$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft File: C2724A29EF989A4340933B8130B402DD4627A501.mft (raw, json) Hash identifier: QXzsLkOGZ1LNz/vY9gaT67FoQ7PFx6YomIvgi1Ps760= Subject key identifier: AE:87:78:AF:97:A9:27:E3:C5:8F:CE:D3:13:10:02:A8:36:EC:F9:CE Authority key identifier: C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01 Certificate issuer: /CN=C2724A29EF989A4340933B8130B402DD4627A501 Certificate serial: 786F243751C8D1C65CDE61D8FD49E50E6637174C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft Manifest number: 0228 Signing time: Tue 16 Sep 2025 16:33:33 +0000 Manifest this update: Tue 16 Sep 2025 16:28:33 +0000 Manifest next update: Wed 17 Sep 2025 17:55:33 +0000 Files and hashes: 1: 326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa (hash: hqgaxXhgaM7AiSsPcNwqghRTi61TSIKXFax/zJU7ecI=) 2: C2724A29EF989A4340933B8130B402DD4627A501.crl (hash: VrTEct/w64qS7amxZ+lK4dTDBMdQGPvuVLaxnNqciFY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Sep 2025 08:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6f:24:37:51:c8:d1:c6:5c:de:61:d8:fd:49:e5:0e:66:37:17:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2724A29EF989A4340933B8130B402DD4627A501 Validity Not Before: Sep 16 16:28:33 2025 GMT Not After : Sep 17 17:55:33 2025 GMT Subject: CN=AE8778AF97A927E3C58FCED3131002A836ECF9CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e8:47:f2:19:32:ce:01:03:f1:b7:df:d6:0d: 1d:4a:ad:c0:76:30:6c:b2:b4:08:5b:1d:82:bc:db: 90:70:d7:31:d1:57:db:76:c3:6d:cd:13:4f:5b:35: 68:90:c0:be:72:31:62:be:86:b4:32:80:7b:6c:78: 22:62:2b:84:0f:a8:54:60:3e:bf:07:99:9f:a5:7b: 69:a6:78:26:8e:9d:39:4a:1b:99:45:8a:6a:2d:8d: c5:80:c4:35:26:ae:d4:11:c3:cd:f0:cf:db:f4:f8: fc:4c:b0:18:06:f0:19:74:87:d2:d7:52:8b:f4:ff: 72:64:5a:77:ed:cc:82:6c:c7:d6:a3:a5:65:be:91: 55:af:7d:e7:6f:9c:a0:6c:14:e0:0c:6e:6f:bd:19: 3a:69:ae:a9:04:3a:93:83:24:89:29:9b:bb:ab:bb: 92:f8:99:10:a0:52:92:9e:06:3f:33:e9:0a:95:3e: 08:47:38:ad:9d:c6:1b:cb:f6:bc:dd:53:ee:56:e4: af:22:3d:5a:a3:8d:e2:85:ef:94:e0:1f:bb:26:7f: ea:f5:1d:10:44:31:68:10:71:f8:a3:0e:f3:6a:b4: e7:d4:b9:40:b1:03:50:b6:85:e8:8e:3b:44:8f:14: 39:8f:42:b3:aa:f3:f2:eb:90:93:b1:69:21:6b:5c: e5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:87:78:AF:97:A9:27:E3:C5:8F:CE:D3:13:10:02:A8:36:EC:F9:CE X509v3 Authority Key Identifier: keyid:C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:6b:39:5d:23:78:40:32:60:85:37:c1:16:90:93:d6:f6:57: