$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json) Hash identifier: Mngok6voHcQ72wLWo1oq5xbFxJVk1TpiN71OyMlE6hw= Subject key identifier: 69:E3:8D:BD:0B:E9:22:0F:96:EE:24:7B:8F:2C:85:8A:41:83:12:07 Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Certificate serial: 4BD2CF287838331E24C7F12FC6C25300F553A1B0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft Manifest number: 011C Signing time: Sun 20 Jul 2025 20:15:03 +0000 Manifest this update: Sun 20 Jul 2025 20:10:03 +0000 Manifest next update: Mon 21 Jul 2025 21:28:03 +0000 Files and hashes: 1: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: iRjGhm9MAYijKikuNXa9CZKLfnQlB6md5E2iJLdE/iQ=) 2: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: EcC29exV8AQ2pp4EsahzQhTmJ+h/BfT4AFMIDa045Jk=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 18:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d2:cf:28:78:38:33:1e:24:c7:f1:2f:c6:c2:53:00:f5:53:a1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Validity Not Before: Jul 20 20:10:03 2025 GMT Not After : Jul 21 21:28:03 2025 GMT Subject: CN=69E38DBD0BE9220F96EE247B8F2C858A41831207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:f8:36:84:27:b9:df:b4:8d:01:3d:48:6e: 99:22:42:fd:3e:05:58:fc:d9:15:70:80:44:67:e5: d6:eb:a8:9e:15:3a:4b:ec:85:0e:f4:16:a1:0f:79: e4:77:20:9d:c1:c8:a2:19:7e:a4:ef:6e:52:48:9a: b2:68:59:ac:0f:96:cd:66:a5:b8:16:75:5d:e8:26: 99:0a:52:90:e0:f7:b9:33:ed:4f:de:cd:1a:d0:31: 09:b9:1d:64:28:a5:7a:7f:fa:0a:04:eb:0f:4c:ae: a5:8d:94:c5:33:e9:fc:cc:b7:ac:dc:c5:e2:a0:30: 9c:85:73:62:7b:a6:ac:5a:a6:65:8d:30:12:5f:d5: 2e:9e:c8:37:a9:6f:14:3c:c7:ad:c1:59:c2:bd:66: cf:92:41:9c:5a:51:96:f3:10:5f:f6:e0:ce:4f:cf: 09:b8:d6:3a:26:52:af:aa:4e:75:42:7a:16:46:01: 25:bc:a9:a5:cc:61:0b:0f:11:25:c8:23:9b:3a:b5: cc:8e:b4:0c:33:af:34:43:60:be:d3:96:85:56:e5: 00:60:6f:02:fe:d9:8b:29:95:2a:29:82:95:3a:c6: 71:4d:db:36:04:5b:89:15:25:de:d7:0b:71:0e:18: c1:69:4d:00:d8:6b:e3:f0:5c:6c:a5:6d:b9:46:95: 97:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E3:8D:BD:0B:E9:22:0F:96:EE:24:7B:8F:2C:85:8A:41:83:12:07 X509v3 Authority Key Identifier: keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:67:62:ec:a5:71:3a:f2:0e:c0:f3:b5:da:2c:83:25:cd:ba: 51:ed:94:0b:ad:d1:19:21:15:c1:23:5e:0a:25:26:c5:1c:c9: e5:d1:89:b6:ed:cc:6e:ad:ad:e8:99:52:01:66:91:57:6a:81: 34:7f:d0:15:a6:f9:d9:67:de:e1:c9:1f:1a:41:f3:a3:73:cd: a6:74:b9:c9:ec:ea:cc:47:fd:d8:7e:81:e7:0f:e3:2a:e9:ee: 9e:61:22:9b:d4:13:52:44:e7:05:64:9e:f8:04:8a:0c:ff:99: 73:ad:29:43:5f:4f:0d:27:6d:98:e2:07:4d:e5:b5:91:89:7d: 13:92:24:7f:f7:43:40:ff:35:cc:b5:1e:91:9c:01:3a:10:11: cb:ec:cd:d9:f1:d4:35:e8:0f:ce:a3:9b:43:a8:e0:08:e5:e1: e5:dd:a8:eb:ce:53:a6:29:96:c0:4c:8d:f6:82:70:9e:9b:bd: aa:19:21:d7:43:75:49:f7:f3:3a:91:02:73:87:be:75:bc:0c: 11:b3:5f:c9:10:3c:f6:59:7c:33:19:95:5c:15:70:30:a2:78: 80:24:ce:f5:a9:e7:39:ed:0e:d5:56:10:68:f5:48:bd:0c:81: 70:30:1c:3f:4b:10:41:be:d4:f6:8e:f5:cc:b6:ae:37:bc:dd: f0:4f:93:f7 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUS9LPKHg4Mx4kx/EvxsJTAPVTobAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdE NTQ3ODZEMzAeFw0yNTA3MjAyMDEwMDNaFw0yNTA3MjEyMTI4MDNaMDMxMTAvBgNV BAMTKDY5RTM4REJEMEJFOTIyMEY5NkVFMjQ3QjhGMkM4NThBNDE4MzEyMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl8fg2hCe537SNAT1IbpkiQv0+ BVj82RVwgERn5dbrqJ4VOkvshQ70FqEPeeR3IJ3ByKIZfqTvblJImrJoWawPls1m pbgWdV3oJpkKUpDg97kz7U/ezRrQMQm5HWQopXp/+goE6w9MrqWNlMUz6fzMt6zc xeKgMJyFc2J7pqxapmWNMBJf1S6eyDepbxQ8x63BWcK9Zs+SQZxaUZbzEF/24M5P zwm41jomUq+qTnVCehZGASW8qaXMYQsPESXII5s6tcyOtAwzrzRDYL7TloVW5QBg bwL+2YsplSopgpU6xnFN2zYEW4kVJd7XC3EOGMFpTQDYa+PwXGylbblGlZcJAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUaeONvQvpIg+W7iR7jyyFikGDEgcwHwYDVR0j BBgwFoAUbZS517fBinpJen6fXi4il9VHhtMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzFlYmZkNTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAv NkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82RDk0QjlEN0I3QzE4QTdBNDk3QTdFOUY1RTJFMjI5 N0Q1NDc4NkQzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzFlYmZk NTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAvNkQ5NEI5RDdCN0MxOEE3QTQ5 N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHRnYuylcTryDsDztdos gyXNulHtlAut0RkhFcEjXgolJsUcyeXRibbtzG6treiZUgFmkVdqgTR/0BWm+dln 3uHJHxpB86NzzaZ0ucns6sxH/dh+gecP4yrp7p5hIpvUE1JE5wVknvgEigz/mXOt KUNfTw0nbZjiB03ltZGJfROSJH/3Q0D/Ncy1HpGcAToQEcvszdnx1DXoD86jm0Oo 4Ajl4eXdqOvOU6YplsBMjfaCcJ6bvaoZIddDdUn38zqRAnOHvnW8DBGzX8kQPPZZ fDMZlVwVcDCieIAkzvWp5zntDtVWEGj1SL0MgXAwHD9LEEG+1PaO9cy2rje83fBP k/c= -----END CERTIFICATE-----Generated at Mon Jul 21 09:05:17 2025 by rpki-client