$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft File: C2724A29EF989A4340933B8130B402DD4627A501.mft (raw, json) Hash identifier: S3ztdvuDyUM/Q/aHyM0sm5yyf2dkaT8IqHN06xtrP9E= Subject key identifier: 07:E8:5D:40:2D:74:FC:D5:51:77:06:AE:C1:5B:DC:57:47:EB:EB:DE Authority key identifier: C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01 Certificate issuer: /CN=C2724A29EF989A4340933B8130B402DD4627A501 Certificate serial: 1A916DB56A1CE13A50CCD2E5E60E9E6CE2D1B0E2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft Manifest number: 0209 Signing time: Mon 04 Aug 2025 00:49:57 +0000 Manifest this update: Mon 04 Aug 2025 00:44:57 +0000 Manifest next update: Tue 05 Aug 2025 04:18:57 +0000 Files and hashes: 1: 326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa (hash: hqgaxXhgaM7AiSsPcNwqghRTi61TSIKXFax/zJU7ecI=) 2: C2724A29EF989A4340933B8130B402DD4627A501.crl (hash: xK+LjqElPsRD3Og4xAbqNNKqE4rl7Knb4A1ZJeGzQmc=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 02:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:91:6d:b5:6a:1c:e1:3a:50:cc:d2:e5:e6:0e:9e:6c:e2:d1:b0:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2724A29EF989A4340933B8130B402DD4627A501 Validity Not Before: Aug 4 00:44:57 2025 GMT Not After : Aug 5 04:18:57 2025 GMT Subject: CN=07E85D402D74FCD5517706AEC15BDC5747EBEBDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:db:b6:ae:3c:d8:a2:1a:ff:d9:24:4a:aa:c2: 3c:ff:83:11:83:77:fc:31:eb:e9:1c:0f:1a:f3:10: 6b:14:f5:7d:31:a4:03:e7:6a:a0:c9:52:62:4d:51: d2:45:8f:fb:7e:8e:de:e4:34:0b:78:a3:f3:4b:40: 58:8e:2c:97:51:6a:ab:e6:2a:7a:07:6f:e6:82:c0: 19:64:38:1b:4b:94:3a:25:40:c0:2e:21:09:93:cc: 54:29:17:4d:a8:08:6e:fc:1a:e5:f4:04:62:6f:54: 95:27:a3:2c:16:13:3d:2e:b6:dc:69:ba:69:10:0b: bf:8b:e8:ad:3d:9c:3f:18:38:0c:c1:a3:ec:21:83: 6c:28:07:21:9f:84:9f:c5:e8:d5:6b:bc:dd:29:ca: 52:8f:8b:d8:af:82:84:71:74:35:94:80:46:c2:a4: 83:e2:24:5a:93:2e:b7:8f:7f:07:e7:f7:43:2d:98: b3:f8:f7:94:a5:c1:35:37:7b:43:0d:ab:87:de:5e: 7e:54:78:f8:9d:82:29:0d:20:aa:70:eb:92:f8:96: 8f:31:63:b2:2a:b3:bc:7b:20:1b:41:07:38:f0:f8: 4c:89:24:52:2a:9e:57:c3:6d:96:c6:8a:60:66:66: f7:3e:ff:89:97:8f:53:f8:63:0c:20:e9:3d:c8:ff: 17:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E8:5D:40:2D:74:FC:D5:51:77:06:AE:C1:5B:DC:57:47:EB:EB:DE X509v3 Authority Key Identifier: keyid:C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:e6:81:66:cb:ee:57:bc:c3:15:6e:44:a8:e3:ff:33:81:e1: