$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft File: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft (raw, json) Hash identifier: uwXoKOWSee5dG1jK1AvV+25aUGG8gQ7fMj7osQ0d1WU= Subject key identifier: 1B:A5:6A:50:2F:CC:E7:7E:80:78:F6:6A:2A:82:37:25:E5:EE:67:F6 Authority key identifier: 5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0 Certificate issuer: /CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0 Certificate serial: 3E73E4F936663BE7FD79B4DB437AC7431C3EF702 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft Manifest number: 0198 Signing time: Fri 09 May 2025 16:36:30 +0000 Manifest this update: Fri 09 May 2025 16:31:28 +0000 Manifest next update: Sat 10 May 2025 17:23:28 +0000 Files and hashes: 1: 326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa (hash: tMVO+Hc1tj5AW5StgOS15iIM9wSkQFoop+twU5PxB1Q=) 2: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl (hash: SSmTPFGOhR1Cp3ELceVz2uQlPTXQ7eq5iVG7tYmn374=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 17:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:73:e4:f9:36:66:3b:e7:fd:79:b4:db:43:7a:c7:43:1c:3e:f7:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0 Validity Not Before: May 9 16:31:28 2025 GMT Not After : May 10 17:23:28 2025 GMT Subject: CN=1BA56A502FCCE77E8078F66A2A823725E5EE67F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3b:40:4d:83:10:ea:9a:b7:5b:85:38:6f:45: 15:79:3a:40:7c:ee:6c:da:b2:c7:e1:9c:59:c7:ea: c3:0e:b6:ff:24:f9:77:42:1f:3d:a5:43:14:69:b6: 8d:63:b0:2f:07:2d:69:2e:49:ab:56:97:ce:ae:d4: af:c5:8a:a0:9f:3b:4d:91:e1:a4:36:92:12:b1:bf: f3:9a:1b:f2:e9:2e:78:80:30:1c:7d:45:0f:d3:55: a1:af:df:b9:cd:6f:2d:7d:f3:25:62:80:11:fc:08: ed:1f:75:40:df:02:34:8c:42:c5:7b:b8:00:e0:74: b8:de:c3:55:d0:b2:33:52:6f:83:fc:a0:d1:09:d6: cd:6b:4d:74:ba:ba:a0:50:f2:05:39:81:67:60:76: 37:20:bf:e4:fd:66:63:a3:1b:a9:45:a8:c9:5f:c0: b3:9e:82:b9:1d:90:a9:a3:fe:ca:17:cd:34:1c:32: 30:c7:ad:cc:b9:33:c2:50:c8:eb:57:73:47:71:a9: 1a:3a:82:bb:d3:bc:0a:c1:8c:0d:a8:fd:9d:29:6e: 08:82:63:71:17:3e:a3:b7:62:91:ed:ae:b4:2e:d3: 6c:15:02:33:a0:71:cd:38:82:8b:8d:75:73:db:46: f8:1f:b7:b1:e4:08:9f:1a:77:8a:30:59:69:07:f3: a6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A5:6A:50:2F:CC:E7:7E:80:78:F6:6A:2A:82:37:25:E5:EE:67:F6 X509v3 Authority Key Identifier: keyid:5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:d9:81:6d:d5:31:c9:78:51:1b:0f:fd:39:18:bf:74:88:1c: 