$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft File: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft (raw, json) Hash identifier: ctAxwkR/M6edXoeW0EOg70NeGn8rJ5y69QmqlH25+E4= Subject key identifier: 1F:CA:2F:EA:0C:DE:34:14:CA:0A:AA:82:6F:9E:62:E4:F1:22:C7:FD Authority key identifier: 06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5 Certificate issuer: /CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5 Certificate serial: 58AC43FBD26E6D2BCB86A87E0E8956F680E84451 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft Manifest number: 016B Signing time: Fri 04 Apr 2025 04:52:51 +0000 Manifest this update: Fri 04 Apr 2025 04:47:49 +0000 Manifest next update: Sat 05 Apr 2025 06:18:49 +0000 Files and hashes: 1: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl (hash: uZ7ab8EWbmLTqJoMeU68VgoSJ77Zf8l8JIThz9hfADE=) 2: 326131313a663263303a666663343a3a2f34382d3438203d3e20323136333733.roa (hash: xLWCJHNLCLVjAtvqpCjDn5+j/rYj7eZA++BRYmvAk0s=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 06:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ac:43:fb:d2:6e:6d:2b:cb:86:a8:7e:0e:89:56:f6:80:e8:44:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5 Validity Not Before: Apr 4 04:47:49 2025 GMT Not After : Apr 5 06:18:49 2025 GMT Subject: CN=1FCA2FEA0CDE3414CA0AAA826F9E62E4F122C7FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3c:ea:d7:75:e0:ce:f2:9b:ae:e2:6f:bb:20: 80:0d:d2:f5:d8:d8:f3:d4:ad:94:8f:81:8a:fa:3e: b6:6c:5c:17:d9:02:c1:f0:83:ef:21:01:7d:4b:e2: 5d:8e:44:7c:6e:e0:65:ea:3d:73:3b:8e:d1:57:73: 61:6f:cb:13:18:3b:d8:c8:4c:64:02:a3:97:e0:3c: 67:c5:48:fe:1e:4f:5b:1b:a0:d0:69:0a:42:b3:ae: 6a:33:18:d4:73:fb:0b:bf:53:34:2a:e0:bc:c7:d3: e5:2f:69:70:95:a7:4d:a9:40:e2:4c:bc:af:61:80: e3:1d:10:1e:97:84:86:12:38:d5:10:47:86:ca:c3: a3:8a:1c:38:4c:cd:70:b5:27:4f:ff:d6:65:d3:24: c9:22:25:2b:6b:75:5a:30:4e:c5:5b:96:8e:f1:aa: 58:95:60:ae:81:95:96:e1:54:04:d5:f0:e9:5e:b3: 6d:a4:03:74:27:34:76:f1:8e:ce:c3:83:ab:68:60: 41:1f:f8:66:7d:8c:42:81:4b:45:89:0a:13:81:85: 30:a1:a9:66:85:55:98:a9:ad:86:cd:c2:6e:13:0f: 29:fe:41:33:7f:d8:fa:b3:4a:22:69:4b:07:ad:8b: 09:79:50:65:77:32:2f:4a:44:75:52:bb:ab:00:5a: a6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CA:2F:EA:0C:DE:34:14:CA:0A:AA:82:6F:9E:62:E4:F1:22:C7:FD X509v3 Authority Key Identifier: keyid:06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:5b:e3:18:a3:b6:c7:53:58:b1:0b:ee:84:b9:47:56:5e:95: 43:da:f8:55:32:da:7a:b1:b1:b3:4a:e0:e2:26:cb:0d:a0:b3: 