$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft File: B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json) Hash identifier: ceglXb9Z+idL6KROmL1gwvtQuLwtCY8h/tzoo6l24BA= Subject key identifier: F3:CD:70:72:1E:FB:1E:A9:55:A0:1C:AD:4A:18:9E:99:4E:D0:12:7F Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 Certificate issuer: /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Certificate serial: 1C02D8A70A49DE1F2A8E5CDBEB4B2A1AED5605FB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft Manifest number: 0201 Signing time: Sat 26 Jul 2025 03:48:58 +0000 Manifest this update: Sat 26 Jul 2025 03:43:58 +0000 Manifest next update: Sun 27 Jul 2025 06:00:58 +0000 Files and hashes: 1: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: KIDc01M1CswdHP2nnX0Gy3ftRLaz7/uiuLMTXwLPyvQ=) 2: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: nMLfH1nYsI5mPwv+N0MEzTUVq1YFB35SCmO/3EjXxsg=) 3: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: tOaIT6qTvs/T2L2c3rEpmXq3gx7f0jW4s/J1R0UAbuM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 21:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:02:d8:a7:0a:49:de:1f:2a:8e:5c:db:eb:4b:2a:1a:ed:56:05:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Validity Not Before: Jul 26 03:43:58 2025 GMT Not After : Jul 27 06:00:58 2025 GMT Subject: CN=F3CD70721EFB1EA955A01CAD4A189E994ED0127F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4c:19:95:46:da:d9:db:e2:3c:9a:50:26:26: c3:b9:d7:fe:10:7d:13:36:ae:17:3c:f6:95:10:1f: 7e:06:b7:75:54:03:19:23:c9:eb:a7:e7:a4:a7:11: a9:98:43:e2:7d:d4:0c:38:d0:ca:4e:a3:fd:c8:96: 45:37:fb:03:50:4c:2c:bc:2a:af:f4:cd:a0:c0:dc: ae:93:68:9e:fb:8d:f0:dc:b2:1b:25:ce:85:a6:69: 3f:23:61:09:18:f4:7f:01:1a:eb:dc:45:67:a1:dd: 93:ff:e3:5c:ff:ac:4c:b4:91:9e:f3:08:d2:e0:f9: 47:52:79:3a:60:63:d3:46:8c:ba:cd:19:43:0e:6f: 73:35:5e:82:5f:9d:e2:fc:39:14:8d:4e:ff:18:aa: b3:1d:de:36:c3:5f:30:01:08:ee:65:f9:5a:85:76: 2f:de:42:a2:51:7c:c8:db:ae:d2:72:0a:c0:d7:80: 38:2b:a2:e8:11:b2:ab:b5:a3:97:3f:24:ad:7d:fe: 59:9c:4c:cd:5c:a1:9b:4f:f6:d3:f1:a2:0c:36:82: b5:ab:a8:4e:98:83:f3:35:55:68:41:63:83:4b:bd: 30:0f:47:e5:2a:3e:97:35:ca:6e:8a:bf:6f:ca:c8: 7f:0d:af:d4:4e:6b:9d:57:9e:67:a7:86:8d:a7:9e: 34:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CD:70:72:1E:FB:1E:A9:55:A0:1C:AD:4A:18:9E:99:4E:D0:12:7F X509v3 Authority Key Identifier: keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:35:f4:b4:f0:02:5d:1b:c1:b8:93:ff:28:22:51:11:11:b6: d5:3a:61:88:7c:ce:4a:e7:57:9a:42:5c:8b:4a:f3:fc:76:de: 8e:59:7c:5a:e5:76:e0:a5:9e:ff:a1:ae:97:38:1e:57:9b:28: 84:23:60:fd:5e:ff:2e:c5:48:10:5a:5e:86:f9:39:c2:4b:3a: a7:4c:1c:0c:84:e6:d0:f1:a4:18:05:1c:95:37:a4:43:34:e8: aa:93:2b:9d:ae:4c:e3:03:a8:81:d5:6e:69:a6:6e:b2:4e:b9: 70:5d:22:70:16:de:8a:da:fe:c9:45:8d:8f:69:40:55:de:1b: 1b:2c:dd:00:90:58:d7:84:7b:84:4d:df:35:87:8f:f4:e2:ef: a9:55:b6:2f:b1:c3:02:6d:75:10:67:cd:f1:a0:a8:ad:c8:aa: 58:31:11:64:16:86:c5:0d:a0:51:f0:01:8c:e8:dc:50:91:58: b1:9d:62:ff:bf:02:b8:f2:68:04:40:02:76:51:b0:3f:32:fc: a8:1b:84:9e:e7:66:f8:f2:8b:8b:d3:82:b4:a0:82:db:76:d2: 6c:7d:79:cc:b6:fe:b7:78:66:8a:a8:57:f9:c0:dd:38:d8:3a: ee:be:db:0e:f5:fc:f6:77:6b:c5:b1:eb:4b:54:e3:d8:29:02: 6c:97:68:73 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUHALYpwpJ3h8qjlzb60sqGu1WBfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG MjFFMDUxODAeFw0yNTA3MjYwMzQzNThaFw0yNTA3MjcwNjAwNThaMDMxMTAvBgNV BAMTKEYzQ0Q3MDcyMUVGQjFFQTk1NUEwMUNBRDRBMTg5RTk5NEVEMDEyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSTBmVRtrZ2+I8mlAmJsO51/4Q fRM2rhc89pUQH34Gt3VUAxkjyeun56SnEamYQ+J91Aw40MpOo/3IlkU3+wNQTCy8 Kq/0zaDA3K6TaJ77jfDcshslzoWmaT8jYQkY9H8BGuvcRWeh3ZP/41z/rEy0kZ7z CNLg+UdSeTpgY9NGjLrNGUMOb3M1XoJfneL8ORSNTv8YqrMd3jbDXzABCO5l+VqF di/eQqJRfMjbrtJyCsDXgDgrougRsqu1o5c/JK19/lmcTM1coZtP9tPxogw2grWr qE6Yg/M1VWhBY4NLvTAPR+UqPpc1ym6Kv2/KyH8Nr9ROa51Xnmenho2nnjR1AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU881wch77HqlVoBytShiemU7QEn8wHwYDVR0j BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD OEYyMUUwNTE4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzBhNDYz N2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAvQjg4QTk0RENBMDlFM0E2NTND MDZGNDc4NDM0REM3QzhGMjFFMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADw19LTwAl0bwbiT/ygi URERttU6YYh8zkrnV5pCXItK8/x23o5ZfFrlduClnv+hrpc4HlebKIQjYP1e/y7F SBBaXob5OcJLOqdMHAyE5tDxpBgFHJU3pEM06KqTK52uTOMDqIHVbmmmbrJOuXBd InAW3ora/slFjY9pQFXeGxss3QCQWNeEe4RN3zWHj/Ti76lVti+xwwJtdRBnzfGg qK3IqlgxEWQWhsUNoFHwAYzo3FCRWLGdYv+/ArjyaARAAnZRsD8y/KgbhJ7nZvjy i4vTgrSggtt20mx9ecy2/rd4ZoqoV/nA3TjYOu6+2w71/PZ3a8Wx60tU49gpAmyX aHM= -----END CERTIFICATE-----Generated at Sat Jul 26 06:41:29 2025 by rpki-client