$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: pwyMIvMiddnjge8OczdxGBNLsBHAXYNszgXNBFOgLh4= Subject key identifier: 1A:F4:CE:E7:F1:B5:2D:69:E9:E8:BB:F8:0B:02:E8:53:44:0C:E2:33 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 5FAA30CC2134A9DADF058375CA8BFA285324DB6A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 01DB Signing time: Sun 29 Jun 2025 01:06:10 +0000 Manifest this update: Sun 29 Jun 2025 01:01:10 +0000 Manifest next update: Mon 30 Jun 2025 01:23:10 +0000 Files and hashes: 1: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: rixQzPaaFVB01l+7eyjWkk8po9HMrqBSKCiwj3MBl3Q=) 2: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: 40KX5Azg+QOWUNYOrdl6IsWrdX+iJJgcObJYGtl3Q6w=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 18:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:aa:30:cc:21:34:a9:da:df:05:83:75:ca:8b:fa:28:53:24:db:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Jun 29 01:01:10 2025 GMT Not After : Jun 30 01:23:10 2025 GMT Subject: CN=1AF4CEE7F1B52D69E9E8BBF80B02E853440CE233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:08:ed:2a:23:1f:8b:ea:07:92:c1:f3:9c:e7: 12:2f:e5:c6:31:a9:30:41:f1:c8:c3:06:ae:c9:09: df:82:5f:3a:92:f1:04:ed:54:40:f3:d2:24:10:15: a3:2c:39:9f:8c:e6:39:34:b8:26:9d:35:ab:6b:5e: b7:93:ac:98:b9:6d:74:9b:7f:29:ca:cd:81:2b:54: 48:2b:bc:19:df:9d:82:7a:1e:05:64:da:84:a8:58: 8b:ed:83:5e:06:c8:58:2c:95:8e:c0:c8:ee:30:af: 9c:60:c8:35:90:e6:57:10:97:2d:e5:a2:38:ee:73: 2d:f2:36:ae:60:47:d0:b9:47:2b:1c:bb:6b:1a:f8: eb:c7:cc:c0:1b:c2:8c:84:e1:e0:b0:f2:0b:f9:1e: a4:64:6a:3e:1a:b6:70:ae:f2:c7:51:50:43:a8:99: 7e:3a:c8:73:2e:eb:75:aa:c0:c0:25:77:13:43:59: 87:c5:c1:18:41:81:22:90:e5:2a:a7:37:8b:a7:be: bf:d1:6a:ad:16:16:9c:1e:56:51:a8:04:22:51:c3: a3:0b:22:d6:2f:fc:f9:ec:87:fd:be:e1:4c:7b:f0: 3c:3e:e7:76:65:81:1b:f4:18:da:64:ca:42:66:78: b1:26:fb:37:07:40:cf:dc:92:b0:ba:24:68:db:27: c6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F4:CE:E7:F1:B5:2D:69:E9:E8:BB:F8:0B:02:E8:53:44:0C:E2:33 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:fe:2a:20:04:2f:d5:af:cd:8f:af:87:02:ea:3e:c6:66:ee: 9f:65:84:f8:e7:13:a0:e7:7a:b0:3b:b4:91:a2:58:d3:85:16: 50:3c:9e:e1:7d:be:41:44:b7:7c:61:7a:d5:31:1e:de:6a:9c: f3:8b:9e:8f:42:79:32:85:66:42:4d:dc:93:62:8d:45:d3:24: 52:d3:2c:0e:63:03:76:1e:4d:69:b2:0a:8f:81:ee:a5:ab:77: 1c:95:e2:c0:65:a4:c2:df:a3:4d:a6:7f:3d:05:ab:ed:43:f2: ae:63:b6:4b:6a:fd:28:52:ab:8c:dd:c0:cd:54:c8:9b:c8:f6: 06:a3:09:62:91:97:b0:1c:f9:f3:84:8a:54:53:03:36:f3:7a: ef:96:2b:94:9c:e0:2b:52:e7:a6:17:a7:82:dd:b3:af:28:34: d4:22:ae:e6:24:40:81:03:91:b5:db:4e:eb:91:4f:1b:b4:30: 9d:df:14:bc:b9:da:2c:d4:7c:b4:9b:f1:88:7a:63:38:05:f5: b8:3d:2b:fd:64:57:7a:0f:cc:0d:32:c6:76:e3:eb:64:8d:c3: b4:6c:70:33:ce:2c:9a:0e:e3:7b:65:f3:6c:cf:49:44:bf:a4: d7:4b:7f:71:9c:f7:86:0b:20:d3:6a:10:a3:62:1a:96:17:45: 57:25:5c:e7 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUX6owzCE0qdrfBYN1yov6KFMk22owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNTA2MjkwMTAxMTBaFw0yNTA2MzAwMTIzMTBaMDMxMTAvBgNV BAMTKDFBRjRDRUU3RjFCNTJENjlFOUU4QkJGODBCMDJFODUzNDQwQ0UyMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNCO0qIx+L6geSwfOc5xIv5cYx qTBB8cjDBq7JCd+CXzqS8QTtVEDz0iQQFaMsOZ+M5jk0uCadNatrXreTrJi5bXSb fynKzYErVEgrvBnfnYJ6HgVk2oSoWIvtg14GyFgslY7AyO4wr5xgyDWQ5lcQly3l ojjucy3yNq5gR9C5Ryscu2sa+OvHzMAbwoyE4eCw8gv5HqRkaj4atnCu8sdRUEOo mX46yHMu63WqwMAldxNDWYfFwRhBgSKQ5SqnN4unvr/Raq0WFpweVlGoBCJRw6ML ItYv/Pnsh/2+4Ux78Dw+53ZlgRv0GNpkykJmeLEm+zcHQM/ckrC6JGjbJ8alAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUGvTO5/G1LWnp6Lv4CwLoU0QM4jMwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAE/+KiAEL9WvzY+vhwLq PsZm7p9lhPjnE6DnerA7tJGiWNOFFlA8nuF9vkFEt3xhetUxHt5qnPOLno9CeTKF ZkJN3JNijUXTJFLTLA5jA3YeTWmyCo+B7qWrdxyV4sBlpMLfo02mfz0Fq+1D8q5j tktq/ShSq4zdwM1UyJvI9gajCWKRl7Ac+fOEilRTAzbzeu+WK5Sc4CtS56YXp4Ld s68oNNQiruYkQIEDkbXbTuuRTxu0MJ3fFLy52izUfLSb8Yh6YzgF9bg9K/1kV3oP zA0yxnbj62SNw7RscDPOLJoO43tl82zPSUS/pNdLf3Gc94YLINNqEKNiGpYXRVcl XOc= -----END CERTIFICATE-----Generated at Sun Jun 29 05:24:34 2025 by rpki-client