$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json) Hash identifier: oMcdec8+ED6oPV5bcaGFYWsWhiC5hll2yoH5cdEHER8= Subject key identifier: 82:85:92:AF:53:A4:33:01:07:05:91:6C:4D:E2:0D:AE:99:07:26:4C Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Certificate serial: 415DA28562A044E72556D9C119ACAB0895737458 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft Manifest number: BB Signing time: Thu 08 May 2025 22:52:08 +0000 Manifest this update: Thu 08 May 2025 22:47:05 +0000 Manifest next update: Fri 09 May 2025 22:58:05 +0000 Files and hashes: 1: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: iRjGhm9MAYijKikuNXa9CZKLfnQlB6md5E2iJLdE/iQ=) 2: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: O0Msii+MUMCiTYl036PONJscBagcUxYfA1lzBT477uE=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 21:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5d:a2:85:62:a0:44:e7:25:56:d9:c1:19:ac:ab:08:95:73:74:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Validity Not Before: May 8 22:47:05 2025 GMT Not After : May 9 22:58:05 2025 GMT Subject: CN=828592AF53A433010705916C4DE20DAE9907264C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:ea:a1:ff:e1:58:1c:fb:24:e1:3d:f6:95: a4:e7:98:0b:d3:b1:3a:c1:94:2b:ef:7d:ee:32:74: 51:07:0c:db:7b:01:6c:f8:ee:5f:91:de:cf:85:46: 30:11:6e:86:87:8c:69:16:a0:b2:64:4b:92:0f:53: cf:ae:9f:fa:69:f7:38:83:22:ef:8c:ed:21:b8:4c: 2a:d3:f5:c3:86:c0:69:fd:ec:4e:51:5b:a7:00:e8: 01:0b:1c:77:91:cb:12:ca:1b:16:b3:4e:38:56:98: 8b:44:d3:17:23:c6:49:c6:ef:54:b0:c3:60:ba:58: c1:c6:9d:b5:6d:3d:82:13:a2:8c:b1:21:0e:4d:16: c6:e9:a1:63:5f:5c:ee:39:06:fb:15:3b:73:fe:9f: bb:22:df:37:19:41:ab:83:3e:63:b1:56:24:12:90: ae:2b:91:c6:a2:4c:69:b1:90:39:ec:b1:68:18:52: b3:3b:eb:e7:ff:1f:cc:a4:eb:c3:d1:bc:b4:3c:e3: 26:7a:89:ed:60:43:c2:18:02:36:da:3c:4e:55:64: 75:6f:48:22:da:a8:a8:ba:e5:a9:95:fc:ee:c2:1e: 8a:c6:c5:3a:99:ab:26:04:a4:1d:19:27:a6:d5:ca: 67:d9:8a:77:2a:fa:0a:81:9a:1b:ce:ef:a7:17:5d: 03:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:85:92:AF:53:A4:33:01:07:05:91:6C:4D:E2:0D:AE:99:07:26:4C X509v3 Authority Key Identifier: keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:eb:3c:07:99:58:ed:5c:a8:8b:f4:20:7d:52:03:56:6e:b7: 69:f3:9e:f8:38:df:bd:59:d0:36:75:10:72:d7:fa:fa:d3:3a: d6:fc:4c:29:be:ce:e4:1b:1a:92:de:e6:19:80:0f:63:5f:34: 4d:24:eb:fd:bb:19:7d:9b:83:da:aa:83:28:09:32:fa:64:ce: 7d:cc:6e:9f:62:82:d7:f9:45:8d:06:3c:b5:9d:65:a8:68:c9: 0f:12:4c:0c:35:8d:0b:83:27:41:b5:6f:60:fc:7d:e3:f2:b4: f6:2a:ba:2e:05:de:9b:e7:ea:a4:a1:a8:18:ab:9a:36:cf:53: d4:e3:4c:eb:0b:a6:a0:61:ef:ad:fb:7b:bd:9d:1f:bc:f0:65: 32:78:fc:c6:28:08:81:55:b5:68:27:99:18:ac:0d:f8:2d:51: fd:e2:cd:59:df:4b:ff:63:ec:53:c7:92:c8:27:61:53:59:dd: f4:d4:02:86:0b:52:cb:91:fc:15:76:a2:13:65:ae:49:45:84: 0e:df:ca:bd:c5:c0:fc:9e:dc:ff:e6:cb:d8:7c:65:8b:b7:a2: 4e:1c:f5:10:4f:16:0f:d9:78:5d:34:4d:9b:4a:74:f5:ef:7e: e4:a2:b6:e7:18:40:42:c9:56:01:69:85:59:25:7c:88:15:c9: 92:69:cf:da -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUQV2ihWKgROclVtnBGayrCJVzdFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdE NTQ3ODZEMzAeFw0yNTA1MDgyMjQ3MDVaFw0yNTA1MDkyMjU4MDVaMDMxMTAvBgNV BAMTKDgyODU5MkFGNTNBNDMzMDEwNzA1OTE2QzRERTIwREFFOTkwNzI2NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0meqh/+FYHPsk4T32laTnmAvT sTrBlCvvfe4ydFEHDNt7AWz47l+R3s+FRjARboaHjGkWoLJkS5IPU8+un/pp9ziD Iu+M7SG4TCrT9cOGwGn97E5RW6cA6AELHHeRyxLKGxazTjhWmItE0xcjxknG71Sw w2C6WMHGnbVtPYITooyxIQ5NFsbpoWNfXO45BvsVO3P+n7si3zcZQauDPmOxViQS kK4rkcaiTGmxkDnssWgYUrM76+f/H8yk68PRvLQ84yZ6ie1gQ8IYAjbaPE5VZHVv SCLaqKi65amV/O7CHorGxTqZqyYEpB0ZJ6bVymfZincq+gqBmhvO76cXXQMTAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUgoWSr1OkMwEHBZFsTeINrpkHJkwwHwYDVR0j BBgwFoAUbZS517fBinpJen6fXi4il9VHhtMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzFlYmZkNTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAv NkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82RDk0QjlEN0I3QzE4QTdBNDk3QTdFOUY1RTJFMjI5 N0Q1NDc4NkQzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzFlYmZk NTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAvNkQ5NEI5RDdCN0MxOEE3QTQ5 N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEPrPAeZWO1cqIv0IH1S A1Zut2nznvg4371Z0DZ1EHLX+vrTOtb8TCm+zuQbGpLe5hmAD2NfNE0k6/27GX2b g9qqgygJMvpkzn3Mbp9igtf5RY0GPLWdZahoyQ8STAw1jQuDJ0G1b2D8fePytPYq ui4F3pvn6qShqBirmjbPU9TjTOsLpqBh7637e72dH7zwZTJ4/MYoCIFVtWgnmRis DfgtUf3izVnfS/9j7FPHksgnYVNZ3fTUAoYLUsuR/BV2ohNlrklFhA7fyr3FwPye 3P/my9h8ZYu3ok4c9RBPFg/ZeF00TZtKdPXvfuSitucYQELJVgFphVklfIgVyZJp z9o= -----END CERTIFICATE-----Generated at Fri May 9 12:53:16 2025 by rpki-client