$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft File: B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json) Hash identifier: LR6N26zle9ubs8k+443dEA1T9jW9nVNheGsOp9M7UgQ= Subject key identifier: 68:6F:64:39:58:78:20:BE:81:69:09:14:79:49:A3:30:94:D7:BF:25 Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 Certificate issuer: /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Certificate serial: 5F04FD454F88C4517586604BDF1A0E04DE47F860 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft Manifest number: 01C9 Signing time: Sat 14 Jun 2025 08:08:47 +0000 Manifest this update: Sat 14 Jun 2025 08:03:45 +0000 Manifest next update: Sun 15 Jun 2025 09:37:45 +0000 Files and hashes: 1: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: nMLfH1nYsI5mPwv+N0MEzTUVq1YFB35SCmO/3EjXxsg=) 2: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: tOaIT6qTvs/T2L2c3rEpmXq3gx7f0jW4s/J1R0UAbuM=) 3: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: bnusTAGQx3Pk+ZnZUJp/Qgr9AdXFwtLdwaicaaw1yM0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 09:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:04:fd:45:4f:88:c4:51:75:86:60:4b:df:1a:0e:04:de:47:f8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Validity Not Before: Jun 14 08:03:45 2025 GMT Not After : Jun 15 09:37:45 2025 GMT Subject: CN=686F6439587820BE816909147949A33094D7BF25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9c:87:1e:9f:6b:85:a6:c1:49:7b:97:b2:e2: da:a4:d4:6c:5b:a2:9c:74:81:3b:be:e8:d8:d2:5a: e0:61:39:b6:4a:42:c6:11:fc:41:de:f5:f7:3c:e0: dd:a8:b0:5a:2e:27:fa:26:89:5b:82:94:6f:e0:10: bd:29:b5:e1:88:86:14:31:f8:be:f6:bf:18:3a:83: a8:34:c9:04:8b:4e:ad:e2:0d:7e:ef:55:0f:21:53: c8:61:7b:4e:c5:00:8f:59:1b:71:75:68:90:56:06: 28:d5:1f:48:59:d5:56:ba:20:e0:2e:c4:19:aa:00: 33:bb:c9:26:c3:04:a6:91:ae:9f:fe:3a:43:57:15: e7:55:15:9a:98:ab:64:b3:57:dd:f4:b7:ac:d3:76: 34:26:e0:71:fb:d3:c1:a6:27:d5:cb:ae:c5:a2:99: 7c:03:d1:fb:73:f9:0d:4e:0a:c2:0d:d9:e7:f9:b2: 89:50:3c:10:3a:a0:50:bb:53:8d:56:23:91:8e:64: 13:57:f5:34:81:47:17:df:fd:9b:32:c2:e3:45:c2: 12:3e:29:00:22:f3:8a:8c:03:bb:fe:89:18:b6:8a: 46:a7:09:e3:7e:db:c9:94:4b:d8:4c:81:92:6e:f0: 0e:31:b5:4f:df:17:87:c2:ef:9f:b3:18:43:a1:ca: 66:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6F:64:39:58:78:20:BE:81:69:09:14:79:49:A3:30:94:D7:BF:25 X509v3 Authority Key Identifier: keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:6b:be:ff:f6:d3:5f:37:0a:c6:db:bd:bc:9c:a8:ec:4a:83: 4b:f3:80:2e:2b:05:81:b7:2e:a5:45:9c:30:ae:6d:e1:c5:67: 51:d5:e6:34:9a:7b:98:d0:e0:a6:e0:c4:6c:5e:b1:1f:99:9f: 8e:46:59:22:a6:99:92:e1:c3:f8:70:dc:61:8c:ae:9c:47:07: f6:ac:7b:bb:1c:65:af:10:53:61:32:18:0a:b6:ff:22:67:d4: 66:eb:98:b7:6d:98:bb:97:1b:95:76:8f:9e:d5:5c:4d:10:47: 0d:a5:5d:b5:8f:b1:2b:83:1d:e5:48:bb:e1:68:02:68:06:0a: 41:0f:93:71:99:54:4a:90:d9:10:84:ef:af:cb:a7:48:75:9e: ca:6c:5a:0d:e8:93:4f:5d:3d:06:e9:7f:b8:42:5f:6d:d2:7b: 2b:a2:25:bb:84:25:6d:70:4a:14:25:0c:1b:77:c1:01:6a:80: 3c:bf:6f:6f:43:76:32:c5:e8:d1:3e:29:0b:57:56:fb:8a:d6: 45:a1:ba:91:c5:34:da:03:c9:d8:7b:33:61:f8:74:20:c9:5d: 91:ce:a3:83:a7:64:91:cb:26:44:97:22:d8:59:d2:cc:87:54: 91:b8:fc:79:a0:20:2d:38:b8:e6:30:17:14:f7:26:c1:f5:b4: 75:33:07:9d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUXwT9RU+IxFF1hmBL3xoOBN5H+GAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG MjFFMDUxODAeFw0yNTA2MTQwODAzNDVaFw0yNTA2MTUwOTM3NDVaMDMxMTAvBgNV BAMTKDY4NkY2NDM5NTg3ODIwQkU4MTY5MDkxNDc5NDlBMzMwOTREN0JGMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnIcen2uFpsFJe5ey4tqk1Gxb opx0gTu+6NjSWuBhObZKQsYR/EHe9fc84N2osFouJ/omiVuClG/gEL0pteGIhhQx +L72vxg6g6g0yQSLTq3iDX7vVQ8hU8hhe07FAI9ZG3F1aJBWBijVH0hZ1Va6IOAu xBmqADO7ySbDBKaRrp/+OkNXFedVFZqYq2SzV930t6zTdjQm4HH708GmJ9XLrsWi mXwD0ftz+Q1OCsIN2ef5solQPBA6oFC7U41WI5GOZBNX9TSBRxff/ZsywuNFwhI+ KQAi84qMA7v+iRi2ikanCeN+28mUS9hMgZJu8A4xtU/fF4fC75+zGEOhymYlAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUaG9kOVh4IL6BaQkUeUmjMJTXvyUwHwYDVR0j BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD OEYyMUUwNTE4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzBhNDYz N2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAvQjg4QTk0RENBMDlFM0E2NTND MDZGNDc4NDM0REM3QzhGMjFFMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAJrvv/20183Csbbvbyc qOxKg0vzgC4rBYG3LqVFnDCubeHFZ1HV5jSae5jQ4KbgxGxesR+Zn45GWSKmmZLh w/hw3GGMrpxHB/ase7scZa8QU2EyGAq2/yJn1GbrmLdtmLuXG5V2j57VXE0QRw2l XbWPsSuDHeVIu+FoAmgGCkEPk3GZVEqQ2RCE76/Lp0h1nspsWg3ok09dPQbpf7hC X23SeyuiJbuEJW1wShQlDBt3wQFqgDy/b29DdjLF6NE+KQtXVvuK1kWhupHFNNoD ydh7M2H4dCDJXZHOo4OnZJHLJkSXIthZ0syHVJG4/HmgIC04uOYwFxT3JsH1tHUz B50= -----END CERTIFICATE-----Generated at Sun Jun 15 02:32:00 2025 by rpki-client