$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json) Hash identifier: sqXUkIxYGjblyKPys46OWx5qjVqnIBo05pgOZXJ1AQU= Subject key identifier: 74:74:6E:A8:00:10:BE:7C:A2:63:8A:BC:73:E9:2C:F2:28:98:7E:D9 Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 5CB0E3E04D37F8788F93F64CFAC619EA2571E972 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft Manifest number: 01CC Signing time: Sat 14 Jun 2025 19:34:45 +0000 Manifest this update: Sat 14 Jun 2025 19:29:43 +0000 Manifest next update: Sun 15 Jun 2025 22:53:43 +0000 Files and hashes: 1: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: scCBjh8HfhV3GwKDOrHZF1YXj718at6+uNm0y/KBmOw=) 2: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: fW3/1bM6uuAVh4/BqcyWFGfZeggD1zO77SW4GWfaw4U=) 3: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: onhCLB3gV3HdQhsHYazqCSyNdZ/2h865cbuFqj2YlvA=) 4: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: iHE3Xq0SLu7QVBF4qaOpWQZn7XGGbpTRnL2tJe2N9HU=) 5: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: Kgbp0+Zk4p3tpOkyAtCJ3HEWdnZBbzm3NgMcGrByxQs=) 6: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: b4lO7qQITmIuTe+1DZpcfLD2H0yGfI8Xz4qwvBeBNzo=) 7: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: pRpvcvkpUIjn6KDjm+Ywf0niLgvvVoNWrBKMV64s3Gs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 22:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b0:e3:e0:4d:37:f8:78:8f:93:f6:4c:fa:c6:19:ea:25:71:e9:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: Jun 14 19:29:43 2025 GMT Not After : Jun 15 22:53:43 2025 GMT Subject: CN=74746EA80010BE7CA2638ABC73E92CF228987ED9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:59:ea:fe:0e:be:0b:a5:1b:de:23:9b:7c:15: 20:8e:cf:9a:84:b6:41:5a:a4:db:bd:86:d6:3b:0c: cb:f0:56:b5:40:5c:29:06:1d:4a:75:1d:71:f8:60: fb:c7:27:b8:e2:e2:23:f0:ee:7b:29:7c:28:c3:37: 43:7f:fa:2f:1f:a3:d5:01:0e:a9:56:35:08:d9:4d: 5a:22:87:57:b4:1a:ba:6d:44:e2:94:80:61:01:b0: 86:31:28:d7:2f:28:7e:d7:34:b0:34:18:56:2f:5a: 27:69:00:fe:c4:0c:49:c7:ec:39:50:a3:f8:7a:62: 39:92:d4:1d:ed:51:84:5f:7d:74:c0:36:bd:32:4b: 9f:ca:c9:77:98:2c:2d:54:66:7c:61:d8:9c:33:95: 8b:cb:71:ad:81:92:f8:43:e7:24:30:ae:86:57:a0: 3f:a8:bb:bd:ec:a1:55:37:b2:64:f3:09:3b:59:bf: 0f:e2:ad:d9:54:8b:78:37:01:20:39:be:9a:34:78: c1:3f:74:3e:b1:04:8d:22:12:d5:e5:5f:ff:16:0f: b1:8d:fc:77:17:b2:39:33:de:b3:27:e4:5c:71:87: ce:24:63:bd:16:09:3f:27:44:e5:14:56:1c:1e:4b: b8:1a:15:42:56:62:eb:d9:db:7d:00:58:5d:ee:40: b4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:74:6E:A8:00:10:BE:7C:A2:63:8A:BC:73:E9:2C:F2:28:98:7E:D9 X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:7f:cb:f8:67:58:89:d8:7e:79:32:c0:bf:32:e9:a6:36:a4: 50:89:de:99:b5:29:74:b8:0a:77:ea:c8:88:09:1f:ca:50:60: 8e:61:35:80:ff:bb:74:0d:d6:8a:37:01:06:96:5c:1d:4c:33: 10:33:49:ef:f4:0e:43:fa:d8:65:1d:d1:b7:49:cc:d7:5d:6f: 50:28:ad:d8:5c:09:fb:eb:ce:1f:29:76:10:27:42:80:15:92: be:fa:ae:00:30:7b:6f:5f:aa:22:0a:83:2d:e4:fe:09:18:7f: 68:c1:5f:91:96:50:a3:d8:42:75:06:37:50:ef:62:b8:d4:24: f5:5b:91:71:2f:1c:a6:83:e7:32:0c:8a:c8:04:9a:95:2d:2a: 3b:38:f1:7e:3b:bb:0c:93:38:75:8e:f8:fb:a1:d1:19:94:37: e7:75:9d:73:80:f8:ce:21:a6:33:bb:78:22:ff:39:8f:e1:b0: 3c:d5:b9:78:73:66:ea:7a:a2:76:24:dd:e8:8e:bc:a8:d2:2a: 5c:e5:9f:c1:19:8c:94:03:99:7a:d7:8e:30:23:01:e3:a5:46: c9:a2:89:26:d2:3b:8b:85:ad:fc:3d:90:1b:17:67:97:34:c7: 45:52:83:20:46:e1:94:48:43:9b:98:6d:a5:ad:5c:a7:29:39: 18:fe:fe:87 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUXLDj4E03+HiPk/ZM+sYZ6iVx6XIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNTA2MTQxOTI5NDNaFw0yNTA2MTUyMjUzNDNaMDMxMTAvBgNV BAMTKDc0NzQ2RUE4MDAxMEJFN0NBMjYzOEFCQzczRTkyQ0YyMjg5ODdFRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZWer+Dr4LpRveI5t8FSCOz5qE tkFapNu9htY7DMvwVrVAXCkGHUp1HXH4YPvHJ7ji4iPw7nspfCjDN0N/+i8fo9UB DqlWNQjZTVoih1e0GrptROKUgGEBsIYxKNcvKH7XNLA0GFYvWidpAP7EDEnH7DlQ o/h6YjmS1B3tUYRffXTANr0yS5/KyXeYLC1UZnxh2JwzlYvLca2BkvhD5yQwroZX oD+ou73soVU3smTzCTtZvw/irdlUi3g3ASA5vpo0eME/dD6xBI0iEtXlX/8WD7GN /HcXsjkz3rMn5Fxxh84kY70WCT8nROUUVhweS7gaFUJWYuvZ230AWF3uQLT/AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUdHRuqAAQvnyiY4q8c+ks8iiYftkwHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzI1NDA1 Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0QTQ1MzgwQzZENDU1 Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEJ/y/hnWInYfnkywL8y 6aY2pFCJ3pm1KXS4CnfqyIgJH8pQYI5hNYD/u3QN1oo3AQaWXB1MMxAzSe/0DkP6 2GUd0bdJzNddb1AordhcCfvrzh8pdhAnQoAVkr76rgAwe29fqiIKgy3k/gkYf2jB X5GWUKPYQnUGN1DvYrjUJPVbkXEvHKaD5zIMisgEmpUtKjs48X47uwyTOHWO+Puh 0RmUN+d1nXOA+M4hpjO7eCL/OY/hsDzVuXhzZup6onYk3eiOvKjSKlzln8EZjJQD mXrXjjAjAeOlRsmiiSbSO4uFrfw9kBsXZ5c0x0VSgyBG4ZRIQ5uYbaWtXKcpORj+ /oc= -----END CERTIFICATE-----Generated at Sun Jun 15 13:07:01 2025 by rpki-client