$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft File: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft (raw, json) Hash identifier: LYCfazXAAZR1uhTSQWILIOlQI3gX4FLmazSvJU4BmOk= Subject key identifier: EC:EB:55:A0:0D:D9:B3:4B:22:A0:C8:D3:64:67:DA:E1:45:4F:B0:92 Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 0198D62984A86807F7A9FEF0836CB8E82914 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft Manifest number: 1663 Signing time: Sat 23 Aug 2025 09:01:41 +0000 Manifest this update: Sat 23 Aug 2025 09:01:41 +0000 Manifest next update: Sun 24 Aug 2025 09:01:41 +0000 Files and hashes: 1: 5GDtzDxQGf1ytzR86OdYdVfgY10.roa (hash: Y7XPkUc6nkXQ9pggu+D76scK3gfgjCpno0IF9isJJaU=) 2: 8_VofHRjLqpbexG_OvMfcAc1YnM.roa (hash: LU1FpEuXnyVe9W4sDVOna2qpuw6a/LcZ+SoooZ+qS1I=) 3: D3rB0zVCO2kOEV-pa6Z0evX1rm0.roa (hash: OIq+0wPz29AZKig2PfV9te+eGDvxaB0e1LjXBoYQwuU=) 4: FLnErLvOpzZbsRT_gxw1xkGyG-k.roa (hash: hVcpYnUD1s1paKRtMc3s9Fba/ywgfiiofSMSn9fncl4=) 5: HIaBGvmxdnBLgd35agLSA4bkubM.roa (hash: i0iDI6axXMfE17qcVLg1zq6ssI2uwAR7lVjpfhI0sp0=) 6: KXfP7XKNaMn2JhuLJT9dpckmiyA.roa (hash: GS9b0UNjXL4SmRFzEHGDNFVlOx4BK3qOMQxT+UosqWQ=) 7: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl (hash: uKVmThkKrPApdsS3ZYfvEpg9uIvewdG2W3gGZLj5aZg=) 8: TJ_T11Afazhf3X-XRb_MTGkgqHs.roa (hash: OJh2YQWVoUHD+3A+f2ze8IRJ0craejKYG/dno9c7vf8=) 9: WY6OCR49xjLWDGDrTxBKtibrV1g.roa (hash: /EmbrZRMYbTXiRc/+8GCsi3J47C1og/mSFwDOqHSu8U=) 10: X2zPXDZDw062_b_HvXSPFiahZHE.roa (hash: HHiPpVTX6x6BIWaFkT1eYQ6ttHeAln3bmKcpARZzNPU=) 11: bkHQOuqvDDjiWoZ_FWNlw3OoyWg.roa (hash: 4pB5ThjluE6IXLoMqZ2xaF+3UW/apUpBTyNJgyK3/o0=) 12: dpiwVyP36v1YV2afir9h5xUMcuE.roa (hash: YrE4G5icZyg4bgdRocIY+JMcSadk1tZR0cVr4Ds0EB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 09:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:29:84:a8:68:07:f7:a9:fe:f0:83:6c:b8:e8:29:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Aug 23 09:01:41 2025 GMT Not After : Aug 24 09:01:41 2025 GMT Subject: CN=eceb55a00dd9b34b22a0c8d36467dae1454fb092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:c0:17:99:c9:fb:ad:83:00:d7:2a:7a:69: ee:7e:7c:ec:c5:08:3a:07:d7:25:5f:33:14:78:68: 16:f9:9d:a6:17:f5:b7:bd:d9:a7:18:c9:de:ec:a8: e9:89:51:78:f8:46:ae:5c:8b:07:aa:8e:bf:c9:bc: ad:4f:cd:a1:70:88:8a:e1:89:c8:e4:6d:34:8a:28: 2d:70:7d:b7:b8:0c:4a:1e:84:da:c0:96:37:86:30: 24:2b:33:b5:25:82:4f:81:22:97:f9:b7:d1:31:6a: d2:18:16:48:c5:ea:da:9e:c0:d0:09:e9:d5:63:a2: e0:81:2b:81:d1:1a:0d:a4:1a:05:10:99:fc:d0:29: 