$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft File: C2724A29EF989A4340933B8130B402DD4627A501.mft (raw, json) Hash identifier: /iOrzDE5IxojRjrLeEsrfEtzp6XBaYjnTG0e92nibjg= Subject key identifier: A3:25:1D:E1:96:7E:9B:CC:B6:51:95:F4:C4:59:56:09:E4:30:7D:6D Authority key identifier: C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01 Certificate issuer: /CN=C2724A29EF989A4340933B8130B402DD4627A501 Certificate serial: 48D0F87C71A3BE5E883292C2D4AA000A73E8F71A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft Manifest number: 01DA Signing time: Sat 28 Jun 2025 16:45:40 +0000 Manifest this update: Sat 28 Jun 2025 16:40:40 +0000 Manifest next update: Sun 29 Jun 2025 17:58:40 +0000 Files and hashes: 1: C2724A29EF989A4340933B8130B402DD4627A501.crl (hash: PSEg21qK/+cEt7cMm6K74/vdrdLmQbCWlYUN5UfZnyM=) 2: 326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa (hash: hqgaxXhgaM7AiSsPcNwqghRTi61TSIKXFax/zJU7ecI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 17:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d0:f8:7c:71:a3:be:5e:88:32:92:c2:d4:aa:00:0a:73:e8:f7:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2724A29EF989A4340933B8130B402DD4627A501 Validity Not Before: Jun 28 16:40:40 2025 GMT Not After : Jun 29 17:58:40 2025 GMT Subject: CN=A3251DE1967E9BCCB65195F4C4595609E4307D6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9a:1d:5d:ec:d4:07:8e:4c:41:35:eb:1d:dc: bf:34:85:cc:9f:dc:f4:db:09:3a:26:90:d2:14:a1: db:c5:ea:f4:ed:da:9a:bc:68:a4:e8:2c:9c:b0:9f: ff:cb:00:12:d8:3c:74:12:d7:55:20:55:c2:20:2c: 7d:33:70:df:3a:59:aa:14:07:45:42:52:32:05:12: 30:c5:a0:a3:ed:88:56:aa:4f:81:e0:49:9d:99:a4: 58:94:96:41:1d:1f:79:de:db:67:bc:63:75:02:c8: aa:bb:1d:d9:62:b2:1a:98:eb:2f:6b:84:71:c9:d8: d1:c2:bf:25:ca:93:7e:4d:09:57:d3:1b:79:b7:af: 31:6b:bb:e2:b8:20:82:22:66:71:57:ae:4b:b7:cf: ce:3d:96:7f:b6:cf:8a:20:56:49:f6:5b:04:52:07: eb:86:fa:a7:cb:3a:69:9e:24:ae:03:7f:4c:ce:39: 14:0f:28:17:9a:69:19:ee:69:20:0f:65:c7:92:c2: 39:17:48:90:79:a3:bf:20:16:5f:d6:e8:d1:1c:38: d3:c5:96:46:fc:33:05:90:96:37:be:fa:dc:d3:b6: 00:c3:8c:8b:7b:6d:57:f4:57:34:30:83:3a:17:d1: 7e:c2:54:79:5e:61:8d:2d:1c:0a:aa:ec:5d:b9:5c: 49:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:25:1D:E1:96:7E:9B:CC:B6:51:95:F4:C4:59:56:09:E4:30:7D:6D X509v3 Authority Key Identifier: keyid:C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:59:65:3d:80:61:80:83:16:e3:e3:83:e2:31:2c:3e:7b:48: 