$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: 0hfXGAMRAdy5dzWAt8C+kwXBKsDWgXqaePZf0jPswIE= Subject key identifier: 14:01:0D:4F:B0:47:38:54:8F:A4:13:47:1E:27:C2:FC:FA:D0:AF:90 Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 42FD26AF091C918AA52BB8A242CE0B7D5BE3CAA8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: 020C Signing time: Wed 06 Aug 2025 12:13:39 +0000 Manifest this update: Wed 06 Aug 2025 12:08:39 +0000 Manifest next update: Thu 07 Aug 2025 16:02:39 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: l65agzONwNVquBNPF4HJQCmV65O4j3CWdAdJo0VOheQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 08:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:fd:26:af:09:1c:91:8a:a5:2b:b8:a2:42:ce:0b:7d:5b:e3:ca:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: Aug 6 12:08:39 2025 GMT Not After : Aug 7 16:02:39 2025 GMT Subject: CN=14010D4FB04738548FA413471E27C2FCFAD0AF90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:22:35:2b:0f:36:d7:1c:9f:c4:fb:d9:61:d2: cd:37:ae:9a:a5:f4:71:04:2c:e6:b6:74:ab:83:20: 5d:e2:b8:41:f3:8f:ff:2d:ba:1c:d1:20:1a:9d:69: 7c:bd:a5:6a:5c:c2:93:c1:55:18:a4:08:14:fb:9d: 4b:53:d3:b5:59:96:cc:e8:a9:b1:30:85:4c:5a:62: 07:e4:a5:4c:8c:4d:f8:6f:ce:ac:be:ef:c6:06:c4: ab:2a:c6:52:e0:44:71:53:67:8b:46:0e:0c:64:5c: b2:04:3b:a2:63:75:1a:8b:21:52:00:5a:4a:5e:31: b0:6b:38:68:69:90:b0:8a:13:7a:97:ec:24:71:50: 08:db:8b:d8:94:d8:5e:df:ea:c5:2a:66:6d:6b:1e: aa:3c:00:79:2c:c6:8a:d7:80:1f:e7:66:ff:c3:c1: 49:61:0e:91:ca:cd:1f:9a:07:b5:16:f4:24:1c:ad: 92:57:e7:58:de:50:40:cf:97:6f:bb:c1:67:b3:8d: 9f:51:9d:8d:6a:00:bc:8e:f4:f9:7b:1d:e3:e7:40: 07:30:5d:8d:11:00:30:ec:e0:c7:45:0b:1f:6e:d8: f2:f2:cc:73:9a:3d:1d:47:70:3d:b0:f9:1d:73:12: 5b:8c:88:b7:99:f4:49:25:cf:1b:fc:8a:87:02:4e: 90:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:01:0D:4F:B0:47:38:54:8F:A4:13:47:1E:27:C2:FC:FA:D0:AF:90 X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:93:48:89:74:01:73:bd:2d:0f:cc:bf:01:7e:c6:6f:f5:ad: 91:b6:6e:18:27:79:30:62:8b:29:1c:f1:cc:0f:a7:3a:cd:4f: f8:65:fd:6b:b2:9c:18:ef:f5:98:b1:94:f2:8a:c4:48:3e:a1: 78:89:a7:e0:75:d3:69:74:a6:8f:2f:5e:bc:e7:dc:c2:5a:9a: bc:cf:8b:a2:4c:aa:a7:2f:ba:5c:ce:03:c5:37:4b:74:0b:34: 02:28:b5:03:c4:ce:2b:3d:73:4a:38:bb:29:04:24:ff:0e:a2: 6b:1f:a2:f4:8c:bf:8d:37:7e:79:44:9e:54:bf:c1:91:3a:ad: 24:57:f2:86:48:15:cb:e4:48:0d:1a:97:1d:53:79:1c:47:c8: 00:46:0e:5e:3e:82:70:87:28:76:be:ee:a2:06:bb:16:ee:88: e0:a4:82:2c:1a:b2:69:c5:95:d2:34:35:d6:c1:63:42:64:c6: aa:bf:00:88:6f:09:03:b9:ca:c1:c0:e9:82:56:87:0f:17:8e: 66:e1:4a:e5:52:fe:64:9e:a3:54:5f:6c:62:4e:75:b6:92:66: 74:b8:18:10:e2:cb:33:16:b2:d5:5c:76:3d:16:15:78:53:6c: fd:e0:2c:08:1a:ef:1f:2a:7d:2a:a4:fa:3b:fe:d0:49:fd:3d: 4a:67:b6:1a -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUQv0mrwkckYqlK7iiQs4LfVvjyqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNTA4MDYxMjA4MzlaFw0yNTA4MDcxNjAyMzlaMDMxMTAvBgNV BAMTKDE0MDEwRDRGQjA0NzM4NTQ4RkE0MTM0NzFFMjdDMkZDRkFEMEFGOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpIjUrDzbXHJ/E+9lh0s03rpql 9HEELOa2dKuDIF3iuEHzj/8tuhzRIBqdaXy9pWpcwpPBVRikCBT7nUtT07VZlszo qbEwhUxaYgfkpUyMTfhvzqy+78YGxKsqxlLgRHFTZ4tGDgxkXLIEO6JjdRqLIVIA WkpeMbBrOGhpkLCKE3qX7CRxUAjbi9iU2F7f6sUqZm1rHqo8AHksxorXgB/nZv/D wUlhDpHKzR+aB7UW9CQcrZJX51jeUEDPl2+7wWezjZ9RnY1qALyO9Pl7HePnQAcw XY0RADDs4MdFCx9u2PLyzHOaPR1HcD2w+R1zEluMiLeZ9Eklzxv8iocCTpA9AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUFAENT7BHOFSPpBNHHifC/PrQr5AwHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACOTSIl0AXO9LQ/MvwF+ xm/1rZG2bhgneTBiiykc8cwPpzrNT/hl/WuynBjv9ZixlPKKxEg+oXiJp+B102l0 po8vXrzn3MJamrzPi6JMqqcvulzOA8U3S3QLNAIotQPEzis9c0o4uykEJP8Oomsf ovSMv403fnlEnlS/wZE6rSRX8oZIFcvkSA0alx1TeRxHyABGDl4+gnCHKHa+7qIG uxbuiOCkgiwasmnFldI0NdbBY0Jkxqq/AIhvCQO5ysHA6YJWhw8XjmbhSuVS/mSe o1RfbGJOdbaSZnS4GBDiyzMWstVcdj0WFXhTbP3gLAga7x8qfSqk+jv+0En9PUpn tho= -----END CERTIFICATE-----Generated at Wed Aug 6 16:10:57 2025 by rpki-client