$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: gxc4ECAbAkCCjI3yKA8AftTIwuW+Eudb/dlnUY1t2aw= Subject key identifier: D2:CB:36:06:3F:62:AD:FC:67:96:1E:28:59:E2:CD:6D:E8:89:E4:E2 Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 719E66B0E68CD217298E3389DF737C1166940580 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: 01BE Signing time: Sat 07 Jun 2025 22:51:19 +0000 Manifest this update: Sat 07 Jun 2025 22:46:17 +0000 Manifest next update: Mon 09 Jun 2025 02:28:17 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: 0Rds9PZQgNl5G/I7jkZ+52Sd4fPd44fUSniejOoY6+E=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 17:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:9e:66:b0:e6:8c:d2:17:29:8e:33:89:df:73:7c:11:66:94:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: Jun 7 22:46:17 2025 GMT Not After : Jun 9 02:28:17 2025 GMT Subject: CN=D2CB36063F62ADFC67961E2859E2CD6DE889E4E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:66:4d:9a:d3:cb:c1:04:d5:09:c9:db:b4:f6: d0:51:df:37:2b:52:f0:48:cf:8b:6a:ac:dc:f2:a4: d9:73:37:fd:a7:1d:63:6e:31:ba:94:6a:c9:30:a9: e3:65:a8:57:85:73:dc:19:ec:0c:0f:55:fa:a5:f7: 7d:51:b1:5b:4d:c7:36:13:eb:ba:da:31:1d:f0:61: 72:50:2b:93:e9:ce:b1:39:77:4c:5f:fa:dc:a2:f4: 51:89:87:79:4b:20:cc:97:95:fd:ed:3e:37:57:40: ad:16:a1:49:1e:fc:77:18:82:91:a6:42:46:f3:35: b8:d1:1d:c0:4a:bb:08:87:f2:ff:05:fd:1b:8e:05: 43:e0:b0:0a:6d:b2:71:62:e0:2f:55:a6:fd:49:75: 69:2f:f0:b0:21:b1:ec:cc:ea:84:ec:ab:c1:f3:85: 41:35:bd:b0:a5:38:ff:af:cd:1f:08:08:b8:4d:a4: d6:10:0e:0c:86:10:92:c5:b3:98:f4:d3:50:49:ed: 2a:67:ce:c1:00:48:ee:52:b7:78:16:12:b3:84:b8: 23:39:c2:a3:9e:42:e8:9e:e1:5d:ec:9b:fc:f2:f2: 33:89:4d:ab:41:d6:dd:be:1f:c7:0e:53:0c:35:10: f5:de:83:d4:31:63:f6:b6:b3:6c:57:3b:9c:6d:18: 84:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CB:36:06:3F:62:AD:FC:67:96:1E:28:59:E2:CD:6D:E8:89:E4:E2 X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:55:76:c4:aa:2b:0a:c0:27:d0:5b:7e:0f:78:99:e9:c2:12: 73:ba:fa:90:85:b4:84:fe:47:3d:52:2e:76:98:6a:e3:ba:d1: 39:4a:18:10:c0:d0:75:11:91:4f:9f:52:8c:e5:94:80:ec:d7: 6f:68:83:de:35:6c:60:32:f6:0d:d4:7a:dc:4e:f6:ef:33:fe: 64:e0:10:46:b2:68:b9:c7:7e:03:3f:2c:23:67:fa:c9:6b:51: b3:55:c5:cb:ac:14:4d:b8:5e:95:e8:aa:cf:2d:d0:62:5d:a5: 66:dc:b8:09:c0:b8:33:a3:f1:0a:5a:04:ad:d8:bf:3d:87:13: 1d:cf:d3:2e:46:27:56:a1:ee:39:49:cf:e5:00:a3:b4:51:a8: 60:e5:60:50:f0:72:16:ff:81:c6:70:b7:96:9b:52:06:8a:b9: 1a:32:8c:6b:0c:60:cd:d1:63:37:d8:17:53:c8:b6:17:78:31: c5:8d:9f:28:9b:66:fc:1c:6a:56:f2:f4:1c:41:af:49:24:f1: fc:c3:34:ed:16:15:83:56:0b:49:ac:e1:af:e1:40:54:7f:03: 66:0a:3d:74:31:f7:f7:8d:b9:b2:91:90:91:e1:4c:27:7b:e3: 3f:e4:01:66:30:15:57:f3:ae:9b:00:69:68:82:5c:cb:b7:57: 51:35:b4:7d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUcZ5msOaM0hcpjjOJ33N8EWaUBYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNTA2MDcyMjQ2MTdaFw0yNTA2MDkwMjI4MTdaMDMxMTAvBgNV BAMTKEQyQ0IzNjA2M0Y2MkFERkM2Nzk2MUUyODU5RTJDRDZERTg4OUU0RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZk2a08vBBNUJydu09tBR3zcr UvBIz4tqrNzypNlzN/2nHWNuMbqUaskwqeNlqFeFc9wZ7AwPVfql931RsVtNxzYT 67raMR3wYXJQK5PpzrE5d0xf+tyi9FGJh3lLIMyXlf3tPjdXQK0WoUke/HcYgpGm QkbzNbjRHcBKuwiH8v8F/RuOBUPgsAptsnFi4C9Vpv1JdWkv8LAhsezM6oTsq8Hz hUE1vbClOP+vzR8ICLhNpNYQDgyGEJLFs5j001BJ7SpnzsEASO5St3gWErOEuCM5 wqOeQuie4V3sm/zy8jOJTatB1t2+H8cOUww1EPXeg9QxY/a2s2xXO5xtGIR5AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU0ss2Bj9irfxnlh4oWeLNbeiJ5OIwHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB1VdsSqKwrAJ9Bbfg94 menCEnO6+pCFtIT+Rz1SLnaYauO60TlKGBDA0HURkU+fUozllIDs129og941bGAy 9g3UetxO9u8z/mTgEEayaLnHfgM/LCNn+slrUbNVxcusFE24XpXoqs8t0GJdpWbc uAnAuDOj8QpaBK3Yvz2HEx3P0y5GJ1ah7jlJz+UAo7RRqGDlYFDwchb/gcZwt5ab UgaKuRoyjGsMYM3RYzfYF1PIthd4McWNnyibZvwcalby9BxBr0kk8fzDNO0WFYNW C0ms4a/hQFR/A2YKPXQx9/eNubKRkJHhTCd74z/kAWYwFVfzrpsAaWiCXMu3V1E1 tH0= -----END CERTIFICATE-----Generated at Sun Jun 8 10:56:30 2025 by rpki-client