$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft File: B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json) Hash identifier: +hFQzY38OqZTzurqZ4wXi5CrcNOWU3npLM0By7z/G6E= Subject key identifier: 8D:79:DC:89:66:73:75:80:05:66:52:1E:4F:F7:86:CC:F0:61:1D:88 Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 Certificate issuer: /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Certificate serial: 33C755C874F76B4B9E8C7E20E68F267685A79E33 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft Manifest number: 018C Signing time: Tue 29 Apr 2025 20:58:50 +0000 Manifest this update: Tue 29 Apr 2025 20:53:47 +0000 Manifest next update: Wed 30 Apr 2025 21:11:47 +0000 Files and hashes: 1: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: 9y00w6cwXJQxOVcC+hWes6m35jsrIAutWCWZ9sJrWuQ=) 2: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: /H6+Tn6JaNXk2L3mbchyaLP4cP3Ye11va5SUifhFotA=) 3: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: 1GbcHccR0qrRnppaVrIADnqlOOEe/j64UrxuiomGG2o=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 15:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c7:55:c8:74:f7:6b:4b:9e:8c:7e:20:e6:8f:26:76:85:a7:9e:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Validity Not Before: Apr 29 20:53:47 2025 GMT Not After : Apr 30 21:11:47 2025 GMT Subject: CN=8D79DC89667375800566521E4FF786CCF0611D88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c6:6f:a1:e1:e4:0f:4b:9e:43:b9:c2:11:d1: 48:fb:ff:fc:6d:ff:97:84:0f:78:ff:f1:eb:32:fb: e1:1c:95:7a:ad:01:68:2e:92:f7:d8:3e:8a:2d:5d: 63:1f:86:28:06:9b:cf:34:b8:f7:32:53:54:5d:10: ec:77:57:17:40:1d:98:28:d8:75:51:36:4d:e8:e5: 86:31:aa:d5:67:fd:15:e9:17:d8:8d:fb:ec:dd:0c: c8:7e:28:dc:3b:99:4f:65:5d:b3:d5:90:6c:b5:30: dc:86:43:33:ec:50:ed:ef:d6:81:fd:f2:27:87:3b: 1e:c4:1d:af:9a:94:33:5c:93:3c:6c:4a:12:fe:d1: 30:53:63:f2:d5:bf:99:46:16:65:77:19:a3:d7:93: fe:00:4b:d5:c5:45:fe:e8:8c:b5:60:bf:90:66:19: ad:b3:f6:c2:11:f5:09:52:ff:a1:c5:03:32:b7:2f: af:70:eb:f2:ca:2a:6a:20:2f:4f:d9:11:87:24:99: f4:ec:96:ac:93:57:36:b5:1a:80:00:35:20:a2:f5: 3b:5d:7d:f2:09:76:17:28:87:bb:d5:71:09:17:86: 51:d6:7f:52:85:f3:71:bb:82:52:67:61:69:6a:a3: 70:be:c0:4e:0b:e5:0b:9c:c6:5d:b2:93:38:78:03: 36:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:79:DC:89:66:73:75:80:05:66:52:1E:4F:F7:86:CC:F0:61:1D:88 X509v3 Authority Key Identifier: keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c9:b4:00:91:31:9b:86:2d:bf:ff:c9:cf:d3:31:b1:f9:52: e4:19:f5:b7:04:8e:2b:51:2f:91:60:53:1c:01:64:68:af:03: cc:43:4e:55:a5:da:fc:e4:c7:82:13:e9:a9:fd:99:6b:42:3b: b4:3c:8c:cb:5e:06:0e:b6:eb:ac:71:6a:ed:5a:84:fb:cd:f0: 11:f7:49:4f:70:95:b1:81:14:54:08:5b:31:7e:83:87:6a:bc: 69:31:46:cc:7b:2b:95:2f:e4:3d:f6:9f:7a:c8:29:ba:70:ca: 60:b1:82:c1:c5:2d:05:2c:b9:42:26:9e:25:38:ed:d5:f4:9c: c8:14:45:b2:29:b0:49:55:50:b4:35:77:4b:f2:9a:58:66:86: 8b:c7:b8:c7:90:08:20:29:7d:db:e2:e7:70:4f:78:3a:eb:5f: 3f:f1:c1:4f:70:2c:ef:58:35:7d:42:8d:83:3e:4f:51:7f:d3: 19:db:e3:97:3e:3d:37:f3:c5:42:d1:d1:6c:fa:8c:39:5a:30: 8f:11:99:65:32:9e:c9:f9:bc:45:f6:c4:be:98:06:4a:9a:5a: dc:70:5e:ab:94:86:77:10:5e:07:59:5f:e3:ae:00:21:51:5e: 58:22:7a:33:87:6e:15:7e:79:6f:dc:53:20:57:c7:df:97:94: cd:6b:54:4a -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUM8dVyHT3a0uejH4g5o8mdoWnnjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG MjFFMDUxODAeFw0yNTA0MjkyMDUzNDdaFw0yNTA0MzAyMTExNDdaMDMxMTAvBgNV BAMTKDhENzlEQzg5NjY3Mzc1ODAwNTY2NTIxRTRGRjc4NkNDRjA2MTFEODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDxm+h4eQPS55DucIR0Uj7//xt /5eED3j/8esy++EclXqtAWgukvfYPootXWMfhigGm880uPcyU1RdEOx3VxdAHZgo 2HVRNk3o5YYxqtVn/RXpF9iN++zdDMh+KNw7mU9lXbPVkGy1MNyGQzPsUO3v1oH9 8ieHOx7EHa+alDNckzxsShL+0TBTY/LVv5lGFmV3GaPXk/4AS9XFRf7ojLVgv5Bm Ga2z9sIR9QlS/6HFAzK3L69w6/LKKmogL0/ZEYckmfTslqyTVza1GoAANSCi9Ttd ffIJdhcoh7vVcQkXhlHWf1KF83G7glJnYWlqo3C+wE4L5Qucxl2ykzh4AzatAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUjXnciWZzdYAFZlIeT/eGzPBhHYgwHwYDVR0j BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD OEYyMUUwNTE4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzBhNDYz N2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAvQjg4QTk0RENBMDlFM0E2NTND MDZGNDc4NDM0REM3QzhGMjFFMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHDJtACRMZuGLb//yc/T MbH5UuQZ9bcEjitRL5FgUxwBZGivA8xDTlWl2vzkx4IT6an9mWtCO7Q8jMteBg62 66xxau1ahPvN8BH3SU9wlbGBFFQIWzF+g4dqvGkxRsx7K5Uv5D32n3rIKbpwymCx gsHFLQUsuUImniU47dX0nMgURbIpsElVULQ1d0vymlhmhovHuMeQCCApfdvi53BP eDrrXz/xwU9wLO9YNX1CjYM+T1F/0xnb45c+PTfzxULR0Wz6jDlaMI8RmWUynsn5 vEX2xL6YBkqaWtxwXquUhncQXgdZX+OuACFRXlgiejOHbhV+eW/cUyBXx9+XlM1r VEo= -----END CERTIFICATE-----Generated at Tue Apr 29 23:43:42 2025 by rpki-client