$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft File: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft (raw, json) Hash identifier: gU5cQDtIRzFuwIP3EU3uE22AUHXmbiVNUlGdjWPFk78= Subject key identifier: 2A:70:8F:1E:19:B4:EC:F8:4E:4A:C8:4C:BD:23:77:91:80:14:D9:8C Authority key identifier: DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1 Certificate issuer: /CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1 Certificate serial: 3DFB8EEB854D54724336319178E7E5DFBFEF192A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft Manifest number: 022B Signing time: Tue 16 Sep 2025 07:37:29 +0000 Manifest this update: Tue 16 Sep 2025 07:32:29 +0000 Manifest next update: Wed 17 Sep 2025 09:23:29 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34342d3434203d3e20323038303531.roa (hash: tFJBYIhXxfWIXiULV/y0FG2z1kGnNqMQG/QFmAkPW/4=) 2: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl (hash: CVkfSqHHmgsZ5D8fTjBdCxqBRzwjAX2gC8VNpk0BFc4=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Sep 2025 08:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:fb:8e:eb:85:4d:54:72:43:36:31:91:78:e7:e5:df:bf:ef:19:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1 Validity Not Before: Sep 16 07:32:29 2025 GMT Not After : Sep 17 09:23:29 2025 GMT Subject: CN=2A708F1E19B4ECF84E4AC84CBD2377918014D98C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d9:ab:7d:2c:d9:39:08:62:61:e7:5f:fc:4f: ea:41:41:a4:f2:cf:fa:df:93:61:46:49:ef:ba:2f: ac:0a:8b:cf:fc:b0:cd:19:f5:03:32:77:e9:9d:ca: 09:cb:77:20:f3:ba:9c:2b:c5:2f:bc:4b:f7:2d:14: 53:61:7e:1d:cf:12:3b:ee:7f:58:b7:d4:c6:3a:a3: 60:23:ab:e5:ef:9b:0b:73:52:b3:e5:7c:ec:31:fa: b7:f0:a8:3f:bf:f6:f0:c7:13:6b:19:99:0d:d3:b6: 7b:36:a6:46:38:8a:fa:b7:cb:64:e7:a7:17:bc:eb: 9b:5f:00:dd:8b:ad:3a:3c:ec:3a:02:4b:53:08:ec: 7b:fc:fb:b2:04:b0:af:45:02:bc:5c:5a:69:b8:f1: 41:7d:bf:18:1d:5c:c4:11:31:88:e1:0f:48:67:e3: 15:4a:4a:20:bf:38:61:3d:dc:2d:21:f7:36:c3:61: 5e:5a:de:7f:06:0c:d4:d3:be:6c:ab:83:71:71:ae: a1:46:7f:dd:ce:18:0d:8d:52:09:9c:24:f5:d8:df: de:d3:66:65:69:50:f3:c1:f6:04:21:88:ce:55:a5: 38:f2:cf:02:e7:16:d2:24:23:0d:44:9a:3b:14:42: 1c:a9:4d:cf:da:dd:5f:23:c5:7f:fc:b4:fe:68:3e: 0c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:70:8F:1E:19:B4:EC:F8:4E:4A:C8:4C:BD:23:77:91:80:14:D9:8C X509v3 Authority Key Identifier: keyid:DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d5:5f:92:c3:5e:39:15:c1:fd:a8:83:29:e1:e3:46:b7:be: bb:8c:e6:cb:47:f6:79:88:5c:49:87:bc:d4:66:92:87:3a:a5: 