$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft File: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft (raw, json) Hash identifier: BhUyFKLY2TCsvyNAZCt2wbx+Uw/FUl5XxzsIK+Iw4RU= Subject key identifier: BE:CB:D1:8C:18:50:36:AD:9D:F0:BC:92:54:6C:5E:1F:DE:93:CF:18 Authority key identifier: 5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0 Certificate issuer: /CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0 Certificate serial: 28646B21EE34616D3129277FE35E839378AB7639 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft Manifest number: 01BC Signing time: Fri 06 Jun 2025 06:10:48 +0000 Manifest this update: Fri 06 Jun 2025 06:05:46 +0000 Manifest next update: Sat 07 Jun 2025 07:52:46 +0000 Files and hashes: 1: 326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa (hash: tMVO+Hc1tj5AW5StgOS15iIM9wSkQFoop+twU5PxB1Q=) 2: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl (hash: 1DMQJrS0J0hP5iL/EYTNgd1euHUKvhSP5hatQvC7t+k=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:64:6b:21:ee:34:61:6d:31:29:27:7f:e3:5e:83:93:78:ab:76:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0 Validity Not Before: Jun 6 06:05:46 2025 GMT Not After : Jun 7 07:52:46 2025 GMT Subject: CN=BECBD18C185036AD9DF0BC92546C5E1FDE93CF18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4a:90:49:90:63:0f:e7:4f:5a:df:1d:21:96: 43:a7:c8:04:cd:81:02:08:68:2b:9d:c0:fb:dc:f0: cb:54:e8:c5:dc:e9:02:76:c9:2b:39:b5:36:3f:60: 0d:9a:7b:11:e4:ce:5e:9f:61:36:52:85:1d:e1:93: 43:d6:78:a1:30:c3:2b:6e:98:37:b4:fd:eb:8d:95: 89:80:1f:19:f6:8c:f1:68:05:cb:08:34:1e:4c:86: 88:0e:08:1c:58:6f:2e:e7:93:34:66:be:db:05:41: 89:e9:9c:22:21:77:6c:73:9d:95:64:44:e1:d6:ea: 98:60:e6:91:6a:92:92:19:c8:18:dd:c7:26:3c:8e: 7d:c2:e3:1a:2a:6c:24:54:7f:97:52:7f:d5:d2:54: ed:3c:8a:7b:b6:c2:df:be:87:29:2f:1e:e2:95:22: e3:64:ed:53:57:93:ff:e6:55:37:4a:9f:b6:11:6a: 1d:de:94:56:22:1c:ec:3c:be:61:9e:de:ee:0e:41: 2d:7f:e8:13:0e:1a:83:6c:06:76:8b:8d:18:39:a3: ef:57:a3:33:dc:6f:42:51:bb:6c:b3:1c:52:9d:31: 15:f0:b9:64:6d:8b:30:41:b4:80:af:49:f7:0b:eb: 2c:20:f5:7c:99:33:a2:36:26:af:e4:95:23:fe:31: ed:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CB:D1:8C:18:50:36:AD:9D:F0:BC:92:54:6C:5E:1F:DE:93:CF:18 X509v3 Authority Key Identifier: keyid:5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:18:49:cc:83:55:64:37:55:be:e9:8f:d3:27:79:87:56:08: 93:7f:e0:e5:5c:12:d9:40:d6:a0:55:ea:c9:a4:45:fe:0d:cb: 