$ rpki-client -vvf rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.mft File: 36E709368620BD63612D7AF179D2A786396A87A5.mft (raw, json) Hash identifier: QHLPtL2cczyxIUNUmPkp9s6f8e08D239AwHhMVlnZBo= Subject key identifier: CD:1B:7B:08:66:67:F0:B6:68:90:4B:F9:DA:80:0E:E2:2A:57:D3:A6 Authority key identifier: 36:E7:09:36:86:20:BD:63:61:2D:7A:F1:79:D2:A7:86:39:6A:87:A5 Certificate issuer: /CN=36E709368620BD63612D7AF179D2A786396A87A5 Certificate serial: 7AFACF9F599C9D9D64BAB2E57FE1626CB967C678 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer Subject info access: rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.mft Manifest number: 03 Signing time: Sun 06 Jul 2025 09:06:09 +0000 Manifest this update: Sun 06 Jul 2025 09:01:09 +0000 Manifest next update: Mon 07 Jul 2025 12:24:09 +0000 Files and hashes: 1: 326130373a353463313a343166663a3a2f34382d3438203d3e203536373632.roa (hash: d5u5k+3/rjeFAbZMAZL2Vjbr4aRvWxZsoNuduoSU1fw=) 2: 36E709368620BD63612D7AF179D2A786396A87A5.crl (hash: A6t5Nw/+8bGyE8w9x669xKMfyECs5Q3NXv4S0eThMbk=) 3: 326130373a353463313a343130303a3a2f34302d313238203d3e203437363839.roa (hash: h/s4tew81Yh64OLotMKMEnaDt3sFUjU1FYTmZDG0IcA=) Validation: OK Signature path: rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.crl rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Jul 2025 09:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:fa:cf:9f:59:9c:9d:9d:64:ba:b2:e5:7f:e1:62:6c:b9:67:c6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36E709368620BD63612D7AF179D2A786396A87A5 Validity Not Before: Jul 6 09:01:09 2025 GMT Not After : Jul 7 12:24:09 2025 GMT Subject: CN=CD1B7B086667F0B668904BF9DA800EE22A57D3A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8e:95:0f:1f:25:8a:67:55:2b:65:cf:38:d1: 30:ed:50:29:32:d9:31:8f:fe:54:2b:0c:ed:06:5f: a8:2a:50:17:75:a5:db:56:82:31:70:24:bb:66:27: 3e:12:64:07:1c:70:7c:22:8a:54:68:5a:c7:76:60: 62:90:ea:e2:b1:0b:83:8a:e2:07:69:28:be:b3:bb: b5:1f:fd:54:a8:18:6b:f8:bf:62:cf:56:7e:7a:13: 34:85:0d:11:17:9e:08:a5:f9:f4:a8:7a:a0:1b:61: 56:5b:26:03:42:27:bb:12:d1:75:cb:10:19:b8:7d: ce:d7:7d:21:3f:20:a9:1d:1f:10:fc:52:0a:ff:d8: ec:8a:4b:d0:81:36:6a:ef:07:11:28:4f:e9:83:18: cb:ed:81:8c:ee:f6:a7:cb:2c:c3:cc:bf:f1:a9:42: 98:49:83:81:fb:f1:54:44:6c:6a:20:d5:34:a2:9d: 9c:eb:04:99:8d:0c:88:39:16:95:a4:b5:dc:77:32: cc:f1:81:49:de:d9:76:fc:bc:db:92:04:ec:e5:e8: 1d:80:20:1b:2a:67:a4:f3:f5:10:e6:87:d8:fa:ec: a8:c2:1e:9a:54:7a:2b:9e:e2:4a:23:49:b5:d9:12: c2:d9:99:9f:1c:a7:b5:2d:80:10:14:48:ea:20:93: f7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1B:7B:08:66:67:F0:B6:68:90:4B:F9:DA:80:0E:E2:2A:57:D3:A6 X509v3 Authority Key Identifier: keyid:36:E7:09:36:86:20:BD:63:61:2D:7A:F1:79:D2:A7:86:39:6A:87:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer Subject Information Access: Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:75:02:a1:db:1c:e8:97:b3:27:94:f6:62:e0:1c:52:0f:be: da:15:5e:d4:d5:99:a5:5c:8e:56:c8:8c:8e:90:4b:c7:22:fe: 52:d8:a0:ac:a2:2e:9d:1e:26:b5:66:25:89:47:ac:84:09:df: 48:87:ee:2d:81:bb:ed:88:7d:82:5d:f3:9c:57:76:b8:b4:11: 32:4d:74:e6:7e:6b:69:4f:0e:d7:3c:40:f3:fc:14:a3:f4:82: 6b:1f:f8:90:4d:61:b4:1b:ce:4c:6f:b9:08:c9:cd:72:b9:12: 07:8d:0d:1e:7c:8e:f4:a0:1a:1c:ae:8f:cf:cb:c4:e1:45:d9: b2:d5:4b:28:d8:ef:ba:d1:70:d7:a1:99:b0:b7:27:45:90:62: 43:77:72:62:03:90:13:8c:56:93:71:b2:66:7b:88:86:17:2e: 08:0f:d0:ad:09:25:3e:f8:c1:17:c7:af:72:12:b2:d3:a8:bf: 02:7d:d1:ca:88:dd:3e:cd:c3:30:24:4b:7b:7d:70:65:62:b4: b1:0e:1d:39:98:e0:71:05:4c:03:60:d5:bd:72:e3:18:42:be: 87:25:7e:07:f9:b0:07:78:f0:dd:67:43:1a:ff:4a:8b:14:c4: 62:5e:14:42:2a:c0:ae:63:79:0c:e3:86:c5:75:c2:c0:71:05: 6b:62:8a:01 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUevrPn1mcnZ1kurLlf+FibLlnxngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZFNzA5MzY4NjIwQkQ2MzYxMkQ3QUYxNzlEMkE3ODYz OTZBODdBNTAeFw0yNTA3MDYwOTAxMDlaFw0yNTA3MDcxMjI0MDlaMDMxMTAvBgNV BAMTKENEMUI3QjA4NjY2N0YwQjY2ODkwNEJGOURBODAwRUUyMkE1N0QzQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkjpUPHyWKZ1UrZc840TDtUCky 2TGP/lQrDO0GX6gqUBd1pdtWgjFwJLtmJz4SZAcccHwiilRoWsd2YGKQ6uKxC4OK 4gdpKL6zu7Uf/VSoGGv4v2LPVn56EzSFDREXngil+fSoeqAbYVZbJgNCJ7sS0XXL EBm4fc7XfSE/IKkdHxD8Ugr/2OyKS9CBNmrvBxEoT+mDGMvtgYzu9qfLLMPMv/Gp QphJg4H78VREbGog1TSinZzrBJmNDIg5FpWktdx3MszxgUne2Xb8vNuSBOzl6B2A IBsqZ6Tz9RDmh9j67KjCHppUeiue4kojSbXZEsLZmZ8cp7UtgBAUSOogk/dDAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUzRt7CGZn8LZokEv52oAO4ipX06YwHwYDVR0j BBgwFoAUNucJNoYgvWNhLXrxedKnhjlqh6UwDgYDVR0PAQH/BAQDAgeAMF4GA1Ud HwRXMFUwU6BRoE+GTXJzeW5jOi8vcnBraS5wdWR1LmJlL3JlcG8vcHVkdS8zLzM2 RTcwOTM2ODYyMEJENjM2MTJEN0FGMTc5RDJBNzg2Mzk2QTg3QTUuY3JsMIGeBggr BgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMucGFhcy5y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMt NWNjYTYzM2NhZTNmLzQvMzZFNzA5MzY4NjIwQkQ2MzYxMkQ3QUYxNzlEMkE3ODYz OTZBODdBNS5jZXIwaQYIKwYBBQUHAQsEXTBbMFkGCCsGAQUFBzALhk1yc3luYzov L3Jwa2kucHVkdS5iZS9yZXBvL3B1ZHUvMy8zNkU3MDkzNjg2MjBCRDYzNjEyRDdB RjE3OUQyQTc4NjM5NkE4N0E1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgB Af8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3UCodsc6JezJ5T2YuAcUg++ 2hVe1NWZpVyOVsiMjpBLxyL+UtigrKIunR4mtWYliUeshAnfSIfuLYG77Yh9gl3z nFd2uLQRMk105n5raU8O1zxA8/wUo/SCax/4kE1htBvOTG+5CMnNcrkSB40NHnyO 9KAaHK6Pz8vE4UXZstVLKNjvutFw16GZsLcnRZBiQ3dyYgOQE4xWk3GyZnuIhhcu CA/QrQklPvjBF8evchKy06i/An3RyojdPs3DMCRLe31wZWK0sQ4dOZjgcQVMA2DV vXLjGEK+hyV+B/mwB3jw3WdDGv9KixTEYl4UQirArmN5DOOGxXXCwHEFa2KKAQ== -----END CERTIFICATE-----Generated at Sun Jul 6 18:53:25 2025 by rpki-client