$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft File: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft (raw, json) Hash identifier: PiEWiiEaYzFyzVk+wG7YGMo0DgDPAARf2a1QXrtTZG0= Subject key identifier: 04:63:8C:80:B7:E9:DC:45:D4:16:6F:68:7D:DB:B2:24:DB:8B:74:99 Authority key identifier: DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1 Certificate issuer: /CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1 Certificate serial: 6AE000485F329ABE0E65EAD3EE1D199D9AB58B22 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft Manifest number: 01C9 Signing time: Sat 14 Jun 2025 05:38:17 +0000 Manifest this update: Sat 14 Jun 2025 05:33:15 +0000 Manifest next update: Sun 15 Jun 2025 06:02:15 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34342d3434203d3e20323038303531.roa (hash: tFJBYIhXxfWIXiULV/y0FG2z1kGnNqMQG/QFmAkPW/4=) 2: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl (hash: QI+6O8CTfVtI4nzH/JtoMeWFtAxq6b+1td+SSCiSTwE=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 06:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e0:00:48:5f:32:9a:be:0e:65:ea:d3:ee:1d:19:9d:9a:b5:8b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1 Validity Not Before: Jun 14 05:33:15 2025 GMT Not After : Jun 15 06:02:15 2025 GMT Subject: CN=04638C80B7E9DC45D4166F687DDBB224DB8B7499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:44:72:2d:dc:41:5b:30:0a:01:54:34:20: b3:bb:9d:12:fb:cc:be:1c:c7:0c:7b:5b:0e:52:5f: 46:a5:e2:b5:b8:bd:86:59:a5:8e:bc:24:ee:bc:2e: fc:ec:e5:b5:bf:a8:9d:b9:18:8a:ed:7b:42:90:50: 5a:84:81:a3:0e:77:b8:3a:34:67:10:f3:b4:c9:8c: 75:bc:f9:99:fd:d8:ae:24:3c:e2:18:c1:43:c6:07: 40:9a:4f:70:8f:73:fb:c4:70:f7:f1:c2:c8:6b:17: cb:b0:1e:88:fb:54:fa:7b:df:3a:56:c9:ec:fa:37: 5e:6f:92:10:72:2b:a4:13:bb:f3:5b:86:53:b1:c2: 01:8c:ac:45:61:99:1d:ad:d0:24:21:be:5a:fc:07: 9f:7c:e7:b2:e2:32:0e:9f:9e:23:c6:89:9c:88:58: 53:8b:8a:43:e9:db:c8:1c:ed:b2:bd:2f:60:88:0b: 10:75:65:9d:40:82:64:87:fe:82:60:f4:67:91:ae: 57:22:fd:42:3d:58:96:db:8e:9d:c1:54:e4:64:86: d7:60:57:cc:52:cb:f0:00:48:a7:76:f6:ac:ea:1a: 96:ca:cc:86:45:72:6a:53:4c:04:0d:b6:e8:4c:fe: 39:a0:bb:dc:18:33:2a:64:fa:f3:5a:72:70:20:0f: bc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:63:8C:80:B7:E9:DC:45:D4:16:6F:68:7D:DB:B2:24:DB:8B:74:99 X509v3 Authority Key Identifier: keyid:DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:1e:36:db:fe:93:18:e6:e2:ae:56:96:df:10:68:90:f7:14: b2:cb:4a:5a:1d:b1:dc:7d:4c:15:25:1c:71:17:e2:2f:9e:00: