$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json) Hash identifier: BofsDAN3KtmnGyTXILiB97GDKpPHIe94GK+L6JG+GHI= Subject key identifier: 7C:D3:C7:FE:83:24:8E:CB:14:ED:BA:3B:97:D9:65:AB:57:B8:0E:E9 Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Certificate serial: 700CDCE67B5D1C66C5695F958304D20458A43B82 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft Manifest number: B0 Signing time: Sat 28 Jun 2025 17:35:41 +0000 Manifest this update: Sat 28 Jun 2025 17:30:41 +0000 Manifest next update: Sun 29 Jun 2025 20:09:41 +0000 Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: eY/vYeszb+w0JhKV2Dz2kxZcLqoxFoS5Z+Y8GrGmVr8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 18:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:0c:dc:e6:7b:5d:1c:66:c5:69:5f:95:83:04:d2:04:58:a4:3b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Validity Not Before: Jun 28 17:30:41 2025 GMT Not After : Jun 29 20:09:41 2025 GMT Subject: CN=7CD3C7FE83248ECB14EDBA3B97D965AB57B80EE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4e:11:d0:23:73:04:b0:7c:7d:38:ab:8a:1b: 6c:9a:02:9b:ae:e9:29:4b:fb:8e:70:c9:51:5b:ba: cf:7f:6f:55:8f:36:b8:62:98:4b:ed:5c:49:dc:be: 84:d0:64:3e:be:c1:85:f8:78:09:d6:ad:ca:04:2a: 25:eb:7c:90:59:00:20:f1:a1:90:5f:d1:73:66:01: 8c:e7:1b:8b:97:c1:62:70:cf:bc:17:17:b2:b5:f5: a6:14:16:f4:61:c4:42:36:4d:eb:41:24:3e:83:9d: 4f:8c:60:7c:32:c9:0e:b9:af:8e:08:96:8f:55:d1: b1:5c:b4:15:f0:4c:79:33:c1:97:fe:c6:ff:eb:88: 72:3d:96:49:89:7c:5f:21:33:0a:7a:02:de:ef:7f: 05:8b:4c:44:1d:cb:6b:9b:91:68:51:b4:20:99:82: 0f:c2:18:ff:fe:e5:a0:1a:19:03:da:b2:8e:5a:02: 95:eb:22:cc:cc:b8:6b:ee:2e:88:bb:0b:8b:f1:af: fc:56:17:90:1d:15:9a:77:43:87:12:df:a9:1d:46: 46:6b:95:10:aa:95:2a:de:14:29:0b:64:b0:cd:a8: 8f:9f:bf:45:9b:8d:95:25:37:a0:61:17:3e:d9:d3: 6a:8b:b7:44:2c:24:56:8d:df:e7:da:aa:75:73:37: 0f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D3:C7:FE:83:24:8E:CB:14:ED:BA:3B:97:D9:65:AB:57:B8:0E:E9 X509v3 Authority Key Identifier: keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:51:df:41:2e:57:22:a1:2f:14:bf:bd:09:c2:27:eb:7d:6a: 6c:28:7f:b1:f5:df:6f:73:a7:78:84:00:db:d7:c7:6d:84:c9: 48:40:a1:2e:fa:39:47:30:bc:33:61:54:ae:c9:28:30:ac:d2: 6e:e0:d1:08:27:ce:fd:46:97:d0:2f:6c:c5:30:0a:9d:23:94: 38:17:0b:93:32:57:b4:b6:68:6d:de:ef:35:3a:86:43:fc:e5: 86:e6:ff:7c:d1:ad:5f:4c:59:20:33:2d:91:6c:7b:2c:13:0b: e6:26:83:c7:27:32:2f:25:6b:0a:c5:f5:f2:ff:a0:26:29:82: cf:5c:19:bd:9a:86:1a:cd:bd:c3:dd:f7:14:b0:0f:40:82:fb: 01:0a:f2:fb:09:88:42:56:70:ad:f6:c8:be:cf:6e:c9:ca:7d: 54:6c:a2:72:5a:5c:f4:ac:6e:81:21:4f:66:45:95:06:3e:cc: 80:6d:79:ab:f3:98:1e:63:d2:a2:4d:70:60:f0:26:c4:b8:95: 23:a6:b4:1a:49:3e:1b:11:4a:d1:e3:98:47:bf:7c:d9:ab:3f: 7b:27:2f:75:00:22:38:91:21:de:83:7d:22:f4:42:f7:08:ac: 6d:f3:bb:4f:09:d1:90:cc:0e:7d:d8:81:60:5a:47:36:2a:18: 20:3e:43:96 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUcAzc5ntdHGbFaV+VgwTSBFikO4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz REREMDgwRDAeFw0yNTA2MjgxNzMwNDFaFw0yNTA2MjkyMDA5NDFaMDMxMTAvBgNV BAMTKDdDRDNDN0ZFODMyNDhFQ0IxNEVEQkEzQjk3RDk2NUFCNTdCODBFRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFThHQI3MEsHx9OKuKG2yaApuu 6SlL+45wyVFbus9/b1WPNrhimEvtXEncvoTQZD6+wYX4eAnWrcoEKiXrfJBZACDx oZBf0XNmAYznG4uXwWJwz7wXF7K19aYUFvRhxEI2TetBJD6DnU+MYHwyyQ65r44I lo9V0bFctBXwTHkzwZf+xv/riHI9lkmJfF8hMwp6At7vfwWLTEQdy2ubkWhRtCCZ gg/CGP/+5aAaGQPaso5aApXrIszMuGvuLoi7C4vxr/xWF5AdFZp3Q4cS36kdRkZr lRCqlSreFCkLZLDNqI+fv0WbjZUlN6BhFz7Z02qLt0QsJFaN3+faqnVzNw+zAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUfNPH/oMkjssU7bo7l9llq1e4DukwHwYDVR0j BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAE5R30EuVyKhLxS/vQnC J+t9amwof7H1329zp3iEANvXx22EyUhAoS76OUcwvDNhVK7JKDCs0m7g0Qgnzv1G l9AvbMUwCp0jlDgXC5MyV7S2aG3e7zU6hkP85Ybm/3zRrV9MWSAzLZFseywTC+Ym g8cnMi8lawrF9fL/oCYpgs9cGb2ahhrNvcPd9xSwD0CC+wEK8vsJiEJWcK32yL7P bsnKfVRsonJaXPSsboEhT2ZFlQY+zIBteavzmB5j0qJNcGDwJsS4lSOmtBpJPhsR StHjmEe/fNmrP3snL3UAIjiRId6DfSL0QvcIrG3zu08J0ZDMDn3YgWBaRzYqGCA+ Q5Y= -----END CERTIFICATE-----Generated at Sun Jun 29 05:00:10 2025 by rpki-client