$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: LJbPMybRE7ONhO1l9VdHgsyBp/PxGY7Mt52M8SI2XB0= Subject key identifier: 52:A7:1C:BB:F5:20:35:27:AA:22:B3:41:CF:AA:C7:6F:A1:79:03:33 Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 019A21092BDD8EEE6D6801390BC7DDC8AC26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 16FB Signing time: Sun 26 Oct 2025 15:00:40 +0000 Manifest this update: Sun 26 Oct 2025 15:00:40 +0000 Manifest next update: Mon 27 Oct 2025 15:00:40 +0000 Files and hashes: 1: 9AkjaJRYRIOTmgf4F3gyV6pdFkQ.roa (hash: N1lZUtbJEJkRSUYDq/VJK4cR/RojBk8ALOORTw9wVk8=) 2: DUER2OIxuLfteK-5s9p125aHbHQ.roa (hash: MKxlsAlXCfnz4va2JwSTTtP5lv2QEgVXIYiD1U0P1iM=) 3: I5Dlj2iBXR78bV2NI4oXxT6DVcQ.roa (hash: pUPvPv3IMdPMN3mngjSRkbMNdszUqvQ/W+9CudZep1s=) 4: IKxEFfN_KNz819jDJF02u6P6vks.roa (hash: M1gfdLv0XPFzxrEqEMyJ47aUP/+uDTO64SIkdj54NaA=) 5: JcqV5Zbt-7BBvR25dnt58sZOVRw.roa (hash: Jyex6OZ5W2eO7E9m8v2xcJSNJuYcw9eBRYzL8fzsuKg=) 6: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: fwcYInxZZ4sXvUSaKbOFB99WnvZchIRTH27hr+LVyUE=) 7: QeFtXb_2Jy97mUDOpmxAN1O437Q.roa (hash: pGsLweLJqx/P4hTPUc5m5Veo+2vG7HsRtDbmA1rHXlQ=) 8: YPwqy-r5Ds6zjUqs83c9wSrz4Xo.roa (hash: /OBWcwiTOuByZ0CFtuxP3jPnYcDQxuxVogbCk4BaZIM=) 9: _z_sTvwtZQKHpvup9rFWqFFhFKY.roa (hash: JVM6qUA4ZtDkSX81zJfuU5jJmnu8pCK2PaUHasgHRME=) 10: kUvUMMUm6A2S-PsLFuOoxFGjL2g.roa (hash: 43KKo4hB/OsGlhMLYdFrQhlx6kBqniKw+U0iCAYg2Qg=) 11: pOvELxmVMCJOREXgcbJwYPWQcLY.roa (hash: 8NAO5qgs1zoQcDKNETGRxihZubfEYTFA3QAx7BgtdEo=) 12: stpJENpG1HfxaYzx679NTwZFpZY.roa (hash: EMcugxArWnP7J9sItxl3gZsFeM8qrAvUxjSeKkZ4oao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:21:09:2b:dd:8e:ee:6d:68:01:39:0b:c7:dd:c8:ac:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Oct 26 15:00:40 2025 GMT Not After : Oct 27 15:00:40 2025 GMT Subject: CN=52a71cbbf5203527aa22b341cfaac76fa1790333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:59:fb:52:df:35:b4:73:6c:76:1c:f3:59:56: 34:40:44:ab:5c:a3:84:d7:95:42:8e:45:30:2c:d0: d3:aa:a2:fd:81:11:2e:03:c5:dc:24:11:89:d7:13: 03:96:e8:66:b1:e3:a9:18:b5:38:96:45:01:2e:59: 7c:ab:44:60:96:c2:4e:7a:26:bb:0d:c7:06:43:ff: 19:7f:56:f5:d0:23:6f:65:e3:07:d2:87:ff:c3:4b: 5c:b9:25:5a:0b:61:b3:8a:b4:5d:8b:16:46:6d:7e: 17:6a:cb:04:28:7f:3b:dc:7d:45:d3:80:bc:37:28: 51:69:7b:39:c1:a5:24:9e:ec:28:cd:62:76:b0:a2: 3a:e7:fd:66:4d:7e:55:09:64:0f:ed:27:67:6e:b7: ec:43:5f:13:7b:71:2d:56:3c:24:e6:65:94:04:5c: 