$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: rgQ7eXOehEiVNxexFnpA4Pq96A0Y+AI3NHomi3L7dD8= Subject key identifier: CD:FF:F4:CB:FC:E6:D8:25:4D:FD:4A:5C:F9:4F:83:02:DD:D7:2C:A1 Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 019CE66D845EF7E35820E127F71C20411064 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 186B Signing time: Fri 13 Mar 2026 09:01:02 +0000 Manifest this update: Fri 13 Mar 2026 09:01:02 +0000 Manifest next update: Sat 14 Mar 2026 09:01:02 +0000 Files and hashes: 1: 1FtPTBCuaFKFdfLMe7kvs8wBT2U.roa (hash: cKQ2d36EvAcAkY7lWf5+zr4pq/8g+Yc09UpRwXaS9fU=) 2: 286ljgduSQ23zXxMskYIQVpjxXw.roa (hash: 7kRo+hhGrmwGIHUv917EDTqyatYEBV1hJSeuWZhlap4=) 3: 4PDvFK89C4F409g_XmWPwr7q1a0.roa (hash: 9lF1IQm65iaYh5J0JpeOleT0SuGGi5cwQEdnoe/v5JQ=) 4: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: yiNQdXUKQoXtY64Y4nWn+PX+sIJhENbw4jLXWnjGuho=) 5: XpUefWEiJeIsRivUE_i8Xfs2GR8.roa (hash: PBHeI5NfF0k/v47sxglrYiZdodvTKkFHSpMBQlDcdXc=) 6: ZIFHSotu32VSRWz3yy7p-c2LO-A.roa (hash: HtmF/vHud7OvPwqTimOkx4Bd9iGAFPGDNsHwtbVJBZ0=) 7: Zc2NwjC7aoT6KGmTlpJCVRtAAxM.roa (hash: Lw8AgQnNa+u3srZTik73U4zlVyuicSwiTs/U27h1T58=) 8: a0ljWjjOMmlqv-KUZ9yfJ5o3o08.roa (hash: HgXqjfFgX4E4spO/gFoOPoWjpP4kI1tcmHiNguLieIw=) 9: bPL_MeYosxpJav1FZrlBnVGpssY.roa (hash: xbaf1MsiC38LB8r3yBiWSr3FjpTVnJNfGoxcFxBJEYM=) 10: tXhbIuVpYeE_jd1CU4lv2cgwfnw.roa (hash: lxyF6ei0/QTcu7Po0gkCzFazsZNHVkwJorFWOFgBWYI=) 11: vjXTFvPzZIb1zeRSL_kprTEdqbI.roa (hash: JwHjdybMdJ5oxvKoHkQM559e6BBUTavDx0DxnmOgdS0=) 12: yvxp8xW14Xp2PiR7kJbkc75G14A.roa (hash: o93DGCCTavhE3gLHe6hFNvurmN1iNt5bMJ8d0jqfGPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 09:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e6:6d:84:5e:f7:e3:58:20:e1:27:f7:1c:20:41:10:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Mar 13 09:01:02 2026 GMT Not After : Mar 14 09:01:02 2026 GMT Subject: CN=cdfff4cbfce6d8254dfd4a5cf94f8302ddd72ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5e:05:a3:c6:25:25:bf:7f:1a:60:c1:43:f2: f4:df:d8:47:d7:ce:3a:b3:40:e5:22:7b:0b:d2:78: 42:ef:c5:c9:27:9d:ba:1e:9f:44:2f:bc:75:40:53: 46:f4:12:65:d8:ee:93:a3:e4:05:db:78:ae:d1:88: a4:c5:dc:a9:7d:4f:d0:76:7b:cc:64:df:eb:44:30: 47:08:e9:4e:7d:ef:2f:66:ca:f6:11:78:fb:54:90: 0f:5f:3a:d3:d3:9c:47:8f:4d:c8:e8:d0:43:29:32: f6:91:49:7f:ed:62:aa:d3:81:4b:33:ea:c4:cd:8f: 87:ed:b0:d0:ce:51:85:1b:53:6c:e0:c5:7d:45:92: 43:fe:94:68:d5:1d:0b:81:71:d5:f1:d2:a3:aa:d1: 6c:a3:59:04:f3:35:d6:36:67:6b:c2:0e:bb:ca:09: 