$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft File: 31586760843F668A816117EA02F6F30FE8F9C359.mft (raw, json) Hash identifier: Oa1ArZh3W/+0erz4IGbfPJrqnuvfsVxgvNXAbWX4bHM= Subject key identifier: 3A:19:A6:5C:4D:CE:FE:44:6F:4F:3E:EA:BE:61:88:BC:05:A4:21:1E Authority key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 Certificate issuer: /CN=31586760843F668A816117EA02F6F30FE8F9C359 Certificate serial: 5A53C03727ADA89791D9EEAE8EE249CD6EAE2BC5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft Manifest number: 0198 Signing time: Fri 09 May 2025 11:20:50 +0000 Manifest this update: Fri 09 May 2025 11:15:47 +0000 Manifest next update: Sat 10 May 2025 15:17:47 +0000 Files and hashes: 1: 326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa (hash: vL1deW40wo8pcYsREoOIq3gzs7RyvFvmmro5dlKeegY=) 2: 31586760843F668A816117EA02F6F30FE8F9C359.crl (hash: yso0IiZgS8X6MZ0lB9jANupRIC86FPuLsHvrPgvPd40=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 15:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:53:c0:37:27:ad:a8:97:91:d9:ee:ae:8e:e2:49:cd:6e:ae:2b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31586760843F668A816117EA02F6F30FE8F9C359 Validity Not Before: May 9 11:15:47 2025 GMT Not After : May 10 15:17:47 2025 GMT Subject: CN=3A19A65C4DCEFE446F4F3EEABE6188BC05A4211E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5c:a5:ef:c5:3a:fc:1d:3c:74:85:bd:54:97: 73:b0:da:5d:21:b0:ac:c1:b9:6b:1e:78:64:95:e1: 36:07:a6:41:28:4b:3c:c2:97:50:03:b1:a9:7a:b0: d1:c5:0a:06:86:f4:8b:a0:c8:ea:9b:06:5b:bf:21: 89:3d:ee:6c:f3:bc:22:b9:78:cf:03:87:06:7e:e7: a0:9a:be:23:db:77:16:45:13:7d:82:4d:69:d4:a0: a3:12:35:8a:8b:6c:ea:89:86:7a:a7:ff:e6:d3:07: e2:c3:81:05:e2:66:18:92:56:e4:b4:02:a7:c8:80: 37:58:0b:4c:55:a3:35:3c:ed:31:44:21:90:8f:9c: 05:8f:31:9d:cf:90:51:cb:c8:6f:e9:72:a6:7a:96: 8a:48:70:dc:9d:0b:dc:fc:17:3e:ea:39:4d:a2:6d: d6:3e:4d:b0:9e:8a:8d:8a:35:f4:c4:bc:4d:9b:a1: eb:d5:bd:fc:48:6d:a5:b8:a6:26:f3:92:f6:e0:40: 41:0a:c1:79:c9:8e:cd:3d:6c:fd:51:1e:5e:a5:0f: d4:39:a8:51:81:4d:84:40:2f:3c:70:64:21:6e:bf: f7:e8:bb:5e:ee:56:7e:d5:50:93:6d:39:63:e5:cc: 86:1c:56:d1:b6:2f:08:ea:cd:fc:12:70:3f:67:30: c7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:19:A6:5C:4D:CE:FE:44:6F:4F:3E:EA:BE:61:88:BC:05:A4:21:1E X509v3 Authority Key Identifier: keyid:31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:bd:e4:e1:7e:02:7f:d3:0e:fd:4e:fe:be:c5:a0:67:c5:6d: 