81:b0:3e:7c:f5:c2:da:97:a9:72:da:ac:39:06:0b:60:81:f5: 26:c1:e2:48:5d:54:b1:4c:26:33:b7:73:1a:a2:08:ef:e6:4c: 8d:14:75:62:a4:9a:77:ef:0a:68:a5:47:96:7f:b6:94:12:e6: 1d:be:3a:6d:a1:6e:d9:f9:6b:56:23:53:1e:3a:d7:af:6d:60: 52:66:6d:b6:25:d1:93:1e:ee:7d:99:ec:2d:04:10:eb:3c:8b: e3:8a:17:3a:66:ab:44:49:a5:68:62:fe:c1:2c:bb:46:53:42: 89:d2:bb:a5:3f:33:e9:e0:83:7e:5e:0e:e1:09:1f:a9:14:57: 8a:c2:a5:f1:51:0d:30:f0:22:91:58:96:3f:ce:8a:3e:3a:15: 59:d5:20:0d:89:f4:a9:2e:59:3f:8d:f0:34:2a:df:52:a0:d3: ba:60:44:d7:7e:91:a9:f5:11:17:d8:27:bb:78:f5:49:35:5e: 3a:c4:59:d9:e8:94:0f:12:98:cc:db:a2:c4:47:c4:91:b5:d6: 02:6b:e3:ae:a2:14:c1:ea:35:3b:c2:9a:10:a0:87:76:b9:42: 33:79:0b:58 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUWKxD+9JubSvLhqh+DolW9oDoRFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3REJDNkJDRjBGOTU4MkRGNzgzNjYzODlBRUFGNTk2 NTU2NUVGNTAeFw0yNTA0MDQwNDQ3NDlaFw0yNTA0MDUwNjE4NDlaMDMxMTAvBgNV BAMTKDFGQ0EyRkVBMENERTM0MTRDQTBBQUE4MjZGOUU2MkU0RjEyMkM3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdPOrXdeDO8puu4m+7IIAN0vXY 2PPUrZSPgYr6PrZsXBfZAsHwg+8hAX1L4l2ORHxu4GXqPXM7jtFXc2FvyxMYO9jI TGQCo5fgPGfFSP4eT1sboNBpCkKzrmozGNRz+wu/UzQq4LzH0+UvaXCVp02pQOJM vK9hgOMdEB6XhIYSONUQR4bKw6OKHDhMzXC1J0//1mXTJMkiJStrdVowTsVblo7x qliVYK6BlZbhVATV8Oles22kA3QnNHbxjs7Dg6toYEEf+GZ9jEKBS0WJChOBhTCh qWaFVZiprYbNwm4TDyn+QTN/2PqzSiJpSwetiwl5UGV3Mi9KRHVSu6sAWqZjAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUH8ov6gzeNBTKCqqCb55i5PEix/0wHwYDVR0j BBgwFoAUBn28a88PlYLfeDZjia6vWWVWXvUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzAxNGI5MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzAv MDY3REJDNkJDRjBGOTU4MkRGNzgzNjYzODlBRUFGNTk2NTU2NUVGNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wNjdEQkM2QkNGMEY5NTgyREY3ODM2NjM4OUFFQUY1 OTY1NTY1RUY1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzAxNGI5 MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzAvMDY3REJDNkJDRjBGOTU4MkRG NzgzNjYzODlBRUFGNTk2NTU2NUVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAM1b4xijtsdTWLEL7oS5 R1ZelUPa+FUy2nqxsbNK4OImyw2gs4GwPnz1wtqXqXLarDkGC2CB9SbB4khdVLFM JjO3cxqiCO/mTI0UdWKkmnfvCmilR5Z/tpQS5h2+Om2hbtn5a1YjUx46169tYFJm bbYl0ZMe7n2Z7C0EEOs8i+OKFzpmq0RJpWhi/sEsu0ZTQonSu6U/M+ngg35eDuEJ H6kUV4rCpfFRDTDwIpFYlj/Oij46FVnVIA2J9KkuWT+N8DQq31Kg07pgRNd+kan1 ERfYJ7t49Uk1XjrEWdnolA8SmMzbosRHxJG11gJr466iFMHqNTvCmhCgh3a5QjN5 C1g= -----END CERTIFICATE-----Generated at Fri Apr 4 17:11:10 2025 by rpki-client