$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft File: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft (raw, json) Hash identifier: W+OqJ1xOTx2iL+RkvFgacBX1McE751MNj2xnB4dMO0A= Subject key identifier: 5E:BF:74:82:3F:EC:5F:74:C4:F7:95:5D:D6:88:DE:CD:A1:B4:69:16 Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 019772641B44C2CA3003407B7731FA8F0FC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft Manifest number: 15A9 Signing time: Sun 15 Jun 2025 07:00:52 +0000 Manifest this update: Sun 15 Jun 2025 07:00:52 +0000 Manifest next update: Mon 16 Jun 2025 07:00:52 +0000 Files and hashes: 1: 5GDtzDxQGf1ytzR86OdYdVfgY10.roa (hash: Y7XPkUc6nkXQ9pggu+D76scK3gfgjCpno0IF9isJJaU=) 2: 8_VofHRjLqpbexG_OvMfcAc1YnM.roa (hash: LU1FpEuXnyVe9W4sDVOna2qpuw6a/LcZ+SoooZ+qS1I=) 3: FLnErLvOpzZbsRT_gxw1xkGyG-k.roa (hash: hVcpYnUD1s1paKRtMc3s9Fba/ywgfiiofSMSn9fncl4=) 4: HIaBGvmxdnBLgd35agLSA4bkubM.roa (hash: i0iDI6axXMfE17qcVLg1zq6ssI2uwAR7lVjpfhI0sp0=) 5: K5S-GMhCBiMRei0pFIoZE2-sYhU.roa (hash: wzDT7UEzahDsDK4FOVIWJPfCpNKqkl6NNn/F0RgFFHk=) 6: KTzVRdJZBa5vUHuUiFITIPL2MxQ.roa (hash: p8lCAiX+p391b10Os5I/j2nT1/wyA7qAGwMc1jacaeM=) 7: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl (hash: zmH1U7rfy0ibE2KL8mCtWgPYhMvdelgjkxjhSMI8Ibk=) 8: TJ_T11Afazhf3X-XRb_MTGkgqHs.roa (hash: OJh2YQWVoUHD+3A+f2ze8IRJ0craejKYG/dno9c7vf8=) 9: bkHQOuqvDDjiWoZ_FWNlw3OoyWg.roa (hash: 4pB5ThjluE6IXLoMqZ2xaF+3UW/apUpBTyNJgyK3/o0=) 10: dpiwVyP36v1YV2afir9h5xUMcuE.roa (hash: YrE4G5icZyg4bgdRocIY+JMcSadk1tZR0cVr4Ds0EB0=) 11: ozpKcTkvogTiNk0JLy7R6dPc_Lk.roa (hash: LyEEbnotUOMaf/OWg9BX+8H62nDNeTS5963pSVF/j/o=) 12: rXRu8y7KH4eVt4pi-qQsVwCZo7M.roa (hash: 6N6EBAkXmbWw8Eh8oVfwa8d3Gv0mmlAZg/yQWNpcYV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 04:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:72:64:1b:44:c2:ca:30:03:40:7b:77:31:fa:8f:0f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Jun 15 07:00:52 2025 GMT Not After : Jun 16 07:00:52 2025 GMT Subject: CN=5ebf74823fec5f74c4f7955dd688decda1b46916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:53:e9:89:04:82:b5:88:c9:6a:9f:54:ab:dc: ae:20:89:05:03:67:55:92:43:77:c7:04:86:0a:4d: 88:71:e5:29:07:07:3e:c5:79:4e:fc:7b:d3:48:b2: 2a:6c:80:a0:b8:04:fc:f0:00:2a:f0:2e:29:c0:36: 4d:ac:36:28:91:11:62:60:86:3f:13:7f:87:84:62: 37:4a:35:0c:f4:23:02:11:27:1d:e7:df:28:04:f4: 21:98:91:ae:b6:df:8d:c8:ab:eb:fd:69:51:bb:46: 60:4f:37:e4:64:73:2f:58:f2:b3:6d:76:11:f1:41: 70:4f:b4:f2:57:e4:0c:d3:93:5e:db:34:17:99:76: 