$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft File: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft (raw, json) Hash identifier: O/eXYuxZfpGJ1JVTeYmT9ZJNqFxU2/pvun9PV13R7fc= Subject key identifier: E9:19:39:25:AD:6F:19:CB:A9:71:75:39:54:DD:9B:B9:45:B6:F0:D8 Authority key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 Certificate issuer: /CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Certificate serial: 2AF8974CE1E2ACD5B11D090741DD800881FE47C4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft Manifest number: 01C0 Signing time: Fri 06 Jun 2025 17:55:21 +0000 Manifest this update: Fri 06 Jun 2025 17:50:19 +0000 Manifest next update: Sat 07 Jun 2025 20:12:19 +0000 Files and hashes: 1: 326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (hash: rM7Iz0AdMAoRVTiJd3bICea3rYWVyAIw/EdVZlqCGD0=) 2: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl (hash: eP9iOygxi9Ms5rLkfknFHRRU5v8m8o/TcelesMLtuyg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 20:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f8:97:4c:e1:e2:ac:d5:b1:1d:09:07:41:dd:80:08:81:fe:47:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Validity Not Before: Jun 6 17:50:19 2025 GMT Not After : Jun 7 20:12:19 2025 GMT Subject: CN=E9193925AD6F19CBA971753954DD9BB945B6F0D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:37:50:6b:0c:de:0f:00:e8:e8:76:e2:9a:45: d1:9e:f0:70:33:01:33:c3:b0:71:dd:5b:1f:78:45: 57:21:fb:1c:9e:c0:a1:c8:bd:fb:a4:16:67:d7:50: fd:8d:eb:87:3c:e0:9a:b3:41:56:3f:2a:07:dc:d5: fa:76:85:2e:79:54:c6:71:fe:ca:00:bf:af:2d:29: 21:c1:d9:6a:7d:97:45:46:a9:7c:40:91:ef:d4:41: d5:17:17:6b:db:0e:95:40:96:42:c5:08:7c:ab:ad: 28:17:6e:ec:86:f4:75:ca:10:cd:ef:57:7d:48:43: ca:2f:26:7d:a2:c9:ba:22:bc:92:5c:5c:22:ca:a9: 3b:86:0e:ea:17:15:bf:2f:1d:9b:16:50:b1:e0:80: 6a:f3:63:7e:bf:bf:1b:65:68:7d:4b:e7:89:ae:2c: 62:6f:d8:d1:82:45:cd:e7:cb:15:e5:53:1a:ca:c2: db:0c:56:01:04:84:4a:a4:95:40:3b:35:65:7c:5b: c8:8d:03:b7:4c:4c:50:d2:2d:e2:1c:d0:0a:c0:9e: 25:f7:ee:39:e0:b9:66:da:cb:82:02:7d:b3:ef:76: 81:81:a3:70:25:c9:f7:f6:51:a3:3a:ad:80:37:b1: 21:9a:4f:c5:30:b8:e3:f5:27:83:b8:9d:eb:03:7a: 0b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:19:39:25:AD:6F:19:CB:A9:71:75:39:54:DD:9B:B9:45:B6:F0:D8 X509v3 Authority Key Identifier: keyid:1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:87:1a:eb:9d:8b:c1:16:f5:c1:4a:aa:b4:41:d4:f3:78:91: 9c:c3:df:41:c1:0e:1d:09:6a:12:d9:35:1c:7d:34:5b:a9:02: 71:77:a9:eb:93:48:0b:38:ce:93:3b:b3:d5:8f:28:06:8a:5d: af:f9:84:dd:d0:41:f4:f9:e4:b8:54:d9:a9:3d:97:50:4a:0e: 23:e8:e4:90:da:ba:b2:24:93:04:b8:2c:2e:06:cc:93:c7:5c: 02:d6:f6:a6:52:38:c5:f7:9b:71:51:74:95:f1:a1:4d:00:c3: 37:66:96:13:06:e8:4e:ab:5c:35:13:8f:0c:e0:a7:48:dd:01: b9:d8:6c:24:12:c5:1c:da:0c:7e:d8:e6:ba:05:2a:a9:8b:e2: 1f:65:64:a2:75:fe:c1:94:fa:f0:98:a2:1d:85:b9:ad:a7:e6: 63:0d:8e:24:1c:c0:fa:25:e1:17:96:13:0a:d1:1a:b7:87:0a: a8:4c:c8:51:f2:54:e7:19:dd:cc:81:a9:7c:15:f0:49:c7:9c: b0:60:e9:9b:c5:36:fd:1a:66:49:7a:d6:a3:e7:65:26:ac:a1: 9c:07:14:29:17:15:ea:c8:08:90:92:eb:7b:52:25:7f:2d:f9: 82:8c:26:20:95:40:99:ec:bd:63:76:eb:ca:93:7f:72:e6:35: 48:79:17:77 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUKviXTOHirNWxHQkHQd2ACIH+R8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJB NkI3RUY3MTAeFw0yNTA2MDYxNzUwMTlaFw0yNTA2MDcyMDEyMTlaMDMxMTAvBgNV BAMTKEU5MTkzOTI1QUQ2RjE5Q0JBOTcxNzUzOTU0REQ5QkI5NDVCNkYwRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKN1BrDN4PAOjoduKaRdGe8HAz ATPDsHHdWx94RVch+xyewKHIvfukFmfXUP2N64c84JqzQVY/Kgfc1fp2hS55VMZx /soAv68tKSHB2Wp9l0VGqXxAke/UQdUXF2vbDpVAlkLFCHyrrSgXbuyG9HXKEM3v V31IQ8ovJn2iyboivJJcXCLKqTuGDuoXFb8vHZsWULHggGrzY36/vxtlaH1L54mu LGJv2NGCRc3nyxXlUxrKwtsMVgEEhEqklUA7NWV8W8iNA7dMTFDSLeIc0ArAniX3 7jnguWbay4ICfbPvdoGBo3Alyff2UaM6rYA3sSGaT8UwuOP1J4O4nesDegv3AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU6Rk5Ja1vGcupcXU5VN2buUW28NgwHwYDVR0j BBgwFoAUGrsI1BpaaXQyDZeId2mhW6a373EwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2IzZGE1Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAv MUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQUJCMDhENDFBNUE2OTc0MzIwRDk3ODg3NzY5QTE1 QkE2QjdFRjcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2IzZGE1 Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAvMUFCQjA4RDQxQTVBNjk3NDMy MEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGiHGuudi8EW9cFKqrRB 1PN4kZzD30HBDh0JahLZNRx9NFupAnF3qeuTSAs4zpM7s9WPKAaKXa/5hN3QQfT5 5LhU2ak9l1BKDiPo5JDaurIkkwS4LC4GzJPHXALW9qZSOMX3m3FRdJXxoU0Awzdm lhMG6E6rXDUTjwzgp0jdAbnYbCQSxRzaDH7Y5roFKqmL4h9lZKJ1/sGU+vCYoh2F ua2n5mMNjiQcwPol4ReWEwrRGreHCqhMyFHyVOcZ3cyBqXwV8EnHnLBg6ZvFNv0a Zkl61qPnZSasoZwHFCkXFerICJCS63tSJX8t+YKMJiCVQJnsvWN268qTf3LmNUh5 F3c= -----END CERTIFICATE-----Generated at Sat Jun 7 12:07:27 2025 by rpki-client