$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json) Hash identifier: NyqhYPXQvL66LWXu/lOyGUAhq5SRrqbQyeMwSPHX+wk= Subject key identifier: 13:D9:CD:69:85:7D:8A:E0:12:5B:68:EC:80:05:AF:6A:99:32:F8:D5 Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Certificate serial: 77C9143A6B1AF4C465FC7CBF968F6DD1A5D630FB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft Manifest number: E0 Signing time: Mon 04 Aug 2025 02:50:13 +0000 Manifest this update: Mon 04 Aug 2025 02:45:13 +0000 Manifest next update: Tue 05 Aug 2025 05:33:13 +0000 Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: uuG7NIAdxg6N+4ypOJXLADwEhwQzkqqowsKATmLhRBc=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 05:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c9:14:3a:6b:1a:f4:c4:65:fc:7c:bf:96:8f:6d:d1:a5:d6:30:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Validity Not Before: Aug 4 02:45:13 2025 GMT Not After : Aug 5 05:33:13 2025 GMT Subject: CN=13D9CD69857D8AE0125B68EC8005AF6A9932F8D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6f:4d:af:2d:db:42:5d:75:50:ac:55:f1:4f: a3:cc:ef:41:56:74:17:99:6e:f5:bb:78:f7:b7:a7: 92:ef:1a:90:e8:97:41:0d:48:97:2d:df:80:6c:28: 37:ab:9f:09:24:31:ae:fa:39:9a:b5:8c:62:ca:5c: 6b:38:65:f6:56:e5:8f:05:5a:df:19:76:37:61:07: 97:f4:00:43:97:00:43:68:c3:f4:11:dc:16:5f:a3: 37:62:ab:0f:5a:a8:0a:ea:34:d1:a4:15:75:74:cb: 64:a1:fd:2a:76:b6:97:22:80:ba:19:82:6e:8b:cd: 92:7a:82:07:52:86:57:a9:b9:04:7d:8c:a4:e9:bc: 1e:07:8b:98:cd:d2:90:83:d7:65:df:da:ba:17:e2: e5:a5:bc:b8:3a:e1:51:82:ea:89:45:94:5e:ac:e0: 26:80:91:bd:92:96:64:ad:c4:6d:a9:52:5b:78:12: 38:87:fe:f8:c1:2b:d2:91:fa:28:c4:26:cb:71:7a: 22:50:a3:37:2f:71:c4:6e:35:cd:8a:6a:1f:fd:2f: 88:9e:3b:e6:81:23:47:88:9a:46:3e:f8:05:09:2f: 7b:58:bc:0e:1b:c2:53:c7:10:27:fe:4d:a9:eb:5e: 48:f6:a3:9b:87:f6:9f:17:a0:e0:a7:4e:60:26:ae: b2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D9:CD:69:85:7D:8A:E0:12:5B:68:EC:80:05:AF:6A:99:32:F8:D5 X509v3 Authority Key Identifier: keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:2f:c5:37:4f:1f:ad:91:d9:d8:c8:07:4a:5f:88:76:13:12: 19:8f:2f:d7:13:ce:25:32:ea:92:6c:a8:fd:51:34:6d:1d:3e: 8a:58:83:c1:8a:31:52:8c:38:e7:4d:f3:be:ea:4e:6a:62:a4: ea:7d:df:7a:f0:a8:a7:a1:27:95:d8:d4:db:24:57:0c:1d:36: 80:9d:2e:4f:b9:59:12:b1:d1:32:89:02:26:35:a1:1a:9e:fa: e6:a3:ed:0d:e6:a1:87:83:c7:14:fd:a8:cb:ed:8b:87:56:f8: e3:d7:6b:fe:19:20:7d:e6:40:7a:e3:3f:d9:45:93:94:42:78: a6:75:a4:03:0e:5a:17:f9:8e:cd:50:7f:75:c6:fb:9b:d4:4c: 9a:c9:f1:9a:60:c9:8d:ef:56:04:a7:fb:7f:cd:d0:25:ec:76: a2:d2:66:e3:50:bb:fd:ae:7d:f4:ff:b4:b8:c7:3a:14:e6:18: 94:23:79:ef:fb:32:2b:96:78:aa:f6:ca:e3:3c:75:32:11:56: 6e:6d:62:41:50:70:72:5d:e1:58:f4:e8:c3:c8:bf:a4:6e:75: c2:a2:11:96:b8:54:4a:5a:e3:85:ae:4c:2e:b3:46:45:c5:dc: 6e:5e:02:53:5f:1c:7f:8d:d7:77:dd:95:51:ad:ee:07:ac:0b: ba:03:a4:24 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUd8kUOmsa9MRl/Hy/lo9t0aXWMPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz REREMDgwRDAeFw0yNTA4MDQwMjQ1MTNaFw0yNTA4MDUwNTMzMTNaMDMxMTAvBgNV BAMTKDEzRDlDRDY5ODU3RDhBRTAxMjVCNjhFQzgwMDVBRjZBOTkzMkY4RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBb02vLdtCXXVQrFXxT6PM70FW dBeZbvW7ePe3p5LvGpDol0ENSJct34BsKDernwkkMa76OZq1jGLKXGs4ZfZW5Y8F Wt8ZdjdhB5f0AEOXAENow/QR3BZfozdiqw9aqArqNNGkFXV0y2Sh/Sp2tpcigLoZ gm6LzZJ6ggdShlepuQR9jKTpvB4Hi5jN0pCD12Xf2roX4uWlvLg64VGC6olFlF6s 4CaAkb2SlmStxG2pUlt4EjiH/vjBK9KR+ijEJstxeiJQozcvccRuNc2Kah/9L4ie O+aBI0eImkY++AUJL3tYvA4bwlPHECf+TanrXkj2o5uH9p8XoOCnTmAmrrKRAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUE9nNaYV9iuASW2jsgAWvapky+NUwHwYDVR0j BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKYvxTdPH62R2djIB0pf iHYTEhmPL9cTziUy6pJsqP1RNG0dPopYg8GKMVKMOOdN877qTmpipOp933rwqKeh J5XY1NskVwwdNoCdLk+5WRKx0TKJAiY1oRqe+uaj7Q3moYeDxxT9qMvti4dW+OPX a/4ZIH3mQHrjP9lFk5RCeKZ1pAMOWhf5js1Qf3XG+5vUTJrJ8ZpgyY3vVgSn+3/N 0CXsdqLSZuNQu/2uffT/tLjHOhTmGJQjee/7MiuWeKr2yuM8dTIRVm5tYkFQcHJd 4Vj06MPIv6RudcKiEZa4VEpa44WuTC6zRkXF3G5eAlNfHH+N13fdlVGt7gesC7oD pCQ= -----END CERTIFICATE-----Generated at Mon Aug 4 21:33:51 2025 by rpki-client