$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft File: 1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json) Hash identifier: pEWLKuyR6fSXUpuVpt9HbSbC43NG7D54j3hqX/zoLgs= Subject key identifier: 02:65:C6:6E:42:95:35:3E:99:C3:E7:55:7D:7F:C5:9E:06:EA:72:DB Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F Certificate issuer: /CN=1D570B984E9C5E382B0A879AA21F6518621F059F Certificate serial: 40E3102C7CB12C6B82871FFEE2FCC63FD5BBFF0A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft Manifest number: 01BD Signing time: Fri 06 Jun 2025 19:46:32 +0000 Manifest this update: Fri 06 Jun 2025 19:41:30 +0000 Manifest next update: Sat 07 Jun 2025 23:29:30 +0000 Files and hashes: 1: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: 3DuIOWLJO8NrLMIsuHapBMIFfNv6pqKViDwoNolMhc0=) 2: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: qR8p1Be5jcNNDEBecJ+H/bB+oN1d4O7HjGgsCKGiE50=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 21:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e3:10:2c:7c:b1:2c:6b:82:87:1f:fe:e2:fc:c6:3f:d5:bb:ff:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F Validity Not Before: Jun 6 19:41:30 2025 GMT Not After : Jun 7 23:29:30 2025 GMT Subject: CN=0265C66E4295353E99C3E7557D7FC59E06EA72DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3d:58:f9:6b:b2:d5:a9:0c:38:c6:1b:99:7b: a4:05:9b:2c:63:c3:83:63:1c:04:aa:58:09:cc:5b: aa:47:a3:0b:b4:a0:85:7f:35:15:b3:7d:cf:b1:c2: a0:79:f8:c0:56:89:ff:34:a8:23:6b:46:da:79:6d: 22:d6:08:11:93:3f:34:14:34:3f:56:51:0b:27:e8: 70:64:e6:a9:c0:09:d1:92:eb:cc:22:7d:b3:9f:be: 63:9d:a9:a3:b8:c1:45:f5:17:d4:52:d5:0e:c2:b2: f4:fd:40:f1:69:f5:dd:d7:17:52:3e:c2:4c:23:69: ce:67:6b:05:2f:b2:f6:21:9d:40:9d:0c:12:fb:27: 3a:95:94:53:31:61:f1:70:60:c4:e2:b4:f9:10:90: e6:08:76:64:8b:5f:d3:7a:8f:bd:1a:67:1b:2e:f7: 64:ec:dc:3a:19:0d:6a:1c:8e:3e:65:c9:ef:52:47: 47:ac:4d:e0:2b:da:e9:30:1e:2a:47:41:78:c3:41: 14:55:3e:17:5d:60:04:ec:50:e5:de:24:de:3a:c0: fb:b6:42:3b:e1:40:30:77:d0:ea:20:6a:1b:99:d1: 24:a7:43:6a:f2:ec:ff:6f:24:d1:74:05:56:e8:ab: bc:72:2a:19:8d:6a:81:2e:db:56:f4:f8:38:d3:f4: b2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:65:C6:6E:42:95:35:3E:99:C3:E7:55:7D:7F:C5:9E:06:EA:72:DB X509v3 Authority Key Identifier: keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5e:ae:54:90:b4:4a:95:b6:52:11:13:f4:8e:04:92:8c:c4: 79:ae:88:67:70:77:b6:02:a3:85:a0:d4:3c:ef:15:63:06:00: e0:9d:73:26:f2:1f:60:33:b4:78:cf:a6:14:21:c5:0e:4f:e3: eb:20:d1:20:86:8b:1f:86:58:a9:fa:a0:86:7f:64:c7:94:3a: 32:ac:42:96:9f:71:8c:67:08:93:55:57:4a:92:3c:22:93:1e: df:07:5a:dc:cb:34:7c:47:fc:96:f6:8d:6a:d2:f3:c5:ad:c1: 75:ee:1f:33:a7:6d:45:92:68:86:db:ee:b4:ef:11:c8:b1:ca: 94:9c:a0:e3:8d:39:1b:94:84:ef:33:52:e7:95:2e:46:bd:75: 46:20:b7:c7:ac:7a:74:af:54:f0:f5:77:50:fb:eb:77:cc:bf: 62:d4:8b:2e:82:d4:ae:96:23:f7:03:d7:98:36:ce:9f:e6:f4: 8b:73:c3:f6:b9:a6:dd:3b:3f:3f:d1:66:4e:38:97:d9:81:c1: 80:dc:14:a3:07:13:e9:c3:9a:84:00:6c:0b:06:7b:b8:3a:2e: b9:c9:45:13:e7:3d:97:33:c4:d4:d1:a1:71:40:ea:e2:b9:16: a4:e7:e9:a2:7c:58:6e:cf:ab:c6:84:bb:1b:56:fb:56:01:a4: dc:4f:62:45 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUQOMQLHyxLGuChx/+4vzGP9W7/wowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2 MjFGMDU5RjAeFw0yNTA2MDYxOTQxMzBaFw0yNTA2MDcyMzI5MzBaMDMxMTAvBgNV BAMTKDAyNjVDNjZFNDI5NTM1M0U5OUMzRTc1NTdEN0ZDNTlFMDZFQTcyREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0PVj5a7LVqQw4xhuZe6QFmyxj w4NjHASqWAnMW6pHowu0oIV/NRWzfc+xwqB5+MBWif80qCNrRtp5bSLWCBGTPzQU ND9WUQsn6HBk5qnACdGS68wifbOfvmOdqaO4wUX1F9RS1Q7CsvT9QPFp9d3XF1I+ wkwjac5nawUvsvYhnUCdDBL7JzqVlFMxYfFwYMTitPkQkOYIdmSLX9N6j70aZxsu 92Ts3DoZDWocjj5lye9SR0esTeAr2ukwHipHQXjDQRRVPhddYATsUOXeJN46wPu2 QjvhQDB30OogahuZ0SSnQ2ry7P9vJNF0BVboq7xyKhmNaoEu21b0+DjT9LIHAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUAmXGbkKVNT6Zw+dVfX/FngbqctswHwYDVR0j BBgwFoAUHVcLmE6cXjgrCoeaoh9lGGIfBZ8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAv MUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRDU3MEI5ODRFOUM1RTM4MkIwQTg3OUFBMjFGNjUx ODYyMUYwNTlGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzRkNWMz MDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAvMUQ1NzBCOTg0RTlDNUUzODJC MEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABVerlSQtEqVtlIRE/SO BJKMxHmuiGdwd7YCo4Wg1DzvFWMGAOCdcybyH2AztHjPphQhxQ5P4+sg0SCGix+G WKn6oIZ/ZMeUOjKsQpafcYxnCJNVV0qSPCKTHt8HWtzLNHxH/Jb2jWrS88WtwXXu HzOnbUWSaIbb7rTvEcixypScoOONORuUhO8zUueVLka9dUYgt8esenSvVPD1d1D7 63fMv2LUiy6C1K6WI/cD15g2zp/m9Itzw/a5pt07Pz/RZk44l9mBwYDcFKMHE+nD moQAbAsGe7g6LrnJRRPnPZczxNTRoXFA6uK5FqTn6aJ8WG7Pq8aEuxtW+1YBpNxP YkU= -----END CERTIFICATE-----Generated at Sat Jun 7 04:05:06 2025 by rpki-client