$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: PysKk3ZIn9h6SP/dvtWz18yZaoSJZRm0Mg550ic+Jkc= Subject key identifier: 9E:50:30:E6:21:F7:2B:D0:88:2D:C1:4A:A5:CB:89:F1:E7:6A:CF:F6 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 10CD33E548A57CB209A79E3F5E1B729918B65F7A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 01BB Signing time: Thu 05 Jun 2025 20:01:52 +0000 Manifest this update: Thu 05 Jun 2025 19:56:49 +0000 Manifest next update: Fri 06 Jun 2025 21:01:49 +0000 Files and hashes: 1: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: ZrnGKp52VwdIW6ADcyljrQKRdejSedsJmdCAWzqhtHs=) 2: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: GbeO3kW/YYT2bEcRZs3PXmOkWrqsNcx2Bl4MH0iuxJs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 20:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:cd:33:e5:48:a5:7c:b2:09:a7:9e:3f:5e:1b:72:99:18:b6:5f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Jun 5 19:56:49 2025 GMT Not After : Jun 6 21:01:49 2025 GMT Subject: CN=9E5030E621F72BD0882DC14AA5CB89F1E76ACFF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9c:a7:98:d7:16:ea:19:6d:5f:87:5e:c5:4d: ff:7f:57:b8:e4:b8:6e:c8:59:ff:7a:33:98:1e:2e: 22:3a:cf:80:06:87:5e:f1:bf:a3:67:eb:48:46:f5: ea:6d:8b:52:e1:45:da:e4:aa:28:a9:32:c8:b1:c5: 90:0d:77:e3:e3:91:37:e2:75:31:bd:7e:ef:b1:5d: 38:70:93:f1:11:b5:aa:28:e3:c5:65:96:da:64:e4: b1:87:59:9a:1f:23:5e:19:73:79:85:62:74:75:a0: 1d:7f:ff:93:1d:dc:e8:0e:5a:43:c1:11:53:74:61: f5:65:fa:ea:a1:21:d1:0a:5f:dd:5e:19:37:fe:7d: f6:dd:67:91:40:99:1a:59:ac:bc:28:78:2c:4f:f0: 2b:a5:f6:81:72:84:53:b2:df:70:59:f7:7c:aa:ad: c8:aa:eb:31:bc:ba:59:b1:3e:cb:72:22:23:55:63: 85:e7:fa:07:cf:0d:65:6b:04:61:b3:1b:ff:ea:d9: ab:c3:b9:74:b6:a1:fb:85:38:ec:b0:d2:b9:24:41: cf:15:85:d5:60:ef:06:51:66:13:14:ea:9f:79:83: dc:a9:56:1b:31:13:f1:d4:a4:73:89:d5:2a:c3:19: bc:98:a7:80:f0:4f:9c:8a:ba:8c:65:9d:ff:e3:dd: b5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:50:30:E6:21:F7:2B:D0:88:2D:C1:4A:A5:CB:89:F1:E7:6A:CF:F6 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e2:65:5b:a6:ed:6d:64:3c:33:f2:55:a1:87:07:68:7a:4d: ba:ae:57:1a:af:1d:b1:bf:52:61:64:9b:39:9f:fd:70:5b:f3: af:46:6c:38:ca:0c:f5:36:b6:6c:78:f7:35:d4:e6:a8:ee:6b: 2a:84:c2:34:36:d3:55:b0:d5:50:6e:69:48:a8:5e:b5:14:12: 72:05:bd:32:aa:7f:43:f4:af:43:b8:65:b5:b2:c1:3e:3c:a7: 3d:7d:79:ed:ff:13:87:f5:f4:8d:62:d1:23:80:da:78:e8:c5: 09:7e:d8:92:c5:f8:40:28:30:ec:b0:40:3a:88:20:6d:95:0d: 04:03:e2:90:58:ad:bc:cb:e8:ef:10:9e:7a:47:17:7d:a9:e8: 65:c6:1d:3b:d3:35:04:dc:52:f9:2b:ac:e1:60:2d:1e:fe:bb: 2d:3f:a8:2d:40:17:5f:6d:1c:b3:10:cf:57:f9:cd:03:9a:7f: 93:dd:80:15:8e:aa:a7:55:2b:c7:3e:89:6c:29:0b:0e:45:da: 65:41:6f:9d:67:2b:67:59:10:b4:c7:1a:4d:15:64:c3:c1:f8: 25:05:55:04:e5:11:54:f5:61:f6:e1:20:1f:13:a3:45:ca:4c: 51:e3:e4:d9:f7:8f:82:93:37:cc:6a:a4:d9:52:25:3b:6c:a1: 35:7c:32:4d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUEM0z5UilfLIJp54/XhtymRi2X3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNTA2MDUxOTU2NDlaFw0yNTA2MDYyMTAxNDlaMDMxMTAvBgNV BAMTKDlFNTAzMEU2MjFGNzJCRDA4ODJEQzE0QUE1Q0I4OUYxRTc2QUNGRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPnKeY1xbqGW1fh17FTf9/V7jk uG7IWf96M5geLiI6z4AGh17xv6Nn60hG9epti1LhRdrkqiipMsixxZANd+PjkTfi dTG9fu+xXThwk/ERtaoo48Vlltpk5LGHWZofI14Zc3mFYnR1oB1//5Md3OgOWkPB EVN0YfVl+uqhIdEKX91eGTf+ffbdZ5FAmRpZrLwoeCxP8Cul9oFyhFOy33BZ93yq rciq6zG8ulmxPstyIiNVY4Xn+gfPDWVrBGGzG//q2avDuXS2ofuFOOyw0rkkQc8V hdVg7wZRZhMU6p95g9ypVhsxE/HUpHOJ1SrDGbyYp4DwT5yKuoxlnf/j3bVJAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUnlAw5iH3K9CILcFKpcuJ8edqz/YwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG3iZVum7W1kPDPyVaGH B2h6TbquVxqvHbG/UmFkmzmf/XBb869GbDjKDPU2tmx49zXU5qjuayqEwjQ201Ww 1VBuaUioXrUUEnIFvTKqf0P0r0O4ZbWywT48pz19ee3/E4f19I1i0SOA2njoxQl+ 2JLF+EAoMOywQDqIIG2VDQQD4pBYrbzL6O8QnnpHF32p6GXGHTvTNQTcUvkrrOFg LR7+uy0/qC1AF19tHLMQz1f5zQOaf5PdgBWOqqdVK8c+iWwpCw5F2mVBb51nK2dZ ELTHGk0VZMPB+CUFVQTlEVT1YfbhIB8To0XKTFHj5Nn3j4KTN8xqpNlSJTtsoTV8 Mk0= -----END CERTIFICATE-----Generated at Fri Jun 6 04:57:15 2025 by rpki-client