$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft File: F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft (raw, json) Hash identifier: mbBtBKOkr1EWcua/E0yMyFC6666LSzVVh0yFfxDFK8g= Subject key identifier: 58:13:74:F3:6D:BC:63:D0:35:95:3E:B6:37:C7:BD:4F:3F:75:75:89 Authority key identifier: F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 Certificate issuer: /CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Certificate serial: 2E4C9E2E24133978D674BE6268D2B4176A584A1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft Manifest number: 01C2 Signing time: Tue 10 Jun 2025 08:37:52 +0000 Manifest this update: Tue 10 Jun 2025 08:32:50 +0000 Manifest next update: Wed 11 Jun 2025 09:11:50 +0000 Files and hashes: 1: F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl (hash: /Ws+zPjK7/xBfyaw5fzpL3dkL6CF9iRT5OIfkZIHQRY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Jun 2025 02:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:4c:9e:2e:24:13:39:78:d6:74:be:62:68:d2:b4:17:6a:58:4a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Validity Not Before: Jun 10 08:32:50 2025 GMT Not After : Jun 11 09:11:50 2025 GMT Subject: CN=581374F36DBC63D035953EB637C7BD4F3F757589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:96:27:b5:23:60:9f:6b:71:20:7b:04:ef:9e: b0:31:e4:3b:87:c6:12:67:87:fa:79:be:b1:71:e7: 76:6e:de:a4:7e:7d:14:89:da:eb:f1:05:cd:50:45: 10:86:c1:44:3e:d5:2b:66:2f:09:d4:30:a9:48:b4: 01:bf:85:5c:69:de:e9:37:a4:bd:6e:f2:44:63:6b: 28:29:1e:5c:1a:39:38:c7:60:13:25:60:2a:39:82: ec:08:59:9f:4c:84:f2:55:d0:2a:d2:07:95:31:cc: 7c:28:0f:20:48:88:c7:06:be:16:5c:88:62:8a:ba: 33:f1:16:de:a0:72:1c:de:5d:58:12:34:8d:f6:c0: e3:c7:2b:9b:26:93:48:c3:96:09:4e:b0:8d:0d:2d: a8:13:47:04:df:6c:fc:c5:fe:d6:3f:56:40:58:3a: e8:e5:9b:e2:af:df:26:4c:4c:fe:9f:be:0f:b3:29: 1c:fc:94:ff:6f:2b:8a:87:72:cf:4e:3f:6c:6d:83: 8a:65:e7:28:d8:f9:33:2b:e4:32:c5:a2:90:f5:b4: 88:29:1b:ed:0b:da:03:a3:e2:9d:d8:dc:19:60:2b: 4e:95:f7:6a:3b:85:22:81:31:c4:02:c1:f9:2f:d1: e7:dd:ec:e1:88:18:3b:c8:e4:a5:4e:d6:1a:39:cb: 09:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:13:74:F3:6D:BC:63:D0:35:95:3E:B6:37:C7:BD:4F:3F:75:75:89 X509v3 Authority Key Identifier: keyid:F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:78:19:fa:3f:1c:7b:5c:b0:f3:79:ca:33:af:bc:27:32:c1: 2c:58:a7:81:5e:c1:1f:82:44:c8:db:9f:14:80:84:a5:49:40: 57:48:ec:db:de:46:ef:7d:6f:8a:df:13:48:ba:47:31:b2:45: 96:a6:9a:6d:48:82:f2:21:5d:1d:ab:c7:c4:aa:0a:5f:a6:33: fe:8a:93:62:4e:a8:d2:59:96:7a:56:00:b8:e7:50:36:2c:9c: 54:b4:f0:33:04:7c:b5:65:2a:82:5d:8e:d3:f0:b3:7a:d3:4f: d4:7d:27:94:10:a0:21:f9:14:34:65:36:e4:49:77:1a:f4:72: 9e:c7:c0:75:18:cb:09:f3:2d:73:a9:01:f0:cc:93:4c:cc:50: a7:6f:d8:68:f5:87:36:54:38:d6:3d:51:ed:ab:6e:07:aa:5f: 8d:4b:65:79:e7:92:a8:b1:c0:8b:2d:00:93:9a:bb:2e:a5:3d: 72:c6:e6:c0:e4:62:e6:63:3c:14:cf:1d:17:3d:44:9f:7f:00: 00:69:0a:9e:50:fd:1a:76:37:fa:b2:df:ed:a7:b3:fd:07:a8: 6c:1f:f2:2d:ff:62:c9:98:c3:55:be:ea:5e:fd:29:7b:0c:d7: 04:d4:6c:71:6f:3e:9f:0b:fb:59:8e:53:30:8f:c1:7c:dd:0b: 71:61:17:b0 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIULkyeLiQTOXjWdL5iaNK0F2pYShowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2 OTg2RDdDNjAeFw0yNTA2MTAwODMyNTBaFw0yNTA2MTEwOTExNTBaMDMxMTAvBgNV BAMTKDU4MTM3NEYzNkRCQzYzRDAzNTk1M0VCNjM3QzdCRDRGM0Y3NTc1ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8lie1I2Cfa3EgewTvnrAx5DuH xhJnh/p5vrFx53Zu3qR+fRSJ2uvxBc1QRRCGwUQ+1StmLwnUMKlItAG/hVxp3uk3 pL1u8kRjaygpHlwaOTjHYBMlYCo5guwIWZ9MhPJV0CrSB5UxzHwoDyBIiMcGvhZc iGKKujPxFt6gchzeXVgSNI32wOPHK5smk0jDlglOsI0NLagTRwTfbPzF/tY/VkBY Oujlm+Kv3yZMTP6fvg+zKRz8lP9vK4qHcs9OP2xtg4pl5yjY+TMr5DLFopD1tIgp G+0L2gOj4p3Y3BlgK06V92o7hSKBMcQCwfkv0efd7OGIGDvI5KVO1ho5ywmpAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUWBN08228Y9A1lT62N8e9Tz91dYkwHwYDVR0j BBgwFoAU95TfoAnqkLTLuzQN5MJVRGmG18YwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2RlNTMzMzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAv Rjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GNzk0REZBMDA5RUE5MEI0Q0JCQjM0MERFNEMyNTU0 NDY5ODZEN0M2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2RlNTMz Mzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAvRjc5NERGQTAwOUVBOTBCNENC QkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEt4Gfo/HHtcsPN5yjOv vCcywSxYp4FewR+CRMjbnxSAhKVJQFdI7NveRu99b4rfE0i6RzGyRZammm1IgvIh XR2rx8SqCl+mM/6Kk2JOqNJZlnpWALjnUDYsnFS08DMEfLVlKoJdjtPws3rTT9R9 J5QQoCH5FDRlNuRJdxr0cp7HwHUYywnzLXOpAfDMk0zMUKdv2Gj1hzZUONY9Ue2r bgeqX41LZXnnkqixwIstAJOauy6lPXLG5sDkYuZjPBTPHRc9RJ9/AABpCp5Q/Rp2 N/qy3+2ns/0HqGwf8i3/YsmYw1W+6l79KXsM1wTUbHFvPp8L+1mOUzCPwXzdC3Fh F7A= -----END CERTIFICATE-----Generated at Tue Jun 10 15:08:25 2025 by rpki-client