$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft File: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft (raw, json) Hash identifier: u6gnqiOxPsZ3UnYObPyIaYVP16TKXPEFQKWqdEnli8E= Subject key identifier: 67:8F:3B:32:75:78:37:FF:79:0C:50:F6:53:31:37:BF:47:88:96:4C Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 0199FC8F42E765A64B0D6719FE68B45B478A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft Manifest number: 16FF Signing time: Sun 19 Oct 2025 13:01:11 +0000 Manifest this update: Sun 19 Oct 2025 13:01:11 +0000 Manifest next update: Mon 20 Oct 2025 13:01:11 +0000 Files and hashes: 1: 5GDtzDxQGf1ytzR86OdYdVfgY10.roa (hash: Y7XPkUc6nkXQ9pggu+D76scK3gfgjCpno0IF9isJJaU=) 2: 8_VofHRjLqpbexG_OvMfcAc1YnM.roa (hash: LU1FpEuXnyVe9W4sDVOna2qpuw6a/LcZ+SoooZ+qS1I=) 3: FLnErLvOpzZbsRT_gxw1xkGyG-k.roa (hash: hVcpYnUD1s1paKRtMc3s9Fba/ywgfiiofSMSn9fncl4=) 4: HIaBGvmxdnBLgd35agLSA4bkubM.roa (hash: i0iDI6axXMfE17qcVLg1zq6ssI2uwAR7lVjpfhI0sp0=) 5: KXfP7XKNaMn2JhuLJT9dpckmiyA.roa (hash: GS9b0UNjXL4SmRFzEHGDNFVlOx4BK3qOMQxT+UosqWQ=) 6: K_nThvB1QPa-NFO1MbnkStYXpDE.roa (hash: bCk5SP6F3IPvXuHnQeP0koJlhnPuxSRpq2HC4wbee3g=) 7: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl (hash: 3qsuOuJXsH2ZrvLoCSQ9R1wwWVx8y333dA+PAWT6fdo=) 8: X2zPXDZDw062_b_HvXSPFiahZHE.roa (hash: HHiPpVTX6x6BIWaFkT1eYQ6ttHeAln3bmKcpARZzNPU=) 9: bkHQOuqvDDjiWoZ_FWNlw3OoyWg.roa (hash: 4pB5ThjluE6IXLoMqZ2xaF+3UW/apUpBTyNJgyK3/o0=) 10: dpiwVyP36v1YV2afir9h5xUMcuE.roa (hash: YrE4G5icZyg4bgdRocIY+JMcSadk1tZR0cVr4Ds0EB0=) 11: jahgwortntlQHohzLAQ0tN4yHMw.roa (hash: awaLuIiyqPNJzkHQQmDP4aHVUxcrbbrVGi6oXMKNBUI=) 12: lRDNNZCwk7wDe_H4Q4TIuNXHJ6U.roa (hash: Wr1LVv/CBNJaedzrWmalGhXhHfFCafMvAh8UXIMoPcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:42:e7:65:a6:4b:0d:67:19:fe:68:b4:5b:47:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Oct 19 13:01:11 2025 GMT Not After : Oct 20 13:01:11 2025 GMT Subject: CN=678f3b32757837ff790c50f6533137bf4788964c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bd:d3:67:cf:70:4e:9e:6d:2d:f7:c0:d2:8f: 4f:4c:61:41:3b:f9:64:b0:65:de:02:3c:d0:a8:b2: ba:32:45:16:d3:5d:06:ed:58:b1:a5:dd:fd:d5:39: 2c:a3:e4:aa:b7:5b:a4:0e:9a:a0:a5:a7:af:99:7c: dc:18:08:1f:ed:ae:cf:e7:65:3a:6f:a1:ef:49:61: 8b:22:ab:23:80:00:5c:ab:48:33:79:f2:a2:51:92: ff:70:cf:c0:33:90:3c:7b:fc:34:56:5c:9b:c2:b0: e4:1e:0d:30:4b:49:83:c0:de:c1:e3:2d:81:92:02: 1b:d1:6d:95:da:9c:89:d2:7a:bd:41:b1:ab:c6:f7: a9:d6:46:4a:87:02:20:b4:27:83:38:08:80:f7:99: