$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft File: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft (raw, json) Hash identifier: FmPFM8w5VWs/VEfsrZlt3B3SuE9yqwA+NWpjcJyE/wo= Subject key identifier: 14:CF:65:0E:6E:B9:7A:90:9C:89:DB:3A:DA:ED:DE:F0:07:89:84:E5 Authority key identifier: 5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0 Certificate issuer: /CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0 Certificate serial: 7CADFF81A4AABA8E88A6EC620C9AF90D4FC7A929 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft Manifest number: 01FF Signing time: Fri 25 Jul 2025 19:08:16 +0000 Manifest this update: Fri 25 Jul 2025 19:03:16 +0000 Manifest next update: Sat 26 Jul 2025 22:06:16 +0000 Files and hashes: 1: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl (hash: lzTLlVmb/W4PzYvol8Rjhz9pulFdWEzef+K8uoKC9f0=) 2: 326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa (hash: Fb1/PRkI0lrTKbp777DJ9P81eGra7/CB0uA9Vm+bs1w=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 22:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ad:ff:81:a4:aa:ba:8e:88:a6:ec:62:0c:9a:f9:0d:4f:c7:a9:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0 Validity Not Before: Jul 25 19:03:16 2025 GMT Not After : Jul 26 22:06:16 2025 GMT Subject: CN=14CF650E6EB97A909C89DB3ADAEDDEF0078984E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ed:22:a7:88:fe:1b:8b:72:a5:96:b4:f3:36: 8e:07:96:71:5f:dd:75:4c:e2:1d:04:82:d5:f2:5d: d9:46:75:cc:96:c6:f2:65:23:a3:f9:0c:2f:24:0b: 09:ab:5f:46:33:09:41:a0:21:c1:2b:3b:ba:e8:9f: 68:7a:6d:5b:81:8f:e3:c5:fc:19:2a:6e:f7:04:53: 05:55:0f:28:1d:7d:4f:23:b6:29:df:b8:69:2e:44: f6:fa:6e:c2:7b:b2:54:ad:31:4a:f4:6e:4c:0c:0f: bb:44:eb:f6:ff:88:f5:96:37:9e:9e:73:04:c9:8c: 2e:71:fc:b0:2f:60:78:ef:ad:05:df:76:d3:7d:7e: b7:56:c3:62:78:42:c2:cb:60:3d:30:7e:c3:0c:47: 34:6d:e1:8e:b4:dd:9f:01:53:59:6d:62:85:0a:0d: 7c:3d:f9:8d:2c:ff:08:12:e0:52:c9:be:9d:f1:ef: 52:89:c4:83:11:76:e6:82:07:d0:98:c0:fc:7b:06: bf:2d:3a:e9:bf:5f:eb:3e:07:87:0f:0f:26:ad:89: 8b:65:80:a7:ce:99:ad:78:d3:14:df:a1:c8:8d:c9: 60:6c:5e:c0:86:a1:5b:40:c1:59:52:b9:76:0d:26: f0:38:97:3e:25:f4:b0:3e:99:cc:52:39:16:8b:64: 4f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CF:65:0E:6E:B9:7A:90:9C:89:DB:3A:DA:ED:DE:F0:07:89:84:E5 X509v3 Authority Key Identifier: keyid:5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:52:c3:01:0f:ff:28:85:23:8e:cd:d9:b0:eb:22:a8:ff:74: 