$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft File: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft (raw, json) Hash identifier: vtp32nCHN5tO5V1CdDOEhGjRoc1iLbtBYEk9vihyBXs= Subject key identifier: 76:B3:8B:95:09:28:51:C8:4A:B1:43:31:52:CF:54:E3:87:7F:9A:B5 Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 019926D775632FC3B23C6478D7F310738503 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft Manifest number: 168D Signing time: Mon 08 Sep 2025 01:01:18 +0000 Manifest this update: Mon 08 Sep 2025 01:01:18 +0000 Manifest next update: Tue 09 Sep 2025 01:01:18 +0000 Files and hashes: 1: 5GDtzDxQGf1ytzR86OdYdVfgY10.roa (hash: Y7XPkUc6nkXQ9pggu+D76scK3gfgjCpno0IF9isJJaU=) 2: 8_VofHRjLqpbexG_OvMfcAc1YnM.roa (hash: LU1FpEuXnyVe9W4sDVOna2qpuw6a/LcZ+SoooZ+qS1I=) 3: FLnErLvOpzZbsRT_gxw1xkGyG-k.roa (hash: hVcpYnUD1s1paKRtMc3s9Fba/ywgfiiofSMSn9fncl4=) 4: HIaBGvmxdnBLgd35agLSA4bkubM.roa (hash: i0iDI6axXMfE17qcVLg1zq6ssI2uwAR7lVjpfhI0sp0=) 5: KXfP7XKNaMn2JhuLJT9dpckmiyA.roa (hash: GS9b0UNjXL4SmRFzEHGDNFVlOx4BK3qOMQxT+UosqWQ=) 6: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl (hash: QnSa/jC5p8elOS09181Gp45ukSkFZNZ4J4U61mhoLQI=) 7: TJ_T11Afazhf3X-XRb_MTGkgqHs.roa (hash: OJh2YQWVoUHD+3A+f2ze8IRJ0craejKYG/dno9c7vf8=) 8: X2zPXDZDw062_b_HvXSPFiahZHE.roa (hash: HHiPpVTX6x6BIWaFkT1eYQ6ttHeAln3bmKcpARZzNPU=) 9: bkHQOuqvDDjiWoZ_FWNlw3OoyWg.roa (hash: 4pB5ThjluE6IXLoMqZ2xaF+3UW/apUpBTyNJgyK3/o0=) 10: dpiwVyP36v1YV2afir9h5xUMcuE.roa (hash: YrE4G5icZyg4bgdRocIY+JMcSadk1tZR0cVr4Ds0EB0=) 11: niNmST2SmytSoAJTruNS-tHKdu4.roa (hash: Z1vFFSTX+BL3qZQrL+37hd524y47cDNsow6wUX0pz+w=) 12: ynd4UkjjokC1Px89Xh64g5Sq-Qg.roa (hash: D2rufQuFpkeqh+ITObE3/x2V+FzHVt2qoNBYBC/ZS4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:26:d7:75:63:2f:c3:b2:3c:64:78:d7:f3:10:73:85:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Sep 8 01:01:18 2025 GMT Not After : Sep 9 01:01:18 2025 GMT Subject: CN=76b38b95092851c84ab1433152cf54e3877f9ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7e:1b:70:6a:6f:10:38:83:e7:f3:26:e5:4e: b3:f0:6d:02:d2:9f:1a:c7:93:3b:50:18:f7:41:fe: 14:f5:9a:de:82:50:fb:c5:90:85:80:a5:f5:b5:16: fa:49:a6:d2:b2:e9:e8:e1:5f:f7:96:e4:fc:6e:9b: 34:b9:a2:5f:fa:f0:39:13:56:5b:4c:41:4f:75:b2: 36:e9:d1:c5:7c:55:9d:01:a2:46:52:c5:e7:e1:9d: ea:af:d8:b9:8e:33:0a:09:8f:3c:f7:2c:22:39:be: 80:d1:29:af:04:e4:df:c3:09:29:18:e0:41:fc:d8: b8:a7:e5:61:3b:67:fd:ce:73:04:38:67:95:1d:92: 48:04:a2:c4:da:ac:60:61:a4:42:76:63:9d:04:cc: b0:bf:98:55:0b:de:00:51:58:3d:f9:4d:f0:77:48: 45:24:bc:84:63:3d:f7:7c:e1:82:a7:61:38:00:8a: 63:ff:3a:7d:6d:e0:c8:98:74:54:d3:85:25:8b:a1: 59:4b:9e:5b:d7:72:cf:a4:84:73:c7:d2:8f:82:47: 2d:ac:6b:aa:75:b4:c7:ad:0a:f2:fa:98:85:19:2f: 99:f3:ec:79:c4:c5:50:e3:80:8c:86:7a:db:e8:69: b2:3b:03:26:c0:11:9d:1c:df:a3:67:d7:b4:c4:ba: 5b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B3:8B:95:09:28:51:C8:4A:B1:43:31:52:CF:54:E3:87:7F:9A:B5 X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:91:66:08:13:7a:88:45:9a:d0:26:ae:22:8e:44:91:37:7f: ab:ee:98:25:14:99:02:50:58:70:66:2b:be:fd:6d:b9:86:34: 25:ff:65:91:c2:61:0d:5d:e1:00:22:6a:22:74:63:17:b9:b2: af:7a:3b:77:d3:f9:f4:c4:b1:d2:4e:6a:ba:35:ff:79:33:1b: 2a:89:cc:57:7b:49:f5:9a:7a:0a:db:98:88:b5:89:e2:f2:07: 8a:32:82:fc:11:35:25:64:44:a4:40:d1:6d:a9:9b:c0:e0:ca: cb:ba:cd:70:db:4d:88:d9:a2:66:d4:23:b5:c5:80:6b:40:8b: 17:cc:b6:3f:ec:5f:20:61:54:40:e1:25:f0:17:b1:3d:08:32: a3:34:db:16:02:70:2d:5b:23:9a:7b:3f:3b:83:00:c2:a3:b4: d0:42:68:75:d9:c0:2e:c5:2c:29:6b:c1:d4:08:9e:98:bd:55: 67:8a:5e:c4:ab:21:b7:89:52:49:b1:78:5f:a2:72:74:5e:38: 95:e2:f0:5c:06:17:c0:65:ca:d2:4c:53:db:e5:41:53:1a:2a: f1:e3:97:f4:14:15:d5:d0:a5:ba:a7:85:bc:81:7f:74:33:2d: 30:a6:83:ec:c2:77:ff:36:d8:3b:f6:80:35:0b:d9:2d:91:c8: 08:89:d3:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkm13VjL8OyPGR41/MQc4UDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjUwOTA4MDEwMTE4WhcNMjUwOTA5MDEwMTE4WjAzMTEwLwYDVQQD Eyg3NmIzOGI5NTA5Mjg1MWM4NGFiMTQzMzE1MmNmNTRlMzg3N2Y5YWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3X4bcGpvEDiD5/Mm5U6z8G0C0p8a x5M7UBj3Qf4U9ZreglD7xZCFgKX1tRb6SabSsuno4V/3luT8bps0uaJf+vA5E1Zb TEFPdbI26dHFfFWdAaJGUsXn4Z3qr9i5jjMKCY889ywiOb6A0SmvBOTfwwkpGOBB /Ni4p+VhO2f9znMEOGeVHZJIBKLE2qxgYaRCdmOdBMywv5hVC94AUVg9+U3wd0hF JLyEYz33fOGCp2E4AIpj/zp9beDImHRU04Uli6FZS55b13LPpIRzx9KPgkctrGuq dbTHrQry+piFGS+Z8+x5xMVQ44CMhnrb6GmyOwMmwBGdHN+jZ9e0xLpb3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHazi5UJKFHISrFDMVLPVOOHf5q1MB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpFmCBN6 iEWa0CauIo5EkTd/q+6YJRSZAlBYcGYrvv1tuYY0Jf9lkcJhDV3hACJqInRjF7my r3o7d9P59MSx0k5qujX/eTMbKonMV3tJ9Zp6CtuYiLWJ4vIHijKC/BE1JWREpEDR bambwODKy7rNcNtNiNmiZtQjtcWAa0CLF8y2P+xfIGFUQOEl8BexPQgyozTbFgJw LVsjmns/O4MAwqO00EJoddnALsUsKWvB1AiemL1VZ4pexKsht4lSSbF4X6JydF44 leLwXAYXwGXK0kxT2+VBUxoq8eOX9BQV1dCluqeFvIF/dDMtMKaD7MJ3/zbYO/aA NQvZLZHICInTkQ== -----END CERTIFICATE-----Generated at Mon Sep 8 08:48:05 2025 by rpki-client