$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft File: F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft (raw, json) Hash identifier: 35nkzJNgg/qQjRCZ4IsxLuiPtq+GH6bhW2rNsO8DLZg= Subject key identifier: FD:E1:E1:41:AF:51:5F:4D:73:BB:19:6A:9D:A5:47:DC:E8:44:30:99 Authority key identifier: F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 Certificate issuer: /CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Certificate serial: 372D2C4A68A4E4960CC500FDBED46C9127C4F34E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft Manifest number: 01C1 Signing time: Mon 09 Jun 2025 12:46:49 +0000 Manifest this update: Mon 09 Jun 2025 12:41:47 +0000 Manifest next update: Tue 10 Jun 2025 16:33:47 +0000 Files and hashes: 1: F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl (hash: mOyw/cWE1uTfZvs0XF/jg/8wIDOPi3I+rmP+xgeWFug=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Jun 2025 16:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:2d:2c:4a:68:a4:e4:96:0c:c5:00:fd:be:d4:6c:91:27:c4:f3:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Validity Not Before: Jun 9 12:41:47 2025 GMT Not After : Jun 10 16:33:47 2025 GMT Subject: CN=FDE1E141AF515F4D73BB196A9DA547DCE8443099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1e:e5:a8:7d:3a:b3:18:22:a3:9a:09:66:b1: 56:15:b0:15:22:fe:54:77:22:62:a9:12:5a:a3:78: 9f:68:5b:2d:8c:e4:e6:be:b1:fa:28:d4:c7:c7:8f: 55:a1:3a:5d:13:35:4c:1e:f0:9c:c3:97:11:23:c8: fd:80:21:6b:bd:33:a3:94:d9:18:ae:a9:9f:db:0f: a0:2e:e6:68:e8:6c:ca:89:c1:58:33:34:fd:e7:95: 2c:ca:e9:28:3b:f7:d4:c7:ed:6a:ce:b2:f4:69:9c: 72:b5:5c:43:fd:07:29:6c:2f:c2:6c:83:4f:87:ef: cf:6f:3f:cd:81:1e:29:ff:ab:9a:e1:46:1c:40:c6: 82:2b:4b:20:6c:01:90:f0:b9:00:9e:1f:6a:34:39: cc:be:0a:7b:b1:70:ed:08:3a:52:31:e0:9c:f8:48: f2:1a:8c:0f:b5:9c:a8:3e:ef:06:44:fa:91:16:99: d2:fc:35:10:40:c5:4f:60:a9:26:3b:83:5c:9b:74: 19:c5:82:57:54:52:5e:b4:af:1e:12:e3:f4:e1:61: 84:d9:0c:54:3e:a8:95:04:8e:b8:70:22:9b:04:da: 1c:32:b2:af:0c:0a:88:8c:da:9f:fc:32:93:fe:3a: d0:bb:4f:0f:d0:21:27:9c:41:87:11:2b:23:41:41: aa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E1:E1:41:AF:51:5F:4D:73:BB:19:6A:9D:A5:47:DC:E8:44:30:99 X509v3 Authority Key Identifier: keyid:F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:22:8a:19:55:b4:8d:1f:9d:56:d7:51:50:9d:fc:b3:01:49: 65:d1:27:9f:f3:50:fc:7d:05:c5:db:70:1c:39:7a:14:14:94: a3:05:45:5b:9f:e9:1d:79:18:87:25:74:da:a7:c5:48:a1:ff: 19:b2:6b:01:7f:42:ce:db:b2:31:b3:fe:90:f0:fb:c5:04:78: ed:f9:39:93:a6:ca:d8:73:30:49:be:3c:76:6d:29:8c:c6:33: b0:b8:ba:45:d8:4d:47:b5:6c:ee:e6:df:b2:63:7c:07:d3:82: 5b:ac:c0:56:1f:d7:f4:c5:7a:37:c1:cf:39:02:67:b8:cd:85: 1d:51:5d:16:be:fe:77:94:1f:9a:0b:e8:9d:e5:91:30:16:b3: 4f:d3:25:19:73:0f:57:17:2d:e5:fe:e1:17:cb:c4:6b:12:2f: 60:dd:35:f4:bb:19:ad:a4:f0:c4:2c:ea:a1:d2:e0:16:55:21: 13:9f:f3:47:90:4b:90:36:a9:a2:27:fc:ff:a6:e0:d9:8d:22: 62:14:e9:4c:5b:04:38:31:7e:bb:61:2c:a1:98:57:c8:66:8b: e8:72:12:cb:0b:ed:04:05:70:d5:48:c5:b2:d0:ed:7d:07:1f: 70:4c:43:6f:a6:6c:a6:31:71:b0:74:d0:8e:b0:a7:35:b8:9c: dc:a8:2c:8a -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUNy0sSmik5JYMxQD9vtRskSfE804wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2 OTg2RDdDNjAeFw0yNTA2MDkxMjQxNDdaFw0yNTA2MTAxNjMzNDdaMDMxMTAvBgNV BAMTKEZERTFFMTQxQUY1MTVGNEQ3M0JCMTk2QTlEQTU0N0RDRTg0NDMwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHuWofTqzGCKjmglmsVYVsBUi /lR3ImKpElqjeJ9oWy2M5Oa+sfoo1MfHj1WhOl0TNUwe8JzDlxEjyP2AIWu9M6OU 2RiuqZ/bD6Au5mjobMqJwVgzNP3nlSzK6Sg799TH7WrOsvRpnHK1XEP9BylsL8Js g0+H789vP82BHin/q5rhRhxAxoIrSyBsAZDwuQCeH2o0Ocy+CnuxcO0IOlIx4Jz4 SPIajA+1nKg+7wZE+pEWmdL8NRBAxU9gqSY7g1ybdBnFgldUUl60rx4S4/ThYYTZ DFQ+qJUEjrhwIpsE2hwysq8MCoiM2p/8MpP+OtC7Tw/QISecQYcRKyNBQarHAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU/eHhQa9RX01zuxlqnaVH3OhEMJkwHwYDVR0j BBgwFoAU95TfoAnqkLTLuzQN5MJVRGmG18YwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2RlNTMzMzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAv Rjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GNzk0REZBMDA5RUE5MEI0Q0JCQjM0MERFNEMyNTU0 NDY5ODZEN0M2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2RlNTMz Mzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAvRjc5NERGQTAwOUVBOTBCNENC QkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACgiihlVtI0fnVbXUVCd /LMBSWXRJ5/zUPx9BcXbcBw5ehQUlKMFRVuf6R15GIcldNqnxUih/xmyawF/Qs7b sjGz/pDw+8UEeO35OZOmythzMEm+PHZtKYzGM7C4ukXYTUe1bO7m37JjfAfTglus wFYf1/TFejfBzzkCZ7jNhR1RXRa+/neUH5oL6J3lkTAWs0/TJRlzD1cXLeX+4RfL xGsSL2DdNfS7Ga2k8MQs6qHS4BZVIROf80eQS5A2qaIn/P+m4NmNImIU6UxbBDgx frthLKGYV8hmi+hyEssL7QQFcNVIxbLQ7X0HH3BMQ2+mbKYxcbB00I6wpzW4nNyo LIo= -----END CERTIFICATE-----Generated at Tue Jun 10 07:30:11 2025 by rpki-client