$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft File: B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json) Hash identifier: FtygpSDg4qstdSep6OC1Amyn7CfVAeCOPsyys2rh3WQ= Subject key identifier: 91:1E:E0:29:5C:64:EA:3B:08:E9:5A:6B:F4:17:6B:77:82:C6:57:7A Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77 Certificate issuer: /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777 Certificate serial: 429179A3C054D8751A0B5E090BFC4E7195D73D53 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft Manifest number: 01DD Signing time: Sat 28 Jun 2025 23:50:59 +0000 Manifest this update: Sat 28 Jun 2025 23:45:59 +0000 Manifest next update: Mon 30 Jun 2025 03:32:59 +0000 Files and hashes: 1: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: EW5/06fyUFrp/ReZj4s8Fiepw+V9emAoPTcjIjeVUJw=) 2: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: MlubGqxKcu9/AdY4j4/cMK0ZlCKeMWkqNbhfRk1N6mE=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 18:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:91:79:a3:c0:54:d8:75:1a:0b:5e:09:0b:fc:4e:71:95:d7:3d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777 Validity Not Before: Jun 28 23:45:59 2025 GMT Not After : Jun 30 03:32:59 2025 GMT Subject: CN=911EE0295C64EA3B08E95A6BF4176B7782C6577A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c2:81:56:cd:11:4d:84:e8:34:4a:e7:72:3c: da:e3:19:bb:67:af:1c:51:1c:46:2d:06:e4:66:d5: c5:ea:40:25:dc:83:34:b0:70:3d:85:38:09:d1:d8: c3:11:cc:88:c8:bd:0a:b2:c9:87:68:ae:d8:b5:c5: c8:00:bd:8d:fd:96:7a:6e:84:92:4b:f2:52:89:b8: b6:55:0e:58:f5:36:1d:f4:ed:f8:b3:39:68:73:33: 1b:c9:26:41:af:c0:6a:34:94:cf:f8:15:07:6c:21: c5:53:a2:d6:70:dd:09:ee:47:52:65:f3:6e:ea:1c: 02:fc:5b:0d:a7:e3:50:7b:53:10:48:c6:3e:f2:61: 1d:4b:2b:35:a1:c0:73:b6:63:b5:c0:49:f5:05:9d: 9a:20:5b:f1:d8:81:20:5e:1e:62:b7:19:29:03:1d: ae:28:5e:7a:28:bd:70:e1:64:5b:ec:2d:22:98:4f: e9:6a:34:63:57:ae:d3:37:af:26:4b:2a:71:2e:16: 15:e6:89:e7:bb:13:3d:f3:02:9c:3e:f2:5e:4d:2c: cf:ed:85:5d:39:37:77:41:ea:0a:e4:10:8e:d8:bc: 60:86:d6:be:4c:1a:3e:cd:30:42:23:aa:d7:e3:fe: e9:c0:60:12:2f:eb:1e:8f:ac:d4:78:41:11:71:15: ae:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1E:E0:29:5C:64:EA:3B:08:E9:5A:6B:F4:17:6B:77:82:C6:57:7A X509v3 Authority Key Identifier: keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:af:4f:25:ab:33:b3:e1:33:0d:54:83:0e:0b:ab:fe:b8:30: 27:16:dd:a7:62:6e:a7:52:f3:0a:71:37:19:18:8f:4c:56:f4: 4d:ff:97:11:70:ce:4c:4a:d5:ae:aa:40:c6:06:a8:78:cd:3c: 5b:a5:81:75:e3:45:01:9c:b1:91:63:30:95:56:78:31:ad:ef: c9:86:19:f7:44:53:73:52:fb:6f:12:59:2a:5b:04:79:d8:e7: 9d:d5:f5:08:73:29:17:3e:15:23:19:95:bc:4a:0e:88:46:48: 2c:e0:7b:0e:e8:a9:ac:73:5f:d6:76:1a:24:3f:c0:9e:0b:4c: 42:12:34:bc:38:7d:aa:e5:34:93:78:d5:d2:90:77:92:64:66: df:96:85:d2:c8:a0:10:bb:3e:60:53:d3:04:3b:56:0a:27:7d: 9f:1b:33:e0:ec:a3:33:8d:fc:6b:73:db:d4:26:78:7f:f8:20: 78:32:49:65:dc:32:05:5c:ac:de:c4:b1:d5:2b:2b:f7:48:56: cf:d5:69:24:c2:d9:db:61:64:b0:1a:af:6d:80:ba:f8:56:5d: 9f:fa:dc:c7:fb:92:91:8f:f3:0b:e1:de:09:11:71:c1:86:4f: 7a:45:bf:3e:cb:25:19:bd:7c:1c:c8:6d:c5:a5:82:02:69:76: 9e:cd:75:59 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUQpF5o8BU2HUaC14JC/xOcZXXPVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RE RUEwODc3NzAeFw0yNTA2MjgyMzQ1NTlaFw0yNTA2MzAwMzMyNTlaMDMxMTAvBgNV BAMTKDkxMUVFMDI5NUM2NEVBM0IwOEU5NUE2QkY0MTc2Qjc3ODJDNjU3N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpwoFWzRFNhOg0SudyPNrjGbtn rxxRHEYtBuRm1cXqQCXcgzSwcD2FOAnR2MMRzIjIvQqyyYdorti1xcgAvY39lnpu hJJL8lKJuLZVDlj1Nh307fizOWhzMxvJJkGvwGo0lM/4FQdsIcVTotZw3QnuR1Jl 827qHAL8Ww2n41B7UxBIxj7yYR1LKzWhwHO2Y7XASfUFnZogW/HYgSBeHmK3GSkD Ha4oXnoovXDhZFvsLSKYT+lqNGNXrtM3ryZLKnEuFhXmiee7Ez3zApw+8l5NLM/t hV05N3dB6grkEI7YvGCG1r5MGj7NMEIjqtfj/unAYBIv6x6PrNR4QRFxFa7DAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUkR7gKVxk6jsI6Vpr9Bdrd4LGV3owHwYDVR0j BBgwFoAUuCIqhFwM3Fno02muI+EWzd6gh3cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzA5ODBlMjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAv QjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODIyMkE4NDVDMENEQzU5RThEMzY5QUUyM0UxMTZD RERFQTA4Nzc3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzA5ODBl MjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAvQjgyMjJBODQ1QzBDREM1OUU4 RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADOvTyWrM7PhMw1Ugw4L q/64MCcW3adibqdS8wpxNxkYj0xW9E3/lxFwzkxK1a6qQMYGqHjNPFulgXXjRQGc sZFjMJVWeDGt78mGGfdEU3NS+28SWSpbBHnY553V9QhzKRc+FSMZlbxKDohGSCzg ew7oqaxzX9Z2GiQ/wJ4LTEISNLw4farlNJN41dKQd5JkZt+WhdLIoBC7PmBT0wQ7 VgonfZ8bM+DsozON/Gtz29QmeH/4IHgySWXcMgVcrN7EsdUrK/dIVs/VaSTC2dth ZLAar22AuvhWXZ/63Mf7kpGP8wvh3gkRccGGT3pFvz7LJRm9fBzIbcWlggJpdp7N dVk= -----END CERTIFICATE-----Generated at Sun Jun 29 10:36:17 2025 by rpki-client