$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: DHouExkniSKLPLhOAM7EjEalIJy/69Nh31GovIUqOfE= Subject key identifier: 43:A7:3B:10:30:DF:51:EA:8C:52:33:B6:80:06:CA:8B:81:FB:05:52 Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 29E4E34EA226F8114F263C37D717CDCA0DEEB1D8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 01C1 Signing time: Sat 07 Jun 2025 02:39:47 +0000 Manifest this update: Sat 07 Jun 2025 02:34:45 +0000 Manifest next update: Sun 08 Jun 2025 03:10:45 +0000 Files and hashes: 1: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: OX3RHdtuqmLEvG1ZYjgRikhuEWksaQB7VsQm/hmQ+LY=) 2: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: OqSto16iaY/yKghEaCvNaOcfunMEMPEgDp5VftIslow=) 3: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 8L2dffl4g1ilG1l5/B+kC7djnpjUVSHg7XLmPYAhjYI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 21:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e4:e3:4e:a2:26:f8:11:4f:26:3c:37:d7:17:cd:ca:0d:ee:b1:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Jun 7 02:34:45 2025 GMT Not After : Jun 8 03:10:45 2025 GMT Subject: CN=43A73B1030DF51EA8C5233B68006CA8B81FB0552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:f6:3d:72:48:0c:ef:e9:8b:18:88:a9:79: 34:57:7c:ba:fe:d9:98:51:ce:42:fe:4f:55:0c:fe: 48:37:1b:41:cd:9d:54:af:86:c9:2b:b6:64:de:93: 29:2e:63:4e:ea:c9:c3:79:aa:f8:7a:1a:cf:7b:03: 3c:60:d6:51:1b:5e:3c:9c:63:31:f1:cf:c8:a4:b6: e4:84:3a:4f:8b:ac:79:b2:c4:2e:80:84:10:23:8a: 69:fc:0f:d6:7f:44:14:7f:9f:05:a1:33:95:57:12: f4:dc:f6:3b:6c:cc:5d:90:86:e7:1e:97:4a:b0:4c: fe:f9:94:7c:51:f8:f9:f3:59:d5:f8:17:f9:69:01: 29:d2:27:0b:25:e2:08:3a:29:93:24:24:cf:b2:fe: e2:08:1d:1d:b5:3c:f3:db:44:a8:81:83:f3:31:70: d3:2f:03:da:56:b0:25:6a:7d:51:fc:68:98:7e:b8: af:a7:d7:7a:75:00:a5:89:ae:57:50:5b:2e:71:b3: 25:d9:0a:f9:1c:5f:02:43:d6:95:37:71:d7:85:6d: 8c:21:08:b3:7d:08:9a:4b:39:88:1d:83:5c:b8:db: 1e:10:ae:6f:88:a9:28:8f:49:2e:c9:17:30:e0:01: 5d:d7:3a:7c:10:aa:26:65:7d:d8:0d:ef:c4:c2:34: 37:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A7:3B:10:30:DF:51:EA:8C:52:33:B6:80:06:CA:8B:81:FB:05:52 X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b0:06:80:08:aa:4a:72:87:68:d8:db:80:5c:4f:ff:72:8e: 0b:ad:14:71:31:e5:e2:09:46:4e:d7:78:a7:b8:06:af:26:db: ce:ef:cf:95:50:63:82:32:f4:ac:c9:e1:16:16:93:41:23:8f: 1c:51:a1:21:cd:e3:16:6b:0e:f2:09:ac:3c:15:66:ef:11:e1: f4:21:08:40:dd:89:38:35:00:30:dc:82:3d:3b:18:45:14:30: de:40:f8:96:18:41:a3:cf:c2:96:25:15:7e:42:e3:e4:23:b0: 67:90:40:29:13:46:b0:39:fb:d5:24:b1:73:34:07:fa:8e:a4: a1:d6:fb:f0:9b:4a:d1:35:6e:a5:51:58:4b:56:da:15:b3:75: 49:d8:f8:f5:3b:56:19:3c:46:29:56:27:35:fb:21:29:fe:3f: 44:16:18:f4:4b:6f:1e:78:3b:4b:10:55:f2:c0:e9:a4:14:2c: 17:79:2c:77:2a:8c:77:39:c5:a3:7a:9d:fa:74:cc:ee:ed:34: 0f:da:ed:9c:4e:ba:66:50:c0:1e:1a:5a:06:24:ef:77:08:30: 33:6f:96:d9:a7:eb:b7:b4:b2:eb:dc:58:ee:12:8d:34:39:dd: ab:92:a4:42:3d:d6:9f:be:9f:99:1b:ed:5d:ca:47:4f:37:6d: 16:6c:3b:47 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUKeTjTqIm+BFPJjw31xfNyg3usdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNTA2MDcwMjM0NDVaFw0yNTA2MDgwMzEwNDVaMDMxMTAvBgNV BAMTKDQzQTczQjEwMzBERjUxRUE4QzUyMzNCNjgwMDZDQThCODFGQjA1NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFUPY9ckgM7+mLGIipeTRXfLr+ 2ZhRzkL+T1UM/kg3G0HNnVSvhskrtmTekykuY07qycN5qvh6Gs97Azxg1lEbXjyc YzHxz8iktuSEOk+LrHmyxC6AhBAjimn8D9Z/RBR/nwWhM5VXEvTc9jtszF2Qhuce l0qwTP75lHxR+PnzWdX4F/lpASnSJwsl4gg6KZMkJM+y/uIIHR21PPPbRKiBg/Mx cNMvA9pWsCVqfVH8aJh+uK+n13p1AKWJrldQWy5xsyXZCvkcXwJD1pU3cdeFbYwh CLN9CJpLOYgdg1y42x4Qrm+IqSiPSS7JFzDgAV3XOnwQqiZlfdgN78TCNDe5AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUQ6c7EDDfUeqMUjO2gAbKi4H7BVIwHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADKwBoAIqkpyh2jY24Bc T/9yjgutFHEx5eIJRk7XeKe4Bq8m287vz5VQY4Iy9KzJ4RYWk0EjjxxRoSHN4xZr DvIJrDwVZu8R4fQhCEDdiTg1ADDcgj07GEUUMN5A+JYYQaPPwpYlFX5C4+QjsGeQ QCkTRrA5+9UksXM0B/qOpKHW+/CbStE1bqVRWEtW2hWzdUnY+PU7Vhk8RilWJzX7 ISn+P0QWGPRLbx54O0sQVfLA6aQULBd5LHcqjHc5xaN6nfp0zO7tNA/a7ZxOumZQ wB4aWgYk73cIMDNvltmn67e0suvcWO4SjTQ53auSpEI91p++n5kb7V3KR083bRZs O0c= -----END CERTIFICATE-----Generated at Sat Jun 7 14:46:39 2025 by rpki-client