb:96:cd: 78:6d:bc:6b:60:e4:7b:42:53:f5:35:1a:5d:d7:76:c8:ee:5b: 19:3a:95:28:59:6b:08:db:69:85:44:3e:2c:5e:c0:e0:00:0c: 66:fb:8c:45:38:4e:da:36:c6:72:6f:10:9d:9e:40:cb:fe:30: a1:af:4d:a0:43:f9:89:48:e2:62:a9:51:a0:2f:bf:7c:a1:bb: 02:5b:8d:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3V5aDgLRKx9+akfXvqGPB4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjYwNDI4MjEwMTI5WhcNMjYwNDI5MjEwMTI5WjAzMTEwLwYDVQQD EygzY2NmYmQ4NmFjYjIwOGE4ODk1Y2RhMzZmY2ZiZWU2ZGIyMzg4ZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QHhhsUKRG1IuUbsRvib3JJNmkcP zZtZZzkj/uYHzNxhDue2t5MFF84tsUM7rIrYfz9Jd80jIxHuq8+VAPeGxKvviTyy GAB1g8x5n35a8IM3I+pl1TJtD1UosnJ7jYp1UKueD3KrIuHxuFgbZJrbp+JhMFK1 TCI63kKq8Xs0dgoiuqJ/x3x6emRaDVL1qyc+V8aCmBVuKVYVokH8kCws5a++hl5y 848XQjgS/VPgEkkFhqRlJjjphMdKl3b29DAqIKMfo/3JqyZCSwn793rwUiTWNqQV tDc1frjgQ4dTy+IP7XSHIJDRAzx5iEbAztRUzjAci5Vv+cTxWJjrOYPOeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzPvYassgioiVzaNvz77m2yOI+DMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRUQIFUd TlfN7lrMOJpSuybs4NQ76NWYEhQBada2VEg8NzoI4/aoZCf624N+rGtvWDnRDWIP ZorUUIVVP4Vc/l4w9Ba0DToBToqV09BVCmKvL2NobkbVNonSTqf5dnEg4dNvoxdL N7HpnnW6+HbYAuAL9j33GXl+NCJmsqcZejQlt6zyCLfinSN6h4Jjsn3364s8NIu4 8bNGFvfwDuTa0gzChzbTDHBakhD0xwNTrLHn65bNeG28a2Dke0JT9TUaXdd2yO5b GTqVKFlrCNtphUQ+LF7A4AAMZvuMRThO2jbGcm8QnZ5Ay/4woa9NoEP5iUjiYqlR oC+/fKG7AluNDg== -----END CERTIFICATE-----Generated at Wed Apr 29 04:09:13 2026 by rpki-client