$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft File: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft (raw, json) Hash identifier: SgNn8Sdzn6CuFNLMgMd4j0LJqsN4N2EGDSxk+wIV7MY= Subject key identifier: BE:AE:EE:7E:F9:52:CD:8C:D5:5F:85:7D:D5:1E:16:01:ED:CA:73:42 Authority key identifier: 06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5 Certificate issuer: /CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5 Certificate serial: 687A9DEBE14FE8D136D27B6AD6C23BF8EFDE538B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft Manifest number: 020D Signing time: Mon 04 Aug 2025 06:25:36 +0000 Manifest this update: Mon 04 Aug 2025 06:20:36 +0000 Manifest next update: Tue 05 Aug 2025 10:05:36 +0000 Files and hashes: 1: 326131313a663263303a666663343a3a2f34382d3438203d3e20323136333733.roa (hash: iTb04aO1BMGaSLDC3asTwY2ZRYrbTl7Ocrr3rHizQyw=) 2: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl (hash: boz+5ipkn9KD1DqssNUkbD0R3jEotkUvoq6aODxLIwg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 02:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7a:9d:eb:e1:4f:e8:d1:36:d2:7b:6a:d6:c2:3b:f8:ef:de:53:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5 Validity Not Before: Aug 4 06:20:36 2025 GMT Not After : Aug 5 10:05:36 2025 GMT Subject: CN=BEAEEE7EF952CD8CD55F857DD51E1601EDCA7342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:5e:07:7d:54:c9:24:bd:69:97:b3:33:0c: 5c:9c:b5:b2:5d:c6:91:36:68:91:8b:a4:b8:d5:ab: de:da:aa:3c:0a:86:30:a5:01:bc:19:6e:29:35:91: f0:b0:17:18:2e:c1:8b:a5:c3:c6:68:f9:f0:2c:0b: e6:ab:f7:c3:d1:62:1f:f6:5b:1d:ab:72:59:b5:cd: f8:b7:08:be:f9:a0:05:8f:48:4d:7a:bc:a8:f8:0f: 5a:59:f9:ec:59:91:b0:39:3c:b1:54:11:a0:84:ce: 84:3a:06:1a:33:80:90:f4:a3:19:8b:08:89:a6:b4: 7f:4e:34:15:d7:f8:e2:93:8c:59:3b:94:28:a5:ed: 41:ba:d8:7a:bf:aa:5e:6b:22:19:7e:f8:aa:ec:c2: 3f:23:1d:8e:e0:0e:e9:48:97:26:39:c7:cf:98:c7: 5d:61:61:13:28:b0:8f:92:ad:19:99:50:f0:a8:09: 45:bc:ab:c5:29:14:20:c0:d7:82:27:56:5f:fb:3b: ad:6c:95:ac:f6:ae:d9:6b:0c:e6:05:4d:93:fd:bb: 8d:b1:37:aa:0b:3e:49:8d:b0:a2:d2:93:02:4a:74: b7:2b:3b:6f:f5:8b:3e:be:3f:4d:1e:54:3d:3c:1e: 0b:4f:32:f3:e2:e1:04:4d:ca:97:23:7a:18:7b:0a: be:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AE:EE:7E:F9:52:CD:8C:D5:5F:85:7D:D5:1E:16:01:ED:CA:73:42 X509v3 Authority Key Identifier: keyid:06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:2f:ba:2b:4d:fa:33:64:ee:83:6c:ab:d5:2e:85:db:e1:58: 0d:ca:92:e4:bc:14:61:de:b9:14:1c:9e:57:12:c9:69:bb:1c: