$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft File: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft (raw, json) Hash identifier: 6uVHWxd0ACVR2g6x3zW8nWXBeYc6/p3rCg230IDzdQM= Subject key identifier: 5A:B4:AE:EB:8E:21:EC:FC:6B:A7:AB:DA:6E:81:3F:E9:00:00:D5:7B Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 0197301728F173E057C673586D8B5955BCC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft Manifest number: 1586 Signing time: Mon 02 Jun 2025 10:01:53 +0000 Manifest this update: Mon 02 Jun 2025 10:01:53 +0000 Manifest next update: Tue 03 Jun 2025 10:01:53 +0000 Files and hashes: 1: 5GDtzDxQGf1ytzR86OdYdVfgY10.roa (hash: Y7XPkUc6nkXQ9pggu+D76scK3gfgjCpno0IF9isJJaU=) 2: 8_VofHRjLqpbexG_OvMfcAc1YnM.roa (hash: LU1FpEuXnyVe9W4sDVOna2qpuw6a/LcZ+SoooZ+qS1I=) 3: FLnErLvOpzZbsRT_gxw1xkGyG-k.roa (hash: hVcpYnUD1s1paKRtMc3s9Fba/ywgfiiofSMSn9fncl4=) 4: HIaBGvmxdnBLgd35agLSA4bkubM.roa (hash: i0iDI6axXMfE17qcVLg1zq6ssI2uwAR7lVjpfhI0sp0=) 5: K5S-GMhCBiMRei0pFIoZE2-sYhU.roa (hash: wzDT7UEzahDsDK4FOVIWJPfCpNKqkl6NNn/F0RgFFHk=) 6: KTzVRdJZBa5vUHuUiFITIPL2MxQ.roa (hash: p8lCAiX+p391b10Os5I/j2nT1/wyA7qAGwMc1jacaeM=) 7: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl (hash: 1i6xBrpgwkrOfamcejWpcqZjn6I9UAnlil8u6vTBNCk=) 8: Q6-WS-Ogl2BUfXGzTcnn86zggbg.roa (hash: Z4T7mng2RyFpB2LdTZShIdwvER7o+X1yPzGLQ8F0zLc=) 9: TJ_T11Afazhf3X-XRb_MTGkgqHs.roa (hash: OJh2YQWVoUHD+3A+f2ze8IRJ0craejKYG/dno9c7vf8=) 10: dpiwVyP36v1YV2afir9h5xUMcuE.roa (hash: YrE4G5icZyg4bgdRocIY+JMcSadk1tZR0cVr4Ds0EB0=) 11: rXRu8y7KH4eVt4pi-qQsVwCZo7M.roa (hash: 6N6EBAkXmbWw8Eh8oVfwa8d3Gv0mmlAZg/yQWNpcYV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 10:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:30:17:28:f1:73:e0:57:c6:73:58:6d:8b:59:55:bc:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Jun 2 10:01:53 2025 GMT Not After : Jun 3 10:01:53 2025 GMT Subject: CN=5ab4aeeb8e21ecfc6ba7abda6e813fe90000d57b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cf:06:de:c1:0e:00:a7:89:d1:5c:e0:8d:1c: 8b:c7:a0:c6:30:16:92:e8:07:23:cd:d0:69:10:1e: 8d:29:58:8d:ba:4c:4f:4f:c0:25:f7:04:47:48:cd: a5:0d:2f:f5:4d:5f:b7:94:ab:40:28:82:ef:ec:98: 8a:1e:3b:97:c2:97:8c:13:47:61:27:c2:28:66:13: 8c:7c:97:a3:74:71:d0:38:4c:ee:f1:ef:d7:55:55: da:86:c6:92:c4:af:6d:c2:79:2c:4e:81:10:93:78: d2:be:d1:06:5d:f5:4f:22:05:ab:ee:28:c4:a2:76: 45:0f:6c:6c:52:49:4b:ae:37:55:a8:d3:17:a5:15: 1c:19:da:53:53:fd:e3:3a:60:33:7f:b0:1d:94:d2: 