$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft File: B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json) Hash identifier: m5TnOyzWzuf7WRBIc265EXu5I/z0GaI3Y8rmqp4JE4U= Subject key identifier: CC:08:17:42:48:46:5D:02:68:EF:36:C8:81:2D:A8:D4:ED:EA:E4:5F Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 Certificate issuer: /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Certificate serial: 4548FC144D9A9AE216E3F32880E7540DC65B0DE9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft Manifest number: 019A Signing time: Sat 10 May 2025 09:43:18 +0000 Manifest this update: Sat 10 May 2025 09:38:16 +0000 Manifest next update: Sun 11 May 2025 10:11:16 +0000 Files and hashes: 1: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: 1GbcHccR0qrRnppaVrIADnqlOOEe/j64UrxuiomGG2o=) 2: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: 9y00w6cwXJQxOVcC+hWes6m35jsrIAutWCWZ9sJrWuQ=) 3: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: aKD10W9FnIZ+idlKzBapwVpT2mVgYlaFcXuD6MlHPm8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:48:fc:14:4d:9a:9a:e2:16:e3:f3:28:80:e7:54:0d:c6:5b:0d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Validity Not Before: May 10 09:38:16 2025 GMT Not After : May 11 10:11:16 2025 GMT Subject: CN=CC08174248465D0268EF36C8812DA8D4EDEAE45F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:0b:56:61:67:25:07:f5:aa:32:f1:9f:bb:76: fa:ee:af:06:5c:11:84:40:cd:9f:93:a2:2a:57:b9: eb:82:83:60:81:7f:a8:e2:1d:07:47:28:08:78:84: 95:cd:a7:1f:11:c2:f1:ac:99:7f:a5:a3:51:f1:95: eb:18:a7:f6:fb:45:64:72:6b:3e:8f:6f:c3:5b:64: d4:a2:46:89:71:b1:cb:3f:ca:95:46:d9:34:8b:a6: f5:e5:73:95:2f:6b:e2:87:93:b3:81:7d:cb:1c:0e: 4a:36:a2:bf:69:e1:a8:2e:8c:44:38:1c:4a:e8:2a: 39:64:49:21:f6:85:93:ee:cb:c8:a8:67:ad:c3:79: 0b:95:88:59:ff:23:14:35:c0:47:ee:a3:cd:ef:07: 02:3a:9d:99:d2:fd:35:6a:af:65:7a:05:2e:17:39: 10:9a:e4:87:5f:b7:65:6b:61:8b:49:19:b8:28:0a: ba:7e:4a:30:02:5c:d0:e3:26:d0:df:02:fd:4c:0e: 29:3d:19:b8:fc:82:47:bb:e6:59:a9:9c:b7:03:60: b9:2c:47:92:21:11:f7:49:14:70:47:f1:1c:ea:57: c9:fa:90:eb:25:e3:9c:03:23:23:87:72:a4:23:73: b6:61:89:1b:84:72:26:73:43:dd:9b:86:fd:a4:c2: 56:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:08:17:42:48:46:5D:02:68:EF:36:C8:81:2D:A8:D4:ED:EA:E4:5F X509v3 Authority Key Identifier: keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:df:6a:f4:92:ec:e6:49:9d:02:11:2f:b9:e6:38:42:bd:e4: 86:0a:ca:cc:df:84:b6:92:11:75:aa:fa:94:24:2e:7d:ec:e3: 18:ae:41:67:90:c7:7c:67:22:e5:a6:86:0f:d2:13:77:9d:a0: 2a:82:50:b2:ef:68:8e:8b:9c:34:9d:fb:da:54:d3:2d:4a:92: 66:7a:e8:c2:eb:eb:86:77:19:88:aa:93:a3:96:7b:7b:a3:a1: e8:74:e1:86:a7:b8:59:9f:29:af:eb:f5:57:29:1a:5e:a0:b7: 75:5b:c9:7a:75:c6:04:af:d9:7b:91:b3:92:93:0d:09:37:93: e1:4c:b9:40:d5:d3:ec:76:fc:6a:85:a7:6c:4d:c5:86:5c:3c: ee:56:85:9d:a5:06:8c:e0:7b:20:2d:e0:41:0e:f8:44:55:e3: 8b:2c:79:ec:c8:4e:03:2c:fd:d2:ea:c0:4a:e7:50:a8:c0:d9: 77:e1:ba:e7:b2:9e:7e:0f:0e:1f:98:46:cc:81:ba:be:1a:45: 57:ed:71:5b:9b:30:5a:c4:13:b7:cc:80:68:ce:e1:b4:78:a5: 78:fd:d7:a1:ff:29:28:15:81:01:55:d3:8b:0a:8c:74:c1:d1: 00:a4:85:4d:c0:f5:21:ad:ff:3e:51:cd:db:f1:d9:12:d8:87: 7b:13:8c:22 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIURUj8FE2amuIW4/MogOdUDcZbDekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG MjFFMDUxODAeFw0yNTA1MTAwOTM4MTZaFw0yNTA1MTExMDExMTZaMDMxMTAvBgNV BAMTKENDMDgxNzQyNDg0NjVEMDI2OEVGMzZDODgxMkRBOEQ0RURFQUU0NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6C1ZhZyUH9aoy8Z+7dvrurwZc EYRAzZ+ToipXueuCg2CBf6jiHQdHKAh4hJXNpx8RwvGsmX+lo1HxlesYp/b7RWRy az6Pb8NbZNSiRolxscs/ypVG2TSLpvXlc5Uva+KHk7OBfcscDko2or9p4agujEQ4 HEroKjlkSSH2hZPuy8ioZ63DeQuViFn/IxQ1wEfuo83vBwI6nZnS/TVqr2V6BS4X ORCa5Idft2VrYYtJGbgoCrp+SjACXNDjJtDfAv1MDik9Gbj8gke75lmpnLcDYLks R5IhEfdJFHBH8RzqV8n6kOsl45wDIyOHcqQjc7ZhiRuEciZzQ92bhv2kwlYxAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUzAgXQkhGXQJo7zbIgS2o1O3q5F8wHwYDVR0j BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD OEYyMUUwNTE4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzBhNDYz N2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAvQjg4QTk0RENBMDlFM0E2NTND MDZGNDc4NDM0REM3QzhGMjFFMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADrfavSS7OZJnQIRL7nm OEK95IYKyszfhLaSEXWq+pQkLn3s4xiuQWeQx3xnIuWmhg/SE3edoCqCULLvaI6L nDSd+9pU0y1KkmZ66MLr64Z3GYiqk6OWe3ujoeh04YanuFmfKa/r9VcpGl6gt3Vb yXp1xgSv2XuRs5KTDQk3k+FMuUDV0+x2/GqFp2xNxYZcPO5WhZ2lBozgeyAt4EEO +ERV44sseezITgMs/dLqwErnUKjA2Xfhuueynn4PDh+YRsyBur4aRVftcVubMFrE E7fMgGjO4bR4pXj916H/KSgVgQFV04sKjHTB0QCkhU3A9SGt/z5Rzdvx2RLYh3sT jCI= -----END CERTIFICATE-----Generated at Sat May 10 12:19:22 2025 by rpki-client