$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: ficfVH7/TP/5cqN42LMzxMxh16PaSai9sufcXr4o2to= Subject key identifier: 8B:95:9F:7A:E5:0F:97:AC:D6:AC:10:D6:22:68:C2:ED:57:58:4F:E4 Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 4324959AD5AD80AD64504158C149FF2DB18C5DA9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 018C Signing time: Sun 27 Apr 2025 17:38:35 +0000 Manifest this update: Sun 27 Apr 2025 17:33:33 +0000 Manifest next update: Mon 28 Apr 2025 20:03:33 +0000 Files and hashes: 1: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 8L2dffl4g1ilG1l5/B+kC7djnpjUVSHg7XLmPYAhjYI=) 2: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: 3BCsqh9opgUWYxH43PQa9DVZgTzDyY3ek50XpiBnPqA=) 3: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: OX3RHdtuqmLEvG1ZYjgRikhuEWksaQB7VsQm/hmQ+LY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 20:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:24:95:9a:d5:ad:80:ad:64:50:41:58:c1:49:ff:2d:b1:8c:5d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Apr 27 17:33:33 2025 GMT Not After : Apr 28 20:03:33 2025 GMT Subject: CN=8B959F7AE50F97ACD6AC10D62268C2ED57584FE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:b4:3b:fc:62:6e:a6:ba:81:1a:84:67:e4: 16:aa:6c:37:58:ba:a6:9e:84:42:91:a6:90:f9:07: ea:6f:4e:92:cc:12:28:af:f1:f8:2e:ca:d0:4b:9c: 09:9f:45:a2:b0:61:d8:50:ce:d0:cc:ea:25:f2:c4: f2:84:1f:69:49:f7:b3:23:79:b2:29:3e:6b:03:29: c5:3a:ac:d2:79:49:cd:34:92:b4:3f:86:ac:46:21: 7a:53:74:12:72:b9:d9:09:5b:7d:80:20:2e:67:15: 69:83:c3:65:26:1e:05:26:42:b5:a2:d1:10:e2:7e: 02:3b:2f:a2:df:55:21:51:95:a3:39:11:36:de:74: 91:ea:89:6c:49:94:cf:d8:4b:36:b1:12:94:eb:a8: dc:ed:7f:ab:12:a5:b6:cf:91:b1:84:9d:9b:23:6d: 15:e9:0c:77:66:37:bc:74:6e:73:5b:8b:76:a6:2e: 4c:a2:0f:24:db:0f:ed:fe:e5:f3:08:5a:82:c7:50: eb:25:9d:b0:65:06:ec:8c:7b:2a:60:d2:c4:1b:78: 72:b0:60:96:71:c6:63:95:8c:6e:8d:71:df:c8:8d: 22:bd:6c:66:83:08:3b:70:e9:71:c9:b0:cb:66:e8: bf:d0:ea:40:ce:02:b8:bb:72:73:03:8d:0c:8d:92: 84:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:95:9F:7A:E5:0F:97:AC:D6:AC:10:D6:22:68:C2:ED:57:58:4F:E4 X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a3:48:73:6f:13:bf:65:41:ae:53:17:c7:3a:c1:04:bc:80: 01:cd:6a:60:15:cc:55:f0:1b:11:1c:61:72:4a:81:19:9f:92: 19:ee:97:d5:d3:a2:46:d1:a9:ac:b0:26:31:15:f8:46:bf:77: 9e:7f:97:af:b1:0f:5e:16:66:26:b9:38:56:ee:a1:e6:a0:96: 96:32:8a:04:34:1c:92:db:b8:19:b2:c0:eb:b6:3b:f3:34:ab: 90:74:a3:a7:6f:93:3c:d2:f4:c9:63:ff:00:4d:03:a2:53:a4: 2c:3e:58:a2:79:6c:40:c4:40:8e:ca:62:d6:ea:fd:6a:fe:04: cb:36:f1:cd:94:db:2e:9e:1e:77:d3:22:ae:f0:ae:87:e7:6e: 60:a7:c1:55:a0:6f:fb:9f:71:b7:dd:b2:69:11:14:c8:54:d1: 8b:c2:ec:bd:83:a6:2c:a1:e4:bd:07:a5:05:78:9a:0f:a8:79: 44:f5:59:1a:ba:e8:97:b6:05:2a:d3:29:94:df:3e:3e:e1:97: de:e4:b8:ec:09:a7:5c:28:ab:f9:62:74:58:23:78:f8:3c:0c: 44:9a:a2:8b:e5:85:53:be:a4:b9:df:3b:3e:3c:2b:45:25:6c: 9e:d2:33:a2:35:3d:53:6d:35:35:0c:e5:15:10:73:47:41:71: 86:43:a5:50 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUQySVmtWtgK1kUEFYwUn/LbGMXakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNTA0MjcxNzMzMzNaFw0yNTA0MjgyMDAzMzNaMDMxMTAvBgNV BAMTKDhCOTU5RjdBRTUwRjk3QUNENkFDMTBENjIyNjhDMkVENTc1ODRGRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVbQ7/GJuprqBGoRn5BaqbDdY uqaehEKRppD5B+pvTpLMEiiv8fguytBLnAmfRaKwYdhQztDM6iXyxPKEH2lJ97Mj ebIpPmsDKcU6rNJ5Sc00krQ/hqxGIXpTdBJyudkJW32AIC5nFWmDw2UmHgUmQrWi 0RDifgI7L6LfVSFRlaM5ETbedJHqiWxJlM/YSzaxEpTrqNztf6sSpbbPkbGEnZsj bRXpDHdmN7x0bnNbi3amLkyiDyTbD+3+5fMIWoLHUOslnbBlBuyMeypg0sQbeHKw YJZxxmOVjG6Ncd/IjSK9bGaDCDtw6XHJsMtm6L/Q6kDOAri7cnMDjQyNkoR1AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUi5WfeuUPl6zWrBDWImjC7VdYT+QwHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG2jSHNvE79lQa5TF8c6 wQS8gAHNamAVzFXwGxEcYXJKgRmfkhnul9XTokbRqaywJjEV+Ea/d55/l6+xD14W Zia5OFbuoeaglpYyigQ0HJLbuBmywOu2O/M0q5B0o6dvkzzS9Mlj/wBNA6JTpCw+ WKJ5bEDEQI7KYtbq/Wr+BMs28c2U2y6eHnfTIq7wrofnbmCnwVWgb/ufcbfdsmkR FMhU0YvC7L2Dpiyh5L0HpQV4mg+oeUT1WRq66Je2BSrTKZTfPj7hl97kuOwJp1wo q/lidFgjePg8DESaoovlhVO+pLnfOz48K0UlbJ7SM6I1PVNtNTUM5RUQc0dBcYZD pVA= -----END CERTIFICATE-----Generated at Mon Apr 28 08:30:51 2025 by rpki-client