$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json) Hash identifier: bc8k9fTVJTKYHO0h0FXoLoqObDmSUzCyp43B6YRtmSA= Subject key identifier: A0:6D:80:81:1C:9A:00:10:70:C1:D3:02:E5:E4:81:AE:64:59:05:0E Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Certificate serial: 3BF6EC641A4AA5B0CFCB346C27661D2B43DE6B93 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft Manifest number: AE Signing time: Tue 29 Apr 2025 09:57:03 +0000 Manifest this update: Tue 29 Apr 2025 09:52:01 +0000 Manifest next update: Wed 30 Apr 2025 11:31:01 +0000 Files and hashes: 1: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: GXrC9FlpegYVB7BOB2o7WJHszdGMkxUx1Gxq/kx7RZc=) 2: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: iRjGhm9MAYijKikuNXa9CZKLfnQlB6md5E2iJLdE/iQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 23:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f6:ec:64:1a:4a:a5:b0:cf:cb:34:6c:27:66:1d:2b:43:de:6b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Validity Not Before: Apr 29 09:52:01 2025 GMT Not After : Apr 30 11:31:01 2025 GMT Subject: CN=A06D80811C9A001070C1D302E5E481AE6459050E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e1:2d:65:49:e1:f0:e4:b8:58:c9:66:c2:65: 59:1d:b2:e8:10:36:75:e3:d8:f9:3a:3f:2e:33:af: 0a:0b:7d:1a:43:40:27:86:ab:77:9a:00:ce:bd:8e: 84:eb:ef:a3:b0:0c:e6:0e:d4:37:23:ec:b2:62:30: 94:89:63:c5:5c:9b:47:99:24:a7:15:ce:73:7a:42: 35:82:7a:f5:b0:b8:e0:29:28:d1:fc:2b:34:d0:95: 22:f1:2f:44:93:4d:53:a5:d7:9f:a5:96:7b:bb:af: 47:40:63:df:d1:d1:ff:31:e8:4e:5a:92:18:9d:d3: 94:14:a5:5d:b5:c5:c7:8a:29:d4:4d:df:a9:e4:34: ba:94:bd:35:d6:bd:70:70:b1:fa:6b:8f:37:0c:af: f0:ae:10:c1:63:31:fb:bc:fd:59:5e:68:d3:68:93: 8d:2c:fb:8c:83:67:54:a9:7b:72:70:94:8f:20:41: b5:db:51:fa:b5:3c:d9:b4:25:d9:c7:a7:42:8d:3e: c7:2f:0c:36:1c:88:21:4d:a8:19:d0:87:85:04:c8: 9f:47:fb:ac:1a:dd:4e:24:84:c0:4b:55:97:a1:b8: 85:02:70:e8:09:32:80:5e:b9:47:16:aa:1d:7d:67: 34:14:d2:e6:34:20:46:96:28:da:65:d1:8b:a9:11: bc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6D:80:81:1C:9A:00:10:70:C1:D3:02:E5:E4:81:AE:64:59:05:0E X509v3 Authority Key Identifier: keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:48:57:cd:08:db:7e:89:94:a6:4f:0a:e1:08:a2:ef:79:d6: 34:57:96:b7:62:ac:dd:53:67:5f:61:9f:fb:41:ec:b3:14:cf: 4d:29:7a:b0:70:69:a4:60:99:5a:51:b8:a5:bf:f6:b3:16:94: 71:97:4e:c0:d7:c8:6f:ad:c2:e0:88:ec:b0:da:80:a1:50:37: 25:f3:cd:1f:52:78:d9:b8:25:32:59:18:8b:7e:43:5d:b7:35: bf:fa:47:3e:eb:54:07:d5:77:bd:5e:02:6a:b4:78:45:64:92: a9:b1:68:5d:27:71:7d:6b:b7:52:87:8f:5d:3d:c7:7c:09:80: 7d:9b:05:8b:79:84:36:f5:71:91:6a:d4:88:c3:07:23:a5:f0: 58:b0:f2:ad:08:63:a3:41:a1:03:6d:7c:72:b5:42:88:ae:5c: fc:42:e1:04:be:8d:1b:9c:07:b2:be:2e:82:0f:9e:d3:70:44: 34:da:c3:41:18:8f:08:8d:13:5c:1a:20:ef:b9:94:89:04:a8: b0:65:b8:24:50:eb:d4:7e:3b:a9:7b:7e:3d:59:6d:f1:ed:15: a6:0f:f3:da:39:f4:cd:08:7b:5e:ff:14:14:87:7e:59:4c:93: 3d:35:40:ad:97:39:02:40:10:e8:fb:6e:f2:40:2b:23:74:31: 44:73:02:dd -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUO/bsZBpKpbDPyzRsJ2YdK0Pea5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdE NTQ3ODZEMzAeFw0yNTA0MjkwOTUyMDFaFw0yNTA0MzAxMTMxMDFaMDMxMTAvBgNV BAMTKEEwNkQ4MDgxMUM5QTAwMTA3MEMxRDMwMkU1RTQ4MUFFNjQ1OTA1MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp4S1lSeHw5LhYyWbCZVkdsugQ NnXj2Pk6Py4zrwoLfRpDQCeGq3eaAM69joTr76OwDOYO1Dcj7LJiMJSJY8Vcm0eZ JKcVznN6QjWCevWwuOApKNH8KzTQlSLxL0STTVOl15+llnu7r0dAY9/R0f8x6E5a khid05QUpV21xceKKdRN36nkNLqUvTXWvXBwsfprjzcMr/CuEMFjMfu8/VleaNNo k40s+4yDZ1Spe3JwlI8gQbXbUfq1PNm0JdnHp0KNPscvDDYciCFNqBnQh4UEyJ9H +6wa3U4khMBLVZehuIUCcOgJMoBeuUcWqh19ZzQU0uY0IEaWKNpl0YupEbwLAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUoG2AgRyaABBwwdMC5eSBrmRZBQ4wHwYDVR0j BBgwFoAUbZS517fBinpJen6fXi4il9VHhtMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzFlYmZkNTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAv NkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82RDk0QjlEN0I3QzE4QTdBNDk3QTdFOUY1RTJFMjI5 N0Q1NDc4NkQzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzFlYmZk NTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAvNkQ5NEI5RDdCN0MxOEE3QTQ5 N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJ9IV80I236JlKZPCuEI ou951jRXlrdirN1TZ19hn/tB7LMUz00perBwaaRgmVpRuKW/9rMWlHGXTsDXyG+t wuCI7LDagKFQNyXzzR9SeNm4JTJZGIt+Q123Nb/6Rz7rVAfVd71eAmq0eEVkkqmx aF0ncX1rt1KHj109x3wJgH2bBYt5hDb1cZFq1IjDByOl8Fiw8q0IY6NBoQNtfHK1 QoiuXPxC4QS+jRucB7K+LoIPntNwRDTaw0EYjwiNE1waIO+5lIkEqLBluCRQ69R+ O6l7fj1ZbfHtFaYP89o59M0Ie17/FBSHfllMkz01QK2XOQJAEOj7bvJAKyN0MURz At0= -----END CERTIFICATE-----Generated at Tue Apr 29 16:22:02 2025 by rpki-client