8b:78:7f:20:f8:29:0d:31:28:c2:26:72:69:ae:2b: ad:62:87:53:15:57:e0:d7:bb:98:36:ae:98:ed:64: ce:16:bc:ae:87:6e:2a:7f:23:e9:93:44:b0:67:d1: af:2e:0d:a5:4b:46:92:5e:50:0c:f0:d4:b5:18:36: 2f:2f:8e:d4:06:57:f3:ed:92:46:4c:6c:b9:97:d0: ca:87:8e:e8:de:0f:20:f5:0a:4f:9f:78:6f:1e:1b: b4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FF:F4:CB:FC:E6:D8:25:4D:FD:4A:5C:F9:4F:83:02:DD:D7:2C:A1 X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:81:2c:ec:9b:7d:3c:ea:f7:57:9d:d6:4b:86:b0:9e:62:f4: 76:a5:f4:a8:2e:d8:22:7b:49:dd:62:52:06:f5:30:33:b0:9c: e8:59:e1:8c:41:c6:c0:2a:1d:c5:28:e5:d6:30:da:d0:70:2f: 42:22:03:5b:57:c1:70:cd:80:65:7b:f4:9b:0f:45:37:be:95: be:b1:c2:13:9c:d9:13:2b:b2:97:4a:7f:89:0b:a4:1b:38:87: 42:0f:0d:86:7f:00:71:4b:4f:4a:81:ed:69:3a:07:04:6f:a1: 48:7a:88:49:1a:f2:14:e5:6d:22:1d:aa:47:f6:64:ff:de:b2: ee:01:5e:03:86:9a:c8:c6:12:24:89:0f:8c:34:7a:1d:0f:71: 63:ec:03:f3:ea:05:3c:92:90:6a:73:e4:e5:b0:85:de:a6:13: c1:92:cb:b2:7f:4a:b8:58:5c:2f:32:10:26:ed:07:f2:3b:b0: 78:fe:8b:f6:aa:8d:30:eb:c8:fd:ce:00:9d:ff:8e:ef:b8:a3: 3b:fc:ca:38:37:75:a9:96:b6:6c:eb:7f:a3:4f:ca:16:d4:8a: 00:94:74:65:b8:d2:a2:84:ce:e3:28:63:b6:c5:0f:f6:67:a3: b4:90:a6:8f:05:dd:84:fe:d3:8c:64:ba:e3:1d:7e:9f:b4:a0: dc:68:56:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzmbYRe9+NYIOEn9xwgQRBkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjYwMzEzMDkwMTAyWhcNMjYwMzE0MDkwMTAyWjAzMTEwLwYDVQQD EyhjZGZmZjRjYmZjZTZkODI1NGRmZDRhNWNmOTRmODMwMmRkZDcyY2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l4Fo8YlJb9/GmDBQ/L039hH1846 s0DlInsL0nhC78XJJ526Hp9EL7x1QFNG9BJl2O6To+QF23iu0YikxdypfU/QdnvM ZN/rRDBHCOlOfe8vZsr2EXj7VJAPXzrT05xHj03I6NBDKTL2kUl/7WKq04FLM+rE zY+H7bDQzlGFG1Ns4MV9RZJD/pRo1R0LgXHV8dKjqtFso1kE8zXWNmdrwg67ygmL eH8g+CkNMSjCJnJpriutYodTFVfg17uYNq6Y7WTOFryuh24qfyPpk0SwZ9GvLg2l S0aSXlAM8NS1GDYvL47UBlfz7ZJGTGy5l9DKh47o3g8g9QpPn3hvHhu04QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3/9Mv85tglTf1KXPlPgwLd1yyhMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoEs7Jt9 POr3V53WS4awnmL0dqX0qC7YIntJ3WJSBvUwM7Cc6FnhjEHGwCodxSjl1jDa0HAv QiIDW1fBcM2AZXv0mw9FN76VvrHCE5zZEyuyl0p/iQukGziHQg8Nhn8AcUtPSoHt aToHBG+hSHqISRryFOVtIh2qR/Zk/96y7gFeA4aayMYSJIkPjDR6HQ9xY+wD8+oF PJKQanPk5bCF3qYTwZLLsn9KuFhcLzIQJu0H8juweP6L9qqNMOvI/c4Anf+O77ij O/zKODd1qZa2bOt/o0/KFtSKAJR0ZbjSooTO4yhjtsUP9mejtJCmjwXdhP7TjGS6 4x1+n7Sg3GhWnw== -----END CERTIFICATE-----Generated at Fri Mar 13 15:57:22 2026 by rpki-client