$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft File: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft (raw, json) Hash identifier: LjotSplynEJRyYojo+fbDdCiUvnxDJoCTaPjYOumz2U= Subject key identifier: E9:1D:CC:67:56:FC:3F:E7:8B:4D:82:CF:91:13:65:B0:2D:07:1A:1C Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 0196CBAA17CFC7D5F83115B733DCBC90AA71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft Manifest number: 1552 Signing time: Tue 13 May 2025 22:00:44 +0000 Manifest this update: Tue 13 May 2025 22:00:44 +0000 Manifest next update: Wed 14 May 2025 22:00:44 +0000 Files and hashes: 1: 5GDtzDxQGf1ytzR86OdYdVfgY10.roa (hash: Y7XPkUc6nkXQ9pggu+D76scK3gfgjCpno0IF9isJJaU=) 2: 8_VofHRjLqpbexG_OvMfcAc1YnM.roa (hash: LU1FpEuXnyVe9W4sDVOna2qpuw6a/LcZ+SoooZ+qS1I=) 3: FLnErLvOpzZbsRT_gxw1xkGyG-k.roa (hash: hVcpYnUD1s1paKRtMc3s9Fba/ywgfiiofSMSn9fncl4=) 4: HIaBGvmxdnBLgd35agLSA4bkubM.roa (hash: i0iDI6axXMfE17qcVLg1zq6ssI2uwAR7lVjpfhI0sp0=) 5: K5S-GMhCBiMRei0pFIoZE2-sYhU.roa (hash: wzDT7UEzahDsDK4FOVIWJPfCpNKqkl6NNn/F0RgFFHk=) 6: KTzVRdJZBa5vUHuUiFITIPL2MxQ.roa (hash: p8lCAiX+p391b10Os5I/j2nT1/wyA7qAGwMc1jacaeM=) 7: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl (hash: PJtbQyZRBJ6Hg/+Q1Z/3S+thbIpZIx7osLqz2TewfmY=) 8: Q6-WS-Ogl2BUfXGzTcnn86zggbg.roa (hash: Z4T7mng2RyFpB2LdTZShIdwvER7o+X1yPzGLQ8F0zLc=) 9: TJ_T11Afazhf3X-XRb_MTGkgqHs.roa (hash: OJh2YQWVoUHD+3A+f2ze8IRJ0craejKYG/dno9c7vf8=) 10: dpiwVyP36v1YV2afir9h5xUMcuE.roa (hash: YrE4G5icZyg4bgdRocIY+JMcSadk1tZR0cVr4Ds0EB0=) 11: rXRu8y7KH4eVt4pi-qQsVwCZo7M.roa (hash: 6N6EBAkXmbWw8Eh8oVfwa8d3Gv0mmlAZg/yQWNpcYV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 May 2025 22:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:cb:aa:17:cf:c7:d5:f8:31:15:b7:33:dc:bc:90:aa:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: May 13 22:00:44 2025 GMT Not After : May 14 22:00:44 2025 GMT Subject: CN=e91dcc6756fc3fe78b4d82cf911365b02d071a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:23:a3:ea:92:7e:ea:2e:6f:4c:01:ea:46:78: 93:22:b6:11:9c:41:4e:1c:bf:4a:94:fd:1e:e9:b5: 42:e9:6f:95:2c:ca:d2:69:99:5c:3e:6d:c4:3f:a8: f4:fc:b1:91:22:19:2f:bc:64:2a:0e:82:8d:a4:8d: 01:98:fe:e2:0e:85:16:66:04:95:f5:fd:9d:cf:b9: 4a:bc:7a:d6:45:e5:ec:45:87:ff:f3:da:71:6c:d9: 47:42:25:15:34:fb:6e:88:d3:3f:c0:19:3e:d7:fa: 1d:60:74:b5:f3:92:f0:5a:52:4c:da:2e:97:f8:fe: d3:2b:40:d4:e8:54:d7:0f:a8:eb:43:52:15:b1:ce: 1f:6b:90:e7:87:c5:f5:35:56:eb:fb:86:0f:5e:ff: 