$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft File: 1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json) Hash identifier: i59FBxlDXsokNAdqWrQ29QOFVtTp1R921nXrlI7Y8bo= Subject key identifier: A6:94:F8:AF:E2:0D:8C:59:9E:9E:86:63:4E:4A:8A:84:91:27:F0:36 Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F Certificate issuer: /CN=1D570B984E9C5E382B0A879AA21F6518621F059F Certificate serial: 7782FCE60E1DC79115D49CC0DCD0EC8EB5C29472 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft Manifest number: 0168 Signing time: Thu 03 Apr 2025 22:09:56 +0000 Manifest this update: Thu 03 Apr 2025 22:04:54 +0000 Manifest next update: Fri 04 Apr 2025 23:52:54 +0000 Files and hashes: 1: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: r1y3VVPYdjLhhRyq02L+DN78DaW3YyrV2h/ERjDi9lM=) 2: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: 3DuIOWLJO8NrLMIsuHapBMIFfNv6pqKViDwoNolMhc0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 04 Apr 2025 23:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:82:fc:e6:0e:1d:c7:91:15:d4:9c:c0:dc:d0:ec:8e:b5:c2:94:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F Validity Not Before: Apr 3 22:04:54 2025 GMT Not After : Apr 4 23:52:54 2025 GMT Subject: CN=A694F8AFE20D8C599E9E86634E4A8A849127F036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:63:6a:62:8d:49:3b:4d:75:60:40:07:9f:8d: 5a:fc:af:42:87:35:40:71:4c:d6:75:c2:a6:6f:95: 04:41:d4:bb:bc:3a:d3:05:29:40:da:7c:eb:3e:fb: 85:c9:6b:19:85:4c:58:41:aa:72:17:4d:ac:6b:d2: 9f:cd:84:83:99:2e:34:be:f1:6d:53:dc:49:08:06: 00:90:c1:76:d6:f4:19:eb:88:9f:ba:22:f4:c7:c1: c1:7b:a8:e4:9e:07:58:9f:4c:e3:27:d8:60:37:7e: 5c:6b:21:f7:1f:30:a7:d0:31:c8:92:20:a6:a3:22: 37:1f:aa:b2:ea:57:d3:30:4b:be:9c:e8:76:70:5a: 0c:fb:6a:a7:3a:dd:d7:8e:8d:de:0e:dc:95:e1:aa: 49:62:fb:90:92:70:f4:4d:dc:3e:2f:fb:9c:05:80: 3d:a9:a0:10:ee:40:0b:d1:e0:24:40:e4:5b:19:90: da:35:3a:c7:f5:a9:37:21:c1:f8:85:fa:78:cf:26: bc:95:40:d8:82:9b:aa:3c:d8:18:ce:6d:cf:bb:7e: c0:aa:f2:9e:b4:2e:c2:db:3c:cd:f3:2f:56:f2:36: 9a:99:9c:29:09:12:d2:71:dd:78:39:7c:30:41:fc: ad:51:00:9d:f1:03:b0:bb:9c:e0:02:e3:bc:50:2e: 27:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:94:F8:AF:E2:0D:8C:59:9E:9E:86:63:4E:4A:8A:84:91:27:F0:36 X509v3 Authority Key Identifier: keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:74:17:aa:c3:b1:c3:17:82:d8:58:82:c8:4a:76:2b:96:75: b0:93:3d:95:fa:11:3d:12:19:3e:dc:62:aa:d7:55:a1:98:78: 23:a5:07:09:f9:94:5f:65:35:3f:cd:87:1f:63:0d:f4:e2:64: 5b:d7:1b:d9:82:5c:17:09:63:d1:a1:98:92:55:75:bb:e0:b3: 4d:1c:ee:62:f3:59:38:2a:03:fb:80:39:cd:3f:43:e4:08:0e: 78:29:20:e5:23:95:c6:b9:78:bf:27:89:61:36:70:44:69:2d: 66:a7:ca:77:e0:58:7f:f1:97:f9:51:9b:e0:f8:41:01:06:33: ea:ba:15:8b:06:e0:74:b0:d9:e6:a2:b6:92:e7:50:25:23:20: c5:c4:82:1e:7c:b6:df:bb:ea:88:d1:23:cf:0f:fa:88:6e:78: c4:e4:26:eb:41:23:a3:24:f7:5b:be:b3:49:2e:e5:9d:27:ce: d3:72:57:e6:2f:e3:90:e8:ea:e4:bb:49:45:f5:a9:29:5a:fd: 03:fb:2d:02:a2:b5:79:57:e9:2f:79:4a:c5:ad:9b:e9:de:ef: f8:77:67:c3:86:de:d3:6f:cb:a2:ac:39:99:51:f8:63:94:cd: ab:db:ad:2b:9f:25:1a:7a:03:29:74:d0:38:4d:8e:bc:59:e9: fe:45:12:33 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUd4L85g4dx5EV1JzA3NDsjrXClHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2 MjFGMDU5RjAeFw0yNTA0MDMyMjA0NTRaFw0yNTA0MDQyMzUyNTRaMDMxMTAvBgNV BAMTKEE2OTRGOEFGRTIwRDhDNTk5RTlFODY2MzRFNEE4QTg0OTEyN0YwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuY2pijUk7TXVgQAefjVr8r0KH NUBxTNZ1wqZvlQRB1Lu8OtMFKUDafOs++4XJaxmFTFhBqnIXTaxr0p/NhIOZLjS+ 8W1T3EkIBgCQwXbW9BnriJ+6IvTHwcF7qOSeB1ifTOMn2GA3flxrIfcfMKfQMciS IKajIjcfqrLqV9MwS76c6HZwWgz7aqc63deOjd4O3JXhqkli+5CScPRN3D4v+5wF gD2poBDuQAvR4CRA5FsZkNo1Osf1qTchwfiF+njPJryVQNiCm6o82BjObc+7fsCq 8p60LsLbPM3zL1byNpqZnCkJEtJx3Xg5fDBB/K1RAJ3xA7C7nOAC47xQLichAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUppT4r+INjFmenoZjTkqKhJEn8DYwHwYDVR0j BBgwFoAUHVcLmE6cXjgrCoeaoh9lGGIfBZ8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAv MUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRDU3MEI5ODRFOUM1RTM4MkIwQTg3OUFBMjFGNjUx ODYyMUYwNTlGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzRkNWMz MDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAvMUQ1NzBCOTg0RTlDNUUzODJC MEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGp0F6rDscMXgthYgshK diuWdbCTPZX6ET0SGT7cYqrXVaGYeCOlBwn5lF9lNT/Nhx9jDfTiZFvXG9mCXBcJ Y9GhmJJVdbvgs00c7mLzWTgqA/uAOc0/Q+QIDngpIOUjlca5eL8niWE2cERpLWan ynfgWH/xl/lRm+D4QQEGM+q6FYsG4HSw2eaitpLnUCUjIMXEgh58tt+76ojRI88P +ohueMTkJutBI6Mk91u+s0ku5Z0nztNyV+Yv45Do6uS7SUX1qSla/QP7LQKitXlX 6S95SsWtm+ne7/h3Z8OG3tNvy6KsOZlR+GOUzavbrSufJRp6Ayl00DhNjrxZ6f5F EjM= -----END CERTIFICATE-----Generated at Fri Apr 4 17:11:12 2025 by rpki-client