$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.mft File: 6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.mft (raw, json) Hash identifier: Oxm/F48qudFYaYt4fBSFFRB0BgjWRT8x1g0YYZe8pb4= Subject key identifier: 2A:F1:5A:C2:E1:BC:4A:A4:C8:24:19:50:84:A6:2A:F8:C8:12:46:65 Authority key identifier: 6D:0E:F2:AC:1D:23:5D:1B:50:ED:77:6E:6C:E4:C3:CB:36:AF:06:2F Certificate issuer: /CN=6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F Certificate serial: 213019C7999B8ABE5DA9A12DA40DFC13A402683D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.mft Manifest number: 0257 Signing time: Mon 20 Oct 2025 10:22:02 +0000 Manifest this update: Mon 20 Oct 2025 10:17:02 +0000 Manifest next update: Tue 21 Oct 2025 12:14:02 +0000 Files and hashes: 1: 6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.crl (hash: AApvPUEBdF9vZmNaKx8nfkxLEWALSHN8R0c8CxdvOiw=) 2: 326131313a663263303a666663353a3a2f34382d3438203d3e20323136323534.roa (hash: hG/rGAEu7qZDpLo6NztH1q2JrgmXtISMQ8wh/gNWEd0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 06:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:30:19:c7:99:9b:8a:be:5d:a9:a1:2d:a4:0d:fc:13:a4:02:68:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F Validity Not Before: Oct 20 10:17:02 2025 GMT Not After : Oct 21 12:14:02 2025 GMT Subject: CN=2AF15AC2E1BC4AA4C824195084A62AF8C8124665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:66:e2:a5:56:12:4c:cc:53:11:09:27:a1:31: 1d:de:8a:b0:d2:ee:26:6b:d5:ed:6e:8e:6c:d4:76: f4:c3:e4:d2:c6:0f:8f:bf:ad:0b:36:39:9f:ac:0c: 97:c8:1e:70:cd:90:03:e7:aa:db:59:74:bd:49:3e: c8:7e:ee:c8:dc:f2:ac:d4:d1:ee:11:a3:80:ff:68: 2b:86:99:b7:e8:05:46:b1:ef:64:9d:73:74:d8:37: 4b:d0:63:2b:06:9c:ea:7d:5e:b7:e3:a9:85:b3:08: 4d:16:71:51:44:c4:58:9a:85:11:93:bf:79:36:b8: 3b:03:12:6a:eb:85:f8:5c:93:98:95:1a:a2:ff:92: ba:f0:84:ef:c2:6a:6a:70:2d:05:f5:b6:ed:53:52: d1:08:df:b5:f7:09:f1:5b:47:2e:da:52:37:d2:db: 80:21:a0:dc:7e:5b:0f:9c:99:69:6d:aa:e7:3c:73: 59:4a:cf:71:eb:fe:5b:06:43:c6:de:c3:5b:95:29: b2:58:39:4e:b4:74:66:1e:ce:a5:cc:33:e4:8f:2d: f6:6e:e5:53:21:fc:fa:e1:33:6e:97:b7:52:e7:e2: 0d:c5:5d:51:de:fd:1b:e2:cd:c7:de:cd:fb:20:cd: 58:31:20:94:88:bd:90:9b:5f:3e:60:77:40:c0:ca: ff:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F1:5A:C2:E1:BC:4A:A4:C8:24:19:50:84:A6:2A:F8:C8:12:46:65 X509v3 Authority Key Identifier: keyid:6D:0E:F2:AC:1D:23:5D:1B:50:ED:77:6E:6C:E4:C3:CB:36:AF:06:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c3:b5:ba:83:a8:68:e3:87:1c:6e:8d:cd:79:f4:69:4e:7e: 