8c:0e:6e:b1:fe:f6:ee:f2:a9:0e:59:46:07:a5:fd: 19:52:7b:24:b8:29:34:e3:3f:be:b1:e6:4f:d3:68: 95:41:bc:d1:ec:ac:27:85:25:ec:75:59:14:16:ad: 59:3a:05:c2:9d:83:7a:bd:54:30:8f:9e:48:a7:2c: f6:9f:f3:54:10:56:c7:a3:cb:00:6d:54:bd:93:ce: 23:bd:5f:74:a1:df:51:c7:f9:a1:52:d5:5c:01:dd: 7f:d3:06:3b:9d:c6:08:47:1f:a5:9b:f4:5a:26:f1: 19:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1D:CC:67:56:FC:3F:E7:8B:4D:82:CF:91:13:65:B0:2D:07:1A:1C X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:1c:68:a8:71:b2:ff:82:f7:33:98:14:f0:c6:f9:26:c0:c3: ec:db:df:ce:b5:f5:f1:0f:85:e6:18:ba:2c:29:9c:b8:a2:46: 94:7e:22:84:fb:80:4f:f6:da:8c:04:b3:25:96:92:35:c5:b4: bb:6e:e3:c3:5d:e9:73:00:97:33:80:99:38:5f:24:ff:aa:45: 8e:76:fd:6b:b1:09:40:83:97:80:0e:f6:e5:44:94:ab:e0:1b: 49:22:fd:17:c3:0b:73:81:78:79:53:eb:27:37:d8:61:6c:23: 3c:bd:a8:ba:73:df:84:c5:5e:54:df:ee:de:85:63:c8:de:4f: 91:55:51:20:74:23:b9:1e:9b:66:17:dc:42:c9:a0:13:c6:5d: 6a:bd:d3:e5:ab:e2:a2:6f:9e:0a:47:1d:b2:6a:50:d9:f4:72: 9a:b7:2a:f6:e2:12:6d:d0:b1:96:91:a5:51:e7:0a:f7:b9:d4: 51:61:53:57:f2:dc:c0:bd:f7:e7:7f:11:aa:ff:29:df:c3:b5: a8:ba:cf:06:3c:ea:9c:4c:29:2c:ef:b2:f3:fc:93:15:8b:13: 6d:11:d1:ce:df:74:ec:e8:fe:e0:d0:a6:a5:9b:8c:7d:69:f0: 9d:d6:e7:7c:5c:10:24:dd:e2:11:94:e4:61:97:0b:f3:96:71: 1f:bc:21:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbLqhfPx9X4MRW3M9y8kKpxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjUwNTEzMjIwMDQ0WhcNMjUwNTE0MjIwMDQ0WjAzMTEwLwYDVQQD EyhlOTFkY2M2NzU2ZmMzZmU3OGI0ZDgyY2Y5MTEzNjViMDJkMDcxYTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5COj6pJ+6i5vTAHqRniTIrYRnEFO HL9KlP0e6bVC6W+VLMrSaZlcPm3EP6j0/LGRIhkvvGQqDoKNpI0BmP7iDoUWZgSV 9f2dz7lKvHrWReXsRYf/89pxbNlHQiUVNPtuiNM/wBk+1/odYHS185LwWlJM2i6X +P7TK0DU6FTXD6jrQ1IVsc4fa5Dnh8X1NVbr+4YPXv+MDm6x/vbu8qkOWUYHpf0Z UnskuCk04z++seZP02iVQbzR7KwnhSXsdVkUFq1ZOgXCnYN6vVQwj55Ipyz2n/NU EFbHo8sAbVS9k84jvV90od9Rx/mhUtVcAd1/0wY7ncYIRx+lm/RaJvEZ5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkdzGdW/D/ni02Cz5ETZbAtBxocMB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhxoqHGy /4L3M5gU8Mb5JsDD7NvfzrX18Q+F5hi6LCmcuKJGlH4ihPuAT/bajASzJZaSNcW0 u27jw13pcwCXM4CZOF8k/6pFjnb9a7EJQIOXgA725USUq+AbSSL9F8MLc4F4eVPr JzfYYWwjPL2ounPfhMVeVN/u3oVjyN5PkVVRIHQjuR6bZhfcQsmgE8Zdar3T5avi om+eCkcdsmpQ2fRymrcq9uISbdCxlpGlUecK97nUUWFTV/LcwL33538Rqv8p38O1 qLrPBjzqnEwpLO+y8/yTFYsTbRHRzt907Oj+4NCmpZuMfWnwndbnfFwQJN3iEZTk YZcL85ZxH7whZg== -----END CERTIFICATE-----Generated at Wed May 14 01:05:41 2025 by rpki-client