$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: 6Z4h79wQ//cv+vGgiYM9hruq1d2E/uxghB4V+NHjIBg= Subject key identifier: 94:8B:FC:98:16:4D:1C:51:F8:42:8D:F3:31:3D:D6:9F:6E:4D:A0:C3 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 79767C1A99F926A90C8A6F651D1804BD4F924FCB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 0199 Signing time: Sun 11 May 2025 13:38:49 +0000 Manifest this update: Sun 11 May 2025 13:33:47 +0000 Manifest next update: Mon 12 May 2025 16:48:47 +0000 Files and hashes: 1: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: ZrnGKp52VwdIW6ADcyljrQKRdejSedsJmdCAWzqhtHs=) 2: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: 3frqhQjre7I06dNOIqS9Zpmiq0BoWShungxY69p9x50=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 06:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:76:7c:1a:99:f9:26:a9:0c:8a:6f:65:1d:18:04:bd:4f:92:4f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: May 11 13:33:47 2025 GMT Not After : May 12 16:48:47 2025 GMT Subject: CN=948BFC98164D1C51F8428DF3313DD69F6E4DA0C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4e:4d:34:cd:df:87:73:4d:b3:9c:7b:59:93: 4f:c3:26:90:9e:89:c6:60:16:36:dc:57:ab:3e:72: f3:81:29:d6:af:40:2e:a2:ca:6a:8c:4b:c8:7c:16: c3:36:00:95:d3:3b:34:46:1d:8b:f5:9d:7e:79:d6: 8e:68:97:2b:39:f0:b2:9d:f4:d1:a2:53:7d:96:3d: 62:e9:89:20:74:93:0f:10:39:be:77:4a:5f:5d:1f: af:39:9b:60:99:58:06:08:79:9a:73:5a:07:be:a3: e1:12:0d:ed:66:76:d2:62:80:2d:b4:f1:84:66:a9: 17:94:7d:be:45:d8:63:27:39:d7:99:69:12:1a:af: 6c:1d:fd:c0:eb:9e:2c:6e:e3:ae:ab:69:72:1a:ba: ab:cc:96:90:fe:f4:c2:e4:a3:04:25:b5:b6:76:05: 40:52:f7:32:70:b7:48:52:0a:23:70:6d:ac:35:6b: e1:97:12:0b:bf:0b:03:50:28:d9:d3:13:71:a0:6b: 58:07:3a:30:94:ba:a3:4f:71:73:3c:6b:e0:74:6d: f6:82:d5:df:1f:63:5f:77:bb:5a:7c:95:32:ed:d7: ee:a3:43:f9:40:97:a7:a8:45:f3:e5:12:54:b5:73: be:0a:c3:f5:a2:04:6a:ba:e3:d3:a5:cb:e3:09:1a: a2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8B:FC:98:16:4D:1C:51:F8:42:8D:F3:31:3D:D6:9F:6E:4D:A0:C3 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:eb:73:af:56:a6:9c:b4:bc:64:61:af:69:65:3c:ce:ad:ec: 26:8f:08:ca:e0:61:05:1d:27:bf:40:d5:7e:67:b1:03:bc:eb: bb:5e:cd:4f:e7:97:17:4d:84:73:0c:8f:31:5d:f1:8f:ac:5d: 1d:45:63:a5:4e:3b:3f:45:a1:90:e5:0a:1c:59:d3:57:0a:2c: 63:dd:2e:d8:a8:f5:14:8b:cf:04:41:f8:32:3b:7e:37:bd:f8: 63:b5:c6:83:17:e6:c1:74:55:a0:21:e3:84:29:02:88:7e:e4: 3a:c1:bf:4f:7f:89:f6:57:b8:f4:75:1b:8d:8b:f8:e4:3f:18: 6b:c9:07:19:b7:a1:83:10:d8:cf:55:de:b2:76:19:f5:05:17: 3b:ce:7c:65:89:6a:05:3a:05:ef:2b:26:81:3a:b0:de:b4:1a: f5:e1:e4:44:9e:94:03:80:b9:36:c1:d3:6f:38:11:45:e1:9d: 22:7f:19:16:c1:ef:b9:32:fe:6a:67:58:de:a9:19:d2:ba:70: 75:fc:b9:b9:e5:1e:9c:a3:b2:ef:08:1b:28:0e:85:3a:1c:9d: 95:0c:f5:b5:21:8e:20:33:be:51:55:8a:05:ee:80:d3:b0:74: 9d:19:81:f7:67:44:2a:8f:05:3a:94:89:5a:0b:70:e8:ee:c9: 7f:89:02:f1 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUeXZ8Gpn5JqkMim9lHRgEvU+ST8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNTA1MTExMzMzNDdaFw0yNTA1MTIxNjQ4NDdaMDMxMTAvBgNV BAMTKDk0OEJGQzk4MTY0RDFDNTFGODQyOERGMzMxM0RENjlGNkU0REEwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvTk00zd+Hc02znHtZk0/DJpCe icZgFjbcV6s+cvOBKdavQC6iymqMS8h8FsM2AJXTOzRGHYv1nX551o5olys58LKd 9NGiU32WPWLpiSB0kw8QOb53Sl9dH685m2CZWAYIeZpzWge+o+ESDe1mdtJigC20 8YRmqReUfb5F2GMnOdeZaRIar2wd/cDrnixu466raXIauqvMlpD+9MLkowQltbZ2 BUBS9zJwt0hSCiNwbaw1a+GXEgu/CwNQKNnTE3Gga1gHOjCUuqNPcXM8a+B0bfaC 1d8fY193u1p8lTLt1+6jQ/lAl6eoRfPlElS1c74Kw/WiBGq649Oly+MJGqLRAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUlIv8mBZNHFH4Qo3zMT3Wn25NoMMwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFDrc69Wppy0vGRhr2ll PM6t7CaPCMrgYQUdJ79A1X5nsQO867tezU/nlxdNhHMMjzFd8Y+sXR1FY6VOOz9F oZDlChxZ01cKLGPdLtio9RSLzwRB+DI7fje9+GO1xoMX5sF0VaAh44QpAoh+5DrB v09/ifZXuPR1G42L+OQ/GGvJBxm3oYMQ2M9V3rJ2GfUFFzvOfGWJagU6Be8rJoE6 sN60GvXh5ESelAOAuTbB0284EUXhnSJ/GRbB77ky/mpnWN6pGdK6cHX8ubnlHpyj su8IGygOhTocnZUM9bUhjiAzvlFVigXugNOwdJ0ZgfdnRCqPBTqUiVoLcOjuyX+J AvE= -----END CERTIFICATE-----Generated at Sun May 11 17:18:31 2025 by rpki-client