7c:80:45:de:b0:56:99:f5:25:e7:6d:32:69:2e:9d: 9f:bc:86:65:0e:4a:5a:10:50:3e:7a:b3:d0:c5:3f: 7b:01:1a:89:38:56:5a:38:fc:50:02:d2:b3:75:36: 66:9f:f0:49:04:a3:1d:1a:1c:49:25:ec:c6:90:30: 50:6b:e5:8d:53:e5:d2:c8:36:31:3f:f7:a7:4a:91: 2a:9f:b7:9a:37:f8:e4:3c:35:28:a7:ed:00:6e:29: 32:2a:85:64:7f:ca:cb:a6:e1:55:c5:d9:b5:b9:53: 32:7c:cb:f5:c1:1c:d7:09:c8:d9:e5:4c:03:86:ec: 70:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:BF:74:82:3F:EC:5F:74:C4:F7:95:5D:D6:88:DE:CD:A1:B4:69:16 X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e6:71:62:3c:ba:db:a2:2a:e9:23:58:58:4f:ab:7d:18:be: 25:22:b9:0d:1c:10:f2:9e:2b:eb:8a:8f:29:55:73:f0:89:67: 10:68:0a:da:d6:58:ab:b3:05:88:09:c4:3a:22:22:4d:27:58: d1:c0:5f:df:e1:3f:4a:74:2d:1c:2c:7c:7a:14:f9:75:54:b2: 98:01:e8:d0:0e:00:6b:78:a9:94:31:cd:94:d5:c3:48:0a:bc: 66:8a:c5:ee:e1:a5:61:fa:74:6b:38:ba:98:0f:8d:81:e0:9d: 2e:98:77:85:fe:1f:7c:9a:32:5e:80:6c:cf:94:da:01:8d:bc: 52:3e:c5:2a:5d:60:69:94:01:15:c7:03:6f:04:6d:e6:f6:59: 1a:33:35:f7:8e:64:fc:ed:25:e4:e7:46:90:67:49:a2:43:ba: 4e:62:f7:97:09:ae:1b:e4:57:36:71:55:35:5c:93:da:2b:e1: b1:3c:c2:76:e5:c6:4d:ee:ab:e3:21:fa:ae:ca:96:1e:80:41: ad:a0:b1:93:c2:b9:1e:7c:44:b8:95:9f:9d:60:60:ad:77:7b: b9:f1:72:80:3d:cb:e4:17:4d:71:a0:40:f2:6d:da:23:e3:cd: 5b:47:2e:7c:a7:67:ab:a6:90:5d:88:6e:d6:82:4e:c4:70:bc: 3e:de:b8:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdyZBtEwsowA0B7dzH6jw/CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjUwNjE1MDcwMDUyWhcNMjUwNjE2MDcwMDUyWjAzMTEwLwYDVQQD Eyg1ZWJmNzQ4MjNmZWM1Zjc0YzRmNzk1NWRkNjg4ZGVjZGExYjQ2OTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplPpiQSCtYjJap9Uq9yuIIkFA2dV kkN3xwSGCk2IceUpBwc+xXlO/HvTSLIqbICguAT88AAq8C4pwDZNrDYokRFiYIY/ E3+HhGI3SjUM9CMCEScd598oBPQhmJGutt+NyKvr/WlRu0ZgTzfkZHMvWPKzbXYR 8UFwT7TyV+QM05Ne2zQXmXZ8gEXesFaZ9SXnbTJpLp2fvIZlDkpaEFA+erPQxT97 ARqJOFZaOPxQAtKzdTZmn/BJBKMdGhxJJezGkDBQa+WNU+XSyDYxP/enSpEqn7ea N/jkPDUop+0AbikyKoVkf8rLpuFVxdm1uVMyfMv1wRzXCcjZ5UwDhuxwdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6/dII/7F90xPeVXdaI3s2htGkWMB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOZxYjy6 26Iq6SNYWE+rfRi+JSK5DRwQ8p4r64qPKVVz8IlnEGgK2tZYq7MFiAnEOiIiTSdY 0cBf3+E/SnQtHCx8ehT5dVSymAHo0A4Aa3iplDHNlNXDSAq8ZorF7uGlYfp0azi6 mA+NgeCdLph3hf4ffJoyXoBsz5TaAY28Uj7FKl1gaZQBFccDbwRt5vZZGjM1945k /O0l5OdGkGdJokO6TmL3lwmuG+RXNnFVNVyT2ivhsTzCduXGTe6r4yH6rsqWHoBB raCxk8K5HnxEuJWfnWBgrXd7ufFygD3L5BdNcaBA8m3aI+PNW0cufKdnq6aQXYhu 1oJOxHC8Pt64uA== -----END CERTIFICATE-----Generated at Sun Jun 15 09:30:21 2025 by rpki-client