$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: wC87vV9Y9HcEy8tR9Ln7tfYfuev0FwES4//4/DFxGAU= Subject key identifier: AD:13:24:42:AA:E7:9D:DC:46:7C:FC:1F:BD:6D:28:06:AF:F9:A3:84 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 390BE0FFBC508BF0E0F694E6C23751CEC8C9065B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 01C8 Signing time: Sat 14 Jun 2025 19:51:51 +0000 Manifest this update: Sat 14 Jun 2025 19:46:49 +0000 Manifest next update: Sun 15 Jun 2025 22:03:49 +0000 Files and hashes: 1: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: ieXw2zPmRRio6bBWcBx7DvXNEfQJp3BesST/fQuIwiI=) 2: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: 40KX5Azg+QOWUNYOrdl6IsWrdX+iJJgcObJYGtl3Q6w=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 16:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:0b:e0:ff:bc:50:8b:f0:e0:f6:94:e6:c2:37:51:ce:c8:c9:06:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Jun 14 19:46:49 2025 GMT Not After : Jun 15 22:03:49 2025 GMT Subject: CN=AD132442AAE79DDC467CFC1FBD6D2806AFF9A384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7f:47:44:4a:75:99:c7:2b:77:30:b4:08:3d: 77:e4:8f:69:da:07:1c:d2:e7:32:b7:2e:56:c0:c7: 37:29:e5:05:38:c9:83:99:8a:1b:5c:86:82:96:ac: c0:bd:d2:a8:71:78:5d:1a:3a:97:02:ba:3d:20:77: c8:b1:78:a0:3d:dc:48:b3:52:a7:c1:1e:76:55:9c: 5e:1e:20:30:04:00:1a:cf:bc:af:62:9e:d7:9c:5a: 59:3f:97:3f:37:c3:70:6f:e6:17:e5:44:e6:63:a0: 03:2d:1e:43:3a:b3:bf:64:9a:25:04:40:cb:f9:fe: 08:ca:33:f6:af:d1:0a:da:2e:66:3f:e2:06:ce:37: a9:15:be:f7:68:cb:74:be:3b:6e:c0:9a:c9:7b:fd: 8c:24:c6:c9:c3:86:54:94:f6:5e:df:9b:17:df:78: 6f:c6:db:ea:35:81:6d:a6:e9:e6:04:2d:cc:9b:5a: 49:7c:cd:a3:48:46:0c:f0:75:d2:67:2b:9a:1c:8e: e9:36:5e:f3:4f:8f:bf:c9:6c:4b:35:3b:17:50:9d: b8:27:bc:35:54:53:47:a2:da:56:3b:04:81:3f:45: cf:7b:79:e9:ee:10:48:41:76:82:03:51:01:a4:3a: cf:c8:58:81:90:03:14:ca:39:7f:c5:fd:82:fa:f4: ad:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:13:24:42:AA:E7:9D:DC:46:7C:FC:1F:BD:6D:28:06:AF:F9:A3:84 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d5:2b:fe:dc:94:34:76:18:d6:b8:29:0a:1a:68:55:83:62: e1:fa:f0:39:78:07:8c:8a:4f:ed:d1:4e:59:1b:97:65:e4:1b: 34:06:8f:83:2e:f8:c9:a1:2f:d1:ef:e0:a6:be:23:39:0b:4c: e4:32:ff:11:a0:4b:f6:0c:5e:3e:20:1b:df:cd:92:7f:46:bb: 0e:56:0e:d4:15:bb:fa:06:07:c6:72:04:03:c6:23:18:f6:74: 84:f8:96:34:ab:90:27:69:31:50:e3:2c:d0:62:b2:e6:7a:2b: 13:5d:12:8c:7a:e9:13:fb:7e:db:0b:ae:9e:dc:24:eb:3b:b4: 4a:5e:49:95:b2:c0:6c:f8:cb:72:ae:83:42:21:f6:03:22:6a: 44:aa:77:d9:67:bc:74:2b:4a:7d:43:db:f8:22:be:65:b6:1d: 76:32:ec:ad:58:f7:2c:df:25:51:7a:74:fd:34:af:66:63:71: 5d:c7:53:f6:5f:80:43:9c:09:0f:5f:a7:69:18:b5:4f:ba:09: 79:8e:ac:d7:0d:1f:8f:fe:c7:f8:f4:77:07:aa:68:0e:50:97: 7a:e0:4a:81:fd:1a:33:d9:2e:c1:a5:49:c0:41:bb:bd:e5:df: 61:6a:23:1c:36:a3:f4:f7:ae:f2:8a:69:d4:f7:f3:f6:f3:ac: b8:62:d2:e1 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUOQvg/7xQi/Dg9pTmwjdRzsjJBlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNTA2MTQxOTQ2NDlaFw0yNTA2MTUyMjAzNDlaMDMxMTAvBgNV BAMTKEFEMTMyNDQyQUFFNzlEREM0NjdDRkMxRkJENkQyODA2QUZGOUEzODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbf0dESnWZxyt3MLQIPXfkj2na BxzS5zK3LlbAxzcp5QU4yYOZihtchoKWrMC90qhxeF0aOpcCuj0gd8ixeKA93Eiz UqfBHnZVnF4eIDAEABrPvK9intecWlk/lz83w3Bv5hflROZjoAMtHkM6s79kmiUE QMv5/gjKM/av0QraLmY/4gbON6kVvvdoy3S+O27Amsl7/YwkxsnDhlSU9l7fmxff eG/G2+o1gW2m6eYELcybWkl8zaNIRgzwddJnK5ocjuk2XvNPj7/JbEs1OxdQnbgn vDVUU0ei2lY7BIE/Rc97eenuEEhBdoIDUQGkOs/IWIGQAxTKOX/F/YL69K3NAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUrRMkQqrnndxGfPwfvW0oBq/5o4QwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAADVK/7clDR2GNa4KQoa aFWDYuH68Dl4B4yKT+3RTlkbl2XkGzQGj4Mu+MmhL9Hv4Ka+IzkLTOQy/xGgS/YM Xj4gG9/Nkn9Guw5WDtQVu/oGB8ZyBAPGIxj2dIT4ljSrkCdpMVDjLNBisuZ6KxNd Eox66RP7ftsLrp7cJOs7tEpeSZWywGz4y3Kug0Ih9gMiakSqd9lnvHQrSn1D2/gi vmW2HXYy7K1Y9yzfJVF6dP00r2ZjcV3HU/ZfgEOcCQ9fp2kYtU+6CXmOrNcNH4/+ x/j0dweqaA5Ql3rgSoH9GjPZLsGlScBBu73l32FqIxw2o/T3rvKKadT38/bzrLhi 0uE= -----END CERTIFICATE-----Generated at Sat Jun 14 23:43:46 2025 by rpki-client