$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft File: 1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json) Hash identifier: J9zkbLdPZsjRKnxBh/rKj/ClQbgIqOM+/H+EEACi7m4= Subject key identifier: 33:C3:C7:87:8B:5A:4D:7F:AA:05:ED:9C:33:D7:14:36:88:9A:96:AC Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F Certificate issuer: /CN=1D570B984E9C5E382B0A879AA21F6518621F059F Certificate serial: 334E1B77FCADF7D25E7138D1429EA9DA38D6C411 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft Manifest number: 019F Signing time: Thu 15 May 2025 08:01:19 +0000 Manifest this update: Thu 15 May 2025 07:56:17 +0000 Manifest next update: Fri 16 May 2025 10:21:17 +0000 Files and hashes: 1: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: H+jK3Nwxawe4HmMvBBZWPutdHwZ1/EgBC0d2wIiVHKQ=) 2: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: 3DuIOWLJO8NrLMIsuHapBMIFfNv6pqKViDwoNolMhc0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 May 2025 02:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:4e:1b:77:fc:ad:f7:d2:5e:71:38:d1:42:9e:a9:da:38:d6:c4:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F Validity Not Before: May 15 07:56:17 2025 GMT Not After : May 16 10:21:17 2025 GMT Subject: CN=33C3C7878B5A4D7FAA05ED9C33D71436889A96AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:67:68:f8:5c:51:95:44:c8:01:f3:49:68: 80:1d:f4:4a:20:cf:6a:7e:c7:d5:ef:d4:24:02:3a: 85:2d:00:af:ae:eb:3c:f8:ea:b6:ad:6f:eb:2b:08: fc:73:a6:48:8a:fc:88:36:01:c1:5a:8b:f1:1f:cb: 37:93:04:6e:66:0b:67:72:08:b5:53:21:d6:af:8c: e8:bc:6a:28:b2:8a:cc:66:c7:46:f9:fd:5d:04:50: 8c:bb:0c:f1:c4:d1:ab:2c:1e:33:7b:c5:f2:f3:40: ab:92:a2:c3:ab:c4:73:95:07:ac:50:9d:b1:34:f5: 26:bb:6a:8d:5f:5c:2a:38:15:4b:1f:13:c2:47:3a: 93:34:cf:41:b8:7d:ab:fd:3f:4d:23:e2:a5:10:df: fb:a1:e6:ec:00:39:23:65:ec:f7:09:e6:1e:03:36: 11:11:74:d4:bc:60:29:00:20:74:49:79:07:df:87: 93:4e:88:be:be:03:73:81:a9:ad:88:45:7d:00:f2: 2a:aa:f9:7d:59:0c:27:70:70:69:bb:97:cc:cb:35: 4a:06:31:08:49:76:21:f2:c7:5f:6a:75:d1:50:78: 6f:c8:cc:05:80:54:4d:9f:8b:88:f9:88:5a:40:ea: 2e:dd:13:ef:60:2c:7f:99:68:5d:6c:8e:8b:85:00: 5a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C3:C7:87:8B:5A:4D:7F:AA:05:ED:9C:33:D7:14:36:88:9A:96:AC X509v3 Authority Key Identifier: keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:65:84:71:e2:ab:e2:2c:fa:e6:0d:0e:4a:b9:41:d2:87:fc: d4:6c:20:20:07:e3:b0:b0:1b:ef:eb:4f:9b:ee:2d:00:c1:20: 24:1d:81:2c:ab:2a:67:a8:f9:9f:44:30:64:66:38:74:57:2c: 6c:46:ee:8f:db:d9:eb:f9:e1:99:39:8b:1f:44:df:e4:a4:7f: 1c:67:7d:ec:1e:83:a6:ae:ec:34:c0:5a:78:b1:88:5d:48:97: d4:8e:26:27:2a:8e:31:d3:f9:e1:57:94:fd:49:b5:7c:0f:7a: 6a:d1:ab:4e:2e:25:07:df:42:e3:2b:71:c9:a8:bd:37:92:be: 65:9c:e5:ad:cb:ca:14:e9:5c:4b:2e:55:d2:ea:98:7d:6c:7d: 61:a4:9b:5d:f9:34:37:d6:77:e4:a1:39:3f:fb:38:5f:0b:af: 61:a7:7d:7f:fa:a4:9e:24:a7:4f:28:58:33:e6:a8:ba:91:14: d4:5b:02:c7:b5:8c:72:b5:05:dd:30:68:4c:82:8a:ae:33:f9: 3e:ab:9e:07:9e:9b:bb:a0:5c:d8:10:a5:98:71:d6:07:7f:c1: 5c:65:bb:f0:a5:8f:6f:7b:0c:c1:5d:2f:e6:e1:57:cb:ff:2d: 73:b3:c0:98:7b:22:8b:7c:f7:5d:e1:0d:02:c5:98:63:af:e6: a2:08:ae:85 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUM04bd/yt99JecTjRQp6p2jjWxBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2 MjFGMDU5RjAeFw0yNTA1MTUwNzU2MTdaFw0yNTA1MTYxMDIxMTdaMDMxMTAvBgNV BAMTKDMzQzNDNzg3OEI1QTREN0ZBQTA1RUQ5QzMzRDcxNDM2ODg5QTk2QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Smdo+FxRlUTIAfNJaIAd9Eog z2p+x9Xv1CQCOoUtAK+u6zz46ratb+srCPxzpkiK/Ig2AcFai/EfyzeTBG5mC2dy CLVTIdavjOi8aiiyisxmx0b5/V0EUIy7DPHE0assHjN7xfLzQKuSosOrxHOVB6xQ nbE09Sa7ao1fXCo4FUsfE8JHOpM0z0G4fav9P00j4qUQ3/uh5uwAOSNl7PcJ5h4D NhERdNS8YCkAIHRJeQffh5NOiL6+A3OBqa2IRX0A8iqq+X1ZDCdwcGm7l8zLNUoG MQhJdiHyx19qddFQeG/IzAWAVE2fi4j5iFpA6i7dE+9gLH+ZaF1sjouFAFrTAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUM8PHh4taTX+qBe2cM9cUNoialqwwHwYDVR0j BBgwFoAUHVcLmE6cXjgrCoeaoh9lGGIfBZ8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAv MUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRDU3MEI5ODRFOUM1RTM4MkIwQTg3OUFBMjFGNjUx ODYyMUYwNTlGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzRkNWMz MDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAvMUQ1NzBCOTg0RTlDNUUzODJC MEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADplhHHiq+Is+uYNDkq5 QdKH/NRsICAH47CwG+/rT5vuLQDBICQdgSyrKmeo+Z9EMGRmOHRXLGxG7o/b2ev5 4Zk5ix9E3+Skfxxnfeweg6au7DTAWnixiF1Il9SOJicqjjHT+eFXlP1JtXwPemrR q04uJQffQuMrccmovTeSvmWc5a3LyhTpXEsuVdLqmH1sfWGkm135NDfWd+ShOT/7 OF8Lr2GnfX/6pJ4kp08oWDPmqLqRFNRbAse1jHK1Bd0waEyCiq4z+T6rngeem7ug XNgQpZhx1gd/wVxlu/Clj297DMFdL+bhV8v/LXOzwJh7Iot8913hDQLFmGOv5qII roU= -----END CERTIFICATE-----Generated at Thu May 15 10:27:11 2025 by rpki-client