$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json) Hash identifier: Em4w562ZActYzG8849WyXJWTmESdD74+km81rc4T5SI= Subject key identifier: 8B:E2:FB:58:96:76:0E:B2:1B:28:96:61:88:D5:54:A2:AC:20:5E:89 Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 2DBBF5BF086222D7DDC8E1EE507ECCE40A256DB6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft Manifest number: 025A Signing time: Mon 20 Oct 2025 04:11:23 +0000 Manifest this update: Mon 20 Oct 2025 04:06:23 +0000 Manifest next update: Tue 21 Oct 2025 04:15:23 +0000 Files and hashes: 1: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: pRpvcvkpUIjn6KDjm+Ywf0niLgvvVoNWrBKMV64s3Gs=) 2: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: b4lO7qQITmIuTe+1DZpcfLD2H0yGfI8Xz4qwvBeBNzo=) 3: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: onhCLB3gV3HdQhsHYazqCSyNdZ/2h865cbuFqj2YlvA=) 4: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: hDVlLsthrImLetb193mUhPgKUGoPZLMKbC9Vzew73/E=) 5: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: fW3/1bM6uuAVh4/BqcyWFGfZeggD1zO77SW4GWfaw4U=) 6: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: Kgbp0+Zk4p3tpOkyAtCJ3HEWdnZBbzm3NgMcGrByxQs=) 7: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: scCBjh8HfhV3GwKDOrHZF1YXj718at6+uNm0y/KBmOw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:bb:f5:bf:08:62:22:d7:dd:c8:e1:ee:50:7e:cc:e4:0a:25:6d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: Oct 20 04:06:23 2025 GMT Not After : Oct 21 04:15:23 2025 GMT Subject: CN=8BE2FB5896760EB21B28966188D554A2AC205E89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c0:2c:7e:c5:32:81:0e:22:cc:6d:79:14:5a: a0:f5:51:0d:21:63:d7:a2:f7:de:a4:01:ef:0b:4a: 38:69:c1:9f:45:4a:a1:e3:e4:bf:46:45:7a:f8:ed: 0f:d1:c8:88:2b:e2:65:d2:7c:f5:4c:b8:d9:62:be: d9:53:fe:01:ad:20:db:b3:49:7c:f3:37:11:a9:f2: da:ba:41:7e:87:f5:62:7a:50:e2:f5:77:62:0a:ce: 09:95:69:3d:25:27:a5:b2:5b:5a:40:bf:ab:c0:79: 89:fa:02:5d:03:ce:c0:c9:f5:e4:1c:29:ab:2a:7e: f3:b2:f6:53:0f:88:57:44:7d:06:df:5b:d0:74:7c: 84:b9:4d:d7:d7:74:c4:72:b0:8b:82:25:eb:27:25: c5:a7:ca:63:cb:b5:98:8d:81:2b:b4:3a:e3:de:ce: 1e:d9:8e:2e:cc:37:6d:13:73:af:a5:e1:e9:25:a5: 34:b5:a0:f6:9d:3c:fa:83:b5:19:b9:6b:d6:f2:2c: 86:62:d1:71:bb:b6:fb:ad:eb:17:09:b8:19:1b:33: cb:6c:99:0d:58:c4:a4:ac:d8:c4:06:fe:2a:85:f5: fe:bd:c5:50:d5:45:e9:8d:7b:cf:fc:24:9c:94:73: 98:4e:e4:91:9a:1c:51:f4:df:37:71:60:ab:55:a7: 9d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E2:FB:58:96:76:0E:B2:1B:28:96:61:88:D5:54:A2:AC:20:5E:89 X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:36:c6:db:e9:f2:93:68:94:47:2b:d5:ee:37:3f:22:52:44: 05:67:6f:38:08:25:1b:da:2c:ba:c5:16:1c:a3:cc:bd:58:d2: 4b:ac:67:91:42:4c:12:f0:81:3e:f7:dd:dc:ea:93:ee:1a:ad: 5c:a9:f3:6f:3a:67:44:56:24:f9:27:18:10:4d:44:ab:7d:59: 13:6f:63:37:00:3c:f8:b8:2e:a6:7a:4c:55:79:50:c7:84:02: 02:44:ed:55:40:2f:ba:03:79:86:fa:88:74:4a:95:1c:b4:ac: e1:23:2a:e9:8c:d0:1d:9a:98:ba:26:ff:25:89:3d:49:67:24: 50:14:f3:25:6c:64:9f:5a:f1:38:88:5c:c3:7d:93:dc:79:61: 3d:e2:5d:49:bf:a1:2b:5d:01:09:81:2f:9e:f6:d5:e6:57:ea: d5:9a:ab:65:9a:bb:58:b6:e4:c2:6f:df:6a:45:1d:b0:39:7b: 65:4d:e2:5e:17:45:30:0e:6d:14:d9:8d:d0:12:44:f1:1b:e2: bc:3c:6e:0c:e4:b6:c9:72:8f:f2:93:7c:ad:d9:10:1b:59:36: f4:c3:88:9f:be:4b:bf:87:17:42:52:68:f1:3f:c8:e5:04:c9: 1e:97:65:95:3f:fb:38:70:67:2c:b8:02:99:a4:d0:df:fb:8c: 4f:58:51:1e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIULbv1vwhiItfdyOHuUH7M5AolbbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNTEwMjAwNDA2MjNaFw0yNTEwMjEwNDE1MjNaMDMxMTAvBgNV BAMTKDhCRTJGQjU4OTY3NjBFQjIxQjI4OTY2MTg4RDU1NEEyQUMyMDVFODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEwCx+xTKBDiLMbXkUWqD1UQ0h Y9ei996kAe8LSjhpwZ9FSqHj5L9GRXr47Q/RyIgr4mXSfPVMuNlivtlT/gGtINuz SXzzNxGp8tq6QX6H9WJ6UOL1d2IKzgmVaT0lJ6WyW1pAv6vAeYn6Al0DzsDJ9eQc KasqfvOy9lMPiFdEfQbfW9B0fIS5TdfXdMRysIuCJesnJcWnymPLtZiNgSu0OuPe zh7Zji7MN20Tc6+l4eklpTS1oPadPPqDtRm5a9byLIZi0XG7tvut6xcJuBkbM8ts mQ1YxKSs2MQG/iqF9f69xVDVRemNe8/8JJyUc5hO5JGaHFH03zdxYKtVp53bAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUi+L7WJZ2DrIbKJZhiNVUoqwgXokwHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzI1NDA1 Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0QTQ1MzgwQzZENDU1 Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD42xtvp8pNolEcr1e43 PyJSRAVnbzgIJRvaLLrFFhyjzL1Y0kusZ5FCTBLwgT733dzqk+4arVyp8286Z0RW JPknGBBNRKt9WRNvYzcAPPi4LqZ6TFV5UMeEAgJE7VVAL7oDeYb6iHRKlRy0rOEj KumM0B2amLom/yWJPUlnJFAU8yVsZJ9a8TiIXMN9k9x5YT3iXUm/oStdAQmBL572 1eZX6tWaq2Wau1i25MJv32pFHbA5e2VN4l4XRTAObRTZjdASRPEb4rw8bgzktsly j/KTfK3ZEBtZNvTDiJ++S7+HF0JSaPE/yOUEyR6XZZU/+zhwZyy4Apmk0N/7jE9Y UR4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:12:43 2025 by rpki-client