f5:4d:0e:d3:1d:55:b8:fe:b4:88:53:99:4b:06:be:60:49:f5: a5:85:7b:b2:7d:e6:87:fc:c8:61:07:9e:53:f5:5b:25:c7:b2: eb:b2:93:71:0b:ff:7c:96:e9:39:83:cf:49:4d:14:f3:41:0a: f8:24:d1:f6:11:5a:77:bf:42:fa:ae:29:b9:65:2f:a1:ee:25: b0:de:2f:c4:7d:bd:b1:57:4a:19:33:f6:db:22:6c:89:f2:a6: d9:c5:c6:fa:b0:d9:ab:63:8e:ae:8e:ad:d7:4e:d5:dd:89:7c: e2:4d:68:f2:28:c8:e8:14:7e:f9:86:d2:fb:b8:db:ee:e2:04: 8b:37:72:cb:47:eb:3e:2f:92:b7:0b:11:3e:fa:10:ab:bb:23: c4:c0:4c:e5:72:10:9b:08:c0:f4:a9:be:98:b0:70:7a:d6:3f: ef:76:97:a6:9c:8d:b0:de:fd:a3:c5:8a:f2:f1:89:af:c8:72: 0c:ba:40:ea:c4:3d:5e:b3:a7:97:d9:ae:39:f7:2f:59:9a:8f: d8:fd:85:5e:0f:0d:bd:cd:1b:e7:50:ac:18:df:44:ce:28:e0: cc:d3:07:84:3b:f0:00:df:86:ed:ab:75:c5:26:45:9e:7f:ed: a2:30:88:5b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUGpFttWoc4TpQzNLl5g6ebOLRsOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI3MjRBMjlFRjk4OUE0MzQwOTMzQjgxMzBCNDAyREQ0 NjI3QTUwMTAeFw0yNTA4MDQwMDQ0NTdaFw0yNTA4MDUwNDE4NTdaMDMxMTAvBgNV BAMTKDA3RTg1RDQwMkQ3NEZDRDU1MTc3MDZBRUMxNUJEQzU3NDdFQkVCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC27auPNiiGv/ZJEqqwjz/gxGD d/wx6+kcDxrzEGsU9X0xpAPnaqDJUmJNUdJFj/t+jt7kNAt4o/NLQFiOLJdRaqvm KnoHb+aCwBlkOBtLlDolQMAuIQmTzFQpF02oCG78GuX0BGJvVJUnoywWEz0uttxp umkQC7+L6K09nD8YOAzBo+whg2woByGfhJ/F6NVrvN0pylKPi9ivgoRxdDWUgEbC pIPiJFqTLrePfwfn90MtmLP495SlwTU3e0MNq4feXn5UePidgikNIKpw65L4lo8x Y7Iqs7x7IBtBBzjw+EyJJFIqnlfDbZbGimBmZvc+/4mXj1P4Ywwg6T3I/xetAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUB+hdQC10/NVRdwauwVvcV0fr694wHwYDVR0j BBgwFoAUwnJKKe+YmkNAkzuBMLQC3UYnpQEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzhiODNlNjMxMjc5ZjRjNjlhNTNmYWIyNTBiYmU2OWRiLzAv QzI3MjRBMjlFRjk4OUE0MzQwOTMzQjgxMzBCNDAyREQ0NjI3QTUwMS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9DMjcyNEEyOUVGOTg5QTQzNDA5MzNCODEzMEI0MDJE RDQ2MjdBNTAxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzhiODNl NjMxMjc5ZjRjNjlhNTNmYWIyNTBiYmU2OWRiLzAvQzI3MjRBMjlFRjk4OUE0MzQw OTMzQjgxMzBCNDAyREQ0NjI3QTUwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEbmgWbL7le8wxVuRKjj /zOB4fVNDtMdVbj+tIhTmUsGvmBJ9aWFe7J95of8yGEHnlP1WyXHsuuyk3EL/3yW 6TmDz0lNFPNBCvgk0fYRWne/QvquKbllL6HuJbDeL8R9vbFXShkz9tsibInyptnF xvqw2atjjq6OrddO1d2JfOJNaPIoyOgUfvmG0vu42+7iBIs3cstH6z4vkrcLET76 EKu7I8TATOVyEJsIwPSpvpiwcHrWP+92l6acjbDe/aPFivLxia/Icgy6QOrEPV6z p5fZrjn3L1maj9j9hV4PDb3NG+dQrBjfRM4o4MzTB4Q78ADfhu2rdcUmRZ5/7aIw iFs= -----END CERTIFICATE-----Generated at Mon Aug 4 18:22:08 2025 by rpki-client