$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json) Hash identifier: QY0025NNwBTDh4xQk5xAv0uFjSzlaBz3laJajlLifLc= Subject key identifier: C9:C8:55:48:F2:10:42:F3:EF:30:68:EA:7A:46:20:36:8A:D3:B2:AA Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Certificate serial: 0C8E311D50E3A09347F56E605D9719886AA9417E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft Manifest number: A2 Signing time: Sun 20 Apr 2025 07:26:15 +0000 Manifest this update: Sun 20 Apr 2025 07:21:12 +0000 Manifest next update: Mon 21 Apr 2025 07:55:12 +0000 Files and hashes: 1: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: 83ph8bdC4Fuphz+9485JH+/gqBaA+otPht86EKZ989Y=) 2: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: iRjGhm9MAYijKikuNXa9CZKLfnQlB6md5E2iJLdE/iQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Apr 2025 07:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:8e:31:1d:50:e3:a0:93:47:f5:6e:60:5d:97:19:88:6a:a9:41:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Validity Not Before: Apr 20 07:21:12 2025 GMT Not After : Apr 21 07:55:12 2025 GMT Subject: CN=C9C85548F21042F3EF3068EA7A4620368AD3B2AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4f:d5:47:77:f3:5f:37:67:21:03:0d:ea:58: dd:78:3f:9e:7a:cd:7b:44:7e:54:7e:07:a3:63:fa: be:80:8e:13:71:6f:9a:ef:df:b1:40:75:ff:14:90: e0:a2:d1:0d:76:6e:23:8e:4e:8f:76:60:1a:fa:1a: 24:47:0f:ba:fb:65:ca:07:05:c7:28:bf:ea:2d:30: cc:85:de:1d:ba:ef:47:9d:e5:63:94:f1:0d:3d:e6: 66:98:ce:44:b0:45:26:86:ce:a5:96:0b:3f:ff:cb: b2:66:cc:68:c2:a0:04:b5:d0:c1:ce:ab:46:31:d7: 25:29:ce:3a:e4:34:f5:a7:5b:52:3b:1b:b6:51:1b: a8:53:9b:94:e4:93:a1:d9:88:56:86:93:54:d5:91: d6:12:4a:b7:c4:27:97:a9:a6:e2:8b:32:b2:00:37: 5c:39:33:f4:6c:a1:97:34:13:e9:e1:88:94:70:d2: 1e:dd:3f:88:09:49:de:f9:d0:67:ed:02:90:58:3b: ca:2e:6b:77:ea:39:fc:33:29:fd:b1:db:4f:1c:6c: 50:66:28:9c:7a:cf:68:cb:cf:43:a1:09:0a:ad:6c: ac:aa:93:29:a4:f5:81:d4:9b:7e:41:7d:eb:7f:cb: e9:b7:a6:8f:51:92:be:3f:69:f7:04:b4:b5:94:a0: f6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C8:55:48:F2:10:42:F3:EF:30:68:EA:7A:46:20:36:8A:D3:B2:AA X509v3 Authority Key Identifier: keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ed:09:5e:e3:ab:39:ec:06:c6:11:47:8e:6f:a2:74:c5:87: 29:70:b8:a8:51:7a:6b:c8:14:b8:f5:b0:2e:d8:82:96:83:01: ba:ce:a1:d3:9f:a4:3b:77:9d:09:9d:b6:16:bf:0d:84:da:70: e5:a9:81:78:77:67:57:70:4b:2c:52:35:db:cc:44:f2:b5:e6: 0a:8b:68:f0:43:76:8a:70:1f:31:de:8a:bd:ba:f3:55:7b:6f: f1:64:85:77:6e:9b:60:3d:19:56:67:75:a4:9a:d7:0a:ca:f6: 84:22:b4:52:66:a8:21:30:da:07:e8:44:1f:40:40:d0:44:8e: 11:08:f1:85:db:0a:14:5b:f2:c3:cf:bc:68:3d:b6:9c:8d:36: c9:3a:59:38:4f:e7:a6:8d:14:b5:68:17:04:66:e9:77:e0:8d: e5:1d:cb:27:7f:23:55:ec:d8:c9:8c:2d:5f:62:fc:68:d5:9b: e4:d2:5e:bc:32:fc:6a:df:29:03:07:0a:2f:1f:8e:b5:1e:b9: f3:89:bd:70:16:9e:af:02:77:b4:ce:69:b4:32:b3:ec:fc:1f: e5:1d:f3:f9:7f:ba:f6:f1:83:5a:30:d1:2f:2c:62:d8:6b:49: d5:8a:8c:0f:21:0c:60:38:9d:47:d4:3d:a1:7a:a0:a8:7f:8b: 1c:8c:c9:45 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUDI4xHVDjoJNH9W5gXZcZiGqpQX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdE NTQ3ODZEMzAeFw0yNTA0MjAwNzIxMTJaFw0yNTA0MjEwNzU1MTJaMDMxMTAvBgNV BAMTKEM5Qzg1NTQ4RjIxMDQyRjNFRjMwNjhFQTdBNDYyMDM2OEFEM0IyQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrT9VHd/NfN2chAw3qWN14P556 zXtEflR+B6Nj+r6AjhNxb5rv37FAdf8UkOCi0Q12biOOTo92YBr6GiRHD7r7ZcoH Bccov+otMMyF3h2670ed5WOU8Q095maYzkSwRSaGzqWWCz//y7JmzGjCoAS10MHO q0Yx1yUpzjrkNPWnW1I7G7ZRG6hTm5Tkk6HZiFaGk1TVkdYSSrfEJ5eppuKLMrIA N1w5M/RsoZc0E+nhiJRw0h7dP4gJSd750GftApBYO8oua3fqOfwzKf2x208cbFBm KJx6z2jLz0OhCQqtbKyqkymk9YHUm35Bfet/y+m3po9Rkr4/afcEtLWUoPaTAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUychVSPIQQvPvMGjqekYgNorTsqowHwYDVR0j BBgwFoAUbZS517fBinpJen6fXi4il9VHhtMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzFlYmZkNTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAv NkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82RDk0QjlEN0I3QzE4QTdBNDk3QTdFOUY1RTJFMjI5 N0Q1NDc4NkQzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzFlYmZk NTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAvNkQ5NEI5RDdCN0MxOEE3QTQ5 N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAITtCV7jqznsBsYRR45v onTFhylwuKhRemvIFLj1sC7YgpaDAbrOodOfpDt3nQmdtha/DYTacOWpgXh3Z1dw SyxSNdvMRPK15gqLaPBDdopwHzHeir2681V7b/FkhXdum2A9GVZndaSa1wrK9oQi tFJmqCEw2gfoRB9AQNBEjhEI8YXbChRb8sPPvGg9tpyNNsk6WThP56aNFLVoFwRm 6XfgjeUdyyd/I1Xs2MmMLV9i/GjVm+TSXrwy/GrfKQMHCi8fjrUeufOJvXAWnq8C d7TOabQys+z8H+Ud8/l/uvbxg1ow0S8sYthrSdWKjA8hDGA4nUfUPaF6oKh/ixyM yUU= -----END CERTIFICATE-----Generated at Mon Apr 21 01:30:38 2025 by rpki-client