$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: KK7IzAgOLquEMJyA96NFsm3aX4g5Nb9MWsEO8jZULY8= Subject key identifier: E0:20:04:74:4B:BB:9D:B0:03:53:BB:9C:86:1A:FD:8A:B9:65:D0:81 Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 7DE7C0187F7DC9264B9B215A546624034A3D9C19 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 016D Signing time: Fri 04 Apr 2025 13:32:47 +0000 Manifest this update: Fri 04 Apr 2025 13:27:45 +0000 Manifest next update: Sat 05 Apr 2025 15:58:45 +0000 Files and hashes: 1: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 8L2dffl4g1ilG1l5/B+kC7djnpjUVSHg7XLmPYAhjYI=) 2: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: s1h6OLRAAw9UAxnFMzGH3rQs3YFMUhTkNlk2TvcqwPg=) 3: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: OX3RHdtuqmLEvG1ZYjgRikhuEWksaQB7VsQm/hmQ+LY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e7:c0:18:7f:7d:c9:26:4b:9b:21:5a:54:66:24:03:4a:3d:9c:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Apr 4 13:27:45 2025 GMT Not After : Apr 5 15:58:45 2025 GMT Subject: CN=E02004744BBB9DB00353BB9C861AFD8AB965D081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:b5:74:18:e9:45:bb:a4:bf:8f:de:41:c9: f7:79:c4:04:3f:8e:04:b2:3d:a0:3b:a4:43:ce:b6: 0b:a5:5c:97:3d:95:fd:8e:82:67:bf:ed:08:dc:d4: da:43:9b:46:2e:6e:89:3e:43:54:a9:c5:79:aa:ee: 67:ab:ef:4f:71:90:0c:68:b1:73:dd:0f:0e:c1:d7: 71:79:03:28:34:65:a1:17:1d:10:2e:a2:66:82:c7: 4c:21:22:a2:8e:cf:12:36:f2:3d:d6:6f:7e:ea:cc: a8:8e:dc:9d:fe:58:76:9f:56:58:66:d7:f9:60:8f: a6:70:94:40:cd:c7:78:f4:80:77:dc:73:59:ca:06: 7b:6a:ee:14:dc:6e:63:10:26:b7:05:ee:b0:ec:fd: ee:7c:1a:e7:79:b0:34:af:0a:a6:15:eb:bc:0c:2a: 4c:28:6a:0a:42:22:0e:27:c5:68:f0:53:21:e6:1b: e9:cb:cf:3b:4c:14:a0:a4:5d:3f:f7:04:80:f5:50: 40:f6:70:2f:46:89:ac:7f:66:d6:ed:34:99:be:e7: 36:5f:cc:82:fd:82:e7:74:6b:bd:c5:25:19:41:46: f7:3d:00:26:db:e2:09:d7:dc:b8:e7:3d:37:44:a9: d2:eb:da:d4:f0:ff:d7:49:62:ae:ac:a5:51:d8:10: b1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:20:04:74:4B:BB:9D:B0:03:53:BB:9C:86:1A:FD:8A:B9:65:D0:81 X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:53:b1:2d:86:d5:b7:5d:69:26:13:74:e0:69:78:02:87:f0: df:5e:1b:18:d4:47:77:a2:6e:72:40:d4:2b:3d:79:3d:3a:b7: c2:65:25:c8:0b:7c:10:dd:3b:a2:88:12:2e:39:95:ee:ef:6c: 02:f7:82:39:63:a7:d4:e7:7c:53:d9:69:4a:08:41:d7:94:ad: 7b:0b:b1:f9:2b:b4:d4:b1:bd:60:2d:5b:63:23:5b:f8:83:b9: 19:96:67:3d:8e:ce:b3:23:a6:f9:21:53:3f:50:4e:73:61:bb: 2b:26:99:a0:58:b9:17:0a:e9:70:f2:ca:61:65:2f:2d:98:98: 7b:e6:1b:d7:1b:ca:24:b6:4e:14:fc:96:d0:91:94:f8:f6:62: ab:51:90:5f:23:3b:64:18:0c:1d:86:94:70:64:91:61:2d:4d: 03:47:35:c9:e6:1b:6c:2d:3b:d2:4c:10:50:26:41:45:b7:43: 7d:b1:57:7a:eb:e4:ca:6f:bf:2a:fc:96:c8:c6:1c:a4:f8:8d: 03:36:48:aa:64:4c:05:5f:be:eb:f4:d5:93:4f:64:aa:9b:3d: 45:48:da:b7:cc:08:9f:1d:91:c7:87:12:e0:f8:25:3d:47:8b: 2b:5b:02:d1:04:2e:52:8e:c2:75:73:70:cc:c3:d5:ad:f4:ab: 6a:8e:83:b5 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUfefAGH99ySZLmyFaVGYkA0o9nBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNTA0MDQxMzI3NDVaFw0yNTA0MDUxNTU4NDVaMDMxMTAvBgNV BAMTKEUwMjAwNDc0NEJCQjlEQjAwMzUzQkI5Qzg2MUFGRDhBQjk2NUQwODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4arV0GOlFu6S/j95Byfd5xAQ/ jgSyPaA7pEPOtgulXJc9lf2Ogme/7Qjc1NpDm0Yubok+Q1SpxXmq7mer709xkAxo sXPdDw7B13F5Ayg0ZaEXHRAuomaCx0whIqKOzxI28j3Wb37qzKiO3J3+WHafVlhm 1/lgj6ZwlEDNx3j0gHfcc1nKBntq7hTcbmMQJrcF7rDs/e58Gud5sDSvCqYV67wM KkwoagpCIg4nxWjwUyHmG+nLzztMFKCkXT/3BID1UED2cC9Giax/ZtbtNJm+5zZf zIL9gud0a73FJRlBRvc9ACbb4gnX3LjnPTdEqdLr2tTw/9dJYq6spVHYELGrAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU4CAEdEu7nbADU7uchhr9irll0IEwHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAA9TsS2G1bddaSYTdOBp eAKH8N9eGxjUR3eibnJA1Cs9eT06t8JlJcgLfBDdO6KIEi45le7vbAL3gjljp9Tn fFPZaUoIQdeUrXsLsfkrtNSxvWAtW2MjW/iDuRmWZz2OzrMjpvkhUz9QTnNhuysm maBYuRcK6XDyymFlLy2YmHvmG9cbyiS2ThT8ltCRlPj2YqtRkF8jO2QYDB2GlHBk kWEtTQNHNcnmG2wtO9JMEFAmQUW3Q32xV3rr5Mpvvyr8lsjGHKT4jQM2SKpkTAVf vuv01ZNPZKqbPUVI2rfMCJ8dkceHEuD4JT1HiytbAtEELlKOwnVzcMzD1a30q2qO g7U= -----END CERTIFICATE-----Generated at Fri Apr 4 17:54:57 2025 by rpki-client