$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft File: B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json) Hash identifier: Y6T4g0l+IPM67UPq648pcFUjRPxFPfGd7rEUlM4Bq70= Subject key identifier: 9E:DB:9B:D3:3D:63:63:EF:58:42:1A:A2:CA:6E:FC:B0:10:6C:AB:06 Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 Certificate issuer: /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Certificate serial: 295216DEFA10BEE60FDFA35EB1485A938021E3F0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft Manifest number: 0257 Signing time: Sun 19 Oct 2025 09:19:31 +0000 Manifest this update: Sun 19 Oct 2025 09:14:31 +0000 Manifest next update: Mon 20 Oct 2025 13:03:31 +0000 Files and hashes: 1: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: JGnyZ1EAu0yd1IdtcyC2vi1veOBHaHuUUeBnOB+1Rbg=) 2: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: tOaIT6qTvs/T2L2c3rEpmXq3gx7f0jW4s/J1R0UAbuM=) 3: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: nMLfH1nYsI5mPwv+N0MEzTUVq1YFB35SCmO/3EjXxsg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 12:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:52:16:de:fa:10:be:e6:0f:df:a3:5e:b1:48:5a:93:80:21:e3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Validity Not Before: Oct 19 09:14:31 2025 GMT Not After : Oct 20 13:03:31 2025 GMT Subject: CN=9EDB9BD33D6363EF58421AA2CA6EFCB0106CAB06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:a6:40:db:54:eb:7b:11:0b:9e:aa:ab:3f: e8:cb:23:c2:e2:1d:e1:d9:e0:e7:8b:a8:26:33:6d: d0:a7:74:de:6a:4f:55:ed:09:dd:54:f9:c4:83:ec: d4:de:87:54:59:60:19:73:a9:a0:3f:87:60:5c:6f: df:8d:af:6d:d9:39:a9:92:67:19:e3:e2:ef:8e:7e: 27:2c:21:be:53:a2:9a:be:9d:25:f9:4e:85:da:78: 4b:cb:ac:f6:f4:25:e0:7a:e6:7c:8d:85:02:55:f3: 66:2b:74:82:13:54:49:68:7b:63:40:d1:16:ba:cc: 01:de:5a:21:04:a3:1c:ea:35:b9:1e:f8:be:df:c3: 48:52:84:c1:40:58:21:f7:e3:d5:22:ac:f2:c2:c4: 12:09:74:ec:07:d7:f4:0a:d0:de:4f:7e:ae:ad:06: 6c:5a:cb:e9:d8:8e:18:59:24:79:7e:7d:d0:a3:d5: 5a:48:05:99:ab:16:c2:b0:b4:c5:05:11:eb:b8:d1: 56:0f:8e:a1:08:9e:78:87:33:e4:4a:59:0c:7e:13: 52:d5:7f:5e:75:7f:2b:5e:2c:bc:23:e6:44:75:35: 2b:74:88:99:82:56:d5:9e:fe:9a:29:e0:a8:93:60: dd:ca:b0:20:f4:c5:1e:0c:9d:9f:a6:86:ee:18:75: a6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DB:9B:D3:3D:63:63:EF:58:42:1A:A2:CA:6E:FC:B0:10:6C:AB:06 X509v3 Authority Key Identifier: keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:3c:d7:56:08:96:a6:00:68:5d:82:69:4f:be:19:3d:13:a2: 73:0f:9d:05:6c:f3:fb:08:f8:14:c0:9e:c6:65:1b:f5:1e:f9: ea:f6:eb:6b:43:c1:f7:da:50:90:a5:54:e0:27:73:a9:fc:59: c9:dd:c1:36:0d:b4:21:7e:a3:ee:08:db:76:49:28:80:6b:85: 42:70:ac:dd:9a:e9:b0:4e:4d:ce:b8:45:0a:80:35:3a:8c:a5: 02:8e:b2:cf:6e:6c:e8:c1:9d:af:83:75:10:ea:1f:c5:fb:5e: d9:0b:b1:95:dd:85:ea:42:ee:b3:8f:5f:58:47:50:3e:a3:2f: fc:f9:80:fe:4c:ba:f7:0b:46:b4:95:ea:03:a4:70:8f:c4:99: d8:04:a1:f7:14:6d:b4:83:f5:8b:47:70:cc:90:77:49:6f:77: 73:e1:14:58:34:47:a8:4d:8a:fe:7a:30:4d:30:7c:b0:fd:6c: ea:d0:52:89:90:35:76:ab:76:c2:b7:02:db:70:8d:be:92:4f: da:5f:42:9e:fd:f9:96:39:2c:bb:e5:32:23:05:c2:f3:d3:d7: 9b:b6:19:89:19:73:16:a9:1e:f4:3f:44:bd:38:94:0a:1c:ee: 11:c2:b0:1a:77:b9:76:b3:40:d6:bd:6f:37:43:b3:4e:91:1f: 37:74:4f:7c -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUKVIW3voQvuYP36NesUhak4Ah4/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG MjFFMDUxODAeFw0yNTEwMTkwOTE0MzFaFw0yNTEwMjAxMzAzMzFaMDMxMTAvBgNV BAMTKDlFREI5QkQzM0Q2MzYzRUY1ODQyMUFBMkNBNkVGQ0IwMTA2Q0FCMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gaZA21TrexELnqqrP+jLI8Li HeHZ4OeLqCYzbdCndN5qT1XtCd1U+cSD7NTeh1RZYBlzqaA/h2Bcb9+Nr23ZOamS Zxnj4u+OficsIb5Topq+nSX5ToXaeEvLrPb0JeB65nyNhQJV82YrdIITVEloe2NA 0Ra6zAHeWiEEoxzqNbke+L7fw0hShMFAWCH349UirPLCxBIJdOwH1/QK0N5Pfq6t Bmxay+nYjhhZJHl+fdCj1VpIBZmrFsKwtMUFEeu40VYPjqEInniHM+RKWQx+E1LV f151fyteLLwj5kR1NSt0iJmCVtWe/pop4KiTYN3KsCD0xR4MnZ+mhu4YdaalAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUntub0z1jY+9YQhqiym78sBBsqwYwHwYDVR0j BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD OEYyMUUwNTE4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzBhNDYz N2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAvQjg4QTk0RENBMDlFM0E2NTND MDZGNDc4NDM0REM3QzhGMjFFMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACQ811YIlqYAaF2CaU++ GT0TonMPnQVs8/sI+BTAnsZlG/Ue+er262tDwffaUJClVOAnc6n8WcndwTYNtCF+ o+4I23ZJKIBrhUJwrN2a6bBOTc64RQqANTqMpQKOss9ubOjBna+DdRDqH8X7XtkL sZXdhepC7rOPX1hHUD6jL/z5gP5MuvcLRrSV6gOkcI/EmdgEofcUbbSD9YtHcMyQ d0lvd3PhFFg0R6hNiv56ME0wfLD9bOrQUomQNXardsK3Attwjb6ST9pfQp79+ZY5 LLvlMiMFwvPT15u2GYkZcxapHvQ/RL04lAoc7hHCsBp3uXazQNa9bzdDs06RHzd0 T3w= -----END CERTIFICATE-----Generated at Mon Oct 20 04:38:59 2025 by rpki-client