c1:ca:f4:99:2c:59:1e:9b:ba:f0:04:f4:16:26:64:3e:20:7f: ee:e0:b2:ef:ad:6e:54:d8:5d:60:15:c8:ee:58:df:53:82:1a: c6:d7:4f:ab:ae:d3:0a:72:c0:06:4d:47:f1:83:eb:f8:7d:d1: b9:8f:7b:d2:19:33:78:d7:c8:dc:8d:27:4f:b9:9f:da:10:58: 7c:14:9c:bb:9f:fe:40:af:69:a4:34:6a:6a:12:89:87:13:72: bc:f5:97:6c:a6:f6:02:b6:bb:f2:ef:65:e3:7e:9d:45:95:97: 97:b7:7c:13:5f:36:87:3b:a4:6c:13:94:fb:9b:cd:ae:f7:8b: 67:af:77:2b:9a:95:62:1c:71:bb:a1:9c:a6:48:fd:33:67:2a: bc:94:12:a7:63:c1:c6:28:a0:f4:42:a5:1c:2d:1c:0f:82:30: 44:32:c6:01:4d:8f:10:f2:36:bf:a8:d4:cc:3a:8a:37:94:ea: ab:6e:53:f0:bc:bf:56:10:d3:b5:1e:59:b6:0d:df:aa:67:6f: 4a:1a:08:f6:ce:d2:c9:ed:e3:e2:6a:e2:b1:f3:9b:30:ae:a1: 59:0e:75:d5:33:98:bd:18:7a:32:db:73:0c:7e:86:5c:a2:71: c5:61:cf:68 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUeG8kN1HI0cZc3mHY/UnlDmY3F0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI3MjRBMjlFRjk4OUE0MzQwOTMzQjgxMzBCNDAyREQ0 NjI3QTUwMTAeFw0yNTA5MTYxNjI4MzNaFw0yNTA5MTcxNzU1MzNaMDMxMTAvBgNV BAMTKEFFODc3OEFGOTdBOTI3RTNDNThGQ0VEMzEzMTAwMkE4MzZFQ0Y5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF6EfyGTLOAQPxt9/WDR1KrcB2 MGyytAhbHYK825Bw1zHRV9t2w23NE09bNWiQwL5yMWK+hrQygHtseCJiK4QPqFRg Pr8HmZ+le2mmeCaOnTlKG5lFimotjcWAxDUmrtQRw83wz9v0+PxMsBgG8Bl0h9LX Uov0/3JkWnftzIJsx9ajpWW+kVWvfedvnKBsFOAMbm+9GTpprqkEOpODJIkpm7ur u5L4mRCgUpKeBj8z6QqVPghHOK2dxhvL9rzdU+5W5K8iPVqjjeKF75TgH7smf+r1 HRBEMWgQcfijDvNqtOfUuUCxA1C2heiOO0SPFDmPQrOq8/LrkJOxaSFrXOW/AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUrod4r5epJ+PFj87TExACqDbs+c4wHwYDVR0j BBgwFoAUwnJKKe+YmkNAkzuBMLQC3UYnpQEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzhiODNlNjMxMjc5ZjRjNjlhNTNmYWIyNTBiYmU2OWRiLzAv QzI3MjRBMjlFRjk4OUE0MzQwOTMzQjgxMzBCNDAyREQ0NjI3QTUwMS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9DMjcyNEEyOUVGOTg5QTQzNDA5MzNCODEzMEI0MDJE RDQ2MjdBNTAxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzhiODNl NjMxMjc5ZjRjNjlhNTNmYWIyNTBiYmU2OWRiLzAvQzI3MjRBMjlFRjk4OUE0MzQw OTMzQjgxMzBCNDAyREQ0NjI3QTUwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABNrOV0jeEAyYIU3wRaQ k9b2V8HK9JksWR6buvAE9BYmZD4gf+7gsu+tblTYXWAVyO5Y31OCGsbXT6uu0wpy wAZNR/GD6/h90bmPe9IZM3jXyNyNJ0+5n9oQWHwUnLuf/kCvaaQ0amoSiYcTcrz1 l2ym9gK2u/LvZeN+nUWVl5e3fBNfNoc7pGwTlPubza73i2evdyualWIccbuhnKZI /TNnKryUEqdjwcYooPRCpRwtHA+CMEQyxgFNjxDyNr+o1Mw6ijeU6qtuU/C8v1YQ 07UeWbYN36pnb0oaCPbO0snt4+Jq4rHzmzCuoVkOddUzmL0YejLbcwx+hlyiccVh z2g= -----END CERTIFICATE-----Generated at Tue Sep 16 19:59:03 2025 by rpki-client