$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft File: 44C4C913D58F5EF847996241E969B60A1E3F1389.mft (raw, json) Hash identifier: cPhNIwarBaNPMm0fNErGJq4K+hhdAAWpkv4Lv+mlT+s= Subject key identifier: D3:FA:13:46:77:26:DD:85:BD:5B:F0:E5:13:90:78:BB:ED:85:F7:61 Authority key identifier: 44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89 Certificate issuer: /CN=44C4C913D58F5EF847996241E969B60A1E3F1389 Certificate serial: 65EE81B02A70F5E20FFD45A9DB25347EAA335F85 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft Manifest number: 019C Signing time: Sat 10 May 2025 12:54:19 +0000 Manifest this update: Sat 10 May 2025 12:49:17 +0000 Manifest next update: Sun 11 May 2025 13:03:17 +0000 Files and hashes: 1: E42882C5C372E03CCD5EA87BB1B6FFEF1FF1BFF5.cer (hash: ZgkUmwBAN+BgyVFg/7xrYnbw3kS/Mk8fXnbXdBLqa28=) 2: 44C4C913D58F5EF847996241E969B60A1E3F1389.crl (hash: G7k9rAGNX25VlUI2a52bk5l5AINYRmYzyKocHn+cIjo=) 3: 326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa (hash: 7hFQ2fphXwahaMoTubiz5LcppCCDV985Dg0s/VHtMx8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 12:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ee:81:b0:2a:70:f5:e2:0f:fd:45:a9:db:25:34:7e:aa:33:5f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44C4C913D58F5EF847996241E969B60A1E3F1389 Validity Not Before: May 10 12:49:17 2025 GMT Not After : May 11 13:03:17 2025 GMT Subject: CN=D3FA13467726DD85BD5BF0E5139078BBED85F761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c3:2a:52:fc:52:da:ea:cd:6e:54:a3:6f:d2: b1:9e:da:e0:18:d9:e7:09:94:c6:45:44:4d:92:8a: dd:eb:77:10:d7:e1:80:2b:fb:2d:f4:00:80:fe:a9: 14:84:70:f8:3f:40:da:0d:71:10:c9:f6:f7:d8:97: 52:6f:a8:e6:34:ae:82:6d:a1:80:d5:40:c9:41:e0: 72:9c:a5:84:5f:6e:92:43:36:d7:2e:59:06:d9:bd: b8:ab:8f:34:14:63:36:7f:3f:1c:5a:b8:62:a7:eb: bd:2c:0b:54:a2:b5:32:b2:ad:82:b5:ae:64:2f:2b: 96:3f:7c:0e:9f:64:da:60:c9:b7:61:ea:26:68:6a: 50:7a:9b:7a:6e:8e:35:dc:a2:3a:6e:80:04:b1:e6: 2f:42:10:71:85:80:61:7b:a5:56:1d:48:f6:b8:b7: bb:10:0e:37:b0:09:50:0f:8b:b5:7b:d7:a5:8b:88: e7:c6:19:c5:53:10:8a:f9:81:65:08:82:d6:d8:a5: fe:0d:1e:8a:95:b2:5c:38:3c:dc:07:45:a4:23:d4: 61:73:bf:41:c6:55:a3:bd:73:0b:d2:f6:f2:fe:93: 1f:e3:f4:3a:6d:09:16:9d:ff:67:94:cc:d0:48:6d: ac:30:e1:76:25:22:9a:d8:4c:24:59:b2:ef:47:cf: 21:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FA:13:46:77:26:DD:85:BD:5B:F0:E5:13:90:78:BB:ED:85:F7:61 X509v3 Authority Key Identifier: keyid:44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7a:a1:00:1a:d9:7d:f0:dc:88:cb:f2:47:4e:7e:51:c8:84: 0b:2d:2d:ef:07:f8:0a:62:ae:fc:cd:45:99:c8:95:15:a3:69: 7f:9e:64:7c:cb:32:6c:d7:39:86:77:b0:fd:4e:b4:af:89:ef: 44:5a:c4:04:c7:e6:4b:72:07:86:1a:44:56:27:aa:7b:05:85: 24:46:f2:89:14:f5:8a:4b:0f:1b:aa:f1:9f:91:3c:9a:b6:52: 2d:1d:72:67:a3:cb:f6:1f:5d:45:5f:80:6b:2d:02:66:6c:d2: 9c:d1:95:be:2c:3e:18:05:cd:30:16:88:a3:03:d4:51:78:fe: 54:e0:5c:ba:5b:06:d2:79:1d:d2:89:a4:d5:67:cf:03:17:71: 17:d1:dd:fb:b8:7f:fb:89:c4:c6:f0:28:dd:74:cd:2c:e3:fa: 09:3a:46:3e:51:9f:c4:cc:d1:e6:2f:f8:79:ba:10:a2:2f:39: b0:c1:32:dd:af:7a:f3:a2:90:2d:4b:5d:dd:0d:51:b2:7e:b7: 1a:93:be:83:b8:dc:d1:a0:7b:ce:c6:81:fa:9c:79:5e:81:0c: ab:8c:cb:b5:42:9a:da:cc:9c:0b:06:cd:ed:c1:fd:d6:f8:3e: 43:45:f6:8f:cc:c7:eb:73:dc:d2:92:6a:61:18:2c:5b:ce:76: fb:90:fe:68 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUZe6BsCpw9eIP/UWp2yU0fqozX4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEEx RTNGMTM4OTAeFw0yNTA1MTAxMjQ5MTdaFw0yNTA1MTExMzAzMTdaMDMxMTAvBgNV BAMTKEQzRkExMzQ2NzcyNkREODVCRDVCRjBFNTEzOTA3OEJCRUQ4NUY3NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLwypS/FLa6s1uVKNv0rGe2uAY 2ecJlMZFRE2Sit3rdxDX4YAr+y30AID+qRSEcPg/QNoNcRDJ9vfYl1JvqOY0roJt oYDVQMlB4HKcpYRfbpJDNtcuWQbZvbirjzQUYzZ/PxxauGKn670sC1SitTKyrYK1 rmQvK5Y/fA6fZNpgybdh6iZoalB6m3pujjXcojpugASx5i9CEHGFgGF7pVYdSPa4 t7sQDjewCVAPi7V716WLiOfGGcVTEIr5gWUIgtbYpf4NHoqVslw4PNwHRaQj1GFz v0HGVaO9cwvS9vL+kx/j9DptCRad/2eUzNBIbaww4XYlIprYTCRZsu9HzyH3AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU0/oTRncm3YW9W/DlE5B4u+2F92EwHwYDVR0j BBgwFoAURMTJE9WPXvhHmWJB6Wm2Ch4/E4kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2QwZjJkYjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAv NDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80NEM0QzkxM0Q1OEY1RUY4NDc5OTYyNDFFOTY5QjYw QTFFM0YxMzg5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2QwZjJk Yjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAvNDRDNEM5MTNENThGNUVGODQ3 OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF16oQAa2X3w3IjL8kdO flHIhAstLe8H+ApirvzNRZnIlRWjaX+eZHzLMmzXOYZ3sP1OtK+J70RaxATH5kty B4YaRFYnqnsFhSRG8okU9YpLDxuq8Z+RPJq2Ui0dcmejy/YfXUVfgGstAmZs0pzR lb4sPhgFzTAWiKMD1FF4/lTgXLpbBtJ5HdKJpNVnzwMXcRfR3fu4f/uJxMbwKN10 zSzj+gk6Rj5Rn8TM0eYv+Hm6EKIvObDBMt2vevOikC1LXd0NUbJ+txqTvoO43NGg e87GgfqceV6BDKuMy7VCmtrMnAsGze3B/db4PkNF9o/Mx+tz3NKSamEYLFvOdvuQ /mg= -----END CERTIFICATE-----Generated at Sat May 10 22:28:07 2025 by rpki-client