$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft File: B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json) Hash identifier: etoQqMXtZlqq2hIC3RVsMOIhZ1cuU57j3dAl6JdcLtI= Subject key identifier: 82:63:4C:D0:0B:11:CA:84:2B:D0:C2:6E:49:2D:91:1E:8F:28:D2:1C Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77 Certificate issuer: /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777 Certificate serial: 5A96DBBEE4115E8E5CB39E3B95657819AA1AA3D9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft Manifest number: 01FE Signing time: Thu 24 Jul 2025 06:51:11 +0000 Manifest this update: Thu 24 Jul 2025 06:46:11 +0000 Manifest next update: Fri 25 Jul 2025 08:50:11 +0000 Files and hashes: 1: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: MlubGqxKcu9/AdY4j4/cMK0ZlCKeMWkqNbhfRk1N6mE=) 2: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: el5UR/DioIMoubZ4Lhfm/tYAUv4ri9F7oN9JC+STZRM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 08:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:96:db:be:e4:11:5e:8e:5c:b3:9e:3b:95:65:78:19:aa:1a:a3:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777 Validity Not Before: Jul 24 06:46:11 2025 GMT Not After : Jul 25 08:50:11 2025 GMT Subject: CN=82634CD00B11CA842BD0C26E492D911E8F28D21C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:25:52:b5:b8:17:84:0a:31:0a:f8:ed:28:16: 00:9a:2a:88:70:55:3c:4a:56:ea:6c:aa:7a:ff:54: 1d:2f:1c:6c:07:3a:b8:f8:85:b6:56:df:0b:dd:ce: 2b:48:13:8d:56:41:00:12:43:12:c7:1d:0e:d1:20: 6f:f8:a2:5f:f8:6d:e6:8e:db:bb:35:9d:8d:44:58: cd:09:8e:f2:d4:af:2c:87:79:9a:2d:04:bd:ab:55: 3c:69:4f:b2:a1:41:38:70:75:bc:d1:b6:15:b5:97: 45:4e:a0:07:1e:58:92:31:80:22:95:65:54:4c:21: fd:94:30:1c:c3:78:22:9f:43:0c:3f:f1:5c:a0:05: b6:bf:ee:5b:55:c5:49:98:93:cd:a9:53:bc:e6:ee: 6d:0c:c2:29:b0:cb:01:42:59:4f:4a:65:d2:4c:f9: e7:d3:cb:e0:e2:26:50:47:2e:c4:a4:74:ce:99:a5: 4e:73:50:7c:12:52:4b:12:ea:f1:93:b7:8e:9b:37: af:01:5b:3d:8b:d4:76:ab:d0:99:39:7b:ad:9b:24: af:67:3b:25:8b:90:ce:ba:5d:46:46:e6:df:d9:c3: 43:56:6c:a8:0d:a2:43:6e:38:b9:0e:65:52:a6:09: 51:28:e4:76:66:b6:5d:d7:30:13:6f:79:7b:77:da: 04:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:63:4C:D0:0B:11:CA:84:2B:D0:C2:6E:49:2D:91:1E:8F:28:D2:1C X509v3 Authority Key Identifier: keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e7:ea:b9:7b:39:64:c0:1b:e1:86:e1:8e:bc:48:74:36:83: 98:c0:09:17:a4:0a:da:cc:eb:56:ed:ff:5d:d4:e6:27:47:5f: 93:ca:bb:93:b5:d1:43:30:41:3b:00:16:47:ea:8a:87:05:d0: b7:b4:75:d8:a1:f1:ab:ca:c7:39:70:a8:8e:c9:e6:23:13:6e: bb:fd:11:01:a6:68:8b:57:d0:c8:33:e3:93:5f:9b:42:f3:85: f9:44:a0:5f:d1:76:69:3d:d5:6d:f9:90:9e:5a:8d:de:30:4c: dc:6a:19:1c:dc:05:e0:b6:c7:5a:c8:69:d5:9f:50:31:2a:f8: fa:e3:d6:8d:e0:be:7d:06:61:ef:c3:c0:d7:d5:e1:b9:92:31: 26:4a:ae:25:14:f0:ac:92:1b:ef:c1:57:17:0e:33:b2:7d:9a: fa:86:3c:71:23:2e:48:a2:b3:b8:7f:ae:fe:0e:78:8a:35:96: a2:b0:bd:49:b7:f0:90:65:fa:fe:d5:52:9e:d4:e1:3b:66:75: 6f:4b:b7:86:61:4a:a1:b3:ce:f6:f7:c7:df:a3:5a:3b:dc:8e: e6:bb:fa:04:bf:d9:e5:53:55:b0:d9:e8:a0:cb:85:a7:cd:b1: 72:4c:23:e0:c8:4a:63:6d:cc:86:21:f3:4e:71:8c:94:65:86: 46:24:8e:b4 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUWpbbvuQRXo5cs547lWV4Gaoao9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RE RUEwODc3NzAeFw0yNTA3MjQwNjQ2MTFaFw0yNTA3MjUwODUwMTFaMDMxMTAvBgNV BAMTKDgyNjM0Q0QwMEIxMUNBODQyQkQwQzI2RTQ5MkQ5MTFFOEYyOEQyMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoJVK1uBeECjEK+O0oFgCaKohw VTxKVupsqnr/VB0vHGwHOrj4hbZW3wvdzitIE41WQQASQxLHHQ7RIG/4ol/4beaO 27s1nY1EWM0JjvLUryyHeZotBL2rVTxpT7KhQThwdbzRthW1l0VOoAceWJIxgCKV ZVRMIf2UMBzDeCKfQww/8VygBba/7ltVxUmYk82pU7zm7m0MwimwywFCWU9KZdJM +efTy+DiJlBHLsSkdM6ZpU5zUHwSUksS6vGTt46bN68BWz2L1Har0Jk5e62bJK9n OyWLkM66XUZG5t/Zw0NWbKgNokNuOLkOZVKmCVEo5HZmtl3XMBNveXt32gQzAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUgmNM0AsRyoQr0MJuSS2RHo8o0hwwHwYDVR0j BBgwFoAUuCIqhFwM3Fno02muI+EWzd6gh3cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzA5ODBlMjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAv QjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODIyMkE4NDVDMENEQzU5RThEMzY5QUUyM0UxMTZD RERFQTA4Nzc3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzA5ODBl MjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAvQjgyMjJBODQ1QzBDREM1OUU4 RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAADn6rl7OWTAG+GG4Y68 SHQ2g5jACRekCtrM61bt/13U5idHX5PKu5O10UMwQTsAFkfqiocF0Le0ddih8avK xzlwqI7J5iMTbrv9EQGmaItX0Mgz45Nfm0LzhflEoF/Rdmk91W35kJ5ajd4wTNxq GRzcBeC2x1rIadWfUDEq+Prj1o3gvn0GYe/DwNfV4bmSMSZKriUU8KySG+/BVxcO M7J9mvqGPHEjLkiis7h/rv4OeIo1lqKwvUm38JBl+v7VUp7U4TtmdW9Lt4ZhSqGz zvb3x9+jWjvcjua7+gS/2eVTVbDZ6KDLhafNsXJMI+DISmNtzIYh805xjJRlhkYk jrQ= -----END CERTIFICATE-----Generated at Thu Jul 24 23:29:34 2025 by rpki-client