$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft File: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft (raw, json) Hash identifier: MDdYr/r2Z21yiLE3LDDONCZqHZdMpsrNiUDOZvDfEiU= Subject key identifier: 00:2E:4C:99:FD:7B:2B:34:8A:4C:28:CE:7A:F2:B7:D6:34:40:F2:95 Authority key identifier: DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1 Certificate issuer: /CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1 Certificate serial: 2FF806CEC92FFD923DC62D28B54E4A5555C76C09 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft Manifest number: 0200 Signing time: Fri 25 Jul 2025 22:48:30 +0000 Manifest this update: Fri 25 Jul 2025 22:43:30 +0000 Manifest next update: Sun 27 Jul 2025 02:18:30 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34342d3434203d3e20323038303531.roa (hash: tFJBYIhXxfWIXiULV/y0FG2z1kGnNqMQG/QFmAkPW/4=) 2: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl (hash: sX8Cz1qsu1+aYMAO+5Q17HjE9E7zxYokwx0WCORxPRo=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 01:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f8:06:ce:c9:2f:fd:92:3d:c6:2d:28:b5:4e:4a:55:55:c7:6c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1 Validity Not Before: Jul 25 22:43:30 2025 GMT Not After : Jul 27 02:18:30 2025 GMT Subject: CN=002E4C99FD7B2B348A4C28CE7AF2B7D63440F295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4e:40:b8:86:40:3b:c7:56:31:e5:e5:e6:17: 14:00:a6:90:b1:2b:59:ee:72:e1:c0:29:3f:a4:45: 95:a2:44:3a:77:4a:7f:5f:44:9a:78:50:4b:1d:b1: 4e:9c:0c:5a:d7:d2:b4:98:a1:e3:48:bd:fa:89:88: dc:3c:f7:09:38:8b:69:00:dd:90:fc:ef:75:6c:37: 4c:35:1c:e3:55:0b:28:22:50:39:a3:e6:27:c6:5c: b2:8c:c6:e3:09:22:13:72:6c:e8:c2:d1:b7:17:0a: ce:db:43:be:c2:dd:ec:e7:5e:4b:ec:6f:b1:e2:76: d2:d7:46:cd:95:50:e1:8b:86:45:21:57:ca:a7:84: 46:1b:05:bd:82:bf:6a:3b:3b:47:63:f9:6e:23:52: 00:de:20:16:36:d7:3b:1d:da:e3:60:5c:ad:5f:26: f0:d7:97:90:91:cf:62:be:8f:34:b2:e5:8e:c3:8e: 57:74:45:b9:44:3e:78:19:7f:45:ec:99:5a:5d:c0: 2a:b8:b1:f5:82:ce:63:e4:84:e7:ec:33:a4:6d:1f: 5e:71:47:9b:8e:db:f8:32:82:b8:6e:2e:83:75:08: 8c:05:2f:ea:80:a2:c4:ee:f0:74:a2:c5:f0:db:13: 40:a1:19:5c:e2:e7:8d:a1:40:a6:30:bb:a0:45:4e: c3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2E:4C:99:FD:7B:2B:34:8A:4C:28:CE:7A:F2:B7:D6:34:40:F2:95 X509v3 Authority Key Identifier: keyid:DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:92:6d:42:19:9e:69:e6:2d:27:60:d3:40:d0:ea:0b:4b:71: 69:44:29:cf:81:2f:bf:30:46:46:d2:01:cc:15:1c:44:1a:06: 