$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json) Hash identifier: FkMtEU6ZL4rSw/4XPbrwHPE1cJqiHxMqkRCVKb3ncFU= Subject key identifier: EC:43:AC:07:4A:82:A2:86:FE:F1:8B:76:C6:11:0E:52:AC:FE:E8:79 Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Certificate serial: 02B4D43EF94199A7479AC0931E2ED4D4129512F2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft Manifest number: 0131 Signing time: Tue 05 Aug 2025 14:57:25 +0000 Manifest this update: Tue 05 Aug 2025 14:52:25 +0000 Manifest next update: Wed 06 Aug 2025 16:25:25 +0000 Files and hashes: 1: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: XDzUrNeqGTI4aW9T21uxAK+qDqQRqhiuQHQE2UWg5rk=) 2: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: iRjGhm9MAYijKikuNXa9CZKLfnQlB6md5E2iJLdE/iQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 14:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b4:d4:3e:f9:41:99:a7:47:9a:c0:93:1e:2e:d4:d4:12:95:12:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Validity Not Before: Aug 5 14:52:25 2025 GMT Not After : Aug 6 16:25:25 2025 GMT Subject: CN=EC43AC074A82A286FEF18B76C6110E52ACFEE879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1c:7a:07:4c:f9:77:e6:0f:a6:fa:d9:fe:11: b2:4e:f2:b8:82:05:66:3d:34:1b:9a:a2:8a:af:79: f6:74:9c:0c:da:e3:9d:67:99:af:47:c4:c3:36:9b: 2f:a9:d8:86:f4:02:e7:3f:4b:ff:aa:3c:e6:89:8b: eb:dc:37:03:b5:25:42:26:c2:16:c2:d7:98:74:70: db:27:c2:71:f7:e1:16:ab:35:90:f9:d3:fd:11:ff: 4c:ef:03:e3:94:60:8b:ab:8e:c2:3c:f6:ad:f5:20: f3:c2:91:fe:81:22:3a:b4:30:12:eb:6c:f6:f6:8f: 5b:3b:81:f2:e7:4e:50:93:41:fc:dc:b7:ab:c6:ad: e7:e3:fb:ee:aa:79:ec:6d:20:f7:a4:c5:19:33:03: 88:53:c1:13:98:ef:a8:48:9b:54:9b:9f:dc:bf:a4: 70:f9:3d:46:e9:f2:90:ad:0e:99:0e:6b:23:9a:61: e5:0b:90:8c:68:1e:b7:82:63:8b:d8:a6:8f:96:0e: 8a:72:c8:84:0a:99:31:e1:7c:13:50:9c:e4:2a:24: f0:d9:d6:5d:d6:6d:b8:dd:56:ae:8b:22:e1:bd:f3: ba:ad:ff:86:62:44:66:7f:10:8f:6e:87:bd:f7:35: b5:6d:c2:44:55:01:d3:a4:66:c1:84:87:b7:58:68: 0c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:43:AC:07:4A:82:A2:86:FE:F1:8B:76:C6:11:0E:52:AC:FE:E8:79 X509v3 Authority Key Identifier: keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:00:88:ac:f0:95:bd:b7:9f:92:1a:23:70:dc:a6:76:22:cc: 4c:fb:91:cd:0e:c6:78:b5:20:a3:86:bf:4c:1f:59:38:03:d9: 9f:75:6e:63:11:a0:ae:6f:e1:44:a1:a5:34:8a:15:37:fc:05: 38:9d:69:6e:d1:33:43:27:77:58:d9:2b:16:db:44:41:77:a9: 30:1f:ff:8e:ee:69:af:9c:e9:47:8d:70:83:48:c8:0c:a6:0c: ef:26:10:da:07:c7:57:e9:53:06:ff:fa:f6:a4:a3:5e:e2:8a: 40:c9:5c:97:43:cb:35:ad:f2:41:27:91:ed:66:8b:99:fe:4c: 44:e2:23:2c:a2:93:5a:26:85:03:79:78:14:2f:be:64:5f:1d: 32:65:58:66:50:25:f9:f0:36:99:b4:86:0a:fd:42:a4:d9:d0: 30:8f:f0:2d:11:54:d0:cd:40:bc:d3:b9:e0:13:33:9b:a1:73: be:e0:c6:8b:d3:42:8b:8d:e4:c3:d3:92:8d:79:a1:b0:f8:bd: 50:99:2a:ee:53:fb:f1:73:6b:99:40:df:b0:73:f2:df:60:f7: 50:16:a6:de:09:3c:a2:d6:38:c4:c5:a9:cb:01:73:22:ad:1c: d6:6a:03:09:29:5a:c0:cb:5f:80:5b:14:dc:cc:c2:79:9f:1d: 11:c6:c0:7e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUArTUPvlBmadHmsCTHi7U1BKVEvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdE NTQ3ODZEMzAeFw0yNTA4MDUxNDUyMjVaFw0yNTA4MDYxNjI1MjVaMDMxMTAvBgNV BAMTKEVDNDNBQzA3NEE4MkEyODZGRUYxOEI3NkM2MTEwRTUyQUNGRUU4NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeHHoHTPl35g+m+tn+EbJO8riC BWY9NBuaooqvefZ0nAza451nma9HxMM2my+p2Ib0Auc/S/+qPOaJi+vcNwO1JUIm whbC15h0cNsnwnH34RarNZD50/0R/0zvA+OUYIurjsI89q31IPPCkf6BIjq0MBLr bPb2j1s7gfLnTlCTQfzct6vGrefj++6qeextIPekxRkzA4hTwROY76hIm1Sbn9y/ pHD5PUbp8pCtDpkOayOaYeULkIxoHreCY4vYpo+WDopyyIQKmTHhfBNQnOQqJPDZ 1l3WbbjdVq6LIuG987qt/4ZiRGZ/EI9uh733NbVtwkRVAdOkZsGEh7dYaAwrAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU7EOsB0qCoob+8Yt2xhEOUqz+6HkwHwYDVR0j BBgwFoAUbZS517fBinpJen6fXi4il9VHhtMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzFlYmZkNTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAv NkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82RDk0QjlEN0I3QzE4QTdBNDk3QTdFOUY1RTJFMjI5 N0Q1NDc4NkQzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzFlYmZk NTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAvNkQ5NEI5RDdCN0MxOEE3QTQ5 N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHQAiKzwlb23n5IaI3Dc pnYizEz7kc0Oxni1IKOGv0wfWTgD2Z91bmMRoK5v4UShpTSKFTf8BTidaW7RM0Mn d1jZKxbbREF3qTAf/47uaa+c6UeNcINIyAymDO8mENoHx1fpUwb/+vako17iikDJ XJdDyzWt8kEnke1mi5n+TETiIyyik1omhQN5eBQvvmRfHTJlWGZQJfnwNpm0hgr9 QqTZ0DCP8C0RVNDNQLzTueATM5uhc77gxovTQouN5MPTko15obD4vVCZKu5T+/Fz a5lA37Bz8t9g91AWpt4JPKLWOMTFqcsBcyKtHNZqAwkpWsDLX4BbFNzMwnmfHRHG wH4= -----END CERTIFICATE-----Generated at Tue Aug 5 17:22:15 2025 by rpki-client