88:ac:ed:a0:18:81:ef:24:13:47:2e:9a:99:a3:92:26:58:6b: ae:f8:4c:7e:21:aa:79:85:cd:29:32:97:ab:46:8f:c2:72:a4: e6:ef:b5:e6:29:72:3b:aa:6a:3d:cd:b9:7b:b8:9f:4b:1b:8e: 4f:ae:f5:0d:2e:b7:1b:3a:3e:75:f6:9c:27:f2:4c:ea:f7:64: d8:26:4e:cf:aa:a0:d6:4d:bc:41:87:72:ca:99:a8:e6:88:64: 7f:ff:fc:90:e3:5b:bd:fd:50:a9:2a:bd:76:e7:45:98:f8:f4: 79:18:82:92:44:c5:81:a3:e2:c0:53:61:7c:31:6c:eb:5a:cc: 16:15:35:c2:61:e1:8a:ec:1d:01:cc:5d:5e:19:36:c2:8d:f7: a4:1a:f0:09:53:47:09:94:aa:22:75:4f:ae:5b:8c:d6:69:62: 7e:53:71:ea:37:f0:70:c4:0b:62:58:cc:c7:dd:3f:04:f3:19: f9:d3:1a:48:d0:4b:bf:51:eb:d3:0f:8e:b1:0c:f3:96:69:e5: 8b:fd:31:ce:7a:2d:52:47:51:5d:8c:6e:ac:a3:93:f3:c0:a3: 73:75:d4:68:d1:d3:d1:32:83:59:39:6a:c8:03:ce:e9:91:97: 39:19:74:d4 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUWlPANyetqJeR2e6ujuJJzW6uK8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZF OEY5QzM1OTAeFw0yNTA1MDkxMTE1NDdaFw0yNTA1MTAxNTE3NDdaMDMxMTAvBgNV BAMTKDNBMTlBNjVDNERDRUZFNDQ2RjRGM0VFQUJFNjE4OEJDMDVBNDIxMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTXKXvxTr8HTx0hb1Ul3Ow2l0h sKzBuWseeGSV4TYHpkEoSzzCl1ADsal6sNHFCgaG9IugyOqbBlu/IYk97mzzvCK5 eM8DhwZ+56CaviPbdxZFE32CTWnUoKMSNYqLbOqJhnqn/+bTB+LDgQXiZhiSVuS0 AqfIgDdYC0xVozU87TFEIZCPnAWPMZ3PkFHLyG/pcqZ6lopIcNydC9z8Fz7qOU2i bdY+TbCeio2KNfTEvE2boevVvfxIbaW4pibzkvbgQEEKwXnJjs09bP1RHl6lD9Q5 qFGBTYRALzxwZCFuv/fou17uVn7VUJNtOWPlzIYcVtG2LwjqzfwScD9nMMfvAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUOhmmXE3O/kRvTz7qvmGIvAWkIR4wHwYDVR0j BBgwFoAUMVhnYIQ/ZoqBYRfqAvbzD+j5w1kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3YzVkNGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAv MzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZFOEY5QzM1OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zMTU4Njc2MDg0M0Y2NjhBODE2MTE3RUEwMkY2RjMw RkU4RjlDMzU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3YzVk NGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAvMzE1ODY3NjA4NDNGNjY4QTgx NjExN0VBMDJGNkYzMEZFOEY5QzM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFq95OF+An/TDv1O/r7F oGfFbYis7aAYge8kE0cumpmjkiZYa674TH4hqnmFzSkyl6tGj8JypObvteYpcjuq aj3NuXu4n0sbjk+u9Q0utxs6PnX2nCfyTOr3ZNgmTs+qoNZNvEGHcsqZqOaIZH// /JDjW739UKkqvXbnRZj49HkYgpJExYGj4sBTYXwxbOtazBYVNcJh4YrsHQHMXV4Z NsKN96Qa8AlTRwmUqiJ1T65bjNZpYn5Tceo38HDEC2JYzMfdPwTzGfnTGkjQS79R 69MPjrEM85Zp5Yv9Mc56LVJHUV2Mbqyjk/PAo3N11GjR09Eyg1k5asgDzumRlzkZ dNQ= -----END CERTIFICATE-----Generated at Sat May 10 06:19:16 2025 by rpki-client