$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft File: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft (raw, json) Hash identifier: lYRak6rLBMSkMFdckMcljXKrO5W6BMKRJfxue6ojLjI= Subject key identifier: 3B:0A:A5:B9:F5:1C:28:48:AB:73:CF:3E:15:67:6A:39:6D:41:5D:E2 Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 019A4E4FA0B1184339D47641C02893D7CB46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft Manifest number: 172A Signing time: Tue 04 Nov 2025 10:00:32 +0000 Manifest this update: Tue 04 Nov 2025 10:00:32 +0000 Manifest next update: Wed 05 Nov 2025 10:00:32 +0000 Files and hashes: 1: 5GDtzDxQGf1ytzR86OdYdVfgY10.roa (hash: Y7XPkUc6nkXQ9pggu+D76scK3gfgjCpno0IF9isJJaU=) 2: 8_VofHRjLqpbexG_OvMfcAc1YnM.roa (hash: LU1FpEuXnyVe9W4sDVOna2qpuw6a/LcZ+SoooZ+qS1I=) 3: FLnErLvOpzZbsRT_gxw1xkGyG-k.roa (hash: hVcpYnUD1s1paKRtMc3s9Fba/ywgfiiofSMSn9fncl4=) 4: HIaBGvmxdnBLgd35agLSA4bkubM.roa (hash: i0iDI6axXMfE17qcVLg1zq6ssI2uwAR7lVjpfhI0sp0=) 5: J4E9AJoPfOLqwulL3ftXL_IB9ag.roa (hash: tCCbubfsbpZEgpLfe3FdJwcnWVmPaXeFvjwGwjVIv9k=) 6: KXfP7XKNaMn2JhuLJT9dpckmiyA.roa (hash: GS9b0UNjXL4SmRFzEHGDNFVlOx4BK3qOMQxT+UosqWQ=) 7: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl (hash: qqDSMSWLKgeUkNnhprRxaWgvLB/VUT77H85FrFAtFNk=) 8: X2zPXDZDw062_b_HvXSPFiahZHE.roa (hash: HHiPpVTX6x6BIWaFkT1eYQ6ttHeAln3bmKcpARZzNPU=) 9: bkHQOuqvDDjiWoZ_FWNlw3OoyWg.roa (hash: 4pB5ThjluE6IXLoMqZ2xaF+3UW/apUpBTyNJgyK3/o0=) 10: dpiwVyP36v1YV2afir9h5xUMcuE.roa (hash: YrE4G5icZyg4bgdRocIY+JMcSadk1tZR0cVr4Ds0EB0=) 11: hUQ9Lp80_RQVHb451vbup9aX2cI.roa (hash: uc+cv5S82pYvWnIGc2+0jaYBhmjGkpnFuroEQ5Pa6bA=) 12: jahgwortntlQHohzLAQ0tN4yHMw.roa (hash: awaLuIiyqPNJzkHQQmDP4aHVUxcrbbrVGi6oXMKNBUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:a0:b1:18:43:39:d4:76:41:c0:28:93:d7:cb:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Nov 4 10:00:32 2025 GMT Not After : Nov 5 10:00:32 2025 GMT Subject: CN=3b0aa5b9f51c2848ab73cf3e15676a396d415de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:61:15:53:f5:49:76:a3:cb:45:41:c6:3b:9f: ea:37:41:97:b0:16:e7:80:52:40:60:44:e8:0f:8a: 34:95:ed:bf:41:28:7b:c3:d4:6c:20:26:d7:76:97: df:ee:14:7d:a9:e3:66:28:a6:73:31:c9:01:50:f0: 18:d6:dd:d2:7a:12:68:4f:e1:89:e9:f0:2a:4a:af: ed:91:1d:fd:92:64:1e:fd:eb:db:fa:cc:b5:09:07: 68:f5:e6:0d:bd:60:a7:33:2c:6f:42:cc:02:c3:3a: d3:14:e4:35:af:cc:82:18:97:08:8c:3b:2d:bb:7e: cf:1b:3e:25:49:12:a2:11:03:ad:e2:04:6b:93:6a: 96:6d:08:52:2b:f3:2d:b5:7b:53:48:ae:92:6a:63: 