$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft File: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft (raw, json) Hash identifier: 8OHQPwNPJW2tv4rGSUqJZlh2Oa5DvjW4sQZfrRPPTTs= Subject key identifier: D9:CF:0B:89:89:76:88:49:F0:E6:28:6B:FB:FD:0C:8B:55:8C:5A:E5 Authority key identifier: 1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87 Certificate issuer: /CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87 Certificate serial: 5279CEFCD1CA2246ED0FA267F98DA1F264F5BB02 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft Manifest number: 01DD Signing time: Tue 01 Jul 2025 10:19:13 +0000 Manifest this update: Tue 01 Jul 2025 10:14:13 +0000 Manifest next update: Wed 02 Jul 2025 13:46:13 +0000 Files and hashes: 1: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl (hash: FnypWi4V60NxaklUO24jJMbXt6kFclBNFp9KyPNcGOc=) 2: 326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa (hash: Ck9ZZ0tiSTG41w0m3od8Zz6h1DTJUjOEieFp2NJMOpw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 13:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:79:ce:fc:d1:ca:22:46:ed:0f:a2:67:f9:8d:a1:f2:64:f5:bb:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87 Validity Not Before: Jul 1 10:14:13 2025 GMT Not After : Jul 2 13:46:13 2025 GMT Subject: CN=D9CF0B8989768849F0E6286BFBFD0C8B558C5AE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a0:5d:0b:e6:5f:95:a0:75:52:47:4e:49:94: 2c:ca:83:dd:cf:91:3a:6e:4c:6c:9d:e7:6b:af:c1: 8a:64:ad:8a:80:b6:fd:f6:1c:45:49:90:45:1a:ed: 20:ff:ff:5d:1c:bf:a9:5b:57:ea:aa:21:77:b3:1f: d8:1c:8e:7a:2f:0d:50:85:1b:05:56:fd:af:49:51: 22:c5:98:31:0d:88:cd:54:40:33:dd:80:84:ec:6b: ed:a6:ef:b4:a2:94:97:0d:5e:ce:c0:74:2e:92:cd: 2b:9e:5c:35:83:c8:e7:73:e7:bf:45:f8:54:34:c4: ad:59:75:91:e2:6f:83:b7:8d:7e:df:79:48:92:7f: 71:f6:5a:80:ca:a2:0a:64:59:ef:c3:48:36:6c:d1: cd:48:78:58:1c:9b:b0:02:95:b2:47:3e:e6:a6:1b: 6e:57:83:24:2b:fe:ad:0b:a4:db:57:b8:15:66:9e: 8b:ee:47:5b:b1:55:a6:84:cc:9e:ec:93:bd:65:b5: 28:11:ca:30:23:27:b3:1c:e7:85:ac:24:54:32:d6: 43:fd:13:5c:16:b5:be:30:d6:3c:22:f0:9e:64:9e: fb:53:ac:4e:79:e8:be:4a:3e:48:f4:b3:2b:a6:4b: 23:5f:1f:9a:de:a5:3b:00:05:32:5c:42:45:a3:5f: d3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CF:0B:89:89:76:88:49:F0:E6:28:6B:FB:FD:0C:8B:55:8C:5A:E5 X509v3 Authority Key Identifier: keyid:1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e7:73:d4:c0:4a:a9:80:dc:f6:e5:34:28:b8:03:27:e7:d8: ab:93:03:61:e5:7a:e4:62:90:bf:9b:0f:a6:73:c0:f5:48:98: cf:1f:d5:e4:06:7b:47:15:66:fa:48:64:65:82:c6:a7:6a:d9: cb:0b:07:fd:bb:a5:b0:fa:25:12:68:c6:b7:67:88:b9:43:c7: 82:0e:36:7c:ee:74:bd:d4:b1:9d:19:35:38:c0:62:3b:bb:70: b8:71:2e:b7:7e:b9:90:0e:a4:af:5c:f2:63:9f:35:af:de:35: a9:0d:93:52:27:5e:8b:f1:20:b5:a6:da:7d:a9:33:ac:f6:19: 55:6c:17:37:b4:9e:2e:0f:ae:ff:c6:eb:34:d2:75:6d:11:ed: 41:dc:44:17:36:2a:25:6d:06:b0:52:6a:27:c6:75:ba:4b:58: 27:c9:f5:75:30:24:1f:4c:f7:d1:87:f2:c3:c5:6a:02:39:a9: 53:5b:21:d9:c6:44:3f:0a:d4:ee:80:f3:3a:fd:f7:5d:3f:87: 29:bc:42:a2:6e:a2:9f:f9:2a:6d:57:9c:2b:6c:bb:ec:15:57: 11:5e:e9:ee:cc:48:9c:66:27:2f:13:71:25:c3:f8:cb:1e:2b: c2:f3:1f:db:01:ea:e1:22:41:5b:c2:ea:25:ef:e2:5d:69:dd: a4:a6:28:6d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUUnnO/NHKIkbtD6Jn+Y2h8mT1uwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZCOUM4NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3 MDFCMEY4NzAeFw0yNTA3MDExMDE0MTNaFw0yNTA3MDIxMzQ2MTNaMDMxMTAvBgNV BAMTKEQ5Q0YwQjg5ODk3Njg4NDlGMEU2Mjg2QkZCRkQwQzhCNTU4QzVBRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7oF0L5l+VoHVSR05JlCzKg93P kTpuTGyd52uvwYpkrYqAtv32HEVJkEUa7SD//10cv6lbV+qqIXezH9gcjnovDVCF GwVW/a9JUSLFmDENiM1UQDPdgITsa+2m77SilJcNXs7AdC6SzSueXDWDyOdz579F +FQ0xK1ZdZHib4O3jX7feUiSf3H2WoDKogpkWe/DSDZs0c1IeFgcm7AClbJHPuam G25XgyQr/q0LpNtXuBVmnovuR1uxVaaEzJ7sk71ltSgRyjAjJ7Mc54WsJFQy1kP9 E1wWtb4w1jwi8J5knvtTrE556L5KPkj0syumSyNfH5repTsABTJcQkWjX9M7AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU2c8LiYl2iEnw5ihr+/0Mi1WMWuUwHwYDVR0j BBgwFoAUH7nIUPkT1sCad22Ls4MnvnAbD4cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2NjNmMwZDBmNGMwNzQyNDM5MmQ4MjM4NzIwY2M2YTgyLzAv MUZCOUM4NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3MDFCMEY4Ny5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRkI5Qzg1MEY5MTNENkMwOUE3NzZEOEJCMzgzMjdC RTcwMUIwRjg3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2NjNmMw ZDBmNGMwNzQyNDM5MmQ4MjM4NzIwY2M2YTgyLzAvMUZCOUM4NTBGOTEzRDZDMDlB Nzc2RDhCQjM4MzI3QkU3MDFCMEY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACDnc9TASqmA3PblNCi4 Ayfn2KuTA2HleuRikL+bD6ZzwPVImM8f1eQGe0cVZvpIZGWCxqdq2csLB/27pbD6 JRJoxrdniLlDx4IONnzudL3UsZ0ZNTjAYju7cLhxLrd+uZAOpK9c8mOfNa/eNakN k1InXovxILWm2n2pM6z2GVVsFze0ni4Prv/G6zTSdW0R7UHcRBc2KiVtBrBSaifG dbpLWCfJ9XUwJB9M99GH8sPFagI5qVNbIdnGRD8K1O6A8zr9910/hym8QqJuop/5 Km1XnCtsu+wVVxFe6e7MSJxmJy8TcSXD+MseK8LzH9sB6uEiQVvC6iXv4l1p3aSm KG0= -----END CERTIFICATE-----Generated at Tue Jul 1 21:03:57 2025 by rpki-client