Manifest

$ rpki-client -vvf rpki.pudu.be/repo/pudu/0/73A83C810157E3E8511EEBE39CFCAD16FA329700.mft
File:                     73A83C810157E3E8511EEBE39CFCAD16FA329700.mft (raw, json)
Hash identifier:          kgv++WYaKem6UPLEXfKzVJxLSIAZ/IlRQPohXed7bfI=
Subject key identifier:   AC:97:6B:6F:53:E0:54:88:F0:A0:69:67:5E:9D:04:70:AC:86:C8:A5
Authority key identifier: 73:A8:3C:81:01:57:E3:E8:51:1E:EB:E3:9C:FC:AD:16:FA:32:97:00
Certificate issuer:       /CN=73a83c810157e3e8511eebe39cfcad16fa329700
Certificate serial:       233236E59E75BE6EDEE5F1E81606F19642700A1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6g8gQFX4-hRHuvjnPytFvoylwA.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/0/73A83C810157E3E8511EEBE39CFCAD16FA329700.mft
Manifest number:          031A
Signing time:             Thu 18 Sep 2025 11:41:52 +0000
Manifest this update:     Thu 18 Sep 2025 11:36:52 +0000
Manifest next update:     Fri 19 Sep 2025 13:20:52 +0000
Files and hashes:         1: 39312e3139332e3131342e302f32342d3234203d3e203437363839.roa (hash: sND/nLOXh0EI7KvNcZnw72UQIQxZ1zDBEYk65ZMw99g=)
                          2: AS47689.asa (hash: IXps0b/1g1l177gIsdzq5p40GgKoRTKNzopoXYofMHU=)
                          3: 326130363a613334303a3a2f32392d3438203d3e203437363839.roa (hash: PZOrAVpUnSOEX61rRUYMF0Fqh0M8SUNuaasyj0vaIO8=)
                          4: 36342e3138372e3230382e302f32332d3332203d3e203437363839.roa (hash: fDLWsYqKp2kQTCUxzJNhMc5kfnG5ZRzUiS/0j4rG9DA=)
                          5: 73A83C810157E3E8511EEBE39CFCAD16FA329700.crl (hash: tLcrt4hsCZW0jrNPVhroeFBB82MgQO8XdIB4n+6txHc=)
Validation:               OK
Signature path:           rsync://rpki.pudu.be/repo/pudu/0/73A83C810157E3E8511EEBE39CFCAD16FA329700.crl
                          rsync://rpki.pudu.be/repo/pudu/0/73A83C810157E3E8511EEBE39CFCAD16FA329700.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c6g8gQFX4-hRHuvjnPytFvoylwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Sep 2025 13:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:32:36:e5:9e:75:be:6e:de:e5:f1:e8:16:06:f1:96:42:70:0a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73a83c810157e3e8511eebe39cfcad16fa329700
        Validity
            Not Before: Sep 18 11:36:52 2025 GMT
            Not After : Sep 19 13:20:52 2025 GMT
        Subject: CN=AC976B6F53E05488F0A069675E9D0470AC86C8A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5b:6e:5d:61:58:c2:1c:c1:85:e7:69:62:f0:
                    1e:5d:1d:b9:e6:68:28:03:f2:e5:10:cc:be:e0:71:
                    60:46:b9:ce:45:ec:2d:b6:c7:12:09:b0:1e:ee:6e:
                    77:82:36:a5:49:4c:f3:d9:32:0d:4b:39:4e:8a:89:
                    db:0c:23:8a:c1:90:89:3d:b7:d2:5c:b7:25:fa:03:
                    1b:09:c7:bc:2c:12:53:1e:60:ff:e0:b4:01:61:f5:
                    33:a3:2b:81:e8:4f:3e:f9:73:47:6f:03:5d:8f:71:
                    3f:ab:e8:f5:c9:11:e4:ed:de:41:3c:c7:87:c0:96:
                    7a:f4:7a:bd:e7:3d:f0:ff:8f:f7:fe:0f:97:5b:db:
                    17:df:25:73:53:6c:ee:75:44:60:3f:aa:0c:93:38:
                    f6:1d:1d:7d:ae:7a:40:ee:74:3d:be:2d:bb:b0:6b:
                    fb:8f:33:42:fc:b9:60:28:a5:34:68:ad:2e:79:99:
                    a4:96:cb:fb:ee:bb:9e:16:f2:80:ad:a5:40:f6:2a:
                    12:2c:4d:32:04:93:8b:58:25:c7:16:af:9e:17:0f:
                    fb:ba:b5:a3:02:39:45:35:96:75:ac:70:d0:67:9a:
                    52:46:19:fe:5c:57:92:78:20:1d:cb:0e:e5:fb:92:
                    0f:8f:37:a6:89:09:6b:b7:45:3b:91:3e:0e:56:96:
                    71:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:97:6B:6F:53:E0:54:88:F0:A0:69:67:5E:9D:04:70:AC:86:C8:A5
            X509v3 Authority Key Identifier:
                keyid:73:A8:3C:81:01:57:E3:E8:51:1E:EB:E3:9C:FC:AD:16:FA:32:97:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/0/73A83C810157E3E8511EEBE39CFCAD16FA329700.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6g8gQFX4-hRHuvjnPytFvoylwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/0/73A83C810157E3E8511EEBE39CFCAD16FA329700.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:98:d7:a2:0c:7c:a1:02:b0:1a:d6:40:0c:d8:2c:07:d0:ee:
         a1:cf:38:08:ae:06:54:03:a0:78:da:9b:ae:9d:6d:c1:78:20:
         bd:e8:c3:ab:e6:14:59:e7:ac:61:a3:49:ea:9c:92:9c:cd:c9:
         a3:48:6b:b1:fd:7e:e5:5f:53:1b:73:b8:f5:5d:01:ab:74:9a:
         0a:a8:e2:f4:7c:62:ec:0b:11:9c:59:54:42:09:45:ec:6b:ce:
         09:47:f6:5c:99:f8:d6:a3:59:91:69:57:d4:02:4b:b7:e4:f9:
         19:82:cc:53:80:b7:e4:a9:8f:52:70:3d:cb:a8:75:7c:51:87:
         5c:e8:3b:58:fd:6d:e0:70:c4:4f:24:33:c8:ae:eb:9e:1b:5d:
         42:cb:3a:48:9c:cf:d6:f7:80:7b:04:5d:33:c8:4e:86:b3:47:
         ec:fb:84:76:fc:de:4b:23:dc:74:3d:7d:dc:7f:6a:5d:2a:82:
         7f:8b:3f:85:12:cc:d2:1c:07:8f:a5:3d:81:98:63:26:f2:d7:
         77:11:b1:38:09:ba:9c:72:ea:ef:01:b7:b1:ab:ce:e1:97:3d:
         b6:c9:b6:01:d6:67:ac:35:31:f9:f1:05:99:8e:13:86:d4:94:
         e7:db:88:44:b3:3a:ce:c2:03:fc:92:5a:1d:8e:c5:e9:f4:45:
         7d:70:43:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:33:18 2025 by rpki-client