$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft File: 44C4C913D58F5EF847996241E969B60A1E3F1389.mft (raw, json) Hash identifier: Lfk3l+gPaWvxuDqR2I3g5F0GKF2n/O1xosFBEGol7g8= Subject key identifier: 0E:32:F0:45:E3:B0:4D:91:37:18:75:08:7B:18:85:3E:9C:B7:A9:22 Authority key identifier: 44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89 Certificate issuer: /CN=44C4C913D58F5EF847996241E969B60A1E3F1389 Certificate serial: 5753D0E37F12CD22448CA8CA85E6A3635EEA7C76 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft Manifest number: 01E2 Signing time: Mon 30 Jun 2025 12:08:26 +0000 Manifest this update: Mon 30 Jun 2025 12:03:26 +0000 Manifest next update: Tue 01 Jul 2025 13:36:26 +0000 Files and hashes: 1: 44C4C913D58F5EF847996241E969B60A1E3F1389.crl (hash: FnAnp+J1pwE7ACUT1V/bT2J603WCeFUgKR0rxFuT6LQ=) 2: E42882C5C372E03CCD5EA87BB1B6FFEF1FF1BFF5.cer (hash: ZgkUmwBAN+BgyVFg/7xrYnbw3kS/Mk8fXnbXdBLqa28=) 3: 326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa (hash: ZFgFa3mIQWS+C3ZANFakUZVad7gh+grxNMovjG/43xs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 13:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:53:d0:e3:7f:12:cd:22:44:8c:a8:ca:85:e6:a3:63:5e:ea:7c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44C4C913D58F5EF847996241E969B60A1E3F1389 Validity Not Before: Jun 30 12:03:26 2025 GMT Not After : Jul 1 13:36:26 2025 GMT Subject: CN=0E32F045E3B04D91371875087B18853E9CB7A922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:6d:bc:a8:e9:24:7f:e6:a3:c2:5a:4c:40: 50:9c:83:a3:2f:5c:48:ef:b0:e0:5c:76:a4:fb:47: 05:f2:8e:ae:9a:7a:43:f0:87:b9:c0:f7:e8:16:81: 3b:99:c6:3e:b6:ae:22:49:d0:7a:5e:97:bb:3e:44: 66:75:96:71:fd:cb:5a:9f:6c:03:ac:7d:5c:f7:92: e0:f7:70:8e:98:2b:1d:56:07:ee:3b:00:24:d1:a1: 87:67:c4:96:08:2e:de:82:cb:9b:63:ce:e4:d7:82: bd:97:94:4f:9e:d0:41:7e:f3:3c:4a:03:39:09:f0: 79:d7:d5:4a:be:80:e4:ce:27:06:6b:5e:1f:46:5e: 41:99:e2:86:97:63:c2:35:6c:76:0a:64:71:80:70: 6c:52:cc:b1:43:a4:18:2a:b0:3c:21:8d:2c:72:41: ee:89:10:51:8c:0b:72:8d:69:16:6d:f9:ce:89:d9: bb:32:9d:f5:12:87:7b:e4:96:00:41:fa:23:f4:43: bf:ea:3c:c9:60:64:da:5b:20:c7:85:2a:25:61:89: 6e:42:80:a7:ae:ad:15:e0:39:8a:d5:8c:29:12:1e: 48:e3:81:ef:fe:8d:9a:fe:bc:06:6e:0c:cd:28:fb: eb:34:7e:dc:42:c8:88:ed:04:cd:fe:45:48:b8:d2: 1f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:32:F0:45:E3:B0:4D:91:37:18:75:08:7B:18:85:3E:9C:B7:A9:22 X509v3 Authority Key Identifier: keyid:44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:76:06:3f:6d:e3:4e:0a:80:f6:f7:31:49:c7:4b:e9:54:f5: f1:98:8c:c0:5f:1e:58:f0:46:a8:5a:0b:ee:0d:86:1e:d7:18: cc:f2:5c:23:7e:55:4a:d8:6b:3a:6e:92:11:35:db:08:10:45: 67:ae:a1:cd:88:07:61:2e:98:94:64:7c:c5:84:a2:69:8a:2d: ff:a6:be:ad:3b:37:2d:65:fb:c9:11:b9:0b:b0:4f:21:d9:a9: 7b:5c:96:6d:a2:a1:8b:86:5d:80:4e:a5:6e:f5:f2:66:43:1d: 61:98:f7:48:61:46:88:dd:65:06:4a:78:6a:2a:5f:bb:09:91: f3:0a:0d:7d:d2:c5:d8:0c:a9:96:4c:bb:f0:ea:e5:0b:14:03: bb:d2:9c:64:02:92:f3:cb:f1:e8:5e:bb:1e:65:20:e0:b9:a3: 9d:4c:01:e0:a3:fb:96:a6:6d:94:bd:6a:6f:47:c6:fe:db:62: a4:48:7b:a6:3e:57:60:c4:c1:83:ea:eb:b1:d9:14:be:0e:0b: 27:10:31:79:1a:38:f3:da:ae:f4:bd:e6:b6:fb:d7:09:33:80: 6a:da:44:f0:42:ad:7a:7d:02:9e:5e:9a:f9:4c:16:59:db:e2: 5a:99:9a:18:e5:2e:ca:38:73:8b:31:ff:85:a1:f6:3d:57:db: d5:46:f5:e3 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUV1PQ438SzSJEjKjKheajY17qfHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEEx RTNGMTM4OTAeFw0yNTA2MzAxMjAzMjZaFw0yNTA3MDExMzM2MjZaMDMxMTAvBgNV BAMTKDBFMzJGMDQ1RTNCMDREOTEzNzE4NzUwODdCMTg4NTNFOUNCN0E5MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzxW28qOkkf+ajwlpMQFCcg6Mv XEjvsOBcdqT7RwXyjq6aekPwh7nA9+gWgTuZxj62riJJ0Hpel7s+RGZ1lnH9y1qf bAOsfVz3kuD3cI6YKx1WB+47ACTRoYdnxJYILt6Cy5tjzuTXgr2XlE+e0EF+8zxK AzkJ8HnX1Uq+gOTOJwZrXh9GXkGZ4oaXY8I1bHYKZHGAcGxSzLFDpBgqsDwhjSxy Qe6JEFGMC3KNaRZt+c6J2bsynfUSh3vklgBB+iP0Q7/qPMlgZNpbIMeFKiVhiW5C gKeurRXgOYrVjCkSHkjjge/+jZr+vAZuDM0o++s0ftxCyIjtBM3+RUi40h+9AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUDjLwReOwTZE3GHUIexiFPpy3qSIwHwYDVR0j BBgwFoAURMTJE9WPXvhHmWJB6Wm2Ch4/E4kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2QwZjJkYjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAv NDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80NEM0QzkxM0Q1OEY1RUY4NDc5OTYyNDFFOTY5QjYw QTFFM0YxMzg5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2QwZjJk Yjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAvNDRDNEM5MTNENThGNUVGODQ3 OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG52Bj9t404KgPb3MUnH S+lU9fGYjMBfHljwRqhaC+4Nhh7XGMzyXCN+VUrYazpukhE12wgQRWeuoc2IB2Eu mJRkfMWEommKLf+mvq07Ny1l+8kRuQuwTyHZqXtclm2ioYuGXYBOpW718mZDHWGY 90hhRojdZQZKeGoqX7sJkfMKDX3SxdgMqZZMu/Dq5QsUA7vSnGQCkvPL8eheux5l IOC5o51MAeCj+5ambZS9am9Hxv7bYqRIe6Y+V2DEwYPq67HZFL4OCycQMXkaOPPa rvS95rb71wkzgGraRPBCrXp9Ap5emvlMFlnb4lqZmhjlLso4c4sx/4Wh9j1X29VG 9eM= -----END CERTIFICATE-----Generated at Tue Jul 1 06:07:34 2025 by rpki-client