b5:45:e8:45:7e:87:b9:e3:7a:bc:6b:a3:e0:04:e4:52:e5:ce: a8:0a:ff:d1:e0:b3:48:f8:36:d6:ba:72:3a:ae:f1:d3:cd:7b: 8b:c0:58:e9:05:35:f5:c1:31:10:87:d5:31:4f:c7:c3:14:47: 83:42:53:34:0e:b5:34:e2:6a:d6:29:98:dd:a9:05:bc:46:51: 96:bf:8a:b9:e3:f6:ab:bd:22:2d:f0:44:52:50:1b:6b:df:79: 2d:42:ec:b3:7c:e0:b4:6e:59:e9:33:c9:40:19:a3:3f:76:6e: 3c:74:6a:f7:64:d9:41:88:73:4f:88:1a:4a:e9:93:7e:f2:9d: be:67:8b:0d:27:96:32:c0:91:d8:e7:75:4e:17:9b:7b:e6:7c: aa:5c:42:98:d2:c0:86:c7:8b:3d:d8:d1:03:64:34:2e:72:59: 26:32:b9:72:63:a9:d3:0a:8a:7b:61:07:ce:f0:d4:2d:dc:f6: ea:45:fd:70:cb:47:92:d0:73:9c:2b:3c:10:39:69:f8:c0:3a: c5:64:30:cb:7e:05:58:84:cd:65:ca:8d:75:48:6b:e6:24:de: 1b:99:3f:3e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUaHqd6+FP6NE20ntq1sI7+O/eU4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3REJDNkJDRjBGOTU4MkRGNzgzNjYzODlBRUFGNTk2 NTU2NUVGNTAeFw0yNTA4MDQwNjIwMzZaFw0yNTA4MDUxMDA1MzZaMDMxMTAvBgNV BAMTKEJFQUVFRTdFRjk1MkNEOENENTVGODU3REQ1MUUxNjAxRURDQTczNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCubV4HfVTJJL1pl7MzDFyctbJd xpE2aJGLpLjVq97aqjwKhjClAbwZbik1kfCwFxguwYulw8Zo+fAsC+ar98PRYh/2 Wx2rclm1zfi3CL75oAWPSE16vKj4D1pZ+exZkbA5PLFUEaCEzoQ6BhozgJD0oxmL CImmtH9ONBXX+OKTjFk7lCil7UG62Hq/ql5rIhl++Krswj8jHY7gDulIlyY5x8+Y x11hYRMosI+SrRmZUPCoCUW8q8UpFCDA14InVl/7O61slaz2rtlrDOYFTZP9u42x N6oLPkmNsKLSkwJKdLcrO2/1iz6+P00eVD08HgtPMvPi4QRNypcjehh7Cr63AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUvq7ufvlSzYzVX4V91R4WAe3Kc0IwHwYDVR0j BBgwFoAUBn28a88PlYLfeDZjia6vWWVWXvUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzAxNGI5MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzAv MDY3REJDNkJDRjBGOTU4MkRGNzgzNjYzODlBRUFGNTk2NTU2NUVGNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wNjdEQkM2QkNGMEY5NTgyREY3ODM2NjM4OUFFQUY1 OTY1NTY1RUY1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzAxNGI5 MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzAvMDY3REJDNkJDRjBGOTU4MkRG NzgzNjYzODlBRUFGNTk2NTU2NUVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADYvuitN+jNk7oNsq9Uu hdvhWA3KkuS8FGHeuRQcnlcSyWm7HLVF6EV+h7njerxro+AE5FLlzqgK/9Hgs0j4 Nta6cjqu8dPNe4vAWOkFNfXBMRCH1TFPx8MUR4NCUzQOtTTiatYpmN2pBbxGUZa/ irnj9qu9Ii3wRFJQG2vfeS1C7LN84LRuWekzyUAZoz92bjx0avdk2UGIc0+IGkrp k37ynb5niw0nljLAkdjndU4Xm3vmfKpcQpjSwIbHiz3Y0QNkNC5yWSYyuXJjqdMK inthB87w1C3c9upF/XDLR5LQc5wrPBA5afjAOsVkMMt+BViEzWXKjXVIa+Yk3huZ Pz4= -----END CERTIFICATE-----Generated at Mon Aug 4 18:34:18 2025 by rpki-client