$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft File: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft (raw, json) Hash identifier: XtNWQgbtj1dnTYUlUUOXYWsqatdIXm1GXVHc7dXH2Q4= Subject key identifier: D9:C1:5C:9F:22:71:D3:A9:AE:A8:3A:33:30:F1:5C:DC:FE:5F:4A:21 Authority key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 Certificate issuer: /CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Certificate serial: 5EDDCB4A9DFCE62C01B7389E681249E11573AEB1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft Manifest number: 01DE Signing time: Sun 29 Jun 2025 13:11:33 +0000 Manifest this update: Sun 29 Jun 2025 13:06:33 +0000 Manifest next update: Mon 30 Jun 2025 15:41:33 +0000 Files and hashes: 1: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl (hash: cqgt3iRFgw6sX5YrcJsmQDja3pykbSqUo2fc74+LcDg=) 2: 326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (hash: rxzc3BrYti6kxmXubVnEFiS+UC7vkumI3P6AvUB5lwM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 12:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:dd:cb:4a:9d:fc:e6:2c:01:b7:38:9e:68:12:49:e1:15:73:ae:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Validity Not Before: Jun 29 13:06:33 2025 GMT Not After : Jun 30 15:41:33 2025 GMT Subject: CN=D9C15C9F2271D3A9AEA83A3330F15CDCFE5F4A21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d7:85:54:29:e9:3c:9d:a9:65:45:c8:19:75: 4e:cd:54:ee:e5:2f:45:5b:87:9b:40:71:9b:4d:30: 00:81:66:b8:e7:df:55:59:6c:36:e0:ff:a1:86:09: 83:e3:42:8d:d0:3e:70:e9:f6:6f:2c:af:66:2a:17: ba:ba:ef:ff:c0:8a:4d:e9:15:90:05:8a:ef:50:e5: 1b:98:33:ec:69:13:80:d3:1d:0b:21:bd:02:78:18: 44:2d:30:b4:0f:44:55:96:33:df:ba:e3:91:d4:03: 92:8b:a3:2f:5c:f9:18:6f:89:ee:df:10:0a:55:0e: 82:cc:64:b6:3b:93:ca:e4:7d:9a:6f:1f:eb:fc:9d: 98:c7:f0:ef:1c:c0:97:bf:9c:2d:84:bf:c3:8f:6b: 4b:05:bb:1a:d9:e6:64:f9:1b:d6:b6:d2:7a:30:65: d3:42:a1:30:6f:5f:c4:b6:12:6b:30:e2:b1:00:5b: c9:9a:92:7b:fa:6f:7d:1c:7d:34:fe:cd:7d:11:31: 01:0b:41:5c:b3:3b:a0:eb:3c:27:cd:df:24:3b:4e: 71:34:69:9f:aa:22:08:db:7a:41:bb:b5:cf:9b:b3: 3a:65:a0:eb:cf:ee:10:be:ea:f2:a2:a8:5c:aa:b4: 07:b1:15:33:60:83:cd:bf:10:f8:56:cb:35:10:c0: a8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C1:5C:9F:22:71:D3:A9:AE:A8:3A:33:30:F1:5C:DC:FE:5F:4A:21 X509v3 Authority Key Identifier: keyid:1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:e9:a6:40:c5:a4:4e:60:49:ec:f4:28:65:9c:f2:05:8d:4a: 3f:e2:0b:47:44:37:4f:71:06:e4:1f:7d:e3:f6:e1:ad:d9:28: 27:d1:f7:3e:32:f8:05:89:ac:1a:51:bc:e8:01:33:ef:36:1a: 7c:86:24:b6:54:04:cd:5f:f5:f9:01:ea:73:cd:c8:39:fe:e5: 09:07:85:37:25:ee:7c:c6:ca:90:32:66:83:96:37:53:2f:62: b0:3f:c0:4b:85:46:03:91:22:f8:da:13:60:0b:e3:c7:85:06: df:c5:c2:38:f0:34:79:ff:a6:a9:b0:8d:71:1c:bf:0e:0e:a9: b5:0a:1a:aa:48:d6:1a:8a:4d:c0:3b:17:92:08:f0:1b:47:53: 07:a2:a7:87:7e:41:d8:93:ce:67:44:5b:6d:ce:c7:ad:7c:ab: 43:60:e4:ec:da:7e:f6:fe:25:14:07:3f:fa:98:55:77:42:80: 10:4e:bb:fc:6e:89:c9:2e:30:9a:60:b6:73:fd:b9:db:5e:78: b6:2a:79:99:8e:b7:28:c0:2b:29:06:7f:5a:5c:af:18:0e:3c: 68:e8:eb:44:dc:bd:9f:78:bc:a2:09:51:be:6b:49:15:5a:e5: cf:9c:85:41:95:ef:6f:0a:c3:04:e6:fc:11:78:dd:49:3a:d5: d7:dc:0d:96 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUXt3LSp385iwBtzieaBJJ4RVzrrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJB NkI3RUY3MTAeFw0yNTA2MjkxMzA2MzNaFw0yNTA2MzAxNTQxMzNaMDMxMTAvBgNV BAMTKEQ5QzE1QzlGMjI3MUQzQTlBRUE4M0EzMzMwRjE1Q0RDRkU1RjRBMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU14VUKek8nallRcgZdU7NVO7l L0Vbh5tAcZtNMACBZrjn31VZbDbg/6GGCYPjQo3QPnDp9m8sr2YqF7q67//Aik3p FZAFiu9Q5RuYM+xpE4DTHQshvQJ4GEQtMLQPRFWWM9+645HUA5KLoy9c+Rhvie7f EApVDoLMZLY7k8rkfZpvH+v8nZjH8O8cwJe/nC2Ev8OPa0sFuxrZ5mT5G9a20now ZdNCoTBvX8S2Emsw4rEAW8maknv6b30cfTT+zX0RMQELQVyzO6DrPCfN3yQ7TnE0 aZ+qIgjbekG7tc+bszploOvP7hC+6vKiqFyqtAexFTNgg82/EPhWyzUQwKhJAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU2cFcnyJx06muqDozMPFc3P5fSiEwHwYDVR0j BBgwFoAUGrsI1BpaaXQyDZeId2mhW6a373EwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2IzZGE1Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAv MUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQUJCMDhENDFBNUE2OTc0MzIwRDk3ODg3NzY5QTE1 QkE2QjdFRjcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2IzZGE1 Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAvMUFCQjA4RDQxQTVBNjk3NDMy MEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANPppkDFpE5gSez0KGWc 8gWNSj/iC0dEN09xBuQffeP24a3ZKCfR9z4y+AWJrBpRvOgBM+82GnyGJLZUBM1f 9fkB6nPNyDn+5QkHhTcl7nzGypAyZoOWN1MvYrA/wEuFRgORIvjaE2AL48eFBt/F wjjwNHn/pqmwjXEcvw4OqbUKGqpI1hqKTcA7F5II8BtHUweip4d+QdiTzmdEW23O x618q0Ng5Ozafvb+JRQHP/qYVXdCgBBOu/xuickuMJpgtnP9udteeLYqeZmOtyjA KykGf1pcrxgOPGjo60TcvZ94vKIJUb5rSRVa5c+chUGV728KwwTm/BF43Uk61dfc DZY= -----END CERTIFICATE-----Generated at Sun Jun 29 20:18:59 2025 by rpki-client