$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft File: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft (raw, json) Hash identifier: 2vfCjO5qMgyJCajp9QAmBazzBjsHdyg8wz+glWCE2Bg= Subject key identifier: 06:5F:E2:D6:63:42:F4:F8:A8:52:99:10:AD:E6:A9:98:41:54:45:CE Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 0197B7B351DC4FA139FD4F3BD3A74C36E147 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft Manifest number: 15CD Signing time: Sat 28 Jun 2025 18:01:11 +0000 Manifest this update: Sat 28 Jun 2025 18:01:11 +0000 Manifest next update: Sun 29 Jun 2025 18:01:11 +0000 Files and hashes: 1: 2P2uTpkvl3VGGSukB7xZDZ4FgNY.roa (hash: VRAizC+jBHA5Hu6QFIKf2a26vU2bi91/F8nkNo6HyF4=) 2: 5GDtzDxQGf1ytzR86OdYdVfgY10.roa (hash: Y7XPkUc6nkXQ9pggu+D76scK3gfgjCpno0IF9isJJaU=) 3: 8_VofHRjLqpbexG_OvMfcAc1YnM.roa (hash: LU1FpEuXnyVe9W4sDVOna2qpuw6a/LcZ+SoooZ+qS1I=) 4: FLnErLvOpzZbsRT_gxw1xkGyG-k.roa (hash: hVcpYnUD1s1paKRtMc3s9Fba/ywgfiiofSMSn9fncl4=) 5: HIaBGvmxdnBLgd35agLSA4bkubM.roa (hash: i0iDI6axXMfE17qcVLg1zq6ssI2uwAR7lVjpfhI0sp0=) 6: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl (hash: KwnhOeDzzfPx3z5pwaQ7tUNr+rWW4rNHrso7IZHtqAk=) 7: TJ_T11Afazhf3X-XRb_MTGkgqHs.roa (hash: OJh2YQWVoUHD+3A+f2ze8IRJ0craejKYG/dno9c7vf8=) 8: bkHQOuqvDDjiWoZ_FWNlw3OoyWg.roa (hash: 4pB5ThjluE6IXLoMqZ2xaF+3UW/apUpBTyNJgyK3/o0=) 9: dpiwVyP36v1YV2afir9h5xUMcuE.roa (hash: YrE4G5icZyg4bgdRocIY+JMcSadk1tZR0cVr4Ds0EB0=) 10: yanb0vbB0Vl_V4Od_5rDYCcWg-s.roa (hash: GGC2GFce9kFBGM5zAOhPfD+LQbMUQnjRP2BhppWz95M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b3:51:dc:4f:a1:39:fd:4f:3b:d3:a7:4c:36:e1:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Jun 28 18:01:11 2025 GMT Not After : Jun 29 18:01:11 2025 GMT Subject: CN=065fe2d66342f4f8a8529910ade6a998415445ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:63:e3:95:e8:e2:e7:96:c2:52:27:69:0c: b4:70:1c:d3:9e:0c:03:af:49:5c:02:f4:26:d9:64: 1a:e4:8c:26:63:4e:c7:6b:d1:38:f7:7c:f7:06:d0: 28:8e:41:88:f9:89:d2:ac:80:4b:af:67:5f:7c:e2: 9e:9a:4f:c4:fa:ee:59:a7:1f:8f:4e:32:c2:8b:19: f8:89:97:be:9d:13:b5:00:f5:5d:f7:84:38:03:a8: bd:02:b4:31:07:2f:f9:05:da:ee:1e:af:00:85:fa: c9:d7:3b:21:90:53:dd:28:83:51:aa:f8:4a:8f:4b: ea:4c:b5:81:92:3c:eb:9c:13:a6:fa:6d:97:ce:ef: 53:52:6a:25:46:99:10:35:26:95:3a:c8:ec:c7:7f: 70:4e:be:a1:c5:34:c7:fc:b9:bf:b6:4e:95:69:29: d0:ec:72:e5:3f:34:50:e9:69:29:f1:f1:84:49:6e: 