
$ rpki-client -vvf rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.mft
File: 36E709368620BD63612D7AF179D2A786396A87A5.mft (raw, json)
Hash identifier: EOzf/bf3F9CW5KQmtIEBbK+AZKRV7eFhTdbE+OEi1wM=
Subject key identifier: D9:13:BB:95:06:91:E8:4F:02:9C:B5:E1:DA:DC:68:57:C6:A7:B4:33
Authority key identifier: 36:E7:09:36:86:20:BD:63:61:2D:7A:F1:79:D2:A7:86:39:6A:87:A5
Certificate issuer: /CN=36E709368620BD63612D7AF179D2A786396A87A5
Certificate serial: 235F1A2E9A40A59A692C1AB069D9ABFD5BCF88A6
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer
Subject info access: rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.mft
Manifest number: 0193
Signing time: Thu 30 Apr 2026 08:35:43 +0000
Manifest this update: Thu 30 Apr 2026 08:30:43 +0000
Manifest next update: Fri 01 May 2026 11:25:43 +0000
Files and hashes: 1: 326130373a353463313a343130303a3a2f34302d313238203d3e203437363839.roa (hash: h/s4tew81Yh64OLotMKMEnaDt3sFUjU1FYTmZDG0IcA=)
2: 36E709368620BD63612D7AF179D2A786396A87A5.crl (hash: i3VyjWaJkPDfH+qW+0yOc5gDLN0hCt3yKZj51gZAljE=)
3: 326130373a353463313a343166663a3a2f34382d3438203d3e203536373632.roa (hash: d5u5k+3/rjeFAbZMAZL2Vjbr4aRvWxZsoNuduoSU1fw=)
Validation: OK
Signature path: rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.crl
rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.mft
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:5f:1a:2e:9a:40:a5:9a:69:2c:1a:b0:69:d9:ab:fd:5b:cf:88:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36E709368620BD63612D7AF179D2A786396A87A5
Validity
Not Before: Apr 30 08:30:43 2026 GMT
Not After : May 1 11:25:43 2026 GMT
Subject: CN=D913BB950691E84F029CB5E1DADC6857C6A7B433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:76:00:9d:b6:cd:40:47:39:b9:92:ab:03:e7:
a5:03:12:fa:1a:41:fb:92:d4:6e:09:2e:af:9e:3b:
54:04:0f:46:7e:38:55:ee:e0:c4:5a:c7:f9:17:ed:
6f:be:e6:f3:a7:77:45:99:35:6e:46:e8:f8:68:2a:
1a:f5:5b:0d:87:08:4a:a7:c3:e8:3f:34:39:e8:7c:
e7:aa:3f:61:d3:1e:68:2a:da:5e:cb:a0:24:0c:df:
ef:a4:64:ff:54:6f:f7:91:02:40:85:9f:93:7e:4e:
03:5c:2f:ab:4a:8c:04:0b:a8:07:9f:70:eb:59:22:
b4:f1:c3:10:89:4b:00:eb:32:ab:c2:0c:c9:8f:37:
86:bc:78:7f:a7:e0:4c:ad:45:b2:86:86:f0:65:d7:
05:c2:33:45:51:3e:cf:84:72:74:57:c6:ca:a7:15:
5f:85:de:00:cc:c1:98:fd:c6:bc:44:12:d3:db:a7:
73:98:34:cf:a2:47:8e:c3:19:7d:ec:42:db:51:6e:
e8:32:40:1d:25:ea:1e:d2:db:13:5c:59:12:e6:cd:
24:03:7b:54:f4:32:00:4e:ae:87:c8:7f:82:09:cc:
6d:d5:71:79:fa:0a:e6:b0:df:93:92:de:87:d0:7f:
49:e1:17:61:57:bc:ac:eb:f3:3d:50:e5:5e:3d:10:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:13:BB:95:06:91:E8:4F:02:9C:B5:E1:DA:DC:68:57:C6:A7:B4:33
X509v3 Authority Key Identifier:
keyid:36:E7:09:36:86:20:BD:63:61:2D:7A:F1:79:D2:A7:86:39:6A:87:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e8:89:66:c7:38:12:39:85:34:19:95:c0:a0:9d:46:1a:9a:
79:89:e4:0b:6a:94:6a:78:7e:6e:7c:1f:47:13:b0:10:c9:e4:
93:61:f5:b8:7b:2f:0a:e8:c4:7a:d3:6d:e7:ec:f6:86:0e:b8:
24:bd:27:0b:68:a5:52:2e:99:6d:98:0e:19:84:22:43:2a:c5:
c5:3a:27:ba:8d:0e:2a:75:2a:b6:87:24:de:9e:d0:d9:0b:c5:
9e:3c:c3:e1:f9:35:06:6f:8d:74:5a:3d:3e:a3:13:49:d7:fe:
0c:5a:e0:ff:42:33:52:a2:ea:a8:e5:4b:76:72:97:51:e2:99:
39:33:27:16:8a:ab:13:9f:6b:51:f0:24:66:b9:0d:b0:ad:27:
d8:d0:f4:7c:2e:38:1a:e3:f9:59:ae:2e:7a:5a:46:5d:78:c7:
4e:9d:de:98:1c:a6:28:24:76:f1:36:ce:2e:8b:4a:12:5d:22:
38:0a:41:ff:e9:70:32:91:7e:6b:80:59:b5:24:d3:f4:2c:2a:
f4:86:b8:2f:b7:b0:48:54:73:8b:43:63:2c:31:f4:f4:96:9e:
39:7e:f2:22:aa:1e:58:69:9f:70:6e:d7:39:fc:87:48:ed:d3:
0b:70:c1:4b:73:ca:c4:9c:e2:1b:3f:82:57:0c:bc:05:41:50:
4c:27:10:a1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 30 13:46:39 2026 by rpki-client