66:f4:37:c6:8b:26:03:42:bc:a4:6b:de:a3:24:85:0c:cd:36: 67:2a:a3:69:2e:a9:76:41:00:ad:79:ae:41:b6:e0:02:31:8e: 94:b9:cc:69:41:26:f1:a1:17:a4:10:a1:11:f0:d3:c6:c8:5d: 8f:4a:a4:8c:e3:7f:23:ec:f1:75:fc:e8:07:ba:46:f7:bc:2e: e5:ba:60:06:ce:42:b9:36:19:b3:a3:5c:cd:d0:af:6f:d5:c2: 14:05:e4:2a:34:30:d3:0e:ab:20:45:05:07:2b:d6:29:39:bd: 39:6f:26:ef:f5:af:af:04:5d:d7:ec:ea:87:11:3e:4b:d1:a8: 0f:1f:f8:cd:48:a1:9c:58:62:5d:99:0a:32:21:6a:17:01:53: c5:49:1d:bd:55:c8:fd:4d:7c:97:83:eb:70:5d:31:09:30:2d: 56:04:b2:52:d0:4d:d5:be:c7:ea:13:9d:77:16:46:d3:1f:2b: 6c:17:e0:ac:af:a6:f3:89:b2:c3:ee:a3:e9:05:97:3d:e5:96: ec:c3:28:e6:63:7e:c2:e6:52:8e:dc:1f:3f:a8:da:b6:7c:0d: 07:7c:4f:5a:9f:fa:aa:3e:eb:0a:65:d8:7c:f1:1c:f3:3c:3d: ae:b2:ab:e4 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUPnPk+TZmO+f9ebTbQ3rHQxw+9wIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCRTJGNjA5OTk2NDc2QUFGRTE0NkJDNUE3MjQyOUIw QjIwNUZDMDAeFw0yNTA1MDkxNjMxMjhaFw0yNTA1MTAxNzIzMjhaMDMxMTAvBgNV BAMTKDFCQTU2QTUwMkZDQ0U3N0U4MDc4RjY2QTJBODIzNzI1RTVFRTY3RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaO0BNgxDqmrdbhThvRRV5OkB8 7mzassfhnFnH6sMOtv8k+XdCHz2lQxRpto1jsC8HLWkuSatWl86u1K/FiqCfO02R 4aQ2khKxv/OaG/LpLniAMBx9RQ/TVaGv37nNby198yVigBH8CO0fdUDfAjSMQsV7 uADgdLjew1XQsjNSb4P8oNEJ1s1rTXS6uqBQ8gU5gWdgdjcgv+T9ZmOjG6lFqMlf wLOegrkdkKmj/soXzTQcMjDHrcy5M8JQyOtXc0dxqRo6grvTvArBjA2o/Z0pbgiC Y3EXPqO3YpHtrrQu02wVAjOgcc04gouNdXPbRvgft7HkCJ8ad4owWWkH86YlAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUG6VqUC/M536AePZqKoI3JeXuZ/YwHwYDVR0j BBgwFoAUWr4vYJmWR2qv4Ua8WnJCmwsgX8AwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY0ODMyNjExYmEwNjRkNmI4ZjljMmI3YzczZmJkODRiLzAv NUFCRTJGNjA5OTk2NDc2QUFGRTE0NkJDNUE3MjQyOUIwQjIwNUZDMC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy81QUJFMkY2MDk5OTY0NzZBQUZFMTQ2QkM1QTcyNDI5 QjBCMjA1RkMwLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY0ODMy NjExYmEwNjRkNmI4ZjljMmI3YzczZmJkODRiLzAvNUFCRTJGNjA5OTk2NDc2QUFG RTE0NkJDNUE3MjQyOUIwQjIwNUZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALDZgW3VMcl4URsP/TkY v3SIHGb0N8aLJgNCvKRr3qMkhQzNNmcqo2kuqXZBAK15rkG24AIxjpS5zGlBJvGh F6QQoRHw08bIXY9KpIzjfyPs8XX86Ae6Rve8LuW6YAbOQrk2GbOjXM3Qr2/VwhQF 5Co0MNMOqyBFBQcr1ik5vTlvJu/1r68EXdfs6ocRPkvRqA8f+M1IoZxYYl2ZCjIh ahcBU8VJHb1VyP1NfJeD63BdMQkwLVYEslLQTdW+x+oTnXcWRtMfK2wX4KyvpvOJ ssPuo+kFlz3lluzDKOZjfsLmUo7cHz+o2rZ8DQd8T1qf+qo+6wpl2HzxHPM8Pa6y q+Q= -----END CERTIFICATE-----Generated at Sat May 10 02:19:31 2025 by rpki-client