$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft File: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft (raw, json) Hash identifier: NDWkFg+uL2m7tAt/Xpi2+PC5yBnWY8seszMom46cWGA= Subject key identifier: AE:93:8A:54:FF:62:2C:1B:AA:C6:F3:70:70:ED:DD:0F:8E:13:70:1C Authority key identifier: DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1 Certificate issuer: /CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1 Certificate serial: 2B236A7FD42BA448DE64A248AB90C1CCAD1A93BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft Manifest number: 01DD Signing time: Sun 29 Jun 2025 02:41:13 +0000 Manifest this update: Sun 29 Jun 2025 02:36:13 +0000 Manifest next update: Mon 30 Jun 2025 06:38:13 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34342d3434203d3e20323038303531.roa (hash: tFJBYIhXxfWIXiULV/y0FG2z1kGnNqMQG/QFmAkPW/4=) 2: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl (hash: NE0PyqyLn+VGV7/CfgX7icnpMomezCUEenzfRJ1Zy0s=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 18:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:23:6a:7f:d4:2b:a4:48:de:64:a2:48:ab:90:c1:cc:ad:1a:93:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1 Validity Not Before: Jun 29 02:36:13 2025 GMT Not After : Jun 30 06:38:13 2025 GMT Subject: CN=AE938A54FF622C1BAAC6F37070EDDD0F8E13701C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3e:6d:53:65:02:a4:9e:2c:d1:81:9e:79:38: 03:ec:5f:fa:9c:99:84:09:37:fc:84:2b:d9:fd:51: 29:7b:9a:d9:9d:29:80:f2:2e:12:7a:5c:bf:71:41: 61:4f:10:d4:d9:4c:c0:66:ac:67:bc:40:82:d1:4d: d1:83:e1:09:a7:87:b3:5e:fe:e8:a5:69:91:2b:82: aa:c4:81:18:21:d2:15:d4:b4:e6:c2:a3:ce:e1:3a: d7:25:cb:c2:87:db:1a:e9:e6:73:e1:40:d2:40:eb: 2b:9f:9f:3e:34:d4:2c:da:32:3a:40:36:2c:bb:48: 29:b7:b7:f3:df:1e:6c:19:48:58:10:39:60:da:a9: 29:08:43:a9:46:cd:03:fa:43:01:9b:22:b0:52:61: 19:40:0b:66:44:bd:9a:95:16:18:d8:27:50:5b:8c: 38:f2:f3:d4:c7:22:d5:0c:2c:e8:84:1b:4e:4d:60: 83:de:7f:7f:bb:c7:d9:97:fa:8c:84:7f:19:d2:b0: 3c:2c:18:05:78:2d:e3:1f:61:1d:0a:0d:4f:e2:9f: d3:9e:49:d8:96:18:f8:60:6b:38:d5:1d:b1:36:0f: ac:01:bc:4d:84:db:d1:47:49:28:d4:04:de:e2:86: 68:af:26:f9:d3:87:62:40:da:05:65:3b:ee:56:0c: 7a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:93:8A:54:FF:62:2C:1B:AA:C6:F3:70:70:ED:DD:0F:8E:13:70:1C X509v3 Authority Key Identifier: keyid:DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:af:d1:80:2b:67:ab:29:4e:0e:86:c7:2c:ec:42:36:e2:c8: 0f:1a:98:c1:7b:09:4a:18:0a:33:67:62:36:eb:29:8b:62:c8: 