$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: dv+QhjldqL6BEhPAFyL6VSjGQSInLRaTILThp3TEOvs= Subject key identifier: 59:B2:33:D1:42:26:DF:2C:93:E2:01:CC:03:1B:DD:BA:47:E8:33:DF Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 3BC021982211562D15BE067377E3972935DABA36 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 0211 Signing time: Tue 05 Aug 2025 07:51:46 +0000 Manifest this update: Tue 05 Aug 2025 07:46:46 +0000 Manifest next update: Wed 06 Aug 2025 08:30:46 +0000 Files and hashes: 1: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: brRjluw6C0rboliI1Kh3lpixn5/36HlmHlHdNz8bcyU=) 2: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: vxaqD429klEPt03aXXniKGxzQoHI4Ar9F2T3pRAzV/Y=) 3: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 3wo4yWYqUm70prj7oF5pGF3zOR0/7RB8Epa8stuidcg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 08:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c0:21:98:22:11:56:2d:15:be:06:73:77:e3:97:29:35:da:ba:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Aug 5 07:46:46 2025 GMT Not After : Aug 6 08:30:46 2025 GMT Subject: CN=59B233D14226DF2C93E201CC031BDDBA47E833DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9d:a3:fd:9a:e7:30:e2:29:31:03:de:ea:a9: 2a:a9:8c:81:cf:be:d2:9d:89:7d:6d:46:13:0d:2d: 25:0b:76:2c:23:59:95:31:57:96:48:52:a0:f5:e0: 02:60:ea:f1:e6:fb:50:60:09:da:fa:d8:34:a6:81: c4:56:7b:b1:7b:5d:bd:4d:e9:05:3b:41:6b:d0:09: 52:71:a5:01:0a:af:71:35:33:d7:33:e4:4c:48:1d: e0:3d:29:b1:17:03:7c:91:4f:cc:f2:4f:be:30:e1: ed:23:cb:5a:a0:fe:a3:62:a1:d8:63:4b:9c:9c:8f: 82:84:68:3a:2e:cb:34:0d:18:d3:2a:07:70:23:e4: 5d:3f:b5:10:91:0e:75:d0:8e:17:05:e8:f8:7d:81: e4:6b:f8:5e:72:57:0f:a3:25:e4:f4:6d:f2:80:e1: b0:be:f1:25:52:e9:04:e2:55:02:92:62:25:da:af: 86:2d:58:98:bf:6c:02:7f:88:33:66:81:6c:2a:51: 8a:0f:2b:23:18:7f:fc:ad:be:16:01:27:49:95:7d: 69:71:d3:d1:88:3b:50:52:b1:90:cf:1b:9f:ef:6f: f1:14:81:09:18:51:81:b1:55:0f:35:e4:86:27:fe: f7:d1:f8:32:8e:60:0e:78:a4:82:04:6e:e3:56:7b: be:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B2:33:D1:42:26:DF:2C:93:E2:01:CC:03:1B:DD:BA:47:E8:33:DF X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:9d:25:7f:49:62:a7:b0:98:17:6e:5a:a0:60:e3:0e:ec:22: 85:ad:99:41:2f:14:4c:96:71:b4:4e:4c:6e:0e:ee:2e:39:4c: 8c:f7:68:d6:7f:ad:20:13:bf:0c:81:09:42:c0:bb:72:17:6a: 71:f0:c4:a0:22:c3:a9:ae:ba:12:2c:70:83:a5:56:01:2b:17: 97:f4:94:f2:e6:67:de:44:fd:4b:7a:1d:04:b1:e7:6c:aa:69: 42:70:47:1b:61:96:5e:66:e3:f9:3f:17:bd:fd:14:ac:fd:b0: 0b:85:2e:86:ce:fe:05:f9:f2:1e:f7:f1:17:67:35:1c:93:43: 60:92:0d:1e:45:c8:0a:d9:8e:da:1c:5b:10:92:ee:26:04:f4: d9:f0:d8:05:11:f2:8b:91:ec:23:11:66:54:4f:bb:b8:83:63: cd:20:d4:43:eb:d2:74:ff:80:87:cd:89:c1:33:71:0e:3a:f5: f6:dd:c1:89:ac:82:1e:2a:39:d8:4a:a8:9c:3c:f8:76:2f:f2: 5d:22:97:9e:5e:f2:64:e5:4d:15:a9:13:cb:c8:ee:68:3a:e0: 6f:b0:eb:7a:69:67:92:fe:a4:86:a4:8c:3f:7e:4e:50:13:83: 7e:d4:45:7b:84:db:3d:a4:ef:b4:51:79:70:e9:d5:db:26:2d: 63:bc:6d:73 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUO8AhmCIRVi0VvgZzd+OXKTXaujYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNTA4MDUwNzQ2NDZaFw0yNTA4MDYwODMwNDZaMDMxMTAvBgNV BAMTKDU5QjIzM0QxNDIyNkRGMkM5M0UyMDFDQzAzMUJEREJBNDdFODMzREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdnaP9mucw4ikxA97qqSqpjIHP vtKdiX1tRhMNLSULdiwjWZUxV5ZIUqD14AJg6vHm+1BgCdr62DSmgcRWe7F7Xb1N 6QU7QWvQCVJxpQEKr3E1M9cz5ExIHeA9KbEXA3yRT8zyT74w4e0jy1qg/qNiodhj S5ycj4KEaDouyzQNGNMqB3Aj5F0/tRCRDnXQjhcF6Ph9geRr+F5yVw+jJeT0bfKA 4bC+8SVS6QTiVQKSYiXar4YtWJi/bAJ/iDNmgWwqUYoPKyMYf/ytvhYBJ0mVfWlx 09GIO1BSsZDPG5/vb/EUgQkYUYGxVQ815IYn/vfR+DKOYA54pIIEbuNWe76lAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUWbIz0UIm3yyT4gHMAxvdukfoM98wHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJqdJX9JYqewmBduWqBg 4w7sIoWtmUEvFEyWcbROTG4O7i45TIz3aNZ/rSATvwyBCULAu3IXanHwxKAiw6mu uhIscIOlVgErF5f0lPLmZ95E/Ut6HQSx52yqaUJwRxthll5m4/k/F739FKz9sAuF LobO/gX58h738RdnNRyTQ2CSDR5FyArZjtocWxCS7iYE9Nnw2AUR8ouR7CMRZlRP u7iDY80g1EPr0nT/gIfNicEzcQ469fbdwYmsgh4qOdhKqJw8+HYv8l0il55e8mTl TRWpE8vI7mg64G+w63ppZ5L+pIakjD9+TlATg37URXuE2z2k77RReXDp1dsmLWO8 bXM= -----END CERTIFICATE-----Generated at Tue Aug 5 17:27:26 2025 by rpki-client