$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft File: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft (raw, json) Hash identifier: rBJT3Sh4chN6aSsFuM6OtaqNyIFyiONL7Jn5Rlzjh0U= Subject key identifier: 58:A6:20:95:53:83:42:F8:CB:1E:22:47:90:BE:7F:9C:06:40:6B:11 Authority key identifier: DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1 Certificate issuer: /CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1 Certificate serial: 404111C5F92C819B604C071C45FAE6147F180C5C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft Manifest number: 020C Signing time: Sun 03 Aug 2025 22:54:46 +0000 Manifest this update: Sun 03 Aug 2025 22:49:45 +0000 Manifest next update: Tue 05 Aug 2025 00:46:45 +0000 Files and hashes: 1: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl (hash: o+Kh7uDvmT2iJ7LvtdVtyMOAQePEZTyrMtcLXnSxcag=) 2: 326131313a663263303a666665303a3a2f34342d3434203d3e20323038303531.roa (hash: tFJBYIhXxfWIXiULV/y0FG2z1kGnNqMQG/QFmAkPW/4=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 00:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:41:11:c5:f9:2c:81:9b:60:4c:07:1c:45:fa:e6:14:7f:18:0c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1 Validity Not Before: Aug 3 22:49:45 2025 GMT Not After : Aug 5 00:46:45 2025 GMT Subject: CN=58A62095538342F8CB1E224790BE7F9C06406B11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:20:76:a2:50:3e:42:af:d9:7f:4a:50:b6:19: f5:bc:d4:b5:ed:42:64:b6:42:82:34:ec:ce:ae:5e: 19:0a:c1:06:05:a6:4d:5d:25:35:f4:27:64:ee:c3: ec:cf:77:f4:b1:9a:6a:53:96:3a:52:e7:c3:d0:ef: 9f:2a:b1:64:2d:53:e8:b3:05:96:cc:65:e5:12:03: 71:ba:3b:39:ef:96:27:46:f0:87:01:e2:88:61:c4: 9c:a0:31:f4:86:bb:a4:63:85:18:e7:81:fb:24:c0: d1:96:a5:2c:e6:d6:f7:56:8b:94:b4:cd:77:ec:9a: 2a:4a:04:db:22:82:ed:28:1b:7c:8c:2d:72:32:65: 1f:72:02:4d:ce:c4:df:c4:b7:9c:53:15:18:6f:e9: 5b:b7:9d:34:21:bd:1d:07:e3:83:e1:31:f2:aa:a8: 05:3d:09:63:d4:7e:ac:82:ef:a5:13:56:e6:09:55: c6:5c:f3:a1:98:15:8f:4c:1a:ba:d9:72:bf:1c:f8: d0:5e:06:6a:03:e6:3d:6a:49:2a:7a:0d:bb:3f:d0: 1c:3e:66:89:09:e6:f8:f2:0d:92:7f:a7:1c:2f:a0: bc:e3:96:ba:25:f7:1f:95:e8:8c:d7:33:12:0e:00: 7c:44:7f:42:69:29:9d:a1:02:c9:43:c8:a0:96:be: 8c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A6:20:95:53:83:42:F8:CB:1E:22:47:90:BE:7F:9C:06:40:6B:11 X509v3 Authority Key Identifier: keyid:DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:12:02:81:24:65:01:74:0a:69:21:e7:28:ca:2a:0c:36:88: 59:6b:0f:bc:4e:e8:16:15:3a:a8:d6:da:ff:34:b7:b8:dd:ce: d3:ae:de:2e:93:b5:17:3c:dc:8a:cf:3a:69:76:1e:d4:6a:bf: b8:f1:7c:88:fe:7b:c4:4d:26:62:c5:3e:68:2c:66:e2:7e:d3: d3:3f:64:0b:e2:69:36:cc:1a:23:d8:63:fb:dc:96:56:f1:92: 26:12:e5:c9:4c:af:3e:f9:f7:de:73:58:f4:a2:0f:c8:e6:3d: bf:b1:c4:34:d1:42:f0:7c:2b:46:3f:9b:ae:48:9f:cc:d0:56: 22:72:13:68:70:a9:28:b8:87:79:f5:04:a2:13:f8:1b:f7:4c: 8c:a3:7e:d2:99:3e:a3:9b:3e:d8:91:32:00:e3:66:f3:bf:d8: fa:1c:a2:ff:a2:e2:ef:59:48:ae:10:40:60:e3:68:bd:32:95: 46:13:86:4b:8f:2e:2d:8d:6f:94:3b:44:0c:bf:be:c9:ad:db: 57:cf:d9:08:31:98:75:61:97:c6:94:44:92:94:6a:4a:82:f3: 3e:2c:48:f7:04:53:11:e4:73:04:e5:2c:ba:5c:87:a8:3b:e8: b6:37:50:b7:71:ea:fa:6d:8b:57:e2:c5:c2:6f:9e:5b:0c:8d: 33:15:eb:d1 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUQEERxfksgZtgTAccRfrmFH8YDFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMyRDM0RkUwRjhDOTBCMkE4Q0FFQzQ3MjdENkJBMzFC OThEMjVEMTAeFw0yNTA4MDMyMjQ5NDVaFw0yNTA4MDUwMDQ2NDVaMDMxMTAvBgNV BAMTKDU4QTYyMDk1NTM4MzQyRjhDQjFFMjI0NzkwQkU3RjlDMDY0MDZCMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTIHaiUD5Cr9l/SlC2GfW81LXt QmS2QoI07M6uXhkKwQYFpk1dJTX0J2Tuw+zPd/SxmmpTljpS58PQ758qsWQtU+iz BZbMZeUSA3G6OznvlidG8IcB4ohhxJygMfSGu6RjhRjngfskwNGWpSzm1vdWi5S0 zXfsmipKBNsigu0oG3yMLXIyZR9yAk3OxN/Et5xTFRhv6Vu3nTQhvR0H44PhMfKq qAU9CWPUfqyC76UTVuYJVcZc86GYFY9MGrrZcr8c+NBeBmoD5j1qSSp6Dbs/0Bw+ ZokJ5vjyDZJ/pxwvoLzjlrol9x+V6IzXMxIOAHxEf0JpKZ2hAslDyKCWvoxRAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUWKYglVODQvjLHiJHkL5/nAZAaxEwHwYDVR0j BBgwFoAU3C00/g+MkLKoyuxHJ9a6MbmNJdEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzVjNTUyMmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzAv REMyRDM0RkUwRjhDOTBCMkE4Q0FFQzQ3MjdENkJBMzFCOThEMjVEMS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9EQzJEMzRGRTBGOEM5MEIyQThDQUVDNDcyN0Q2QkEz MUI5OEQyNUQxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzVjNTUy MmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzAvREMyRDM0RkUwRjhDOTBCMkE4 Q0FFQzQ3MjdENkJBMzFCOThEMjVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAgSAoEkZQF0Cmkh5yjK Kgw2iFlrD7xO6BYVOqjW2v80t7jdztOu3i6TtRc83IrPOml2HtRqv7jxfIj+e8RN JmLFPmgsZuJ+09M/ZAviaTbMGiPYY/vcllbxkiYS5clMrz75995zWPSiD8jmPb+x xDTRQvB8K0Y/m65In8zQViJyE2hwqSi4h3n1BKIT+Bv3TIyjftKZPqObPtiRMgDj ZvO/2Pocov+i4u9ZSK4QQGDjaL0ylUYThkuPLi2Nb5Q7RAy/vsmt21fP2QgxmHVh l8aURJKUakqC8z4sSPcEUxHkcwTlLLpch6g76LY3ULdx6vpti1fixcJvnlsMjTMV 69E= -----END CERTIFICATE-----Generated at Mon Aug 4 15:59:58 2025 by rpki-client