$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json) Hash identifier: hm46CTeRA3VrT+B6pjReQhfllcq6aAzeolimTkHtxEc= Subject key identifier: 67:11:55:5F:CB:E0:85:25:90:E7:9D:FE:79:01:FB:90:E2:29:8E:90 Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Certificate serial: 2B39B106744C7D8E98EDD7CF3E5A9E523FD087C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft Manifest number: 0100 Signing time: Sun 29 Jun 2025 19:26:52 +0000 Manifest this update: Sun 29 Jun 2025 19:21:52 +0000 Manifest next update: Mon 30 Jun 2025 19:41:52 +0000 Files and hashes: 1: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: Uapq/80NzwHBcbVLThXttpFiiIfP4T/EuvjyLRfY+zQ=) 2: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: iRjGhm9MAYijKikuNXa9CZKLfnQlB6md5E2iJLdE/iQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 12:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:39:b1:06:74:4c:7d:8e:98:ed:d7:cf:3e:5a:9e:52:3f:d0:87:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Validity Not Before: Jun 29 19:21:52 2025 GMT Not After : Jun 30 19:41:52 2025 GMT Subject: CN=6711555FCBE0852590E79DFE7901FB90E2298E90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a6:e2:1f:de:37:de:70:96:49:07:2e:05:3d: 71:ca:ef:a4:4e:da:99:68:b1:57:de:fc:f1:72:c9: a7:f0:90:60:0f:9b:0a:8e:31:b1:5b:9d:83:9b:29: a5:02:77:c2:17:37:ae:da:9a:d3:84:59:a0:7d:a1: 43:1e:78:ca:8a:46:54:06:c9:9d:63:6a:6a:51:50: 9b:32:f8:e4:5e:11:11:a5:4f:ce:f0:fe:e2:0e:ad: 28:81:97:68:33:48:d0:cb:47:f3:94:b7:e7:26:c9: fb:b2:a0:fa:89:97:98:62:72:94:07:0d:55:e9:4d: 2d:26:aa:f2:67:df:0b:ed:80:dc:ba:f9:83:b2:ed: 72:a7:37:fa:13:c5:fd:48:0e:d5:cc:f6:ef:46:df: c5:b1:5f:08:3c:84:d6:0c:70:b2:a1:78:4e:06:6b: a8:d7:cf:2e:9c:2d:b2:e0:44:1f:b2:f2:d6:2f:b3: ff:99:79:6b:03:01:a6:7d:1a:fb:87:97:91:11:aa: d1:c8:79:59:af:7e:e3:b7:1d:d7:2c:e4:47:65:9c: 98:73:22:5e:3c:df:eb:48:1a:35:a1:7d:c0:73:7c: cb:c8:c4:2f:74:c3:54:87:f0:07:9b:dc:43:01:4b: a3:11:dc:5e:81:d6:ed:99:90:b3:4f:2d:94:04:0e: 61:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:11:55:5F:CB:E0:85:25:90:E7:9D:FE:79:01:FB:90:E2:29:8E:90 X509v3 Authority Key Identifier: keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c7:c4:7a:29:66:ca:96:10:97:da:83:4f:8b:74:8e:e1:81: 79:fb:ca:56:59:2a:f9:c4:93:74:64:9a:07:40:a5:83:b0:2b: 40:57:b5:d3:dd:86:06:24:d1:70:37:93:12:8e:7f:49:4d:4a: f0:a3:f3:9b:d3:e2:a7:ff:08:77:4f:1b:e2:bc:9e:2c:e3:03: 91:6c:24:34:dd:7e:42:0e:dc:ec:8f:5d:c2:0c:6b:a2:43:5f: d0:85:86:a1:b1:7d:ee:43:e5:5b:26:d4:17:5b:37:ca:ed:06: 7f:29:98:5c:79:2e:17:2b:5a:47:9d:b2:be:9f:34:14:cd:8c: d9:d3:c4:c0:18:53:48:af:3a:c0:bf:e7:38:86:51:db:92:49: a7:87:2d:ab:1e:65:ed:ba:7c:63:1f:cf:be:28:04:bf:9f:a1: 07:f8:45:bd:b1:0d:f9:d9:ec:88:cf:4d:de:7c:cc:02:2d:a2: f0:9c:ee:69:8f:90:96:7a:67:b7:9f:e3:d3:50:3c:a2:f0:77: 3f:c8:a0:ef:67:c8:82:9e:8e:b6:77:77:d1:bf:c1:4d:46:3c: 50:70:aa:b9:26:61:5d:ac:ff:56:5c:ba:2d:34:f9:c8:65:f8: d3:c6:2b:5d:3f:d4:8c:e1:57:4f:72:49:f3:62:3b:17:3f:9f: 3c:85:ff:b4 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUKzmxBnRMfY6Y7dfPPlqeUj/Qh8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdE NTQ3ODZEMzAeFw0yNTA2MjkxOTIxNTJaFw0yNTA2MzAxOTQxNTJaMDMxMTAvBgNV BAMTKDY3MTE1NTVGQ0JFMDg1MjU5MEU3OURGRTc5MDFGQjkwRTIyOThFOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDspuIf3jfecJZJBy4FPXHK76RO 2plosVfe/PFyyafwkGAPmwqOMbFbnYObKaUCd8IXN67amtOEWaB9oUMeeMqKRlQG yZ1jampRUJsy+OReERGlT87w/uIOrSiBl2gzSNDLR/OUt+cmyfuyoPqJl5hicpQH DVXpTS0mqvJn3wvtgNy6+YOy7XKnN/oTxf1IDtXM9u9G38WxXwg8hNYMcLKheE4G a6jXzy6cLbLgRB+y8tYvs/+ZeWsDAaZ9GvuHl5ERqtHIeVmvfuO3Hdcs5EdlnJhz Il483+tIGjWhfcBzfMvIxC90w1SH8Aeb3EMBS6MR3F6B1u2ZkLNPLZQEDmHHAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUZxFVX8vghSWQ553+eQH7kOIpjpAwHwYDVR0j BBgwFoAUbZS517fBinpJen6fXi4il9VHhtMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzFlYmZkNTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAv NkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82RDk0QjlEN0I3QzE4QTdBNDk3QTdFOUY1RTJFMjI5 N0Q1NDc4NkQzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzFlYmZk NTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAvNkQ5NEI5RDdCN0MxOEE3QTQ5 N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABvHxHopZsqWEJfag0+L dI7hgXn7ylZZKvnEk3RkmgdApYOwK0BXtdPdhgYk0XA3kxKOf0lNSvCj85vT4qf/ CHdPG+K8nizjA5FsJDTdfkIO3OyPXcIMa6JDX9CFhqGxfe5D5Vsm1BdbN8rtBn8p mFx5LhcrWkedsr6fNBTNjNnTxMAYU0ivOsC/5ziGUduSSaeHLaseZe26fGMfz74o BL+foQf4Rb2xDfnZ7IjPTd58zAItovCc7mmPkJZ6Z7ef49NQPKLwdz/IoO9nyIKe jrZ3d9G/wU1GPFBwqrkmYV2s/1Zcui00+chl+NPGK10/1IzhV09ySfNiOxc/nzyF /7Q= -----END CERTIFICATE-----Generated at Mon Jun 30 05:28:00 2025 by rpki-client