$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft File: B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json) Hash identifier: +RGKw5V3lvFGNax8hUykggIuYKvIyWKyR/tkGc+exFM= Subject key identifier: 03:25:F6:C6:32:8F:23:B8:30:79:BA:56:37:D2:E0:AB:CA:BE:D4:B3 Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77 Certificate issuer: /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777 Certificate serial: 6BFBCFD1A742E37173D79F0D292971B08BB80028 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft Manifest number: 0259 Signing time: Mon 20 Oct 2025 00:36:06 +0000 Manifest this update: Mon 20 Oct 2025 00:31:06 +0000 Manifest next update: Tue 21 Oct 2025 03:50:06 +0000 Files and hashes: 1: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: MlubGqxKcu9/AdY4j4/cMK0ZlCKeMWkqNbhfRk1N6mE=) 2: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: acK/tcpgnhR8FxZUMu+og9jzWGqYKJZ8yWfZA2zl43o=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:fb:cf:d1:a7:42:e3:71:73:d7:9f:0d:29:29:71:b0:8b:b8:00:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777 Validity Not Before: Oct 20 00:31:06 2025 GMT Not After : Oct 21 03:50:06 2025 GMT Subject: CN=0325F6C6328F23B83079BA5637D2E0ABCABED4B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:71:98:0a:65:d8:b0:de:63:a1:89:25:c8:86: 0d:75:8b:92:49:53:33:f2:5a:34:f3:ef:ce:70:f7: 37:1e:83:66:16:f5:ae:e8:64:e1:56:52:4c:b1:06: 91:e7:31:a8:41:10:64:82:c4:f4:fd:d5:f6:5a:cc: cf:bc:aa:3c:d1:07:42:d2:8b:20:7a:12:d5:5f:6c: 31:87:e2:a4:3d:95:15:dd:31:4c:ec:94:60:c9:6c: 6a:24:5e:fc:3d:7d:1d:be:a3:d8:b6:9a:39:2e:fd: 19:c0:62:af:48:2e:ff:2a:a3:7b:5a:35:49:94:bd: 14:cd:45:e9:14:9d:7f:ae:a4:70:e4:8e:25:35:e5: ca:cd:da:9c:2b:c5:20:b7:3f:f3:6f:ed:c6:d5:99: 8a:36:3b:44:e0:2b:a7:42:77:64:c7:45:d6:71:e1: 62:d2:46:9c:cf:8e:09:e9:b3:4f:14:5a:7a:6a:04: 18:ec:5f:10:08:79:92:32:35:df:04:f2:4a:27:da: e0:56:14:bb:91:bf:1f:3b:39:05:ed:a9:bf:c1:ee: d9:b9:59:37:36:35:4f:3e:f3:c7:f1:60:7b:5c:a0: c0:12:65:6d:0b:6a:2c:40:cd:99:c0:dd:2d:cf:c7: 3a:98:c5:83:43:3a:0a:16:04:61:84:b9:1d:2e:92: 50:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:25:F6:C6:32:8F:23:B8:30:79:BA:56:37:D2:E0:AB:CA:BE:D4:B3 X509v3 Authority Key Identifier: keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:57:b7:05:45:21:37:ec:24:33:77:5f:b2:cf:07:48:58:db: ba:66:45:c3:81:70:50:a1:72:1f:3c:63:b8:c2:97:3d:79:19: d0:5e:91:19:a1:8d:66:3b:17:d2:c4:e2:66:54:9f:ed:a4:a9: 19:cf:9d:d0:e5:ba:1f:db:ce:83:26:d6:08:44:91:3c:57:53: 07:53:eb:0a:9f:a5:d7:44:7b:6b:f1:44:58:31:b6:35:1b:ab: 33:4e:de:f4:b5:a8:27:22:2b:41:0b:8f:21:6b:a4:ea:45:4f: ce:71:31:83:fb:9c:9e:82:1e:9e:6a:cb:3e:ad:21:fd:a8:58: 1f:cd:cb:63:b1:e2:ca:ae:bf:7f:fe:e4:2b:4a:6b:1f:fc:d2: be:20:6e:62:a7:44:09:d2:cb:97:c3:73:8e:88:b7:86:ab:b8: 1e:12:72:d1:fa:ec:98:cf:a8:1b:80:65:b2:1e:4a:6f:87:0c: 9b:26:d5:c2:f6:b8:ad:5e:95:3d:12:23:37:7c:9f:4c:c1:21: e1:f6:65:50:d7:27:a0:f7:3e:01:82:6b:eb:76:d6:3a:c2:fb: e4:f2:77:d6:87:f6:f7:00:be:f0:5b:1e:96:48:fe:c0:43:1b: b2:56:d9:f4:0a:55:61:00:a7:a7:da:a5:3d:4d:db:fe:00:7b: 9e:68:6e:1b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUa/vP0adC43Fz158NKSlxsIu4ACgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RE RUEwODc3NzAeFw0yNTEwMjAwMDMxMDZaFw0yNTEwMjEwMzUwMDZaMDMxMTAvBgNV BAMTKDAzMjVGNkM2MzI4RjIzQjgzMDc5QkE1NjM3RDJFMEFCQ0FCRUQ0QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2cZgKZdiw3mOhiSXIhg11i5JJ UzPyWjTz785w9zceg2YW9a7oZOFWUkyxBpHnMahBEGSCxPT91fZazM+8qjzRB0LS iyB6EtVfbDGH4qQ9lRXdMUzslGDJbGokXvw9fR2+o9i2mjku/RnAYq9ILv8qo3ta NUmUvRTNRekUnX+upHDkjiU15crN2pwrxSC3P/Nv7cbVmYo2O0TgK6dCd2THRdZx 4WLSRpzPjgnps08UWnpqBBjsXxAIeZIyNd8E8kon2uBWFLuRvx87OQXtqb/B7tm5 WTc2NU8+88fxYHtcoMASZW0LaixAzZnA3S3PxzqYxYNDOgoWBGGEuR0uklC/AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUAyX2xjKPI7gwebpWN9Lgq8q+1LMwHwYDVR0j BBgwFoAUuCIqhFwM3Fno02muI+EWzd6gh3cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzA5ODBlMjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAv QjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODIyMkE4NDVDMENEQzU5RThEMzY5QUUyM0UxMTZD RERFQTA4Nzc3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzA5ODBl MjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAvQjgyMjJBODQ1QzBDREM1OUU4 RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEtXtwVFITfsJDN3X7LP B0hY27pmRcOBcFChch88Y7jClz15GdBekRmhjWY7F9LE4mZUn+2kqRnPndDluh/b zoMm1ghEkTxXUwdT6wqfpddEe2vxRFgxtjUbqzNO3vS1qCciK0ELjyFrpOpFT85x MYP7nJ6CHp5qyz6tIf2oWB/Ny2Ox4squv3/+5CtKax/80r4gbmKnRAnSy5fDc46I t4aruB4SctH67JjPqBuAZbIeSm+HDJsm1cL2uK1elT0SIzd8n0zBIeH2ZVDXJ6D3 PgGCa+t21jrC++Tyd9aH9vcAvvBbHpZI/sBDG7JW2fQKVWEAp6fapT1N2/4Ae55o bhs= -----END CERTIFICATE-----Generated at Mon Oct 20 09:55:20 2025 by rpki-client