a8:de:b7:36:8f:84:d3:92:60:a9:c0:2d:b8:0d:af: b3:6e:10:cb:e0:f4:e7:d9:cb:d2:67:66:0d:85:96: 69:2f:5b:46:9b:fa:7a:30:12:94:9c:91:20:1d:d7: 85:77:cd:84:63:5c:07:42:f9:19:9b:db:6c:9e:f4: 29:70:80:86:15:7d:02:b9:a6:e8:36:fe:de:de:c1: c8:96:31:a6:b6:14:c5:b9:a9:e9:13:96:2d:68:bd: 11:70:91:16:b5:69:79:46:13:28:68:89:8d:8c:cf: 3e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8F:3B:32:75:78:37:FF:79:0C:50:F6:53:31:37:BF:47:88:96:4C X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:86:49:d5:de:48:84:1f:63:b1:44:f4:4e:8c:cd:84:1d:85: 65:bb:48:c4:45:60:2f:fb:4f:90:13:91:eb:5e:30:e5:a0:5b: 95:1f:03:0b:45:8c:9d:54:2d:a9:9c:e5:41:e1:c0:b3:67:d5: 6d:44:1c:55:05:0b:ca:43:2d:1f:ca:bd:4c:ff:ab:28:49:98: 4b:c9:f6:e1:c3:16:14:d9:63:ae:bf:2c:c0:24:3f:71:93:bf: db:6f:e0:8f:c6:1b:87:09:9e:49:7c:ff:7d:2b:bd:d7:5e:1d: 8e:11:66:37:42:39:14:4f:f0:56:8a:01:62:6c:2b:f7:86:cf: 40:fb:be:fe:58:d1:b2:1f:5f:04:c2:eb:a4:83:85:58:d1:a1: 74:79:0e:f0:a7:29:d6:22:b0:6d:80:c6:41:a0:cb:cc:9e:f1: a8:a2:85:39:5e:50:8d:cb:ee:80:60:d5:e0:f7:98:43:17:0a: 7a:e4:4a:70:48:0f:39:ea:6b:ed:78:42:b0:1f:66:f0:11:a1: ae:39:4c:dd:44:a9:d8:9d:a8:1c:36:0f:3f:74:b1:62:ad:01: 3c:51:33:bc:93:f7:16:dc:f8:05:a1:f8:eb:8b:b5:0c:30:cb: aa:21:d2:39:e6:b1:bf:02:e4:a9:fd:99:33:c4:5c:71:4d:74: 82:62:b8:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j0LnZaZLDWcZ/mi0W0eKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjUxMDE5MTMwMTExWhcNMjUxMDIwMTMwMTExWjAzMTEwLwYDVQQD Eyg2NzhmM2IzMjc1NzgzN2ZmNzkwYzUwZjY1MzMxMzdiZjQ3ODg5NjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL3TZ89wTp5tLffA0o9PTGFBO/lk sGXeAjzQqLK6MkUW010G7Vixpd391Tkso+Sqt1ukDpqgpaevmXzcGAgf7a7P52U6 b6HvSWGLIqsjgABcq0gzefKiUZL/cM/AM5A8e/w0VlybwrDkHg0wS0mDwN7B4y2B kgIb0W2V2pyJ0nq9QbGrxvep1kZKhwIgtCeDOAiA95mo3rc2j4TTkmCpwC24Da+z bhDL4PTn2cvSZ2YNhZZpL1tGm/p6MBKUnJEgHdeFd82EY1wHQvkZm9tsnvQpcICG FX0CuaboNv7e3sHIljGmthTFuanpE5YtaL0RcJEWtWl5RhMoaImNjM8+BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGePOzJ1eDf/eQxQ9lMxN79HiJZMMB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnoZJ1d5I hB9jsUT0TozNhB2FZbtIxEVgL/tPkBOR614w5aBblR8DC0WMnVQtqZzlQeHAs2fV bUQcVQULykMtH8q9TP+rKEmYS8n24cMWFNljrr8swCQ/cZO/22/gj8YbhwmeSXz/ fSu9114djhFmN0I5FE/wVooBYmwr94bPQPu+/ljRsh9fBMLrpIOFWNGhdHkO8Kcp 1iKwbYDGQaDLzJ7xqKKFOV5QjcvugGDV4PeYQxcKeuRKcEgPOepr7XhCsB9m8BGh rjlM3USp2J2oHDYPP3SxYq0BPFEzvJP3Ftz4BaH464u1DDDLqiHSOeaxvwLkqf2Z M8RccU10gmK4Vg== -----END CERTIFICATE-----Generated at Sun Oct 19 17:31:10 2025 by rpki-client