3c:48:66:dd:5d:c3:01:fd:74:0f:6b:dc:2c:da:60:95:9e:ab: d8:e0:84:0f:9f:7e:c2:f2:de:5a:87:eb:52:bb:48:5f:ae:c0: 0c:5d:37:ab:1a:55:d4:41:3d:b2:2a:0f:fd:b1:9f:1a:8e:de: 08:40:57:60:49:bd:be:46:a6:0e:79:9b:fb:81:96:4e:03:f0: b3:a9:3e:48:1c:76:09:08:cf:07:b2:f2:8c:c0:79:ca:40:23: ce:54:82:d1:ef:b9:de:5d:ea:48:5e:13:0f:eb:1c:67:33:20: d5:f2:8c:dc:43:74:03:d3:76:53:03:d2:83:8d:dd:e7:32:89: 0a:9b:52:73:a3:fe:ae:85:87:29:f2:20:33:29:ad:6c:a8:b3: 57:25:38:e2:76:69:9a:45:e2:cd:0a:8b:e7:a9:58:9d:87:b1: 59:06:8f:10:1e:28:8d:53:53:b6:da:d9:00:27:cf:de:43:8c: 81:80:b1:37:f4:55:9c:18:da:4c:39:5e:52:c8:82:be:11:73: 53:2b:87:af:64:34:6f:10:fe:df:80:1b:f6:ee:b1:6e:5f:69: 28:ae:eb:67:98:2c:ac:ca:09:ea:4b:28:ee:32:cb:f3:16:6b: 75:ad:33:22 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUITAZx5mbir5dqaEtpA38E6QCaD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQwRUYyQUMxRDIzNUQxQjUwRUQ3NzZFNkNFNEMzQ0Iz NkFGMDYyRjAeFw0yNTEwMjAxMDE3MDJaFw0yNTEwMjExMjE0MDJaMDMxMTAvBgNV BAMTKDJBRjE1QUMyRTFCQzRBQTRDODI0MTk1MDg0QTYyQUY4QzgxMjQ2NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWZuKlVhJMzFMRCSehMR3eirDS 7iZr1e1ujmzUdvTD5NLGD4+/rQs2OZ+sDJfIHnDNkAPnqttZdL1JPsh+7sjc8qzU 0e4Ro4D/aCuGmbfoBUax72Sdc3TYN0vQYysGnOp9XrfjqYWzCE0WcVFExFiahRGT v3k2uDsDEmrrhfhck5iVGqL/krrwhO/CampwLQX1tu1TUtEI37X3CfFbRy7aUjfS 24AhoNx+Ww+cmWltquc8c1lKz3Hr/lsGQ8bew1uVKbJYOU60dGYezqXMM+SPLfZu 5VMh/PrhM26Xt1Ln4g3FXVHe/RvizcfezfsgzVgxIJSIvZCbXz5gd0DAyv8JAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUKvFawuG8SqTIJBlQhKYq+MgSRmUwHwYDVR0j BBgwFoAUbQ7yrB0jXRtQ7XdubOTDyzavBi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzEzNjA5ZWRiNjMwMzRiZTBiY2Y1MzlmMmRlZWZiZjI5LzAv NkQwRUYyQUMxRDIzNUQxQjUwRUQ3NzZFNkNFNEMzQ0IzNkFGMDYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82RDBFRjJBQzFEMjM1RDFCNTBFRDc3NkU2Q0U0QzND QjM2QUYwNjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzEzNjA5 ZWRiNjMwMzRiZTBiY2Y1MzlmMmRlZWZiZjI5LzAvNkQwRUYyQUMxRDIzNUQxQjUw RUQ3NzZFNkNFNEMzQ0IzNkFGMDYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHjDtbqDqGjjhxxujc15 9GlOfjxIZt1dwwH9dA9r3CzaYJWeq9jghA+ffsLy3lqH61K7SF+uwAxdN6saVdRB PbIqD/2xnxqO3ghAV2BJvb5Gpg55m/uBlk4D8LOpPkgcdgkIzwey8ozAecpAI85U gtHvud5d6kheEw/rHGczINXyjNxDdAPTdlMD0oON3ecyiQqbUnOj/q6FhynyIDMp rWyos1clOOJ2aZpF4s0Ki+epWJ2HsVkGjxAeKI1TU7ba2QAnz95DjIGAsTf0VZwY 2kw5XlLIgr4Rc1Mrh69kNG8Q/t+AG/busW5faSiu62eYLKzKCepLKO4yy/MWa3Wt MyI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:35:29 2025 by rpki-client