3c:eb:90:22:00:29:66:9f:13:9d:e7:e2:27:0a:00: 60:6c:38:d8:5b:5a:12:2c:f8:e1:3a:6c:c9:e7:bb: c5:b1:65:7a:17:89:3a:3b:b1:85:a3:33:db:22:0a: 5b:0d:30:50:47:ae:37:e8:dc:59:da:f9:b0:3d:23: 87:d0:e2:4c:11:28:a9:eb:a2:a3:a0:f3:d9:6b:b5: 0a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5F:E2:D6:63:42:F4:F8:A8:52:99:10:AD:E6:A9:98:41:54:45:CE X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ab:61:8f:9f:58:82:74:4e:be:87:08:80:c1:59:f0:05:be: 84:4c:86:14:fa:07:2f:14:cb:66:56:27:fa:56:99:c3:a1:82: 8b:ab:89:75:22:6f:7a:8c:47:25:f8:18:f2:6f:03:c8:23:06: ab:66:34:59:d0:f4:4d:40:d1:31:3b:64:44:cb:65:c8:b7:bf: 45:99:e6:23:37:f7:ff:32:c8:fa:8f:f8:db:47:92:cd:c0:b7: 78:b1:af:29:03:81:84:70:40:44:19:44:fd:4c:b9:1b:a6:16: a3:db:07:91:de:60:91:08:a4:d0:07:59:ae:26:e9:ab:1d:b4: ca:40:24:1d:7e:47:10:42:43:1f:d8:86:88:cd:03:b8:ad:38: 62:a0:0f:6b:4b:84:2a:a9:c9:11:8e:95:38:a0:d0:61:01:93: 04:0f:c9:62:40:1f:d3:6b:11:07:9f:a7:a5:18:77:c0:96:e1: bc:16:3f:7c:e4:43:2b:55:37:0f:36:32:04:cf:54:b4:d8:a2: 64:b1:a7:87:d2:53:cc:f8:a6:30:44:5b:da:10:8a:b2:8a:2a: d5:45:40:35:2e:a4:92:dc:6c:8c:c4:ef:da:5b:8a:c2:77:ea: 33:60:64:8a:c6:35:b4:08:b7:7c:a7:90:fc:0c:9a:10:9f:14: 91:39:d3:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3s1HcT6E5/U8706dMNuFHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjUwNjI4MTgwMTExWhcNMjUwNjI5MTgwMTExWjAzMTEwLwYDVQQD EygwNjVmZTJkNjYzNDJmNGY4YTg1Mjk5MTBhZGU2YTk5ODQxNTQ0NWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLdj45Xo4ueWwlInaQy0cBzTngwD r0lcAvQm2WQa5IwmY07Ha9E493z3BtAojkGI+YnSrIBLr2dffOKemk/E+u5Zpx+P TjLCixn4iZe+nRO1APVd94Q4A6i9ArQxBy/5BdruHq8AhfrJ1zshkFPdKINRqvhK j0vqTLWBkjzrnBOm+m2Xzu9TUmolRpkQNSaVOsjsx39wTr6hxTTH/Lm/tk6VaSnQ 7HLlPzRQ6Wkp8fGESW4865AiAClmnxOd5+InCgBgbDjYW1oSLPjhOmzJ57vFsWV6 F4k6O7GFozPbIgpbDTBQR6436NxZ2vmwPSOH0OJMESip66KjoPPZa7UKZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZf4tZjQvT4qFKZEK3mqZhBVEXOMB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6thj59Y gnROvocIgMFZ8AW+hEyGFPoHLxTLZlYn+laZw6GCi6uJdSJveoxHJfgY8m8DyCMG q2Y0WdD0TUDRMTtkRMtlyLe/RZnmIzf3/zLI+o/420eSzcC3eLGvKQOBhHBARBlE /Uy5G6YWo9sHkd5gkQik0AdZribpqx20ykAkHX5HEEJDH9iGiM0DuK04YqAPa0uE KqnJEY6VOKDQYQGTBA/JYkAf02sRB5+npRh3wJbhvBY/fORDK1U3DzYyBM9UtNii ZLGnh9JTzPimMERb2hCKsooq1UVANS6kktxsjMTv2luKwnfqM2BkisY1tAi3fKeQ /AyaEJ8UkTnT9A== -----END CERTIFICATE-----Generated at Sat Jun 28 23:36:02 2025 by rpki-client