$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: 9p6ZePrquEQqvGTzQ73vGxkh28+VWvn5hgJIL0xKejw= Subject key identifier: 86:98:FC:07:1F:2F:1B:1F:21:D1:CA:5C:09:74:14:9A:DA:42:4B:F7 Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 40AA4BA045827E6A8032F65EEC2A0C728EEC52E9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 019B Signing time: Thu 08 May 2025 21:40:42 +0000 Manifest this update: Thu 08 May 2025 21:35:39 +0000 Manifest next update: Sat 10 May 2025 01:05:39 +0000 Files and hashes: 1: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: OX3RHdtuqmLEvG1ZYjgRikhuEWksaQB7VsQm/hmQ+LY=) 2: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 8L2dffl4g1ilG1l5/B+kC7djnpjUVSHg7XLmPYAhjYI=) 3: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: YwlpA1QVp4r3DXP5QoApg1oIOzgou2D5tzpYT+YmXZQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:aa:4b:a0:45:82:7e:6a:80:32:f6:5e:ec:2a:0c:72:8e:ec:52:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: May 8 21:35:39 2025 GMT Not After : May 10 01:05:39 2025 GMT Subject: CN=8698FC071F2F1B1F21D1CA5C0974149ADA424BF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:15:9f:3c:dd:25:ae:c9:21:8a:2a:c9:36:e6: ea:b7:a1:cb:84:f5:43:44:61:46:27:ec:80:d5:4c: 26:77:26:cf:fb:c9:67:22:f2:b5:10:aa:74:f2:49: b2:ee:14:41:74:a5:f0:7a:dc:81:98:93:3d:9c:24: 68:ea:76:06:d9:0a:b8:21:19:3d:37:70:6b:82:4f: e5:b5:ea:fa:fa:39:ca:d5:7e:16:44:df:18:3c:a7: 46:90:1c:df:7e:61:e8:89:8c:8f:57:56:ad:c0:3b: f3:0a:74:61:e9:04:85:1d:60:94:1d:7a:03:5e:ee: fe:3c:74:6c:10:27:3c:ce:a5:6e:4b:08:c2:16:78: 0f:54:e7:6b:4c:c7:c9:a1:39:2d:14:2a:7c:a5:63: 7b:a6:2a:d2:dc:f8:d4:02:b0:db:18:ea:ff:9c:33: 65:7c:65:c8:9d:db:4c:c2:b8:ef:11:b2:d9:bb:58: a1:3b:cc:69:62:82:c9:4e:5e:f5:79:53:ec:66:da: a0:8e:15:5c:61:2d:20:0b:a3:f0:e1:48:c7:00:05: 37:35:96:3b:60:6e:e9:06:c4:44:cf:cb:eb:94:37: 55:2c:0b:6c:77:76:98:0e:a3:f3:7d:a3:82:d4:d5: 4b:5e:26:eb:b3:00:28:d9:01:69:22:ae:54:c3:9f: 4e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:98:FC:07:1F:2F:1B:1F:21:D1:CA:5C:09:74:14:9A:DA:42:4B:F7 X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:13:e9:34:d5:ff:7c:6d:09:fa:09:a3:2a:39:e1:f2:71:ee: 67:48:9c:f4:41:0b:df:ca:48:bb:8a:6b:6b:25:e6:0c:d0:e5: 22:47:cd:f2:84:81:8e:20:81:d6:1d:4f:3a:be:0e:58:de:c9: 67:3d:6b:38:cb:47:d4:2c:00:fb:bf:7d:4c:fe:91:bd:47:5f: fa:b6:77:79:8e:a9:fd:16:81:e0:d9:72:55:1f:2e:ef:8a:ea: 36:1a:af:f4:bc:91:98:71:c3:f4:26:22:5d:30:a9:02:2a:bd: 20:a3:70:78:3b:d6:1f:bb:7e:df:62:35:eb:62:86:6e:22:ea: 3d:f4:6c:03:c8:f2:e7:82:3d:f3:97:aa:7a:8d:75:2c:38:dd: 43:27:1b:6b:e6:f7:45:46:52:5e:41:3e:e7:8b:d7:de:16:0d: c4:2d:30:8d:cc:bb:6a:7b:f0:f3:92:f5:70:9a:b6:5f:07:ed: 16:5e:43:42:d9:3b:5d:12:1d:45:55:c0:4b:c1:74:d6:85:02: 14:b3:85:e6:b5:2e:c8:96:4b:11:fc:67:b8:ea:6e:92:7c:c1: 14:fb:01:d2:96:2c:40:e8:7b:dd:92:62:c1:ff:3c:e5:91:b7: 72:c4:ec:88:39:54:6e:4c:9b:1c:85:2f:3c:ea:dc:88:64:5b: 8b:4f:9a:5b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUQKpLoEWCfmqAMvZe7CoMco7sUukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNTA1MDgyMTM1MzlaFw0yNTA1MTAwMTA1MzlaMDMxMTAvBgNV BAMTKDg2OThGQzA3MUYyRjFCMUYyMUQxQ0E1QzA5NzQxNDlBREE0MjRCRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKFZ883SWuySGKKsk25uq3ocuE 9UNEYUYn7IDVTCZ3Js/7yWci8rUQqnTySbLuFEF0pfB63IGYkz2cJGjqdgbZCrgh GT03cGuCT+W16vr6OcrVfhZE3xg8p0aQHN9+YeiJjI9XVq3AO/MKdGHpBIUdYJQd egNe7v48dGwQJzzOpW5LCMIWeA9U52tMx8mhOS0UKnylY3umKtLc+NQCsNsY6v+c M2V8Zcid20zCuO8Rstm7WKE7zGligslOXvV5U+xm2qCOFVxhLSALo/DhSMcABTc1 ljtgbukGxETPy+uUN1UsC2x3dpgOo/N9o4LU1UteJuuzACjZAWkirlTDn06zAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUhpj8Bx8vGx8h0cpcCXQUmtpCS/cwHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJ8T6TTV/3xtCfoJoyo5 4fJx7mdInPRBC9/KSLuKa2sl5gzQ5SJHzfKEgY4ggdYdTzq+DljeyWc9azjLR9Qs APu/fUz+kb1HX/q2d3mOqf0WgeDZclUfLu+K6jYar/S8kZhxw/QmIl0wqQIqvSCj cHg71h+7ft9iNetihm4i6j30bAPI8ueCPfOXqnqNdSw43UMnG2vm90VGUl5BPueL 194WDcQtMI3Mu2p78POS9XCatl8H7RZeQ0LZO10SHUVVwEvBdNaFAhSzhea1LsiW SxH8Z7jqbpJ8wRT7AdKWLEDoe92SYsH/POWRt3LE7Ig5VG5MmxyFLzzq3IhkW4tP mls= -----END CERTIFICATE-----Generated at Fri May 9 02:07:42 2025 by rpki-client