$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: 8kPujnofBGH4QLu7fk8BJg5aHJIClxkne3W6eYh/zVs= Subject key identifier: 9B:AD:A6:D8:18:76:CC:EB:D7:14:2A:CB:F8:F5:78:2F:DA:D4:1B:F3 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 614484A3E438BD5606508B4C37EA6F13FB4D0944 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 0187 Signing time: Sun 27 Apr 2025 19:42:15 +0000 Manifest this update: Sun 27 Apr 2025 19:37:13 +0000 Manifest next update: Mon 28 Apr 2025 23:30:13 +0000 Files and hashes: 1: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: ZrnGKp52VwdIW6ADcyljrQKRdejSedsJmdCAWzqhtHs=) 2: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: Hjc6BErZGBzSkTq/S0WBry5oEeQQCX7pVUGUwhJzMj8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 23:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:44:84:a3:e4:38:bd:56:06:50:8b:4c:37:ea:6f:13:fb:4d:09:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Apr 27 19:37:13 2025 GMT Not After : Apr 28 23:30:13 2025 GMT Subject: CN=9BADA6D81876CCEBD7142ACBF8F5782FDAD41BF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:af:57:d6:28:1f:e7:a2:b2:a8:89:d9:00:16: 26:5e:02:b7:b8:09:97:71:cd:31:bd:b2:2d:14:f7: 74:72:00:60:2d:d4:4a:33:7a:8c:12:ef:5f:83:78: ba:9b:33:33:26:a4:be:43:0e:f7:53:43:d9:ae:5c: 84:60:9c:86:ce:32:51:2c:0f:b7:a2:1f:47:c6:49: 13:6d:4d:07:8d:01:d1:1c:56:d3:5c:b1:1a:80:dd: d9:05:69:a4:ff:81:76:58:d9:90:62:73:a3:6a:ac: cb:cd:bb:7e:69:eb:3d:73:0f:3f:b8:49:7e:e2:2c: 54:4e:8f:4d:4b:4c:0e:8e:6e:ae:99:dd:74:bc:8b: 54:42:18:5e:0d:65:e6:07:54:38:1d:39:95:79:a4: e1:26:ca:25:74:75:88:32:38:60:0b:2f:f5:2c:ad: 2d:50:73:bd:e4:39:a8:a3:a5:4d:f1:bd:90:2b:c1: 66:2c:f7:99:9f:0b:66:5f:30:94:8c:c6:a0:9b:a1: b7:9f:2e:69:bc:d4:34:30:ec:f0:ac:31:42:9d:8a: 99:61:fc:f2:33:b1:e2:15:14:0c:71:a2:b8:a6:06: 69:51:af:9e:91:2a:a2:0c:61:9e:56:be:8e:ad:12: 6e:af:c6:fe:a0:f8:e2:36:ef:02:4e:0b:eb:77:42: d8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AD:A6:D8:18:76:CC:EB:D7:14:2A:CB:F8:F5:78:2F:DA:D4:1B:F3 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:7f:04:61:e8:42:aa:58:4f:c6:b4:07:9f:a8:94:e1:a9:b9: a3:6a:f1:cd:b6:a2:bf:43:3b:f9:6e:72:6a:98:6f:2a:4f:7e: f8:2f:78:b4:c3:99:90:e8:54:b8:61:48:68:e2:a7:34:b8:88: 14:70:41:6d:54:ae:a7:d4:d5:d8:f5:33:34:7e:78:b1:54:03: a3:7a:fd:e0:07:80:35:72:a8:dc:29:c2:7d:f1:f1:80:78:fd: 25:1e:87:49:be:e3:c0:4c:a3:a8:b2:9e:2b:2a:18:ba:1f:ef: 7b:21:ce:0c:47:26:01:a0:33:58:75:54:e6:13:27:a3:11:e7: 3c:78:3a:5f:7d:58:39:27:65:d0:29:12:c3:8d:66:75:bf:89: c2:6e:90:b4:73:48:7f:6c:4c:e5:87:d1:61:b7:c0:dd:e4:98: a0:9c:1b:13:e1:f9:b0:25:28:70:b1:b1:a8:5c:bf:94:61:26: 6f:4c:f6:a0:e4:3b:a1:df:55:39:85:86:5d:d1:fc:89:20:31: df:eb:05:52:52:0f:ca:3f:b8:09:3e:4a:6d:86:b8:0d:1d:c0: 9d:14:f9:30:c6:74:ac:37:f3:3b:b9:f9:94:17:19:75:d8:5f: 51:65:c4:16:67:8c:73:04:d9:d0:b9:57:ac:dd:21:b5:82:8a: 6e:c8:44:74 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUYUSEo+Q4vVYGUItMN+pvE/tNCUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNTA0MjcxOTM3MTNaFw0yNTA0MjgyMzMwMTNaMDMxMTAvBgNV BAMTKDlCQURBNkQ4MTg3NkNDRUJENzE0MkFDQkY4RjU3ODJGREFENDFCRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8r1fWKB/norKoidkAFiZeAre4 CZdxzTG9si0U93RyAGAt1EozeowS71+DeLqbMzMmpL5DDvdTQ9muXIRgnIbOMlEs D7eiH0fGSRNtTQeNAdEcVtNcsRqA3dkFaaT/gXZY2ZBic6NqrMvNu35p6z1zDz+4 SX7iLFROj01LTA6Obq6Z3XS8i1RCGF4NZeYHVDgdOZV5pOEmyiV0dYgyOGALL/Us rS1Qc73kOaijpU3xvZArwWYs95mfC2ZfMJSMxqCbobefLmm81DQw7PCsMUKdiplh /PIzseIVFAxxorimBmlRr56RKqIMYZ5Wvo6tEm6vxv6g+OI27wJOC+t3QtiRAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUm62m2Bh2zOvXFCrL+PV4L9rUG/MwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIV/BGHoQqpYT8a0B5+o lOGpuaNq8c22or9DO/lucmqYbypPfvgveLTDmZDoVLhhSGjipzS4iBRwQW1UrqfU 1dj1MzR+eLFUA6N6/eAHgDVyqNwpwn3x8YB4/SUeh0m+48BMo6iynisqGLof73sh zgxHJgGgM1h1VOYTJ6MR5zx4Ol99WDknZdApEsONZnW/icJukLRzSH9sTOWH0WG3 wN3kmKCcGxPh+bAlKHCxsahcv5RhJm9M9qDkO6HfVTmFhl3R/IkgMd/rBVJSD8o/ uAk+Sm2GuA0dwJ0U+TDGdKw38zu5+ZQXGXXYX1FlxBZnjHME2dC5V6zdIbWCim7I RHQ= -----END CERTIFICATE-----Generated at Mon Apr 28 13:20:33 2025 by rpki-client