95:7e:b9:9b:92:15:ad:3f:15:2a:26:6d:d8:2f:a4: 5a:f7:70:19:b5:30:a7:79:98:3e:dc:f9:90:c8:dd: 0b:2b:c2:b6:ad:62:4c:6a:8a:0f:71:5b:a0:2d:d0: 03:34:7f:e3:ac:66:28:b4:cf:52:5c:a8:33:60:ac: 2f:b2:91:79:9b:31:3d:0d:0c:27:56:bb:93:aa:1a: 0a:0a:7f:53:d8:9d:d3:25:3e:22:5a:5b:46:ca:5e: fb:84:8c:0d:51:8b:4c:2e:e5:6f:d9:0c:ea:f3:81: 03:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B4:AE:EB:8E:21:EC:FC:6B:A7:AB:DA:6E:81:3F:E9:00:00:D5:7B X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:05:60:61:3c:24:2f:58:05:1c:00:47:9c:9e:61:6b:41:98: 3d:9b:5e:fc:ce:e2:35:54:c0:32:1f:4a:68:d9:48:8a:34:60: 6a:8e:21:71:4b:2b:bf:05:95:e0:80:6f:1a:7b:1c:61:f8:5b: c0:a2:0e:04:20:7f:b4:9e:ba:ea:a7:27:0b:df:76:72:0f:40: e8:99:ac:5c:8a:63:95:d7:a7:a6:3b:63:b7:13:e0:bc:45:8a: 31:4f:d3:b5:f6:63:15:ca:fd:45:44:fe:e6:44:ff:a5:86:a4: cb:e7:1b:e3:40:8b:fd:df:f6:b9:e9:41:f4:d7:96:02:82:e9: 51:b3:98:36:1b:8c:8a:b0:03:57:b3:f6:76:18:78:6a:25:22: d7:a0:43:f7:b9:0e:86:ca:8b:da:43:ab:da:b5:15:b8:b9:07: a7:87:2e:5f:08:8a:3d:09:d3:02:c9:7f:e1:93:ef:d8:84:2e: 6b:40:17:c6:1f:a8:b7:3e:30:f1:19:ea:8d:a3:06:3b:e4:59: 90:48:b0:08:8f:45:29:fa:54:8f:ab:fd:3a:b4:cb:73:25:c3: d4:39:a9:fa:22:2e:9c:db:19:7d:52:72:8a:9a:39:de:dd:60: 4c:f9:63:ea:64:62:04:ff:4c:18:e3:1b:be:9b:c2:1c:89:a4: b7:d9:41:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZcwFyjxc+BXxnNYbYtZVbzFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjUwNjAyMTAwMTUzWhcNMjUwNjAzMTAwMTUzWjAzMTEwLwYDVQQD Eyg1YWI0YWVlYjhlMjFlY2ZjNmJhN2FiZGE2ZTgxM2ZlOTAwMDBkNTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic8G3sEOAKeJ0VzgjRyLx6DGMBaS 6AcjzdBpEB6NKViNukxPT8Al9wRHSM2lDS/1TV+3lKtAKILv7JiKHjuXwpeME0dh J8IoZhOMfJejdHHQOEzu8e/XVVXahsaSxK9twnksToEQk3jSvtEGXfVPIgWr7ijE onZFD2xsUklLrjdVqNMXpRUcGdpTU/3jOmAzf7AdlNKVfrmbkhWtPxUqJm3YL6Ra 93AZtTCneZg+3PmQyN0LK8K2rWJMaooPcVugLdADNH/jrGYotM9SXKgzYKwvspF5 mzE9DQwnVruTqhoKCn9T2J3TJT4iWltGyl77hIwNUYtMLuVv2Qzq84EDAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFq0ruuOIez8a6er2m6BP+kAANV7MB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggVgYTwk L1gFHABHnJ5ha0GYPZte/M7iNVTAMh9KaNlIijRgao4hcUsrvwWV4IBvGnscYfhb wKIOBCB/tJ666qcnC992cg9A6JmsXIpjldenpjtjtxPgvEWKMU/TtfZjFcr9RUT+ 5kT/pYaky+cb40CL/d/2uelB9NeWAoLpUbOYNhuMirADV7P2dhh4aiUi16BD97kO hsqL2kOr2rUVuLkHp4cuXwiKPQnTAsl/4ZPv2IQua0AXxh+otz4w8RnqjaMGO+RZ kEiwCI9FKfpUj6v9OrTLcyXD1Dmp+iIunNsZfVJyipo53t1gTPlj6mRiBP9MGOMb vpvCHImkt9lBqg== -----END CERTIFICATE-----Generated at Mon Jun 2 17:02:35 2025 by rpki-client