$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: 1LwIOH++vP/28sr1DRmx54yJf1EbuJHq0FKdVpaL4+I= Subject key identifier: 7F:BD:59:23:4D:E7:EB:0D:C6:FB:70:78:A1:53:E7:AC:5A:2A:C6:28 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 241FA494B0D483C102C14B06E6490C5E3A0F94C2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 01F8 Signing time: Mon 21 Jul 2025 02:43:52 +0000 Manifest this update: Mon 21 Jul 2025 02:38:52 +0000 Manifest next update: Tue 22 Jul 2025 06:32:52 +0000 Files and hashes: 1: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: a7nYfC4yxcgvNznsjuboOCbTNlPBlMv+JxLRqchZRX0=) 2: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: 40KX5Azg+QOWUNYOrdl6IsWrdX+iJJgcObJYGtl3Q6w=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 18:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1f:a4:94:b0:d4:83:c1:02:c1:4b:06:e6:49:0c:5e:3a:0f:94:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Jul 21 02:38:52 2025 GMT Not After : Jul 22 06:32:52 2025 GMT Subject: CN=7FBD59234DE7EB0DC6FB7078A153E7AC5A2AC628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:19:e5:b3:94:97:17:61:41:f0:f6:63:ee:e7: 6a:20:90:d9:ea:3e:9f:cf:cc:f4:18:48:97:9f:68: a8:de:4c:bf:04:8b:96:01:9d:82:d1:32:18:25:f4: 52:ce:dc:f3:c1:2d:b4:1b:03:e4:16:03:1e:c3:93: 25:ee:39:45:50:ed:15:50:25:77:83:21:c3:d2:29: 2f:d5:c1:c7:eb:49:24:80:01:75:1e:21:56:00:f9: 6c:c2:76:8f:fc:5b:36:09:0a:1b:61:43:46:35:2f: ed:c8:a8:a5:1e:e9:58:48:34:c4:d4:f7:1b:17:9c: 17:7c:04:d4:cc:6b:69:ab:9b:fd:4e:0b:db:39:cf: 52:97:70:44:31:00:62:75:4e:ab:65:e0:97:65:53: 14:b5:a5:f7:e0:0d:c7:f4:ef:47:e5:44:85:90:34: 7c:5a:c2:94:9d:33:a2:e5:d2:b2:ed:ce:21:d2:ae: 57:55:d5:23:74:ed:ec:c5:34:0e:6d:00:f1:17:e8: 2f:46:df:36:39:00:1a:01:87:fd:da:a3:46:7b:8d: 46:db:fb:9e:8f:41:ae:1e:ad:23:19:d2:9f:01:25: 95:6f:bb:af:9c:20:15:55:f8:a6:2b:e5:07:99:99: 52:62:f7:1e:54:a0:83:38:cd:31:d1:52:61:7e:30: 7f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BD:59:23:4D:E7:EB:0D:C6:FB:70:78:A1:53:E7:AC:5A:2A:C6:28 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:aa:40:8a:8a:7f:42:3e:06:4b:40:6d:a2:ee:a8:62:18:4a: 9b:15:74:fa:c0:ba:0c:50:80:bc:eb:85:3a:05:d7:36:b4:75: a2:e1:51:3f:f5:29:5d:d9:23:4b:98:d1:9f:d7:4f:cf:f1:79: 75:89:be:3b:fb:de:ce:7a:07:14:dd:09:f5:f7:6b:f7:92:d1: 33:13:98:9a:a7:af:e3:ce:29:91:f8:33:21:f6:f4:05:8a:47: c9:a0:09:32:53:69:39:77:0d:c9:1a:c7:94:a9:d1:2d:67:02: 68:63:eb:4f:65:c5:3b:b7:7d:d3:75:a2:bb:62:58:e0:d2:17: 33:f0:97:20:5a:8d:32:32:2f:3c:09:e8:a1:63:84:91:5b:48: 41:c2:00:9c:a1:4a:d5:0b:ff:e0:c2:9f:db:96:af:21:47:09: 8e:c4:46:84:43:52:25:85:0f:fe:41:02:14:ca:86:c3:52:9f: 35:20:0e:4c:24:2f:2f:cc:1b:a3:fe:db:08:4c:32:4f:1e:c1: ac:29:f6:13:94:88:f2:d0:28:aa:68:61:c9:46:c8:13:0b:b0: b9:55:ec:55:e1:6b:bf:09:05:8d:c9:cb:b9:4c:61:f4:af:dc: c0:2e:4b:34:fb:2f:ca:1c:40:7b:a7:02:ca:53:2c:43:14:d8: c1:57:8d:85 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUJB+klLDUg8ECwUsG5kkMXjoPlMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNTA3MjEwMjM4NTJaFw0yNTA3MjIwNjMyNTJaMDMxMTAvBgNV BAMTKDdGQkQ1OTIzNERFN0VCMERDNkZCNzA3OEExNTNFN0FDNUEyQUM2MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmGeWzlJcXYUHw9mPu52ogkNnq Pp/PzPQYSJefaKjeTL8Ei5YBnYLRMhgl9FLO3PPBLbQbA+QWAx7DkyXuOUVQ7RVQ JXeDIcPSKS/VwcfrSSSAAXUeIVYA+WzCdo/8WzYJChthQ0Y1L+3IqKUe6VhINMTU 9xsXnBd8BNTMa2mrm/1OC9s5z1KXcEQxAGJ1Tqtl4JdlUxS1pffgDcf070flRIWQ NHxawpSdM6Ll0rLtziHSrldV1SN07ezFNA5tAPEX6C9G3zY5ABoBh/3ao0Z7jUbb +56PQa4erSMZ0p8BJZVvu6+cIBVV+KYr5QeZmVJi9x5UoIM4zTHRUmF+MH/XAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUf71ZI03n6w3G+3B4oVPnrFoqxigwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEqqQIqKf0I+BktAbaLu qGIYSpsVdPrAugxQgLzrhToF1za0daLhUT/1KV3ZI0uY0Z/XT8/xeXWJvjv73s56 BxTdCfX3a/eS0TMTmJqnr+POKZH4MyH29AWKR8mgCTJTaTl3Dckax5Sp0S1nAmhj 609lxTu3fdN1ortiWODSFzPwlyBajTIyLzwJ6KFjhJFbSEHCAJyhStUL/+DCn9uW ryFHCY7ERoRDUiWFD/5BAhTKhsNSnzUgDkwkLy/MG6P+2whMMk8ewawp9hOUiPLQ KKpoYclGyBMLsLlV7FXha78JBY3Jy7lMYfSv3MAuSzT7L8ocQHunAspTLEMU2MFX jYU= -----END CERTIFICATE-----Generated at Mon Jul 21 09:00:40 2025 by rpki-client