$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: hPbhXMIqLjFj7ttzy96IMSYjR06m24bcBjFtalqgpdw= Subject key identifier: 03:A3:CF:C2:8B:0D:E4:A7:CD:39:33:31:9B:F5:F3:25:DD:D6:9C:FB Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 59276A2324420D31C4E89D645B015FB480AEABFD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 01CD Signing time: Sun 15 Jun 2025 14:18:13 +0000 Manifest this update: Sun 15 Jun 2025 14:13:11 +0000 Manifest next update: Mon 16 Jun 2025 17:09:11 +0000 Files and hashes: 1: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: VhEJrptYfoFXbxt45Q7nS3gG7GDugarlPx0FW14a0Ig=) 2: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 3wo4yWYqUm70prj7oF5pGF3zOR0/7RB8Epa8stuidcg=) 3: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: vxaqD429klEPt03aXXniKGxzQoHI4Ar9F2T3pRAzV/Y=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 08:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:27:6a:23:24:42:0d:31:c4:e8:9d:64:5b:01:5f:b4:80:ae:ab:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Jun 15 14:13:11 2025 GMT Not After : Jun 16 17:09:11 2025 GMT Subject: CN=03A3CFC28B0DE4A7CD3933319BF5F325DDD69CFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9b:07:95:94:46:73:f6:88:6f:76:f7:9e:96: 31:c6:e6:f1:e7:c5:56:20:68:8a:0a:77:03:1e:74: 72:9e:df:65:01:15:88:ee:ee:e5:3d:34:4e:8b:05: 2a:c8:02:30:05:b6:66:66:61:88:4b:b9:5c:12:7d: d1:8e:94:be:ad:cf:5e:ee:45:4c:da:6f:d4:ac:36: 9b:6a:12:61:d4:1f:0e:ca:00:63:79:d1:fd:d0:ba: 4a:f6:84:69:80:95:07:b6:f3:30:1f:59:c6:75:cf: 39:07:15:aa:52:b2:d1:05:ab:b9:55:4f:40:5d:6b: a0:11:96:78:9f:07:04:58:c7:58:b7:39:92:11:5a: e6:c7:4d:dc:8c:80:01:bc:ae:af:fa:f9:18:b9:96: 11:26:2b:01:c4:9e:9a:5f:aa:ab:a7:47:dc:5d:ae: 3f:e3:c7:2b:22:8e:44:a2:57:23:99:6d:be:47:5d: 4c:b3:6f:84:a2:8c:13:47:fc:b4:a8:32:95:67:43: dc:38:2a:ea:c4:5b:7f:41:5b:3c:58:7f:c0:b8:2e: 37:90:b3:45:16:97:cd:11:c2:c7:9f:3a:16:d1:67: 66:df:1c:da:e8:0b:85:6a:5b:81:e9:05:d9:29:60: 14:ee:46:73:e0:04:61:c3:b0:a6:ce:a3:7e:3f:cc: bb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A3:CF:C2:8B:0D:E4:A7:CD:39:33:31:9B:F5:F3:25:DD:D6:9C:FB X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e7:f3:14:0d:59:05:69:8f:6a:5e:96:a7:e9:e6:7b:f4:9f: d5:d6:19:6d:4a:b0:14:52:34:3c:ab:d4:29:c9:37:6c:82:92: 60:2f:d2:fe:3b:c7:33:8b:c4:db:b2:f8:61:d2:e4:05:7a:6a: 6b:94:3e:85:1a:60:b8:f3:b4:ff:5a:66:7d:39:b2:31:13:57: cd:f4:c1:03:84:ac:2c:af:96:10:ec:45:54:07:e6:5f:02:73: 74:c1:3b:03:a8:54:d6:91:c8:8f:66:2b:6b:db:66:2c:a2:e9: 24:f2:cb:21:91:db:3c:98:5d:95:2a:9c:7b:82:72:f8:83:04: bf:88:51:05:ed:60:5f:40:9e:c7:96:88:92:89:5e:0a:b1:be: 0d:7c:41:d4:48:61:83:24:6e:e0:0c:1c:f8:56:f9:40:c4:77: a1:8a:b0:1b:2e:5a:8b:52:ea:a1:1e:6d:c3:4e:14:dc:f9:7a: 6b:41:4d:8b:6b:8f:50:90:d4:5d:a7:b5:ea:8f:0e:54:b3:e9: 65:4a:85:38:5f:f4:98:ef:fe:1b:fd:df:6c:11:1e:25:ae:26: 84:86:e0:81:c9:14:fb:e8:c1:52:e1:e6:7d:b3:8d:2d:87:2c: 7f:38:5d:fa:96:56:33:6a:ab:9a:1f:4e:e7:37:9f:e5:dd:46: 1d:c4:6e:8d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUWSdqIyRCDTHE6J1kWwFftICuq/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNTA2MTUxNDEzMTFaFw0yNTA2MTYxNzA5MTFaMDMxMTAvBgNV BAMTKDAzQTNDRkMyOEIwREU0QTdDRDM5MzMzMTlCRjVGMzI1RERENjlDRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmmweVlEZz9ohvdveeljHG5vHn xVYgaIoKdwMedHKe32UBFYju7uU9NE6LBSrIAjAFtmZmYYhLuVwSfdGOlL6tz17u RUzab9SsNptqEmHUHw7KAGN50f3Qukr2hGmAlQe28zAfWcZ1zzkHFapSstEFq7lV T0Bda6ARlnifBwRYx1i3OZIRWubHTdyMgAG8rq/6+Ri5lhEmKwHEnppfqqunR9xd rj/jxysijkSiVyOZbb5HXUyzb4SijBNH/LSoMpVnQ9w4KurEW39BWzxYf8C4LjeQ s0UWl80RwsefOhbRZ2bfHNroC4VqW4HpBdkpYBTuRnPgBGHDsKbOo34/zLvBAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUA6PPwosN5KfNOTMxm/XzJd3WnPswHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADnn8xQNWQVpj2pelqfp 5nv0n9XWGW1KsBRSNDyr1CnJN2yCkmAv0v47xzOLxNuy+GHS5AV6amuUPoUaYLjz tP9aZn05sjETV830wQOErCyvlhDsRVQH5l8Cc3TBOwOoVNaRyI9mK2vbZiyi6STy yyGR2zyYXZUqnHuCcviDBL+IUQXtYF9AnseWiJKJXgqxvg18QdRIYYMkbuAMHPhW +UDEd6GKsBsuWotS6qEebcNOFNz5emtBTYtrj1CQ1F2nteqPDlSz6WVKhThf9Jjv /hv932wRHiWuJoSG4IHJFPvowVLh5n2zjS2HLH84XfqWVjNqq5ofTuc3n+XdRh3E bo0= -----END CERTIFICATE-----Generated at Mon Jun 16 01:27:44 2025 by rpki-client