5c:da:e4:c8:be:ca:53:a0:97:88:f7:c8:21:f0:ee:92:c3:b3: fa:ca:87:d2:98:64:fe:fc:75:fd:bb:7d:d9:02:20:01:48:16: 16:e2:39:c3:58:e4:5d:8b:79:ee:b1:40:b9:4d:17:3f:d6:c4: 59:60:3d:29:cb:f2:84:67:48:c2:4b:17:1a:bb:29:6b:45:f2: 0e:ff:14:75:60:70:46:71:19:36:3e:ad:92:7f:d5:54:07:41: d2:09:97:9d:ff:0e:0e:80:63:f1:ab:76:25:5b:96:40:78:5c: 0b:62:55:11:a8:34:4a:3d:29:47:4e:94:73:dd:c9:ff:86:bf: 48:68:b4:0b:d2:87:22:f4:9c:df:85:f2:b5:dc:00:3c:e6:15: 79:0e:c4:d8:44:37:3b:01:aa:ec:96:1c:23:8d:69:87:45:17: 63:9d:5c:b8:45:67:83:bf:b4:bf:2c:4b:f4:be:e8:0c:68:82: 3f:40:6b:d9:d2:f9:49:28:65:1c:06:1f:72:f4:b4:09:10:fd: e4:1f:e9:4f:10:ce:3e:6a:ba:b6:63:b4:24:43:28:b4:4d:5b: 7e:4f:94:ae:06:d5:81:b7:62:b0:21:7b:19:ed:0a:94:24:01: bf:60:dd:e4 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUfK3/gaSquo6IpuxiDJr5DU/HqSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCRTJGNjA5OTk2NDc2QUFGRTE0NkJDNUE3MjQyOUIw QjIwNUZDMDAeFw0yNTA3MjUxOTAzMTZaFw0yNTA3MjYyMjA2MTZaMDMxMTAvBgNV BAMTKDE0Q0Y2NTBFNkVCOTdBOTA5Qzg5REIzQURBRURERUYwMDc4OTg0RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr7SKniP4bi3KllrTzNo4HlnFf 3XVM4h0EgtXyXdlGdcyWxvJlI6P5DC8kCwmrX0YzCUGgIcErO7ron2h6bVuBj+PF /BkqbvcEUwVVDygdfU8jtinfuGkuRPb6bsJ7slStMUr0bkwMD7tE6/b/iPWWN56e cwTJjC5x/LAvYHjvrQXfdtN9frdWw2J4QsLLYD0wfsMMRzRt4Y603Z8BU1ltYoUK DXw9+Y0s/wgS4FLJvp3x71KJxIMRduaCB9CYwPx7Br8tOum/X+s+B4cPDyatiYtl gKfOma140xTfociNyWBsXsCGoVtAwVlSuXYNJvA4lz4l9LA+mcxSORaLZE/DAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUFM9lDm65epCcids62u3e8AeJhOUwHwYDVR0j BBgwFoAUWr4vYJmWR2qv4Ua8WnJCmwsgX8AwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY0ODMyNjExYmEwNjRkNmI4ZjljMmI3YzczZmJkODRiLzAv NUFCRTJGNjA5OTk2NDc2QUFGRTE0NkJDNUE3MjQyOUIwQjIwNUZDMC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy81QUJFMkY2MDk5OTY0NzZBQUZFMTQ2QkM1QTcyNDI5 QjBCMjA1RkMwLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY0ODMy NjExYmEwNjRkNmI4ZjljMmI3YzczZmJkODRiLzAvNUFCRTJGNjA5OTk2NDc2QUFG RTE0NkJDNUE3MjQyOUIwQjIwNUZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACdSwwEP/yiFI47N2bDr Iqj/dFza5Mi+ylOgl4j3yCHw7pLDs/rKh9KYZP78df27fdkCIAFIFhbiOcNY5F2L ee6xQLlNFz/WxFlgPSnL8oRnSMJLFxq7KWtF8g7/FHVgcEZxGTY+rZJ/1VQHQdIJ l53/Dg6AY/GrdiVblkB4XAtiVRGoNEo9KUdOlHPdyf+Gv0hotAvShyL0nN+F8rXc ADzmFXkOxNhENzsBquyWHCONaYdFF2OdXLhFZ4O/tL8sS/S+6Axogj9Aa9nS+Uko ZRwGH3L0tAkQ/eQf6U8Qzj5qurZjtCRDKLRNW35PlK4G1YG3YrAhexntCpQkAb9g 3eQ= -----END CERTIFICATE-----Generated at Sat Jul 26 14:55:27 2025 by rpki-client