$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft File: 44C4C913D58F5EF847996241E969B60A1E3F1389.mft (raw, json) Hash identifier: ukvDGVG9E2tAT9MB8f0V0evr+t/tdJ0QaY2w3CNHEgs= Subject key identifier: DF:6D:29:5D:61:AE:A4:43:A2:55:B9:EE:4D:E4:2B:7E:94:2F:36:6D Authority key identifier: 44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89 Certificate issuer: /CN=44C4C913D58F5EF847996241E969B60A1E3F1389 Certificate serial: 699C8AD6D6CB60F68747893AADB60E5889E42AEB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft Manifest number: 01CF Signing time: Mon 16 Jun 2025 05:14:41 +0000 Manifest this update: Mon 16 Jun 2025 05:09:40 +0000 Manifest next update: Tue 17 Jun 2025 09:11:40 +0000 Files and hashes: 1: 44C4C913D58F5EF847996241E969B60A1E3F1389.crl (hash: ug59JkkXj0+r8fULthLAWF6wqe1ek+415jEopPji3A4=) 2: 326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa (hash: ZFgFa3mIQWS+C3ZANFakUZVad7gh+grxNMovjG/43xs=) 3: E42882C5C372E03CCD5EA87BB1B6FFEF1FF1BFF5.cer (hash: ZgkUmwBAN+BgyVFg/7xrYnbw3kS/Mk8fXnbXdBLqa28=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 09:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:9c:8a:d6:d6:cb:60:f6:87:47:89:3a:ad:b6:0e:58:89:e4:2a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44C4C913D58F5EF847996241E969B60A1E3F1389 Validity Not Before: Jun 16 05:09:40 2025 GMT Not After : Jun 17 09:11:40 2025 GMT Subject: CN=DF6D295D61AEA443A255B9EE4DE42B7E942F366D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0f:0c:db:9a:e5:ec:3f:16:06:3e:e4:c3:e1: c9:fe:ab:64:b8:46:6a:27:ab:eb:f4:37:cc:5a:af: 45:32:3f:2e:f3:83:46:b3:50:bb:2b:ce:d3:06:9f: c3:90:29:39:b5:28:ec:f7:35:26:07:82:42:df:b3: 70:38:0b:74:84:2f:8a:7d:ab:48:38:68:ac:50:c6: ec:18:f7:6e:85:17:2f:66:41:ae:42:d0:93:69:db: bf:b5:89:ed:2c:d7:79:ab:62:0d:63:9b:af:5c:ac: 3b:e0:f7:c1:1e:32:20:79:b2:5d:6c:ad:f1:cf:ad: b6:49:13:c6:37:28:95:39:17:d5:65:8f:c3:7c:bf: 9c:2a:cb:1b:27:2c:95:fa:0b:a4:8c:de:2e:57:a2: ea:7e:ee:7c:99:73:e6:75:82:45:2a:44:5f:19:1a: 3f:25:1e:4e:ca:7e:15:b6:f8:9e:f6:d4:ea:fc:5d: 9b:22:b2:50:a3:69:2b:48:a6:5c:9e:8e:58:6a:e2: b1:42:b4:f9:37:e0:59:c5:7c:c0:2d:23:11:3c:4c: a5:b1:ea:3c:9d:4c:fe:3c:07:cd:3a:0b:4a:73:3d: a8:6d:82:6c:86:1a:f0:b9:d6:4d:c7:30:71:8d:e4: ed:c8:0d:0d:ef:f2:8e:aa:ae:c2:cd:2c:ba:d3:66: 0a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6D:29:5D:61:AE:A4:43:A2:55:B9:EE:4D:E4:2B:7E:94:2F:36:6D X509v3 Authority Key Identifier: keyid:44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:23:5e:0f:70:e5:bb:96:b5:7b:ae:ef:8c:f2:e2:0d:50:b8: 65:21:84:e5:73:64:7b:57:9c:a1:73:f5:64:47:23:eb:64:8d: 15:4a:4f:b7:7f:1e:da:4f:ea:9a:65:c0:8c:1a:0f:c8:2e:9c: ae:8c:b6:ee:e3:22:6c:6d:f6:e3:6c:78:17:8f:c5:1f:0c:bb: ec:67:5a:e6:a2:ba:e4:46:28:00:bd:39:f9:14:f8:3a:81:03: 23:65:c4:bb:37:f3:7e:47:a4:14:4b:2d:56:c2:38:45:dd:01: 2e:e3:dd:f8:03:a5:f4:0a:bb:f0:d3:54:51:f3:71:e0:ff:9f: d8:44:f7:a4:e2:f8:c6:19:09:79:93:d6:21:a5:33:ad:f6:1b: b0:9f:4c:bf:7e:b9:cf:09:ba:83:36:c1:0d:13:4c:a6:87:dc: a6:ea:0c:2d:a5:ff:d7:6b:f5:1f:2b:b6:6f:90:61:83:45:74: a3:25:7f:61:06:fe:ba:e0:ac:74:b2:ef:fb:f8:01:93:62:1c: 45:c5:21:89:62:02:a8:ee:64:c0:07:c5:d8:4e:95:67:02:1c: 90:d3:65:8f:37:a5:28:7d:c9:6d:83:52:87:16:fc:0f:24:87: ff:76:59:5e:9f:f1:c2:ac:a6:f1:f5:65:01:92:77:5c:6c:c6: f5:e2:10:d7 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUaZyK1tbLYPaHR4k6rbYOWInkKuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEEx RTNGMTM4OTAeFw0yNTA2MTYwNTA5NDBaFw0yNTA2MTcwOTExNDBaMDMxMTAvBgNV BAMTKERGNkQyOTVENjFBRUE0NDNBMjU1QjlFRTRERTQyQjdFOTQyRjM2NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBDwzbmuXsPxYGPuTD4cn+q2S4 Rmonq+v0N8xar0UyPy7zg0azULsrztMGn8OQKTm1KOz3NSYHgkLfs3A4C3SEL4p9 q0g4aKxQxuwY926FFy9mQa5C0JNp27+1ie0s13mrYg1jm69crDvg98EeMiB5sl1s rfHPrbZJE8Y3KJU5F9Vlj8N8v5wqyxsnLJX6C6SM3i5Xoup+7nyZc+Z1gkUqRF8Z Gj8lHk7KfhW2+J721Or8XZsislCjaStIplyejlhq4rFCtPk34FnFfMAtIxE8TKWx 6jydTP48B806C0pzPahtgmyGGvC51k3HMHGN5O3IDQ3v8o6qrsLNLLrTZgplAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU320pXWGupEOiVbnuTeQrfpQvNm0wHwYDVR0j BBgwFoAURMTJE9WPXvhHmWJB6Wm2Ch4/E4kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2QwZjJkYjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAv NDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80NEM0QzkxM0Q1OEY1RUY4NDc5OTYyNDFFOTY5QjYw QTFFM0YxMzg5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2QwZjJk Yjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAvNDRDNEM5MTNENThGNUVGODQ3 OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABsjXg9w5buWtXuu74zy 4g1QuGUhhOVzZHtXnKFz9WRHI+tkjRVKT7d/HtpP6pplwIwaD8gunK6Mtu7jImxt 9uNseBePxR8Mu+xnWuaiuuRGKAC9OfkU+DqBAyNlxLs3835HpBRLLVbCOEXdAS7j 3fgDpfQKu/DTVFHzceD/n9hE96Ti+MYZCXmT1iGlM632G7CfTL9+uc8JuoM2wQ0T TKaH3KbqDC2l/9dr9R8rtm+QYYNFdKMlf2EG/rrgrHSy7/v4AZNiHEXFIYliAqju ZMAHxdhOlWcCHJDTZY83pSh9yW2DUocW/A8kh/92WV6f8cKspvH1ZQGSd1xsxvXi ENc= -----END CERTIFICATE-----Generated at Mon Jun 16 23:41:44 2025 by rpki-client