c4:18:b5:af:8d:14:47:5d:23:82:78:ed:de:51:f4:21:85:a2: 28:50:70:70:54:7d:04:0e:68:d4:b3:83:5e:e0:45:82:28:d6: 36:3c:a0:8b:52:b5:0a:d3:1c:1d:8e:0b:bb:c2:1c:20:81:dc: 56:04:f6:f0:c8:63:b7:64:23:b3:5a:6f:13:c1:79:1d:6e:b5: 3c:2a:9d:b9:6a:c6:65:35:c3:ec:f4:0f:30:28:fb:30:02:26: 0b:ad:52:bd:1e:62:2c:75:21:30:88:39:33:76:90:52:57:81: a7:c7:4c:a0:e9:81:78:37:b2:12:86:b5:01:a4:cd:55:48:94: 6f:78:2b:0d:e3:1b:34:37:e6:03:54:b6:dc:a4:c3:32:76:8f: e1:93:c0:de:0d:01:1c:f2:f2:c4:a4:cc:b3:b0:d3:2a:50:90: 53:8e:52:58:06:03:30:51:fb:18:f2:da:19:9b:0d:72:f2:40: 52:94:96:e7:c5:88:36:2f:fe:6e:dc:be:91:5d:eb:14:a1:38: 4c:ce:ef:fa:7a:bf:d7:ce:28:c7:cb:bd:10:9f:3f:71:e5:f5: 95:51:29:d4 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUauAASF8ymr4OZerT7h0ZnZq1iyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMyRDM0RkUwRjhDOTBCMkE4Q0FFQzQ3MjdENkJBMzFC OThEMjVEMTAeFw0yNTA2MTQwNTMzMTVaFw0yNTA2MTUwNjAyMTVaMDMxMTAvBgNV BAMTKDA0NjM4QzgwQjdFOURDNDVENDE2NkY2ODdEREJCMjI0REI4Qjc0OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6yURyLdxBWzAKAVQ0ILO7nRL7 zL4cxwx7Ww5SX0al4rW4vYZZpY68JO68Lvzs5bW/qJ25GIrte0KQUFqEgaMOd7g6 NGcQ87TJjHW8+Zn92K4kPOIYwUPGB0CaT3CPc/vEcPfxwshrF8uwHoj7VPp73zpW yez6N15vkhByK6QTu/NbhlOxwgGMrEVhmR2t0CQhvlr8B59857LiMg6fniPGiZyI WFOLikPp28gc7bK9L2CICxB1ZZ1AgmSH/oJg9GeRrlci/UI9WJbbjp3BVORkhtdg V8xSy/AASKd29qzqGpbKzIZFcmpTTAQNtuhM/jmgu9wYMypk+vNacnAgD7wpAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUBGOMgLfp3EXUFm9ofduyJNuLdJkwHwYDVR0j BBgwFoAU3C00/g+MkLKoyuxHJ9a6MbmNJdEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzVjNTUyMmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzAv REMyRDM0RkUwRjhDOTBCMkE4Q0FFQzQ3MjdENkJBMzFCOThEMjVEMS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9EQzJEMzRGRTBGOEM5MEIyQThDQUVDNDcyN0Q2QkEz MUI5OEQyNUQxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzVjNTUy MmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzAvREMyRDM0RkUwRjhDOTBCMkE4 Q0FFQzQ3MjdENkJBMzFCOThEMjVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACUeNtv+kxjm4q5Wlt8Q aJD3FLLLSlodsdx9TBUlHHEX4i+eAMQYta+NFEddI4J47d5R9CGFoihQcHBUfQQO aNSzg17gRYIo1jY8oItStQrTHB2OC7vCHCCB3FYE9vDIY7dkI7NabxPBeR1utTwq nblqxmU1w+z0DzAo+zACJgutUr0eYix1ITCIOTN2kFJXgafHTKDpgXg3shKGtQGk zVVIlG94Kw3jGzQ35gNUttykwzJ2j+GTwN4NARzy8sSkzLOw0ypQkFOOUlgGAzBR +xjy2hmbDXLyQFKUlufFiDYv/m7cvpFd6xShOEzO7/p6v9fOKMfLvRCfP3Hl9ZVR KdQ= -----END CERTIFICATE-----Generated at Sat Jun 14 23:44:01 2025 by rpki-client