$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json) Hash identifier: hTOjmBjJ2hm3WXO8G0HCw7eGR6y/lPpDnfUqPbk84lE= Subject key identifier: F4:68:AD:B6:82:04:15:5E:1F:9F:85:98:99:3E:CC:9B:F1:72:3F:E5 Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 30401B586CE59953F82179C747E1F0FFA3FEDC82 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft Manifest number: 01E0 Signing time: Sun 29 Jun 2025 21:32:01 +0000 Manifest this update: Sun 29 Jun 2025 21:27:01 +0000 Manifest next update: Tue 01 Jul 2025 00:23:01 +0000 Files and hashes: 1: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: pRpvcvkpUIjn6KDjm+Ywf0niLgvvVoNWrBKMV64s3Gs=) 2: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: Kgbp0+Zk4p3tpOkyAtCJ3HEWdnZBbzm3NgMcGrByxQs=) 3: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: b4lO7qQITmIuTe+1DZpcfLD2H0yGfI8Xz4qwvBeBNzo=) 4: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: onhCLB3gV3HdQhsHYazqCSyNdZ/2h865cbuFqj2YlvA=) 5: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: ACoAWBvi7rJbqMSGJh7inthjaVnkn4JYxSGnfd13XXs=) 6: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: scCBjh8HfhV3GwKDOrHZF1YXj718at6+uNm0y/KBmOw=) 7: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: fW3/1bM6uuAVh4/BqcyWFGfZeggD1zO77SW4GWfaw4U=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 00:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:40:1b:58:6c:e5:99:53:f8:21:79:c7:47:e1:f0:ff:a3:fe:dc:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: Jun 29 21:27:01 2025 GMT Not After : Jul 1 00:23:01 2025 GMT Subject: CN=F468ADB68204155E1F9F8598993ECC9BF1723FE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:39:91:df:56:9b:30:11:79:3e:6d:4c:5e: 56:a4:83:31:78:45:a4:c1:12:f0:35:e7:f1:e1:0e: 31:c9:d7:39:5e:f6:65:31:95:e1:de:2d:68:5f:f4: 0f:fd:c3:88:63:62:16:a3:01:ee:fe:cd:d5:bc:97: e5:be:9e:d6:07:1b:61:cf:25:7b:f0:ca:c3:26:92: d2:66:e3:60:a8:58:58:9b:1f:9b:a3:be:03:c7:74: 29:fd:4c:04:31:92:5f:8b:19:ae:e4:18:13:f0:58: ad:54:92:70:1e:91:92:a2:de:c1:bd:78:c1:2a:db: 2b:cb:3a:7d:a8:54:c4:da:c9:e1:28:4e:75:c4:4e: 1f:7a:40:21:67:aa:80:98:ab:a7:b1:c2:cc:49:41: 37:9d:5e:60:3b:d3:3f:22:59:fd:10:1d:12:37:83: 5e:c9:53:52:44:1b:3a:ec:a8:f4:02:61:8d:e5:8a: 7a:f9:1f:90:ec:11:08:f3:f5:36:1e:f7:e9:8d:c5: f8:49:bb:92:d0:c5:9c:ec:1a:6a:5e:5f:38:6f:c0: 1b:86:8e:33:ba:b3:59:51:ba:8b:bb:e7:08:51:8e: a4:62:52:d8:86:ac:19:0b:45:34:32:78:21:6e:4d: 58:88:65:9c:52:84:8b:c9:1a:52:75:32:c4:71:94: ea:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:68:AD:B6:82:04:15:5E:1F:9F:85:98:99:3E:CC:9B:F1:72:3F:E5 X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:63:16:ec:95:92:9e:fb:93:da:de:aa:db:d2:17:ec:06:a5: 08:12:ca:c3:c4:d5:4d:cb:71:95:a5:27:9c:a2:4f:c6:8f:47: 6d:0f:5f:42:84:8b:f6:da:19:4e:33:7a:27:1e:bf:58:3a:52: ed:28:f0:9b:41:58:49:29:a4:de:2a:36:31:ba:d9:a1:4d:a2: e1:67:b2:09:3e:ab:37:a3:1b:7f:9f:19:c8:6a:1b:15:b0:ba: 19:43:ac:c4:9e:95:2d:59:05:28:00:29:b0:d6:88:80:4f:75: 96:e6:b4:04:8f:c2:eb:36:c8:eb:21:c3:b2:d8:e8:dc:55:83: 69:5f:77:88:be:19:e6:f5:3e:b3:b3:3c:b0:8b:e6:8e:d6:fc: 85:4c:c3:d1:10:35:63:99:c6:e8:e6:73:7a:cc:25:a3:c5:d2: 4e:47:ab:01:89:48:07:a2:9c:3b:31:6d:e6:55:16:af:12:14: ec:15:b5:89:56:32:28:e3:a1:be:c9:1a:69:36:bc:e0:53:91: 47:55:87:dd:f2:a0:16:c5:ca:41:a4:95:73:58:44:dd:5c:76: 64:e0:09:9f:be:ca:db:23:36:7f:79:46:5e:fd:a5:0d:c4:e4: d1:bb:96:62:f7:38:44:e2:22:be:93:69:87:01:5b:69:f8:9f: 8e:d9:14:bd -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUMEAbWGzlmVP4IXnHR+Hw/6P+3IIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNTA2MjkyMTI3MDFaFw0yNTA3MDEwMDIzMDFaMDMxMTAvBgNV BAMTKEY0NjhBREI2ODIwNDE1NUUxRjlGODU5ODk5M0VDQzlCRjE3MjNGRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3tDmR31abMBF5Pm1MXlakgzF4 RaTBEvA15/HhDjHJ1zle9mUxleHeLWhf9A/9w4hjYhajAe7+zdW8l+W+ntYHG2HP JXvwysMmktJm42CoWFibH5ujvgPHdCn9TAQxkl+LGa7kGBPwWK1UknAekZKi3sG9 eMEq2yvLOn2oVMTayeEoTnXETh96QCFnqoCYq6exwsxJQTedXmA70z8iWf0QHRI3 g17JU1JEGzrsqPQCYY3linr5H5DsEQjz9TYe9+mNxfhJu5LQxZzsGmpeXzhvwBuG jjO6s1lRuou75whRjqRiUtiGrBkLRTQyeCFuTViIZZxShIvJGlJ1MsRxlOqvAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU9GittoIEFV4fn4WYmT7Mm/FyP+UwHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzI1NDA1 Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0QTQ1MzgwQzZENDU1 Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABJjFuyVkp77k9reqtvS F+wGpQgSysPE1U3LcZWlJ5yiT8aPR20PX0KEi/baGU4zeicev1g6Uu0o8JtBWEkp pN4qNjG62aFNouFnsgk+qzejG3+fGchqGxWwuhlDrMSelS1ZBSgAKbDWiIBPdZbm tASPwus2yOshw7LY6NxVg2lfd4i+Geb1PrOzPLCL5o7W/IVMw9EQNWOZxujmc3rM JaPF0k5HqwGJSAeinDsxbeZVFq8SFOwVtYlWMijjob7JGmk2vOBTkUdVh93yoBbF ykGklXNYRN1cdmTgCZ++ytsjNn95Rl79pQ3E5NG7lmL3OETiIr6TaYcBW2n4n47Z FL0= -----END CERTIFICATE-----Generated at Mon Jun 30 11:27:42 2025 by rpki-client