$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft File: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft (raw, json) Hash identifier: JIPgM9wZsYsARo+AFiApzbAkWyXb8qRchq2G8BQ0EzQ= Subject key identifier: F7:4F:8E:37:8F:58:11:DE:C7:B1:E9:43:18:10:09:B4:D9:FD:0D:64 Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 019A28F9CDE47EFC9335D8C89CED3909A4BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft Manifest number: 1716 Signing time: Tue 28 Oct 2025 04:00:51 +0000 Manifest this update: Tue 28 Oct 2025 04:00:51 +0000 Manifest next update: Wed 29 Oct 2025 04:00:51 +0000 Files and hashes: 1: 5GDtzDxQGf1ytzR86OdYdVfgY10.roa (hash: Y7XPkUc6nkXQ9pggu+D76scK3gfgjCpno0IF9isJJaU=) 2: 8_VofHRjLqpbexG_OvMfcAc1YnM.roa (hash: LU1FpEuXnyVe9W4sDVOna2qpuw6a/LcZ+SoooZ+qS1I=) 3: FLnErLvOpzZbsRT_gxw1xkGyG-k.roa (hash: hVcpYnUD1s1paKRtMc3s9Fba/ywgfiiofSMSn9fncl4=) 4: HIaBGvmxdnBLgd35agLSA4bkubM.roa (hash: i0iDI6axXMfE17qcVLg1zq6ssI2uwAR7lVjpfhI0sp0=) 5: KXfP7XKNaMn2JhuLJT9dpckmiyA.roa (hash: GS9b0UNjXL4SmRFzEHGDNFVlOx4BK3qOMQxT+UosqWQ=) 6: K_nThvB1QPa-NFO1MbnkStYXpDE.roa (hash: bCk5SP6F3IPvXuHnQeP0koJlhnPuxSRpq2HC4wbee3g=) 7: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl (hash: o5H2+BRBSnM8nZEyDg8KYWKluieFGLF2nPE/gwp1sRs=) 8: X2zPXDZDw062_b_HvXSPFiahZHE.roa (hash: HHiPpVTX6x6BIWaFkT1eYQ6ttHeAln3bmKcpARZzNPU=) 9: bkHQOuqvDDjiWoZ_FWNlw3OoyWg.roa (hash: 4pB5ThjluE6IXLoMqZ2xaF+3UW/apUpBTyNJgyK3/o0=) 10: dpiwVyP36v1YV2afir9h5xUMcuE.roa (hash: YrE4G5icZyg4bgdRocIY+JMcSadk1tZR0cVr4Ds0EB0=) 11: jahgwortntlQHohzLAQ0tN4yHMw.roa (hash: awaLuIiyqPNJzkHQQmDP4aHVUxcrbbrVGi6oXMKNBUI=) 12: lRDNNZCwk7wDe_H4Q4TIuNXHJ6U.roa (hash: Wr1LVv/CBNJaedzrWmalGhXhHfFCafMvAh8UXIMoPcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 04:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:28:f9:cd:e4:7e:fc:93:35:d8:c8:9c:ed:39:09:a4:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Oct 28 04:00:51 2025 GMT Not After : Oct 29 04:00:51 2025 GMT Subject: CN=f74f8e378f5811dec7b1e943181009b4d9fd0d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:c4:45:cd:15:71:4e:da:8d:f4:da:35:b9: 85:fe:72:52:f8:53:f9:fe:49:6e:ae:ab:70:5f:30: a6:4c:84:46:ad:d0:a8:f1:5a:4f:92:f8:75:37:b8: f9:88:7b:70:2d:6f:3c:44:ea:3e:04:c3:6d:88:57: 44:7c:27:26:1a:58:d3:67:30:04:20:81:ea:30:9d: 0e:b7:96:18:72:21:86:a0:56:8d:4a:6e:d5:de:d1: 43:15:5a:80:5c:96:00:34:ed:b5:ec:97:7f:a7:f4: de:b6:bf:09:71:28:d8:93:77:11:06:a4:f5:6f:3e: 77:61:5d:39:2c:40:8e:e9:12:92:94:f5:48:96:50: 