Manifest

$ rpki-client -vvf rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.mft
File:                     BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.mft (raw, json)
Hash identifier:          VdIGtM3WbybHYNBMrpXYrTKJeRAIXsXPOVezG0+158o=
Subject key identifier:   9C:14:E7:BF:D8:E8:8E:4E:25:3B:61:74:D9:06:5F:90:EA:50:C5:11
Authority key identifier: BE:DC:BA:A0:D6:AC:CB:E9:7C:22:F6:0B:E3:7F:81:2B:6D:69:04:95
Certificate issuer:       /CN=4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8
Certificate serial:       235AAB6965BC003B4D0FAA00F513F2993F79CDEA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.mft
Manifest number:          011B
Signing time:             Wed 25 Mar 2026 18:22:32 +0000
Manifest this update:     Wed 25 Mar 2026 18:17:32 +0000
Manifest next update:     Thu 26 Mar 2026 21:23:32 +0000
Files and hashes:         1: 32332e3134342e3139362e302f32342d3332203d3e20323130373631.roa (hash: v5pYYmx+KsB0n9PNj/7dTVCaYbzbwd4GPcI1yNHgIUg=)
                          2: BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.crl (hash: ZkMny6ljoAEFa3nId6cxUhvhIah+lBhsU3llVGxy6rU=)
                          3: 32332e3134342e3139362e302f32342d3332203d3e203437363839.roa (hash: oGFOVt2Vi2f/1gnmVxDaDL55Vroz/N2eXFraWAlNVSA=)
                          4: 323630323a663537643a3a2f34302d3438203d3e203437363839.roa (hash: S1VRGx5nK8EyzROsUMFn5PVPNE70/8n9CXnNsxAFcmY=)
Validation:               OK
Signature path:           rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.crl
                          rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5a:ab:69:65:bc:00:3b:4d:0f:aa:00:f5:13:f2:99:3f:79:cd:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8
        Validity
            Not Before: Mar 25 18:17:32 2026 GMT
            Not After : Mar 26 21:23:32 2026 GMT
        Subject: CN=9C14E7BFD8E88E4E253B6174D9065F90EA50C511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:80:b6:94:0f:a2:d0:df:ab:fa:e4:a7:34:9e:
                    b5:e4:a7:47:51:18:50:fe:20:45:35:73:87:4e:7d:
                    82:36:a3:30:22:e3:54:8f:7e:81:6f:33:ec:d1:96:
                    0b:3d:d7:89:6b:84:d0:60:78:87:e5:39:c7:49:6f:
                    37:a0:35:76:a4:04:48:5d:0c:4e:65:5b:ee:ae:d6:
                    2b:2c:7c:b4:59:46:72:7a:42:cb:1f:75:d6:bb:9f:
                    42:89:a5:3b:18:e5:a5:36:9a:b4:68:1f:e6:04:56:
                    6a:da:cc:57:7b:e6:b7:a2:b4:d3:c5:e3:1a:e9:7b:
                    27:76:31:2a:cb:d4:22:e8:0d:5e:38:a4:8d:d3:ff:
                    ef:d0:2c:e4:7b:81:85:2a:13:ec:85:df:6c:35:4e:
                    2e:8c:1b:b4:44:4c:76:84:6f:60:d5:bf:3e:1d:88:
                    10:97:3b:0b:dd:b0:ae:85:5c:3a:fe:ef:c3:d2:d6:
                    7e:1f:d5:a1:02:e3:8b:41:89:d7:6c:da:75:90:d5:
                    b4:aa:29:4c:af:fa:27:72:e8:3f:f0:c6:e7:35:bd:
                    05:eb:1d:f5:f8:02:45:36:d5:fd:d3:e7:d2:40:ed:
                    02:3f:64:a4:41:d5:84:ff:3d:06:c3:5c:0c:56:5c:
                    ca:f2:72:b8:b7:3f:50:98:3c:ae:74:f6:d8:cc:98:
                    fd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:14:E7:BF:D8:E8:8E:4E:25:3B:61:74:D9:06:5F:90:EA:50:C5:11
            X509v3 Authority Key Identifier:
                keyid:BE:DC:BA:A0:D6:AC:CB:E9:7C:22:F6:0B:E3:7F:81:2B:6D:69:04:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:65:21:51:7e:26:b8:ea:07:d6:9f:17:fc:d3:91:b3:bc:f0:
         ac:17:c6:b4:95:25:26:4f:dd:3b:47:19:2d:2d:eb:a2:64:6f:
         99:44:3a:1f:b9:35:28:9a:f2:49:a1:5e:58:e4:0b:2f:a7:30:
         3e:e2:ac:58:e5:be:b8:59:f4:c9:36:aa:07:fb:b3:38:4d:d1:
         8f:4e:9c:2d:07:cd:a1:1e:be:76:47:a7:95:31:29:b0:f1:f8:
         dc:a4:33:06:d8:c2:fa:a1:05:4f:a0:43:2d:e5:ab:ba:4a:80:
         33:68:16:78:b8:33:76:c2:2a:c2:e3:ca:82:e5:c4:ac:c1:e7:
         9d:aa:13:a5:2f:bc:c2:ad:b7:68:60:10:88:35:03:84:4d:c2:
         42:72:73:77:54:ab:0c:c3:22:4a:93:e0:0c:e5:f7:1a:31:c6:
         ed:fd:81:23:82:5a:b6:f6:98:71:20:e3:22:7f:60:10:03:76:
         94:78:37:74:fd:b8:f3:55:36:a9:53:8b:02:29:ed:6b:a7:3f:
         d9:6a:47:33:a9:a0:86:b0:01:c1:77:7e:3b:f0:e8:a0:03:7b:
         d9:9b:2c:a2:39:51:b1:d6:d2:56:65:54:9c:62:c3:63:f9:3a:
         f7:c4:56:f8:92:ce:8c:0e:8d:17:1c:7f:c2:8f:aa:23:a0:43:
         a5:32:90:1b
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgIUI1qraWW8ADtND6oA9RPymT95zeowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDMyNzc1MGE1MjQ2ODM1Zjk2YjE1Y2E2ODY1ZjY3Y2Yy
ZGRhZWQ0MzkyYzAyMDhjZTgwHhcNMjYwMzI1MTgxNzMyWhcNMjYwMzI2MjEyMzMy
WjAzMTEwLwYDVQQDEyg5QzE0RTdCRkQ4RTg4RTRFMjUzQjYxNzREOTA2NUY5MEVB
NTBDNTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4C2lA+i0N+r
+uSnNJ615KdHURhQ/iBFNXOHTn2CNqMwIuNUj36BbzPs0ZYLPdeJa4TQYHiH5TnH
SW83oDV2pARIXQxOZVvurtYrLHy0WUZyekLLH3XWu59CiaU7GOWlNpq0aB/mBFZq
2sxXe+a3orTTxeMa6XsndjEqy9Qi6A1eOKSN0//v0Czke4GFKhPshd9sNU4ujBu0
REx2hG9g1b8+HYgQlzsL3bCuhVw6/u/D0tZ+H9WhAuOLQYnXbNp1kNW0qilMr/on
cug/8MbnNb0F6x31+AJFNtX90+fSQO0CP2SkQdWE/z0Gw1wMVlzK8nK4tz9QmDyu
dPbYzJj9hwIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFJwU57/Y6I5OJTthdNkGX5Dq
UMURMB8GA1UdIwQYMBaAFL7cuqDWrMvpfCL2C+N/gSttaQSVMA4GA1UdDwEB/wQE
AwIHgDBeBgNVHR8EVzBVMFOgUaBPhk1yc3luYzovL3Jwa2kucHVkdS5iZS9yZXBv
L3B1ZHUvNC9CRURDQkFBMEQ2QUNDQkU5N0MyMkY2MEJFMzdGODEyQjZENjkwNDk1
LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9y
cGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4
MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1kMGQyLTQxNjUtODMw
OC1kZjI1OTdlMzQzZjgvZjFiZDQ3MmMtYjBjOC00YmEwLWE1ZDItZmZmY2JlNGQy
NzUzLzQzMjc3NTBhNTI0NjgzNWY5NmIxNWNhNjg2NWY2N2NmMmRkYWVkNDM5MmMw
MjA4Y2U4LmNlcjBpBggrBgEFBQcBCwRdMFswWQYIKwYBBQUHMAuGTXJzeW5jOi8v
cnBraS5wdWR1LmJlL3JlcG8vcHVkdS80L0JFRENCQUEwRDZBQ0NCRTk3QzIyRjYw
QkUzN0Y4MTJCNkQ2OTA0OTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtZSFRfia46gfWnxf805GzvPCs
F8a0lSUmT907RxktLeuiZG+ZRDofuTUomvJJoV5Y5AsvpzA+4qxY5b64WfTJNqoH
+7M4TdGPTpwtB82hHr52R6eVMSmw8fjcpDMG2ML6oQVPoEMt5au6SoAzaBZ4uDN2
wirC48qC5cSsweedqhOlL7zCrbdoYBCINQOETcJCcnN3VKsMwyJKk+AM5fcaMcbt
/YEjglq29phxIOMif2AQA3aUeDd0/bjzVTapU4sCKe1rpz/ZakczqaCGsAHBd347
8OigA3vZmyyiOVGx1tJWZVScYsNj+Tr3xFb4ks6MDo0XHH/Cj6ojoEOlMpAb
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:56 2026 by rpki-client