37:35:5e:73:f7:1a:b8:f9:35:44:c1:9a:49:3d:aa:4c:3d:fb: f5:ce:e1:76:c8:3a:88:02:01:d0:5a:c4:b3:02:7b:8f:8a:3d: 4c:6a:c2:3c:43:1e:d5:d9:7a:c5:77:0c:2c:2b:de:e4:b7:d0: 66:8a:6e:45:85:82:43:68:eb:51:57:56:8e:ad:92:40:bb:eb: d7:ef:35:f3:8b:16:49:85:db:bc:ff:9d:b9:c8:b6:85:08:df: 3e:00:9a:4b:03:41:b2:ea:4e:4c:f7:53:3f:75:3f:ef:98:14: 5b:43:ce:e6:36:e9:f9:e8:68:a3:c7:35:09:fb:34:ba:19:0a: 3c:97:48:af:b6:87:7d:90:8c:b5:86:cf:90:20:a9:e2:51:90: 2e:00:89:d1:7c:fc:32:0a:63:72:6a:09:4f:87:83:43:a7:ed: 5c:17:0f:64:e1:2f:99:c6:08:c4:af:ba:9e:33:f2:f3:b2:7a: 32:a6:71:f6:7f:bd:2e:d1:c3:08:fb:4a:e9:82:a0:8b:ae:81: e5:a8:78:a1:a0:c4:03:91:bc:8e:05:4e:06:89:31:6f:1c:99: 68:49:f6:ab -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUKyNqf9QrpEjeZKJIq5DBzK0ak78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMyRDM0RkUwRjhDOTBCMkE4Q0FFQzQ3MjdENkJBMzFC OThEMjVEMTAeFw0yNTA2MjkwMjM2MTNaFw0yNTA2MzAwNjM4MTNaMDMxMTAvBgNV BAMTKEFFOTM4QTU0RkY2MjJDMUJBQUM2RjM3MDcwRURERDBGOEUxMzcwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Pm1TZQKknizRgZ55OAPsX/qc mYQJN/yEK9n9USl7mtmdKYDyLhJ6XL9xQWFPENTZTMBmrGe8QILRTdGD4Qmnh7Ne /uilaZErgqrEgRgh0hXUtObCo87hOtcly8KH2xrp5nPhQNJA6yufnz401CzaMjpA Niy7SCm3t/PfHmwZSFgQOWDaqSkIQ6lGzQP6QwGbIrBSYRlAC2ZEvZqVFhjYJ1Bb jDjy89THItUMLOiEG05NYIPef3+7x9mX+oyEfxnSsDwsGAV4LeMfYR0KDU/in9Oe SdiWGPhgazjVHbE2D6wBvE2E29FHSSjUBN7ihmivJvnTh2JA2gVlO+5WDHrTAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUrpOKVP9iLBuqxvNwcO3dD44TcBwwHwYDVR0j BBgwFoAU3C00/g+MkLKoyuxHJ9a6MbmNJdEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzVjNTUyMmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzAv REMyRDM0RkUwRjhDOTBCMkE4Q0FFQzQ3MjdENkJBMzFCOThEMjVEMS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9EQzJEMzRGRTBGOEM5MEIyQThDQUVDNDcyN0Q2QkEz MUI5OEQyNUQxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzVjNTUy MmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzAvREMyRDM0RkUwRjhDOTBCMkE4 Q0FFQzQ3MjdENkJBMzFCOThEMjVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHev0YArZ6spTg6Gxyzs QjbiyA8amMF7CUoYCjNnYjbrKYtiyDc1XnP3Grj5NUTBmkk9qkw9+/XO4XbIOogC AdBaxLMCe4+KPUxqwjxDHtXZesV3DCwr3uS30GaKbkWFgkNo61FXVo6tkkC769fv NfOLFkmF27z/nbnItoUI3z4AmksDQbLqTkz3Uz91P++YFFtDzuY26fnoaKPHNQn7 NLoZCjyXSK+2h32QjLWGz5AgqeJRkC4AidF8/DIKY3JqCU+Hg0On7VwXD2ThL5nG CMSvup4z8vOyejKmcfZ/vS7Rwwj7SumCoIuugeWoeKGgxAORvI4FTgaJMW8cmWhJ 9qs= -----END CERTIFICATE-----Generated at Sun Jun 29 05:22:29 2025 by rpki-client