39:21:a6:20:7f:d3:b4:7e:42:6b:5c:74:25:b3:05: 9b:b6:10:4c:b0:bc:c4:fc:17:9e:fd:41:3d:25:ef: 50:ec:8c:4a:a8:92:c2:45:56:36:c2:82:05:67:67: 1c:e9:bf:d8:5a:ce:24:fb:17:60:6e:8a:80:44:a7: e7:34:fc:14:49:4e:83:c7:1f:7a:b8:29:04:38:1d: f8:ea:48:5e:84:be:f0:4f:50:10:06:60:cc:1e:86: 55:f9:4f:be:cf:1d:fa:8c:13:f3:11:18:11:2f:11: 71:8f:03:ad:84:b9:e6:54:ec:dc:70:df:55:2d:50: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:4F:8E:37:8F:58:11:DE:C7:B1:E9:43:18:10:09:B4:D9:FD:0D:64 X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:94:2e:c2:ec:56:90:8e:a8:b0:e8:b5:6f:bb:8e:2f:5c:f9: 91:0c:2a:bd:26:3c:c4:03:3f:7f:84:8d:27:0d:37:55:5a:e8: 1d:3f:59:48:ab:f3:16:20:56:6c:61:c0:14:2a:3e:7b:2f:75: 39:1a:53:56:6f:0d:38:97:9f:14:22:99:6f:85:59:dd:8e:0a: 5f:2a:40:bd:d3:7e:cd:c5:a6:7b:02:3a:67:49:4a:b0:c5:f7: db:42:a4:ba:b8:9c:58:51:54:d7:17:b3:3c:78:84:e1:15:bf: 8b:06:55:cc:cc:b0:85:15:21:65:9b:4e:35:26:64:c2:02:48: 3e:ba:0f:5a:1d:40:73:e3:81:17:0b:b2:97:33:2c:e6:ca:62: d7:81:03:c3:13:b0:79:87:82:93:4e:c7:e1:0a:d1:fa:3b:b9: 1e:f9:cd:e1:41:24:e3:9d:c3:fb:5f:46:42:84:43:51:67:37: 6b:69:2f:00:2d:be:c4:65:12:57:57:6e:f3:ef:10:28:53:20: 18:ff:5e:e8:57:e0:f0:04:c5:8d:3b:4b:a5:a0:86:45:d2:92: 10:17:33:07:cf:9d:ee:33:ac:75:e1:2c:56:c4:39:a0:05:8a: e9:0f:54:d6:8b:f7:8a:13:84:02:dc:16:06:d2:ec:22:2a:31: b5:4a:ab:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoo+c3kfvyTNdjInO05CaS8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjUxMDI4MDQwMDUxWhcNMjUxMDI5MDQwMDUxWjAzMTEwLwYDVQQD EyhmNzRmOGUzNzhmNTgxMWRlYzdiMWU5NDMxODEwMDliNGQ5ZmQwZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbfERc0VcU7ajfTaNbmF/nJS+FP5 /klurqtwXzCmTIRGrdCo8VpPkvh1N7j5iHtwLW88ROo+BMNtiFdEfCcmGljTZzAE IIHqMJ0Ot5YYciGGoFaNSm7V3tFDFVqAXJYANO217Jd/p/Tetr8JcSjYk3cRBqT1 bz53YV05LECO6RKSlPVIllA5IaYgf9O0fkJrXHQlswWbthBMsLzE/Bee/UE9Je9Q 7IxKqJLCRVY2woIFZ2cc6b/YWs4k+xdgboqARKfnNPwUSU6Dxx96uCkEOB346khe hL7wT1AQBmDMHoZV+U++zx36jBPzERgRLxFxjwOthLnmVOzccN9VLVAj+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdPjjePWBHex7HpQxgQCbTZ/Q1kMB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZQuwuxW kI6osOi1b7uOL1z5kQwqvSY8xAM/f4SNJw03VVroHT9ZSKvzFiBWbGHAFCo+ey91 ORpTVm8NOJefFCKZb4VZ3Y4KXypAvdN+zcWmewI6Z0lKsMX320KkuricWFFU1xez PHiE4RW/iwZVzMywhRUhZZtONSZkwgJIProPWh1Ac+OBFwuylzMs5spi14EDwxOw eYeCk07H4QrR+ju5HvnN4UEk453D+19GQoRDUWc3a2kvAC2+xGUSV1du8+8QKFMg GP9e6Ffg8ATFjTtLpaCGRdKSEBczB8+d7jOsdeEsVsQ5oAWK6Q9U1ov3ihOEAtwW BtLsIioxtUqriw== -----END CERTIFICATE-----Generated at Tue Oct 28 13:43:17 2025 by rpki-client