67:bd:38:0b:67:db:df:87:84:b4:3f:67:27:c5:db: b4:58:1d:40:13:d5:0c:df:b3:55:c7:79:b0:40:2e: f0:f9:f6:d4:92:d9:c5:69:76:95:69:2f:be:ac:a8: 8f:e2:bf:e7:24:46:19:aa:ae:41:23:e5:4d:7d:8f: ba:ea:a5:31:48:ae:8f:6e:e2:87:d0:a1:b2:84:e3: d0:03:3e:c2:9c:e7:c6:43:1d:e3:31:f0:ec:6c:4b: 6e:f4:4b:52:7d:6b:ae:f0:64:b3:b5:54:64:da:b4: dc:28:14:d0:27:ee:84:9d:1f:c2:d3:98:9a:6a:e1: 51:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EB:55:A0:0D:D9:B3:4B:22:A0:C8:D3:64:67:DA:E1:45:4F:B0:92 X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:82:19:15:2e:27:96:f4:8b:59:11:c9:70:c5:2a:7b:c0:2c: e3:b7:73:20:35:24:a6:34:94:bd:82:64:68:8d:47:d8:c0:a2: 5d:08:aa:a4:76:5f:55:b1:58:ce:4a:ff:f4:ca:0e:cb:c7:f2: 6a:87:3c:45:13:0d:37:42:d9:a4:52:87:bb:82:7a:c3:c2:b7: d5:3a:3c:b3:bf:73:30:a4:70:09:9a:a8:b1:11:70:38:d9:6a: b6:f2:3e:48:20:de:bd:8d:fc:11:51:ba:0e:93:81:37:cd:ea: ab:6e:48:6f:97:60:a2:ff:b7:0d:e3:07:be:ac:81:56:b3:5c: 84:ed:68:da:65:8a:8f:7a:87:c4:2a:6b:34:d6:0f:a9:ee:97: 32:48:f5:45:13:1c:2c:15:7b:c3:63:0c:cc:2e:ce:66:8d:ee: c0:98:99:0c:55:5a:0c:29:d8:ba:51:c6:b9:1b:8d:b1:a0:d5: aa:e3:be:ca:d8:3c:99:99:42:c9:ec:28:42:29:58:2c:e0:cb: a7:3c:64:1a:16:e6:06:81:4b:8e:c9:25:99:61:5c:f6:fb:eb: 85:53:97:44:f7:a7:36:af:c6:bd:5f:59:39:8a:62:e9:15:f0: 69:33:60:db:65:c5:bc:f8:59:bc:ca:51:e7:2e:8d:aa:af:80: 73:8f:65:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWKYSoaAf3qf7wg2y46CkUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjUwODIzMDkwMTQxWhcNMjUwODI0MDkwMTQxWjAzMTEwLwYDVQQD EyhlY2ViNTVhMDBkZDliMzRiMjJhMGM4ZDM2NDY3ZGFlMTQ1NGZiMDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC7AF5nJ+62DANcqemnufnzsxQg6 B9clXzMUeGgW+Z2mF/W3vdmnGMne7KjpiVF4+EauXIsHqo6/ybytT82hcIiK4YnI 5G00iigtcH23uAxKHoTawJY3hjAkKzO1JYJPgSKX+bfRMWrSGBZIxeransDQCenV Y6LggSuB0RoNpBoFEJn80ClnvTgLZ9vfh4S0P2cnxdu0WB1AE9UM37NVx3mwQC7w +fbUktnFaXaVaS++rKiP4r/nJEYZqq5BI+VNfY+66qUxSK6PbuKH0KGyhOPQAz7C nOfGQx3jMfDsbEtu9EtSfWuu8GSztVRk2rTcKBTQJ+6EnR/C05iaauFRowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzrVaAN2bNLIqDI02Rn2uFFT7CSMB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4IZFS4n lvSLWRHJcMUqe8As47dzIDUkpjSUvYJkaI1H2MCiXQiqpHZfVbFYzkr/9MoOy8fy aoc8RRMNN0LZpFKHu4J6w8K31To8s79zMKRwCZqosRFwONlqtvI+SCDevY38EVG6 DpOBN83qq25Ib5dgov+3DeMHvqyBVrNchO1o2mWKj3qHxCprNNYPqe6XMkj1RRMc LBV7w2MMzC7OZo3uwJiZDFVaDCnYulHGuRuNsaDVquO+ytg8mZlCyewoQilYLODL pzxkGhbmBoFLjsklmWFc9vvrhVOXRPenNq/GvV9ZOYpi6RXwaTNg22XFvPhZvMpR 5y6Nqq+Ac49lmg== -----END CERTIFICATE-----Generated at Sat Aug 23 19:11:43 2025 by rpki-client