26:c2:7b:f9:d6:63:2b:99:d6:c8:e8:cc:d5:c9:3e: 56:ae:b6:03:95:06:e8:3b:9a:17:ec:cb:44:a3:06: 3e:da:fe:f5:79:f5:ea:ec:b1:85:58:cf:29:25:41: 02:5b:d5:35:e9:38:d6:31:69:8c:49:71:c3:15:b4: 3a:82:4e:87:65:30:ab:06:ae:64:b9:59:af:47:d9: b3:0e:df:86:17:f0:2d:80:b3:8b:37:9e:cb:16:37: f8:08:a8:ed:53:46:67:da:b7:9a:92:f6:b4:c4:60: 6f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0A:A5:B9:F5:1C:28:48:AB:73:CF:3E:15:67:6A:39:6D:41:5D:E2 X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:6a:a3:e8:ed:40:ce:66:47:6f:c2:3d:9c:01:49:e5:f1:d1: eb:1c:1f:60:5f:45:ce:64:72:c6:f6:05:8c:44:aa:5f:05:9d: c4:c5:11:9e:97:d7:15:65:97:eb:85:5a:6f:e1:04:84:d0:3a: 3a:ea:d0:39:ef:5b:43:cc:ca:3d:42:a4:45:ae:4d:37:dc:c9: 72:fb:37:0d:87:05:af:d6:52:7f:11:69:18:a9:c6:d4:f3:78: f8:2a:c7:b2:ba:6a:ab:ea:1c:46:49:18:69:18:a3:9a:9a:e8: e7:a0:73:5b:89:25:e4:e1:d8:25:93:40:0c:4a:2c:3d:ff:8c: 18:1f:19:73:e7:90:6b:24:19:ca:02:24:65:d1:66:9f:14:ee: ba:c9:f4:31:e6:f9:7d:a1:8e:22:d0:41:70:37:dd:22:b5:9e: 04:2e:c9:bb:ae:85:9a:29:58:d4:aa:b0:42:3e:58:ef:f8:4b: 07:29:f7:80:b0:e8:1e:64:e9:43:97:22:ee:40:ab:ae:6e:ae: 14:eb:91:82:cf:34:d2:0b:5b:7e:fe:3a:e5:e7:9b:c9:ea:82: d2:f7:08:8d:95:8d:4c:a7:5c:c9:a6:68:8f:44:dd:72:45:f3: 63:89:8b:d3:65:d5:f8:6b:15:11:c2:33:36:bc:d2:e9:dc:d2: 60:24:af:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT6CxGEM51HZBwCiT18tGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjUxMTA0MTAwMDMyWhcNMjUxMTA1MTAwMDMyWjAzMTEwLwYDVQQD EygzYjBhYTViOWY1MWMyODQ4YWI3M2NmM2UxNTY3NmEzOTZkNDE1ZGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmEVU/VJdqPLRUHGO5/qN0GXsBbn gFJAYEToD4o0le2/QSh7w9RsICbXdpff7hR9qeNmKKZzMckBUPAY1t3SehJoT+GJ 6fAqSq/tkR39kmQe/evb+sy1CQdo9eYNvWCnMyxvQswCwzrTFOQ1r8yCGJcIjDst u37PGz4lSRKiEQOt4gRrk2qWbQhSK/MttXtTSK6SamMmwnv51mMrmdbI6MzVyT5W rrYDlQboO5oX7MtEowY+2v71efXq7LGFWM8pJUECW9U16TjWMWmMSXHDFbQ6gk6H ZTCrBq5kuVmvR9mzDt+GF/AtgLOLN57LFjf4CKjtU0Zn2reakva0xGBv6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsKpbn1HChIq3PPPhVnajltQV3iMB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2qj6O1A zmZHb8I9nAFJ5fHR6xwfYF9FzmRyxvYFjESqXwWdxMURnpfXFWWX64Vab+EEhNA6 OurQOe9bQ8zKPUKkRa5NN9zJcvs3DYcFr9ZSfxFpGKnG1PN4+CrHsrpqq+ocRkkY aRijmpro56BzW4kl5OHYJZNADEosPf+MGB8Zc+eQayQZygIkZdFmnxTuusn0Meb5 faGOItBBcDfdIrWeBC7Ju66FmilY1KqwQj5Y7/hLByn3gLDoHmTpQ5ci7kCrrm6u FOuRgs800gtbfv465eebyeqC0vcIjZWNTKdcyaZoj0TdckXzY4mL02XV+GsVEcIz NrzS6dzSYCSvRg== -----END CERTIFICATE-----Generated at Tue Nov 4 18:06:29 2025 by rpki-client