$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: gHp5+4fdf3Tq6gSOeFNerxOdU+XrZ7R+r+TgaRDb5BU= Subject key identifier: 9C:6C:C9:B5:4E:C5:7E:E3:ED:B9:3B:12:BF:5C:1C:13:33:6E:53:CB Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 404127D9B41B9ABE836985176085744088C27165 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 01DF Signing time: Sat 28 Jun 2025 20:15:43 +0000 Manifest this update: Sat 28 Jun 2025 20:10:43 +0000 Manifest next update: Sun 29 Jun 2025 20:23:43 +0000 Files and hashes: 1: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: JOjYzZNchcEvrV7jMo8F1LGs/AbmYs0CBD+Lqennn30=) 2: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: vxaqD429klEPt03aXXniKGxzQoHI4Ar9F2T3pRAzV/Y=) 3: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 3wo4yWYqUm70prj7oF5pGF3zOR0/7RB8Epa8stuidcg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 18:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:41:27:d9:b4:1b:9a:be:83:69:85:17:60:85:74:40:88:c2:71:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Jun 28 20:10:43 2025 GMT Not After : Jun 29 20:23:43 2025 GMT Subject: CN=9C6CC9B54EC57EE3EDB93B12BF5C1C13336E53CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7b:9d:0e:86:29:1f:53:bb:8f:63:22:57:8e: 7f:7d:0f:c4:de:21:56:18:3f:08:6d:ba:ff:83:68: f0:ef:8d:0c:f1:0a:8e:8b:6c:df:b9:83:05:34:a7: d1:2e:a8:2a:ed:c1:f9:71:85:43:f9:fb:00:b5:00: 1f:6e:e0:e1:d9:0b:57:e7:54:20:61:45:0e:bd:0c: d7:1d:99:a0:37:af:2b:ca:8c:0f:37:07:a0:ce:98: 3f:69:5d:79:80:54:fd:fa:55:68:29:8c:d5:dd:4a: 30:c8:53:7a:2e:dc:d9:28:9b:aa:2c:ae:c7:67:f0: db:7f:a0:09:82:d5:e3:34:5b:42:f2:49:b5:ed:c7: 47:5f:dd:86:8c:61:ea:64:d3:e2:0c:c9:06:9f:61: 8f:de:18:96:8d:43:98:4d:26:e6:5e:f7:fc:45:c6: 6f:cd:5c:6e:e1:32:76:b9:8b:e8:d4:97:70:6c:58: c6:e2:fa:04:94:e3:1b:5a:e2:51:31:54:11:7d:eb: 95:3e:4c:76:c1:65:71:66:cd:42:a5:c5:f7:76:23: b0:0d:cf:d9:f0:39:d9:8d:17:db:f7:ab:4b:be:08: 7e:99:2b:81:6a:ea:5c:68:22:53:92:ff:93:9e:d7: f8:e2:cc:25:c9:53:25:77:05:f5:33:30:52:69:88: 97:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6C:C9:B5:4E:C5:7E:E3:ED:B9:3B:12:BF:5C:1C:13:33:6E:53:CB X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5f:37:26:6b:6d:ba:c6:05:1a:b1:36:d3:6e:48:cf:43:41: d6:18:d5:0e:f4:7f:23:3b:26:0f:3c:10:1e:91:cf:32:c3:4f: cb:c9:7a:36:a3:95:da:92:c6:26:f8:98:46:7b:b7:13:23:04: 42:2e:c1:d1:c6:bb:1c:cc:a8:fb:95:2d:a0:ef:dd:8e:40:d5: ee:e2:61:a7:2d:d4:94:60:b5:40:bb:56:ac:f6:9c:3b:ab:17: b5:d6:f6:b7:9a:b0:59:cd:a3:36:63:f6:cf:cd:d2:b8:5f:2d: 71:b7:56:80:c7:e8:5e:ae:bd:2b:dd:e5:d7:05:23:64:9a:eb: 62:e8:ab:5c:b2:fb:a4:ef:89:4f:76:82:43:eb:45:63:b2:3f: f7:c4:8a:8a:79:a2:51:52:43:c3:58:1d:b9:5c:ab:06:16:66: 7b:c8:5a:3e:68:9b:8c:ed:2a:6f:a7:a7:84:5d:4d:89:e9:ae: fc:89:b9:d2:4c:48:3c:fe:2b:1e:27:f0:15:19:b4:e5:4d:64: 6c:6b:2f:61:2f:59:ba:d3:64:b9:95:2d:ef:8a:9c:c5:b6:c5: 13:75:28:d3:4c:eb:c0:5c:20:e8:f0:bb:d0:b9:98:d2:c4:2a: a4:04:03:67:1f:46:40:95:b3:f2:ab:a8:a7:bb:66:ed:7a:4c: 09:74:4a:38 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUQEEn2bQbmr6DaYUXYIV0QIjCcWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNTA2MjgyMDEwNDNaFw0yNTA2MjkyMDIzNDNaMDMxMTAvBgNV BAMTKDlDNkNDOUI1NEVDNTdFRTNFREI5M0IxMkJGNUMxQzEzMzM2RTUzQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCge50OhikfU7uPYyJXjn99D8Te IVYYPwhtuv+DaPDvjQzxCo6LbN+5gwU0p9EuqCrtwflxhUP5+wC1AB9u4OHZC1fn VCBhRQ69DNcdmaA3ryvKjA83B6DOmD9pXXmAVP36VWgpjNXdSjDIU3ou3Nkom6os rsdn8Nt/oAmC1eM0W0LySbXtx0df3YaMYepk0+IMyQafYY/eGJaNQ5hNJuZe9/xF xm/NXG7hMna5i+jUl3BsWMbi+gSU4xta4lExVBF965U+THbBZXFmzUKlxfd2I7AN z9nwOdmNF9v3q0u+CH6ZK4Fq6lxoIlOS/5Oe1/jizCXJUyV3BfUzMFJpiJdBAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUnGzJtU7FfuPtuTsSv1wcEzNuU8swHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIpfNyZrbbrGBRqxNtNu SM9DQdYY1Q70fyM7Jg88EB6RzzLDT8vJejajldqSxib4mEZ7txMjBEIuwdHGuxzM qPuVLaDv3Y5A1e7iYact1JRgtUC7Vqz2nDurF7XW9reasFnNozZj9s/N0rhfLXG3 VoDH6F6uvSvd5dcFI2Sa62Loq1yy+6TviU92gkPrRWOyP/fEiop5olFSQ8NYHblc qwYWZnvIWj5om4ztKm+np4RdTYnprvyJudJMSDz+Kx4n8BUZtOVNZGxrL2EvWbrT ZLmVLe+KnMW2xRN1KNNM68BcIOjwu9C5mNLEKqQEA2cfRkCVs/KrqKe7Zu16TAl0 Sjg= -----END CERTIFICATE-----Generated at Sun Jun 29 07:54:03 2025 by rpki-client