$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json) Hash identifier: CoBy/7zrS0j4ITX6vAd/lQi6bygq1UQ715mSNLMGlxw= Subject key identifier: 26:34:E4:17:4E:C5:BD:AE:6C:33:3B:57:C0:59:EF:14:73:D1:C5:07 Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Certificate serial: 461059E70233FC760C6210BE360E728E63F15E41 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft Manifest number: CD Signing time: Sun 20 Jul 2025 17:24:53 +0000 Manifest this update: Sun 20 Jul 2025 17:19:53 +0000 Manifest next update: Mon 21 Jul 2025 20:17:53 +0000 Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: ARhBLTM2Fvw7GjPAvLkT42bUR9dLUoJEtJGMLy9nPyw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 18:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:10:59:e7:02:33:fc:76:0c:62:10:be:36:0e:72:8e:63:f1:5e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Validity Not Before: Jul 20 17:19:53 2025 GMT Not After : Jul 21 20:17:53 2025 GMT Subject: CN=2634E4174EC5BDAE6C333B57C059EF1473D1C507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ba:b1:e7:eb:4c:98:01:d6:2f:b1:72:1e:cb: 7c:75:cf:ce:63:f1:f3:51:2c:49:ef:85:a6:99:01: 81:b5:2f:32:31:22:21:5b:a6:53:1b:89:e8:fe:51: c1:2f:31:6f:9e:d2:0a:16:91:0a:8b:59:bf:7d:bc: cf:b2:aa:00:57:5b:37:aa:d7:10:fc:78:45:db:97: 1c:d3:ee:bb:a7:75:af:81:5b:30:6c:b1:24:b5:84: 52:47:f4:84:d6:e2:a2:f7:13:9e:aa:ed:cc:22:6f: 6b:01:f8:7f:bd:8e:03:6e:ad:ee:f2:d5:71:50:e5: 28:5a:9d:2f:86:a6:2a:2a:86:af:d5:62:b0:f7:c3: 93:70:7b:32:cc:55:ba:a5:45:af:05:c7:11:c0:07: 76:bf:19:ca:39:5a:20:fd:10:81:b5:fa:b5:64:10: e1:c0:c0:7d:d7:69:fb:5a:3e:83:58:20:62:1e:9f: 1b:44:4d:d6:cd:cd:64:53:70:64:48:05:33:ff:5c: 66:10:dd:59:e3:46:95:ae:16:85:48:c9:80:38:f4: e7:77:76:bf:4c:17:49:13:67:d4:1d:ae:32:2f:ce: 78:24:12:aa:75:72:62:ba:de:75:ef:f3:c3:35:73: ff:51:1d:0a:0e:dc:77:5e:cc:48:ac:f8:44:96:5c: 3b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:34:E4:17:4E:C5:BD:AE:6C:33:3B:57:C0:59:EF:14:73:D1:C5:07 X509v3 Authority Key Identifier: keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:6d:ed:e1:d8:15:83:ac:3d:34:0c:9d:74:33:01:2b:81:4c: eb:f3:e0:03:ef:38:66:54:5e:f7:d6:ef:d0:6f:de:44:33:a2: 90:9b:bb:91:0c:89:8d:10:99:9f:01:0d:ef:95:4d:94:6c:e7: a7:01:96:bd:42:9d:2f:28:4d:70:34:39:07:db:f6:70:8b:bb: 3e:4b:d8:af:91:94:e4:71:d0:b2:e4:0d:19:8b:db:02:5e:da: cb:fc:c9:f1:68:fd:06:27:8b:3e:ce:e2:43:73:b1:b1:c8:7a: 82:55:f7:36:6c:0b:11:e7:9e:a2:bf:cd:da:8a:72:7a:c4:e2: c7:2b:db:75:e2:2f:52:5f:9b:38:df:92:56:71:65:77:fe:c5: 22:4d:a6:96:94:65:f1:54:ab:6e:b3:3c:b3:a1:9d:7f:95:57: 16:2e:05:be:8e:64:95:06:5d:e6:8a:eb:95:92:af:a4:e3:bb: 41:90:3c:56:f9:83:39:ba:1c:00:2c:c3:f8:8d:8a:72:70:b3: 35:d4:0c:64:ab:85:53:e2:16:6e:a7:90:67:4f:3f:60:20:db: c1:eb:44:6b:bf:c1:8f:b8:d0:46:f9:ff:8e:88:b7:ca:39:cd: d1:16:99:63:53:a2:ee:65:78:52:23:36:2e:5b:15:8d:fb:3c: a3:d9:c5:67 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIURhBZ5wIz/HYMYhC+Ng5yjmPxXkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz REREMDgwRDAeFw0yNTA3MjAxNzE5NTNaFw0yNTA3MjEyMDE3NTNaMDMxMTAvBgNV BAMTKDI2MzRFNDE3NEVDNUJEQUU2QzMzM0I1N0MwNTlFRjE0NzNEMUM1MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUurHn60yYAdYvsXIey3x1z85j 8fNRLEnvhaaZAYG1LzIxIiFbplMbiej+UcEvMW+e0goWkQqLWb99vM+yqgBXWzeq 1xD8eEXblxzT7runda+BWzBssSS1hFJH9ITW4qL3E56q7cwib2sB+H+9jgNure7y 1XFQ5ShanS+Gpioqhq/VYrD3w5NwezLMVbqlRa8FxxHAB3a/Gco5WiD9EIG1+rVk EOHAwH3XaftaPoNYIGIenxtETdbNzWRTcGRIBTP/XGYQ3VnjRpWuFoVIyYA49Od3 dr9MF0kTZ9QdrjIvzngkEqp1cmK63nXv88M1c/9RHQoO3HdezEis+ESWXDv/AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUJjTkF07Fva5sMztXwFnvFHPRxQcwHwYDVR0j BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI9t7eHYFYOsPTQMnXQz ASuBTOvz4APvOGZUXvfW79Bv3kQzopCbu5EMiY0QmZ8BDe+VTZRs56cBlr1CnS8o TXA0OQfb9nCLuz5L2K+RlORx0LLkDRmL2wJe2sv8yfFo/QYniz7O4kNzsbHIeoJV 9zZsCxHnnqK/zdqKcnrE4scr23XiL1JfmzjfklZxZXf+xSJNppaUZfFUq26zPLOh nX+VVxYuBb6OZJUGXeaK65WSr6Tju0GQPFb5gzm6HAAsw/iNinJwszXUDGSrhVPi Fm6nkGdPP2Ag28HrRGu/wY+40Eb5/46It8o5zdEWmWNTou5leFIjNi5bFY37PKPZ xWc= -----END CERTIFICATE-----Generated at Mon Jul 21 08:59:28 2025 by rpki-client