95:8c:24:7a:6a:3b:1d:52:f0:eb:ff:f3:e9:b8:26: 9e:17:f4:17:0d:11:41:de:9d:ff:dd:d8:62:49:3d: e7:16:7a:98:c6:1d:8c:d8:3e:64:79:b6:46:0a:51: de:1e:27:14:d2:d2:6d:7b:0e:0e:eb:8e:70:60:a4: 11:61:68:6f:e1:4d:c7:25:c6:83:81:88:aa:eb:4b: 30:d6:ba:b2:a6:4e:dd:d0:3a:a5:02:d2:18:e6:ea: bd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A7:1C:BB:F5:20:35:27:AA:22:B3:41:CF:AA:C7:6F:A1:79:03:33 X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:9d:37:b5:0e:f2:8f:6f:b7:d8:70:7e:f7:64:06:8b:c4:fc: 34:fb:4a:93:09:6e:15:4a:16:04:7e:0a:6b:e3:b8:cb:10:17: 22:20:fa:a3:a1:fb:9a:a6:56:66:c4:9a:7a:71:15:3d:0a:59: 2e:7c:d4:f3:3c:d3:33:79:88:60:48:ff:bd:ef:e1:c4:88:b4: 28:b5:4c:26:5a:3f:40:01:e1:3e:af:51:df:b6:8e:7a:ef:dc: b7:78:36:38:f6:c4:50:25:80:15:ab:1c:47:28:3d:c4:99:fb: 0f:83:1f:ee:88:96:31:b6:9d:79:3b:16:c5:99:97:a4:80:e7: bb:39:c2:0c:07:bd:ab:83:68:4e:11:ee:68:9b:7f:8f:7a:44: a7:98:de:d0:f6:2e:81:47:56:33:c0:5a:8f:45:2a:99:7d:24: 2e:04:0a:6d:c1:ea:03:5b:16:f5:22:fc:a4:03:a0:57:19:75: e3:92:37:fa:3e:18:f9:46:d9:15:dc:cc:a1:ad:40:98:71:22: d8:4e:0f:ee:be:34:5d:2e:82:44:7e:3a:9c:1e:88:f5:ac:7c: c6:05:d8:dc:92:3d:c0:b0:69:84:20:19:b2:6d:43:f4:15:5b: 09:0d:e0:cc:ee:7d:02:80:f5:2a:05:af:e4:3f:b1:90:c7:dc: ae:75:e2:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZohCSvdju5taAE5C8fdyKwmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjUxMDI2MTUwMDQwWhcNMjUxMDI3MTUwMDQwWjAzMTEwLwYDVQQD Eyg1MmE3MWNiYmY1MjAzNTI3YWEyMmIzNDFjZmFhYzc2ZmExNzkwMzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqln7Ut81tHNsdhzzWVY0QESrXKOE 15VCjkUwLNDTqqL9gREuA8XcJBGJ1xMDluhmseOpGLU4lkUBLll8q0RglsJOeia7 DccGQ/8Zf1b10CNvZeMH0of/w0tcuSVaC2GzirRdixZGbX4XassEKH873H1F04C8 NyhRaXs5waUknuwozWJ2sKI65/1mTX5VCWQP7SdnbrfsQ18Te3EtVjwk5mWUBFyV jCR6ajsdUvDr//PpuCaeF/QXDRFB3p3/3dhiST3nFnqYxh2M2D5kebZGClHeHicU 0tJtew4O645wYKQRYWhv4U3HJcaDgYiq60sw1rqypk7d0DqlAtIY5uq9NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKnHLv1IDUnqiKzQc+qx2+heQMzMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARp03tQ7y j2+32HB+92QGi8T8NPtKkwluFUoWBH4Ka+O4yxAXIiD6o6H7mqZWZsSaenEVPQpZ LnzU8zzTM3mIYEj/ve/hxIi0KLVMJlo/QAHhPq9R37aOeu/ct3g2OPbEUCWAFasc Ryg9xJn7D4Mf7oiWMbadeTsWxZmXpIDnuznCDAe9q4NoThHuaJt/j3pEp5je0PYu gUdWM8Baj0UqmX0kLgQKbcHqA1sW9SL8pAOgVxl145I3+j4Y+UbZFdzMoa1AmHEi 2E4P7r40XS6CRH46nB6I9ax8xgXY3JI9wLBphCAZsm1D9BVbCQ3gzO59AoD1KgWv 5D+xkMfcrnXiuA== -----END CERTIFICATE-----Generated at Sun Oct 26 22:48:44 2025 by rpki-client