17:d7:7b:56:7b:fe:93:b2:86:fc:fc:92:4f:6a:93:93:46:cf: 98:29:33:5d:bd:c6:27:00:73:c9:55:5f:7d:4b:7e:13:37:4d: cb:d0:f0:17:68:d2:b3:63:df:e4:2c:14:56:7a:2e:30:7f:bd: a6:7e:71:4f:0e:5c:6d:e6:b5:4e:04:3c:60:46:f0:8c:4a:0f: 79:d6:2c:fe:46:54:c7:4f:57:f8:3f:7b:9d:e7:71:b2:eb:12: f7:63:67:f6:f5:df:d7:bf:97:54:bf:60:f7:19:00:30:45:cd: 32:91:bc:2c:09:00:eb:70:2d:86:5a:6f:d6:a2:af:e4:21:24: 8a:a4:12:b2:95:0a:7b:34:1a:a9:ee:df:77:98:81:ea:3f:3c: 35:31:99:d5:74:ad:f8:ba:6a:d9:ae:88:30:53:0d:01:ff:db: cb:90:76:35:59:be:52:f1:25:b7:40:2b:21:da:8a:73:56:77: 44:41:88:1d:04:34:fc:25:d6:9e:d1:85:22:03:d3:ff:84:0e: 93:d0:a9:fa:00:b7:2b:94:94:c3:25:25:5c:e6:74:f6:fe:9a: be:7c:46:50 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUPfuO64VNVHJDNjGReOfl37/vGSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMyRDM0RkUwRjhDOTBCMkE4Q0FFQzQ3MjdENkJBMzFC OThEMjVEMTAeFw0yNTA5MTYwNzMyMjlaFw0yNTA5MTcwOTIzMjlaMDMxMTAvBgNV BAMTKDJBNzA4RjFFMTlCNEVDRjg0RTRBQzg0Q0JEMjM3NzkxODAxNEQ5OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj2at9LNk5CGJh51/8T+pBQaTy z/rfk2FGSe+6L6wKi8/8sM0Z9QMyd+mdygnLdyDzupwrxS+8S/ctFFNhfh3PEjvu f1i31MY6o2Ajq+XvmwtzUrPlfOwx+rfwqD+/9vDHE2sZmQ3Ttns2pkY4ivq3y2Tn pxe865tfAN2LrTo87DoCS1MI7Hv8+7IEsK9FArxcWmm48UF9vxgdXMQRMYjhD0hn 4xVKSiC/OGE93C0h9zbDYV5a3n8GDNTTvmyrg3FxrqFGf93OGA2NUgmcJPXY397T ZmVpUPPB9gQhiM5VpTjyzwLnFtIkIw1EmjsUQhypTc/a3V8jxX/8tP5oPgyDAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUKnCPHhm07PhOSshMvSN3kYAU2YwwHwYDVR0j BBgwFoAU3C00/g+MkLKoyuxHJ9a6MbmNJdEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzVjNTUyMmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzAv REMyRDM0RkUwRjhDOTBCMkE4Q0FFQzQ3MjdENkJBMzFCOThEMjVEMS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9EQzJEMzRGRTBGOEM5MEIyQThDQUVDNDcyN0Q2QkEz MUI5OEQyNUQxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzVjNTUy MmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzAvREMyRDM0RkUwRjhDOTBCMkE4 Q0FFQzQ3MjdENkJBMzFCOThEMjVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH3VX5LDXjkVwf2ogynh 40a3vruM5stH9nmIXEmHvNRmkoc6pRfXe1Z7/pOyhvz8kk9qk5NGz5gpM129xicA c8lVX31LfhM3TcvQ8Bdo0rNj3+QsFFZ6LjB/vaZ+cU8OXG3mtU4EPGBG8IxKD3nW LP5GVMdPV/g/e53ncbLrEvdjZ/b139e/l1S/YPcZADBFzTKRvCwJAOtwLYZab9ai r+QhJIqkErKVCns0Gqnu33eYgeo/PDUxmdV0rfi6atmuiDBTDQH/28uQdjVZvlLx JbdAKyHainNWd0RBiB0ENPwl1p7RhSID0/+EDpPQqfoAtyuUlMMlJVzmdPb+mr58 RlA= -----END CERTIFICATE-----Generated at Tue Sep 16 19:59:07 2025 by rpki-client