53:2e:11:9f:c5:7a:f9:8f:cb:cd:f1:b9:3f:fe:7e:ab:9d:47: 3d:73:1b:cb:5e:fa:33:e6:31:46:dd:5c:25:65:27:e1:6e:99: 25:17:50:09:27:15:8a:93:1f:44:8e:5b:56:bb:91:3d:02:2a: df:cb:d6:d2:a1:50:96:40:16:08:db:63:51:e9:a5:95:88:9a: 8a:4e:68:db:62:34:54:70:97:7b:00:8f:db:26:82:57:26:3a: e8:b4:ec:a7:f8:35:e2:1c:9a:26:cf:fd:85:08:d6:8c:b5:0f: ba:b6:d7:b3:12:15:dc:27:01:4b:df:65:ab:ee:d0:54:bd:a9: 52:26:b5:fb:3a:aa:94:db:7a:ca:4a:83:e8:03:1b:58:aa:a4: 9d:90:56:22:42:9c:3b:08:a4:94:a1:b9:f7:7d:41:22:74:28: 4f:6f:2e:b6:b2:55:c7:e9:2f:fd:6d:7c:9b:18:52:54:7f:9a: f7:9b:e8:b0:ad:f7:78:dd:f7:76:b4:a8:c6:e1:40:53:60:af: ae:1c:03:22:03:10:ee:cc:7e:a4:3f:f0:33:01:12:11:17:6d: b7:7e:d9:af -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUL/gGzskv/ZI9xi0otU5KVVXHbAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMyRDM0RkUwRjhDOTBCMkE4Q0FFQzQ3MjdENkJBMzFC OThEMjVEMTAeFw0yNTA3MjUyMjQzMzBaFw0yNTA3MjcwMjE4MzBaMDMxMTAvBgNV BAMTKDAwMkU0Qzk5RkQ3QjJCMzQ4QTRDMjhDRTdBRjJCN0Q2MzQ0MEYyOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkTkC4hkA7x1Yx5eXmFxQAppCx K1nucuHAKT+kRZWiRDp3Sn9fRJp4UEsdsU6cDFrX0rSYoeNIvfqJiNw89wk4i2kA 3ZD873VsN0w1HONVCygiUDmj5ifGXLKMxuMJIhNybOjC0bcXCs7bQ77C3eznXkvs b7HidtLXRs2VUOGLhkUhV8qnhEYbBb2Cv2o7O0dj+W4jUgDeIBY21zsd2uNgXK1f JvDXl5CRz2K+jzSy5Y7Djld0RblEPngZf0XsmVpdwCq4sfWCzmPkhOfsM6RtH15x R5uO2/gygrhuLoN1CIwFL+qAosTu8HSixfDbE0ChGVzi542hQKYwu6BFTsOBAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUAC5Mmf17KzSKTCjOevK31jRA8pUwHwYDVR0j BBgwFoAU3C00/g+MkLKoyuxHJ9a6MbmNJdEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzVjNTUyMmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzAv REMyRDM0RkUwRjhDOTBCMkE4Q0FFQzQ3MjdENkJBMzFCOThEMjVEMS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9EQzJEMzRGRTBGOEM5MEIyQThDQUVDNDcyN0Q2QkEz MUI5OEQyNUQxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzVjNTUy MmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzAvREMyRDM0RkUwRjhDOTBCMkE4 Q0FFQzQ3MjdENkJBMzFCOThEMjVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAeSbUIZnmnmLSdg00DQ 6gtLcWlEKc+BL78wRkbSAcwVHEQaBlMuEZ/FevmPy83xuT/+fqudRz1zG8te+jPm MUbdXCVlJ+FumSUXUAknFYqTH0SOW1a7kT0CKt/L1tKhUJZAFgjbY1HppZWImopO aNtiNFRwl3sAj9smglcmOui07Kf4NeIcmibP/YUI1oy1D7q217MSFdwnAUvfZavu 0FS9qVImtfs6qpTbespKg+gDG1iqpJ2QViJCnDsIpJShufd9QSJ0KE9vLrayVcfp L/1tfJsYUlR/mveb6LCt93jd93a0qMbhQFNgr64cAyIDEO7MfqQ/8DMBEhEXbbd+ 2a8= -----END CERTIFICATE-----Generated at Sat Jul 26 14:20:18 2025 by rpki-client