$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: boTjy3xRF6TJJsvr9E4dnlYn1aYHVErMX1sk4TioVOM= Subject key identifier: 7D:9E:B8:2A:5F:FE:52:E9:E4:8A:A6:8F:E2:A7:0E:5C:B3:6D:13:96 Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 1DEEB17A682F1B5127E002E18DB628A02D75B7EA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: 01C7 Signing time: Sun 15 Jun 2025 00:20:59 +0000 Manifest this update: Sun 15 Jun 2025 00:15:57 +0000 Manifest next update: Mon 16 Jun 2025 02:32:57 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: qlCA0Hzi3i0iRjgX1MokLmhAu8MyuB+kwIbZeLBETUM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 16:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ee:b1:7a:68:2f:1b:51:27:e0:02:e1:8d:b6:28:a0:2d:75:b7:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: Jun 15 00:15:57 2025 GMT Not After : Jun 16 02:32:57 2025 GMT Subject: CN=7D9EB82A5FFE52E9E48AA68FE2A70E5CB36D1396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c3:b3:98:14:3b:bd:3b:4c:36:5c:1a:e2:1b: c7:76:c1:63:6c:81:05:54:66:84:2e:25:03:e6:b5: 62:d0:da:62:c6:2a:4d:7b:45:d0:8b:13:fc:bc:f3: 4a:d1:ea:44:03:cd:85:f2:f3:be:fd:e0:49:2a:87: c8:48:3e:11:73:d1:8b:a2:0a:8c:15:c5:1c:af:cf: 3d:c3:ea:d5:c9:63:e5:85:51:63:44:20:f7:a6:b9: d0:09:45:f5:9e:f7:94:2a:c3:91:87:72:44:8c:fe: 3a:9a:4d:a2:84:89:19:8f:ad:0d:55:a8:4f:b2:1b: 85:74:2c:41:e1:f5:de:78:a3:dc:2d:40:22:73:42: 68:e0:43:5a:67:bd:13:20:e0:24:ba:3d:09:dc:8c: 5a:ea:d0:7b:20:89:fb:af:cd:6d:c0:ca:48:d5:5c: 48:30:16:25:ee:22:4a:b2:5b:15:25:b1:8b:57:c5: 30:51:d8:8a:1a:1c:90:60:17:b5:f6:fb:6c:ea:e8: 07:55:cf:22:a8:e0:f6:f9:0f:56:37:a9:6f:3d:06: d0:66:df:f3:be:3e:c6:99:67:51:75:6d:81:cb:55: 21:dd:5d:a8:33:d6:03:0a:cf:f5:61:62:00:02:19: e9:af:8d:90:95:78:ee:1a:b3:f1:db:4b:d5:63:7b: 43:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9E:B8:2A:5F:FE:52:E9:E4:8A:A6:8F:E2:A7:0E:5C:B3:6D:13:96 X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:2c:53:49:58:44:7a:1f:ff:57:d9:b6:ab:5f:3d:12:34:87: fe:63:b4:08:6f:53:de:6d:70:df:8d:68:50:df:86:73:53:d0: b1:23:b1:67:d7:b6:96:72:0b:20:a8:bd:e2:37:03:a2:93:d3: f9:24:6a:93:78:86:ca:08:d9:66:15:fa:86:1e:9a:5c:66:22: 89:d5:60:14:e4:2d:71:8c:cd:f5:92:87:a4:02:25:79:7b:dc: 4b:19:91:e1:49:c5:28:ec:df:b9:a1:05:54:b1:b2:9c:87:4e: 64:24:30:3d:11:f6:8a:77:7c:bb:e9:77:88:1d:39:52:b0:86: 32:5f:52:07:b3:9e:97:f9:ff:f6:3a:8c:aa:72:a0:d7:c7:64: 05:11:b3:df:96:a4:d3:8e:59:52:60:53:a6:93:3e:d0:8a:6d: f1:96:e0:34:e5:cb:11:48:ba:9e:2b:f3:16:21:f6:d5:f8:80: a9:29:3f:29:84:64:75:be:6e:5b:6e:3c:53:24:29:4c:be:9c: 67:10:e1:f3:56:76:f6:92:78:50:0a:c6:91:fd:40:00:cc:ab: a7:ce:d0:b5:7b:66:0a:ea:e2:20:42:60:4f:b8:60:bc:49:74: 4a:0f:03:d7:a1:d5:07:21:e1:8a:d3:5c:84:e2:41:ac:fc:ca: 3f:18:f4:c0 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUHe6xemgvG1En4ALhjbYooC11t+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNTA2MTUwMDE1NTdaFw0yNTA2MTYwMjMyNTdaMDMxMTAvBgNV BAMTKDdEOUVCODJBNUZGRTUyRTlFNDhBQTY4RkUyQTcwRTVDQjM2RDEzOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUw7OYFDu9O0w2XBriG8d2wWNs gQVUZoQuJQPmtWLQ2mLGKk17RdCLE/y880rR6kQDzYXy87794Ekqh8hIPhFz0Yui CowVxRyvzz3D6tXJY+WFUWNEIPemudAJRfWe95Qqw5GHckSM/jqaTaKEiRmPrQ1V qE+yG4V0LEHh9d54o9wtQCJzQmjgQ1pnvRMg4CS6PQncjFrq0HsgifuvzW3AykjV XEgwFiXuIkqyWxUlsYtXxTBR2IoaHJBgF7X2+2zq6AdVzyKo4Pb5D1Y3qW89BtBm 3/O+PsaZZ1F1bYHLVSHdXagz1gMKz/VhYgACGemvjZCVeO4as/HbS9Vje0PRAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUfZ64Kl/+UunkiqaP4qcOXLNtE5YwHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHksU0lYRHof/1fZtqtf PRI0h/5jtAhvU95tcN+NaFDfhnNT0LEjsWfXtpZyCyCoveI3A6KT0/kkapN4hsoI 2WYV+oYemlxmIonVYBTkLXGMzfWSh6QCJXl73EsZkeFJxSjs37mhBVSxspyHTmQk MD0R9op3fLvpd4gdOVKwhjJfUgeznpf5//Y6jKpyoNfHZAURs9+WpNOOWVJgU6aT PtCKbfGW4DTlyxFIup4r8xYh9tX4gKkpPymEZHW+bltuPFMkKUy+nGcQ4fNWdvaS eFAKxpH9QADMq6fO0LV7Zgrq4iBCYE+4YLxJdEoPA9eh1Qch4YrTXITiQaz8yj8Y 9MA= -----END CERTIFICATE-----Generated at Sun Jun 15 03:21:11 2025 by rpki-client