$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft File: F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft (raw, json) Hash identifier: VlFn6mwL/kNg+Ax67kcBNY/YvVeFgmj9XH8ZCBUahTw= Subject key identifier: BD:C0:AB:1F:43:3B:45:82:94:27:37:47:E2:5B:9E:34:31:2B:22:4D Authority key identifier: F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 Certificate issuer: /CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Certificate serial: 101F15DBDA498230037838AA4AD7999BC3309B5D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft Manifest number: 0212 Signing time: Sat 09 Aug 2025 13:33:12 +0000 Manifest this update: Sat 09 Aug 2025 13:28:12 +0000 Manifest next update: Sun 10 Aug 2025 13:56:12 +0000 Files and hashes: 1: F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl (hash: D+wbxgwv45aWEkggaFQsUlmLU/wM/fNNEjXVUFZbpho=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Aug 2025 07:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:1f:15:db:da:49:82:30:03:78:38:aa:4a:d7:99:9b:c3:30:9b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Validity Not Before: Aug 9 13:28:12 2025 GMT Not After : Aug 10 13:56:12 2025 GMT Subject: CN=BDC0AB1F433B458294273747E25B9E34312B224D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:68:09:ea:fe:64:08:38:92:a9:9d:1e:cb: 3d:cf:32:8c:c7:8d:5f:1c:dc:59:59:d0:45:a1:08: 3c:25:77:ac:dc:e0:5c:99:37:6d:0d:46:4e:b8:96: 2b:ab:be:5a:cb:08:4b:5c:bd:66:e9:76:ad:0e:db: 1f:26:8e:ef:5d:77:ed:c1:34:fd:38:66:d7:5c:1b: 75:e5:2f:6e:0f:39:53:50:54:40:f1:65:82:34:61: 5f:8d:8a:e9:70:ec:b7:6e:cc:ab:ad:c6:57:57:f9: 42:46:db:a4:58:36:86:0f:03:db:ce:4d:a6:a4:97: 5e:4f:7b:10:29:17:3a:95:a9:44:1f:be:d0:f6:64: 87:50:0b:48:cb:50:d2:13:62:26:0b:ab:ce:35:36: bc:a5:93:2f:17:be:8a:dc:31:97:d9:05:24:0b:11: 10:57:35:f9:3d:1e:69:cb:f3:7f:7c:31:49:99:2c: 03:69:64:ec:dd:1b:58:39:8f:33:73:9d:a8:48:3e: 92:28:40:40:c1:2f:a5:4f:fc:a1:b1:35:c9:40:46: c7:d1:a6:02:1a:24:78:70:df:1e:98:0d:65:98:3c: 48:34:19:2a:43:46:dd:c8:e5:7d:8a:a2:0a:c6:bc: 9c:58:1e:93:52:a7:39:84:40:8c:cb:06:0c:54:2a: 3f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C0:AB:1F:43:3B:45:82:94:27:37:47:E2:5B:9E:34:31:2B:22:4D X509v3 Authority Key Identifier: keyid:F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:af:36:42:b7:3f:9e:81:26:62:f0:07:88:9f:fd:8a:98:76: 1b:47:44:02:cd:81:67:6e:cd:32:91:df:a2:47:d6:1b:27:8d: 64:fa:f4:de:2b:61:11:c0:79:5e:92:d2:b0:ba:8a:2b:31:f1: 5f:5d:05:fc:cc:b0:71:13:38:42:26:7f:ed:32:7a:58:90:f4: cc:cd:52:5d:b4:d3:ff:e3:89:18:63:a0:78:90:a6:5f:ff:e3: 90:fa:95:df:c7:9b:84:5e:32:c3:e1:d8:d2:0e:3a:c3:f4:65: a4:3a:57:56:3c:56:a7:8d:9c:ee:2c:16:b5:64:73:f3:76:a3: 9d:c0:b2:94:c7:c1:79:73:4a:92:1b:73:49:c7:0b:a9:b4:90: 7f:04:98:6e:08:a3:73:c8:62:ca:6c:de:23:c8:55:bf:5b:6a: 25:d4:55:ad:97:84:5f:6d:66:a2:68:c1:62:a0:a5:c7:64:5a: 30:6d:8b:9f:82:ab:e2:05:23:36:39:8a:79:e5:8f:af:6c:bc: bd:0e:80:5f:c3:82:a8:52:c0:63:49:24:a6:9c:94:9b:78:0d: d9:ca:7e:08:1d:d3:d9:44:bf:2f:d2:2b:48:23:94:25:65:17: c8:35:d8:02:3d:cf:de:ae:c3:d7:d5:34:16:64:d3:21:85:75: 55:fd:48:ed -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUEB8V29pJgjADeDiqSteZm8Mwm10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2 OTg2RDdDNjAeFw0yNTA4MDkxMzI4MTJaFw0yNTA4MTAxMzU2MTJaMDMxMTAvBgNV BAMTKEJEQzBBQjFGNDMzQjQ1ODI5NDI3Mzc0N0UyNUI5RTM0MzEyQjIyNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM82gJ6v5kCDiSqZ0eyz3PMozH jV8c3FlZ0EWhCDwld6zc4FyZN20NRk64liurvlrLCEtcvWbpdq0O2x8mju9dd+3B NP04ZtdcG3XlL24POVNQVEDxZYI0YV+Niulw7LduzKutxldX+UJG26RYNoYPA9vO Taakl15PexApFzqVqUQfvtD2ZIdQC0jLUNITYiYLq841Nrylky8XvorcMZfZBSQL ERBXNfk9HmnL8398MUmZLANpZOzdG1g5jzNznahIPpIoQEDBL6VP/KGxNclARsfR pgIaJHhw3x6YDWWYPEg0GSpDRt3I5X2KogrGvJxYHpNSpzmEQIzLBgxUKj9jAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUvcCrH0M7RYKUJzdH4lueNDErIk0wHwYDVR0j BBgwFoAU95TfoAnqkLTLuzQN5MJVRGmG18YwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2RlNTMzMzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAv Rjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GNzk0REZBMDA5RUE5MEI0Q0JCQjM0MERFNEMyNTU0 NDY5ODZEN0M2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2RlNTMz Mzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAvRjc5NERGQTAwOUVBOTBCNENC QkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACevNkK3P56BJmLwB4if /YqYdhtHRALNgWduzTKR36JH1hsnjWT69N4rYRHAeV6S0rC6iisx8V9dBfzMsHET OEImf+0yeliQ9MzNUl200//jiRhjoHiQpl//45D6ld/Hm4ReMsPh2NIOOsP0ZaQ6 V1Y8VqeNnO4sFrVkc/N2o53AspTHwXlzSpIbc0nHC6m0kH8EmG4Io3PIYsps3iPI Vb9baiXUVa2XhF9tZqJowWKgpcdkWjBti5+Cq+IFIzY5innlj69svL0OgF/DgqhS wGNJJKaclJt4DdnKfggd09lEvy/SK0gjlCVlF8g12AI9z96uw9fVNBZk0yGFdVX9 SO0= -----END CERTIFICATE-----Generated at Sat Aug 9 23:10:23 2025 by rpki-client