7e:3b:69:e7:25:17:76:d4:97:71:22:df:3d:14:3b:5b:ff:f8: 92:d3:0d:8f:79:e7:dc:bb:80:75:d3:c5:74:7f:ed:b3:c4:56: 20:0a:49:31:cd:82:68:0c:f4:fe:82:75:b0:b6:e6:30:6a:55: fd:35:fa:04:3a:a2:65:93:87:5e:a5:4f:a2:48:1e:4d:af:d6: e4:2d:09:0e:1f:69:34:0b:36:7b:8e:00:7d:4f:30:fc:9f:2d: 31:7c:f5:24:ce:cb:39:7d:37:a8:bd:ec:5f:d4:57:81:f3:44: 54:f2:88:8d:e2:e1:1d:d5:68:74:02:2d:56:ad:e4:a1:3f:69: 11:37:83:99:85:d7:d9:67:cb:81:2e:59:49:df:cf:75:e0:13: a7:30:b1:41:45:d8:44:b6:33:98:c9:59:fc:f1:d3:83:da:98: c7:02:67:04:10:94:aa:81:17:bc:34:4f:03:34:cb:d4:2d:67: e1:bf:fa:6d:65:41:08:ba:e7:1a:0d:4c:4b:9a:97:25:6b:2f: 8e:05:a8:a0:13:71:96:50:25:57:9d:a2:f9:0f:5a:61:6f:e4: 99:cc:d1:4f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUKGRrIe40YW0xKSd/416Dk3irdjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCRTJGNjA5OTk2NDc2QUFGRTE0NkJDNUE3MjQyOUIw QjIwNUZDMDAeFw0yNTA2MDYwNjA1NDZaFw0yNTA2MDcwNzUyNDZaMDMxMTAvBgNV BAMTKEJFQ0JEMThDMTg1MDM2QUQ5REYwQkM5MjU0NkM1RTFGREU5M0NGMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4SpBJkGMP509a3x0hlkOnyATN gQIIaCudwPvc8MtU6MXc6QJ2ySs5tTY/YA2aexHkzl6fYTZShR3hk0PWeKEwwytu mDe0/euNlYmAHxn2jPFoBcsINB5MhogOCBxYby7nkzRmvtsFQYnpnCIhd2xznZVk ROHW6phg5pFqkpIZyBjdxyY8jn3C4xoqbCRUf5dSf9XSVO08inu2wt++hykvHuKV IuNk7VNXk//mVTdKn7YRah3elFYiHOw8vmGe3u4OQS1/6BMOGoNsBnaLjRg5o+9X ozPcb0JRu2yzHFKdMRXwuWRtizBBtICvSfcL6ywg9XyZM6I2Jq/klSP+Me0jAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUvsvRjBhQNq2d8LySVGxeH96TzxgwHwYDVR0j BBgwFoAUWr4vYJmWR2qv4Ua8WnJCmwsgX8AwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY0ODMyNjExYmEwNjRkNmI4ZjljMmI3YzczZmJkODRiLzAv NUFCRTJGNjA5OTk2NDc2QUFGRTE0NkJDNUE3MjQyOUIwQjIwNUZDMC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy81QUJFMkY2MDk5OTY0NzZBQUZFMTQ2QkM1QTcyNDI5 QjBCMjA1RkMwLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY0ODMy NjExYmEwNjRkNmI4ZjljMmI3YzczZmJkODRiLzAvNUFCRTJGNjA5OTk2NDc2QUFG RTE0NkJDNUE3MjQyOUIwQjIwNUZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFcYScyDVWQ3Vb7pj9Mn eYdWCJN/4OVcEtlA1qBV6smkRf4Ny347aeclF3bUl3Ei3z0UO1v/+JLTDY9559y7 gHXTxXR/7bPEViAKSTHNgmgM9P6CdbC25jBqVf01+gQ6omWTh16lT6JIHk2v1uQt CQ4faTQLNnuOAH1PMPyfLTF89STOyzl9N6i97F/UV4HzRFTyiI3i4R3VaHQCLVat 5KE/aRE3g5mF19lny4EuWUnfz3XgE6cwsUFF2ES2M5jJWfzx04PamMcCZwQQlKqB F7w0TwM0y9QtZ+G/+m1lQQi65xoNTEualyVrL44FqKATcZZQJVedovkPWmFv5JnM 0U8= -----END CERTIFICATE-----Generated at Fri Jun 6 18:24:09 2025 by rpki-client