$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft File: 44C4C913D58F5EF847996241E969B60A1E3F1389.mft (raw, json) Hash identifier: KSvjjJX/7RJvX8kOIBKjooY2qawTcXw6IKuG4w8dTus= Subject key identifier: C7:08:CA:09:83:53:37:6E:E0:45:46:A7:1A:59:6C:33:75:A7:C0:99 Authority key identifier: 44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89 Certificate issuer: /CN=44C4C913D58F5EF847996241E969B60A1E3F1389 Certificate serial: 4257E4AD2BB8705F578724098E5F4DE738950A25 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft Manifest number: 0173 Signing time: Wed 09 Apr 2025 17:46:58 +0000 Manifest this update: Wed 09 Apr 2025 17:41:56 +0000 Manifest next update: Thu 10 Apr 2025 20:50:56 +0000 Files and hashes: 1: 326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa (hash: 7hFQ2fphXwahaMoTubiz5LcppCCDV985Dg0s/VHtMx8=) 2: 44C4C913D58F5EF847996241E969B60A1E3F1389.crl (hash: dloNZ2iMP26KvQ7bBNcJrsXa8IATqcltKGs0wgttgLk=) 3: E42882C5C372E03CCD5EA87BB1B6FFEF1FF1BFF5.cer (hash: ZgkUmwBAN+BgyVFg/7xrYnbw3kS/Mk8fXnbXdBLqa28=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Apr 2025 16:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:57:e4:ad:2b:b8:70:5f:57:87:24:09:8e:5f:4d:e7:38:95:0a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44C4C913D58F5EF847996241E969B60A1E3F1389 Validity Not Before: Apr 9 17:41:56 2025 GMT Not After : Apr 10 20:50:56 2025 GMT Subject: CN=C708CA098353376EE04546A71A596C3375A7C099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ed:30:81:42:1c:3a:cb:c6:16:96:28:6d:26: 1b:a5:fd:cf:35:67:1d:a2:5b:9f:d6:85:d8:00:79: 64:b8:05:1c:58:27:70:55:e4:33:48:f1:4f:c0:24: 80:38:dc:56:c3:ab:51:dd:e1:ba:2e:69:96:7b:6f: 81:74:02:48:c5:ee:fd:41:68:a3:3e:b5:07:7d:ef: 8e:18:0c:1f:2a:80:93:c8:2f:01:59:09:77:8c:7b: 55:0a:8c:cc:6f:68:30:fe:ad:0d:ba:60:69:f8:0b: e6:81:0b:17:bc:ba:c2:5e:29:70:6c:1d:11:a2:43: a4:61:96:e6:0e:65:74:a4:2a:c5:8f:8a:9a:eb:42: a9:4a:a1:b1:3d:78:7d:aa:5e:30:ee:74:60:4e:e6: 4d:5f:60:cc:67:bc:05:ed:dc:6c:5f:18:7a:22:65: 6c:c3:1e:ac:34:d3:d0:0b:ba:db:21:0e:bd:c0:d5: ca:39:86:dd:38:b0:31:bb:4e:c2:ee:eb:10:9f:ec: eb:e0:b8:de:d9:66:96:c7:a2:86:5a:51:85:eb:b0: 52:bb:a8:50:0a:5f:2f:c4:af:40:f5:39:8a:e1:55: 7f:2e:1a:06:14:35:cf:c7:be:9e:21:cb:48:6d:36: a6:61:fb:85:b6:36:15:c6:2c:72:b4:9a:d7:8c:75: fe:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:08:CA:09:83:53:37:6E:E0:45:46:A7:1A:59:6C:33:75:A7:C0:99 X509v3 Authority Key Identifier: keyid:44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:4e:43:02:35:0e:38:1d:7e:28:98:8d:1c:05:63:d5:80:c7: 84:ff:69:00:bd:99:25:8d:05:73:1f:bf:fe:50:81:41:cc:8b: f3:47:e6:84:bd:8a:8f:5c:b5:7b:14:69:76:b7:3a:a2:3c:c4: f7:3b:92:49:c4:28:fb:b4:ab:be:ac:4b:f7:34:3c:a9:d1:7e: ea:98:ad:5b:f9:95:d4:60:da:97:a7:28:2b:77:96:cb:9a:a2: 13:a4:04:07:4d:cb:51:b5:f7:d7:6c:bf:62:44:58:07:23:fa: dc:dd:2a:7d:2e:55:69:80:f3:02:6f:33:b1:15:d6:81:72:8b: 4f:34:a5:00:75:4a:57:7a:22:60:80:b2:e4:cc:7c:a8:92:42: 86:b0:db:0e:ae:68:b4:d0:54:bc:29:9f:35:a9:a0:64:e8:e0: d6:04:bf:b0:c9:81:ae:3f:39:aa:7c:b4:41:85:d0:48:f6:f1: 3d:24:50:a4:b9:2e:bb:26:22:07:e1:0e:cb:c9:13:6b:60:25: 79:2d:e1:bf:ef:88:45:e0:79:57:84:4f:b7:0e:10:1f:83:fd: 86:4e:e6:87:e3:c9:5a:80:b9:03:0c:db:8a:7b:ba:13:91:bb: 86:c4:12:87:f4:61:33:2d:e5:a4:9e:9e:9f:1f:74:0e:9f:69: 72:2c:75:62 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUQlfkrSu4cF9XhyQJjl9N5ziVCiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEEx RTNGMTM4OTAeFw0yNTA0MDkxNzQxNTZaFw0yNTA0MTAyMDUwNTZaMDMxMTAvBgNV BAMTKEM3MDhDQTA5ODM1MzM3NkVFMDQ1NDZBNzFBNTk2QzMzNzVBN0MwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD17TCBQhw6y8YWlihtJhul/c81 Zx2iW5/WhdgAeWS4BRxYJ3BV5DNI8U/AJIA43FbDq1Hd4bouaZZ7b4F0AkjF7v1B aKM+tQd9744YDB8qgJPILwFZCXeMe1UKjMxvaDD+rQ26YGn4C+aBCxe8usJeKXBs HRGiQ6RhluYOZXSkKsWPiprrQqlKobE9eH2qXjDudGBO5k1fYMxnvAXt3GxfGHoi ZWzDHqw009ALutshDr3A1co5ht04sDG7TsLu6xCf7OvguN7ZZpbHooZaUYXrsFK7 qFAKXy/Er0D1OYrhVX8uGgYUNc/Hvp4hy0htNqZh+4W2NhXGLHK0mteMdf6pAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUxwjKCYNTN27gRUanGllsM3WnwJkwHwYDVR0j BBgwFoAURMTJE9WPXvhHmWJB6Wm2Ch4/E4kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2QwZjJkYjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAv NDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80NEM0QzkxM0Q1OEY1RUY4NDc5OTYyNDFFOTY5QjYw QTFFM0YxMzg5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2QwZjJk Yjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAvNDRDNEM5MTNENThGNUVGODQ3 OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB1OQwI1DjgdfiiYjRwF Y9WAx4T/aQC9mSWNBXMfv/5QgUHMi/NH5oS9io9ctXsUaXa3OqI8xPc7kknEKPu0 q76sS/c0PKnRfuqYrVv5ldRg2penKCt3lsuaohOkBAdNy1G199dsv2JEWAcj+tzd Kn0uVWmA8wJvM7EV1oFyi080pQB1Sld6ImCAsuTMfKiSQoaw2w6uaLTQVLwpnzWp oGTo4NYEv7DJga4/Oap8tEGF0Ej28T0kUKS5LrsmIgfhDsvJE2tgJXkt4b/viEXg eVeET7cOEB+D/YZO5ofjyVqAuQMM24p7uhORu4bEEof0YTMt5aSenp8fdA6faXIs dWI= -----END CERTIFICATE-----Generated at Thu Apr 10 07:31:09 2025 by rpki-client