$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json) Hash identifier: 2wDZQ0H//0Q+CHSX02HtfNxs3EtMA288zxdx5tomnGE= Subject key identifier: C8:45:24:8F:50:F3:D1:A8:A1:23:A7:E6:73:F9:C9:B6:2F:9D:97:F8 Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 1EF4AF64A0B39AA0197DFA191FB05E0E990884F3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft Manifest number: 018D Signing time: Mon 28 Apr 2025 03:04:13 +0000 Manifest this update: Mon 28 Apr 2025 02:59:11 +0000 Manifest next update: Tue 29 Apr 2025 04:41:11 +0000 Files and hashes: 1: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: k4ymt44Xdy6Dggw1DL2bLFC6d2yDTJ/AKDyMkUxl0i4=) 2: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: peEWNd0YL6h2f+IuETNQmau2DbuDTFrugtWV/YFAw0I=) 3: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: i2iB6YVLT5JYbpw54S9VrpRYgnjxp0KAmu7VBiJDogE=) 4: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: JfPLPRAt2VAp3nl2F0n1tbo6w9Newb0Wr4PBuXgYvr8=) 5: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: K9EknQecR357zyEbt4Ik18qSt5faBYxt5/KQfQFvBXQ=) 6: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: bGVhhAjrSr3hrPp0uo7loREHTNsf8cdWrceDPcnFXQ8=) 7: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: ClVHvr7GojPar4zAMCD4eI2tBACybHPAaOLXDJDUg04=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 03:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f4:af:64:a0:b3:9a:a0:19:7d:fa:19:1f:b0:5e:0e:99:08:84:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: Apr 28 02:59:11 2025 GMT Not After : Apr 29 04:41:11 2025 GMT Subject: CN=C845248F50F3D1A8A123A7E673F9C9B62F9D97F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c6:c1:b7:15:40:57:8a:a3:fa:94:be:09:16: 3f:b6:2f:df:0f:ea:6f:db:4f:29:5c:c1:a5:c0:cc: ad:cf:6d:bf:26:5c:a6:b1:5b:5a:d3:65:ca:b7:64: 63:4b:4a:11:15:fe:22:83:d5:35:ff:ed:98:0a:b2: 52:c3:87:97:90:f7:13:f5:60:d2:85:7f:6f:7e:43: ae:0f:df:b1:ec:e9:84:d8:f0:58:b5:72:86:77:26: b3:b0:42:95:1d:1c:65:86:cd:f8:f6:9e:e4:4e:d7: 3b:1a:dd:34:86:2e:94:c6:3e:39:92:41:ab:eb:a7: 29:0d:80:e3:3c:35:ef:51:ac:26:4c:fd:df:6a:96: 23:3a:66:50:20:6e:31:bb:07:b8:86:96:2f:28:7b: 7b:db:54:17:95:ef:93:f5:08:b5:7a:07:b3:16:95: a1:65:4c:43:d8:de:5f:de:62:52:76:e9:e6:b8:75: 74:f5:48:d1:a1:a8:26:68:52:d1:52:3f:0e:98:da: c5:90:71:16:fb:16:04:da:57:14:72:ab:e1:5a:df: 2a:98:82:10:ac:45:46:a8:90:f2:9a:a6:3e:6b:73: 98:eb:8d:e8:e6:ca:a8:7c:6d:5b:df:76:3b:73:8b: 0c:4b:b0:d7:74:37:30:3e:a6:cd:56:91:cb:83:4b: fb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:45:24:8F:50:F3:D1:A8:A1:23:A7:E6:73:F9:C9:B6:2F:9D:97:F8 X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d7:cb:f2:fa:2e:c1:d7:1b:87:a2:48:5b:51:5f:0c:aa:fd: 21:3d:f9:30:a6:ef:f3:e1:39:06:08:7a:ed:b5:6f:68:16:48: 34:24:a2:85:b4:eb:47:ef:68:4f:e2:f7:93:7e:b2:81:c6:27: a6:fa:6d:bd:45:6c:71:3b:25:de:06:9e:6d:fa:2c:10:43:98: 70:fb:1b:4f:23:d7:39:b1:cd:5f:1f:06:51:bc:02:f4:cf:45: 41:c4:85:cd:b1:39:c1:72:e5:39:dd:fb:e8:b3:31:c8:a9:96: a8:76:a3:a2:c0:3b:34:f6:7e:56:e3:58:a5:b5:80:7d:57:1b: b0:cd:99:12:c0:b8:9f:db:24:d2:1a:06:2f:88:12:b0:2f:4b: b5:a1:82:7f:7b:fe:18:44:2f:39:26:e2:06:c4:9c:d3:00:f2: 6a:bc:02:75:05:71:85:35:56:23:5f:a6:62:10:f2:76:0f:77: f3:a0:bc:a3:f9:6d:06:dd:f3:46:3b:6e:f3:67:9a:7c:c3:73: 66:0a:ef:ca:80:8c:40:82:6e:14:bd:ac:61:05:9e:72:7d:85: e5:9f:4b:aa:77:ea:66:f5:f7:0f:6b:c3:a1:05:2b:04:77:72: 71:ff:d4:94:03:33:3e:1b:27:49:8d:b8:2f:ff:fa:64:f0:c0: 21:46:a9:f6 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUHvSvZKCzmqAZffoZH7BeDpkIhPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNTA0MjgwMjU5MTFaFw0yNTA0MjkwNDQxMTFaMDMxMTAvBgNV BAMTKEM4NDUyNDhGNTBGM0QxQThBMTIzQTdFNjczRjlDOUI2MkY5RDk3RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqxsG3FUBXiqP6lL4JFj+2L98P 6m/bTylcwaXAzK3Pbb8mXKaxW1rTZcq3ZGNLShEV/iKD1TX/7ZgKslLDh5eQ9xP1 YNKFf29+Q64P37Hs6YTY8Fi1coZ3JrOwQpUdHGWGzfj2nuRO1zsa3TSGLpTGPjmS QavrpykNgOM8Ne9RrCZM/d9qliM6ZlAgbjG7B7iGli8oe3vbVBeV75P1CLV6B7MW laFlTEPY3l/eYlJ26ea4dXT1SNGhqCZoUtFSPw6Y2sWQcRb7FgTaVxRyq+Fa3yqY ghCsRUaokPKapj5rc5jrjejmyqh8bVvfdjtziwxLsNd0NzA+ps1WkcuDS/uHAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUyEUkj1Dz0aihI6fmc/nJti+dl/gwHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzI1NDA1 Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0QTQ1MzgwQzZENDU1 Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAbXy/L6LsHXG4eiSFtR Xwyq/SE9+TCm7/PhOQYIeu21b2gWSDQkooW060fvaE/i95N+soHGJ6b6bb1FbHE7 Jd4Gnm36LBBDmHD7G08j1zmxzV8fBlG8AvTPRUHEhc2xOcFy5Tnd++izMciplqh2 o6LAOzT2flbjWKW1gH1XG7DNmRLAuJ/bJNIaBi+IErAvS7Whgn97/hhELzkm4gbE nNMA8mq8AnUFcYU1ViNfpmIQ8nYPd/OgvKP5bQbd80Y7bvNnmnzDc2YK78qAjECC bhS9rGEFnnJ9heWfS6p36mb19w9rw6EFKwR3cnH/1JQDMz4bJ0mNuC//+mTwwCFG qfY= -----END CERTIFICATE-----Generated at Mon Apr 28 18:45:19 2025 by rpki-client