4d:a3:dc:fe:67:71:de:ba:57:63:2c:fd:0e:b5:b2:de:c1:f6: 1e:7f:52:15:4a:00:a4:da:34:8b:0f:b6:64:66:a4:e3:f7:93: c4:b6:81:c3:02:9e:f2:29:0c:fd:e1:15:2e:95:d3:d4:9b:62: 9e:2f:c0:8e:54:ba:9d:2b:65:55:23:d7:e4:4e:26:f1:0a:84: 41:0e:2d:4e:8f:08:0f:ac:91:e5:ed:a2:e3:67:b0:ab:bf:d2: 63:5f:86:56:da:6f:20:97:b2:a4:cb:33:3c:ab:67:79:cf:bc: e6:f8:31:0f:0f:18:68:57:35:b3:79:d1:a2:2a:92:4e:b1:e9: e7:51:1b:22:99:65:97:a2:7d:e8:05:96:18:10:90:3d:40:c5: 43:0a:06:ef:9a:df:fd:70:33:0c:e8:35:11:41:ca:e7:e8:c2: ff:0c:63:76:ba:14:9d:e1:88:bc:af:fa:6e:f9:3b:51:78:9b: 8f:a1:05:25:29:3e:c8:be:c9:2e:08:90:71:0e:3d:00:eb:c4: c4:36:cb:04:c2:70:a5:db:df:3b:bd:5a:98:f0:c0:5d:f9:bf: 74:4c:cb:c7:4d:dc:b2:6e:96:14:af:ca:5b:cd:cf:47:b1:80: 9c:23:fa:43 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUSND4fHGjvl6IMpLC1KoACnPo9xowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI3MjRBMjlFRjk4OUE0MzQwOTMzQjgxMzBCNDAyREQ0 NjI3QTUwMTAeFw0yNTA2MjgxNjQwNDBaFw0yNTA2MjkxNzU4NDBaMDMxMTAvBgNV BAMTKEEzMjUxREUxOTY3RTlCQ0NCNjUxOTVGNEM0NTk1NjA5RTQzMDdENkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcmh1d7NQHjkxBNesd3L80hcyf 3PTbCTomkNIUodvF6vTt2pq8aKToLJywn//LABLYPHQS11UgVcIgLH0zcN86WaoU B0VCUjIFEjDFoKPtiFaqT4HgSZ2ZpFiUlkEdH3ne22e8Y3UCyKq7HdlishqY6y9r hHHJ2NHCvyXKk35NCVfTG3m3rzFru+K4IIIiZnFXrku3z849ln+2z4ogVkn2WwRS B+uG+qfLOmmeJK4Df0zOORQPKBeaaRnuaSAPZceSwjkXSJB5o78gFl/W6NEcONPF lkb8MwWQlje++tzTtgDDjIt7bVf0VzQwgzoX0X7CVHleYY0tHAqq7F25XEn1AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUoyUd4ZZ+m8y2UZX0xFlWCeQwfW0wHwYDVR0j BBgwFoAUwnJKKe+YmkNAkzuBMLQC3UYnpQEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzhiODNlNjMxMjc5ZjRjNjlhNTNmYWIyNTBiYmU2OWRiLzAv QzI3MjRBMjlFRjk4OUE0MzQwOTMzQjgxMzBCNDAyREQ0NjI3QTUwMS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9DMjcyNEEyOUVGOTg5QTQzNDA5MzNCODEzMEI0MDJE RDQ2MjdBNTAxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzhiODNl NjMxMjc5ZjRjNjlhNTNmYWIyNTBiYmU2OWRiLzAvQzI3MjRBMjlFRjk4OUE0MzQw OTMzQjgxMzBCNDAyREQ0NjI3QTUwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGxZZT2AYYCDFuPjg+Ix LD57SE2j3P5ncd66V2Ms/Q61st7B9h5/UhVKAKTaNIsPtmRmpOP3k8S2gcMCnvIp DP3hFS6V09SbYp4vwI5Uup0rZVUj1+ROJvEKhEEOLU6PCA+skeXtouNnsKu/0mNf hlbabyCXsqTLMzyrZ3nPvOb4MQ8PGGhXNbN50aIqkk6x6edRGyKZZZeifegFlhgQ kD1AxUMKBu+a3/1wMwzoNRFByufowv8MY3a6FJ3hiLyv+m75O1F4m4+hBSUpPsi+ yS4IkHEOPQDrxMQ2ywTCcKXb3zu9WpjwwF35v3RMy8dN3LJulhSvylvNz0exgJwj +kM= -----END CERTIFICATE-----Generated at Sun Jun 29 10:05:15 2025 by rpki-client