$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft File: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft (raw, json) Hash identifier: MKWELr2mccawOwx8aTrZjwEy20dhk1pjpR3Fl5VLUKc= Subject key identifier: 03:85:FC:EC:0B:42:D2:D5:E6:99:35:ED:AF:35:ED:E3:F6:55:62:20 Authority key identifier: 69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E Certificate issuer: /CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E Certificate serial: 40CA15601944BF102983DE8E6214A067335EE5A9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft Manifest number: 0258 Signing time: Sun 19 Oct 2025 17:10:26 +0000 Manifest this update: Sun 19 Oct 2025 17:05:26 +0000 Manifest next update: Mon 20 Oct 2025 18:12:26 +0000 Files and hashes: 1: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl (hash: TCS1Ly0XCxHYQJ0NavrRl5IX1TqTKEyiH4UR+uI5UlY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 18:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ca:15:60:19:44:bf:10:29:83:de:8e:62:14:a0:67:33:5e:e5:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E Validity Not Before: Oct 19 17:05:26 2025 GMT Not After : Oct 20 18:12:26 2025 GMT Subject: CN=0385FCEC0B42D2D5E69935EDAF35EDE3F6556220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6e:2d:b9:6d:5c:20:46:12:31:e7:97:7c:ba: 50:96:1c:b0:8b:73:84:0b:26:9f:a6:23:89:fd:50: 3b:c5:4b:3f:85:00:be:c9:ff:b7:7b:3c:c5:e3:50: 3c:5e:ca:d6:46:a9:7d:b5:92:b0:ec:9e:29:22:34: d4:e6:b4:2e:e8:8d:21:0d:47:2a:ca:56:59:74:a0: e6:f6:6f:b3:50:16:8d:88:f5:ce:a8:e7:cc:1e:3f: 65:bb:f2:d4:27:a4:d1:69:fe:d9:99:be:62:6d:95: e9:7c:7e:be:eb:a5:30:04:0d:12:df:e9:7b:73:a6: 0c:b9:98:34:2a:6f:64:5c:b8:32:3c:f3:eb:53:59: da:a1:80:51:3b:b0:60:a7:68:57:81:93:c4:f3:b4: 8f:7c:bc:7b:b8:51:3b:61:b0:0c:3b:2b:65:22:99: ef:0d:73:a0:bd:cb:23:62:56:8e:57:7e:fa:a3:23: 9b:fb:19:e4:64:ae:7c:e6:6a:7b:5e:7b:89:91:7d: 2a:e5:02:0f:0e:71:45:3c:8a:11:83:6d:43:fd:42: 7f:a9:80:c9:ba:92:e0:88:a6:66:f8:ba:37:b3:98: 2e:af:6a:82:4a:ec:3d:7e:c1:9a:62:25:3c:8a:57: b7:fb:f8:9b:ea:7e:75:0a:22:60:0c:2b:c8:8b:41: ef:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:85:FC:EC:0B:42:D2:D5:E6:99:35:ED:AF:35:ED:E3:F6:55:62:20 X509v3 Authority Key Identifier: keyid:69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ea:64:a6:5a:b6:79:cb:e8:c7:56:fc:53:a9:78:e6:12:db: 17:8c:37:f2:c6:fe:38:2c:79:42:c8:e2:88:eb:0a:63:f5:97: 7c:84:ec:e4:db:29:bb:68:42:65:42:45:a4:33:c5:2a:ca:73: a8:64:07:1a:ba:1c:07:b9:ea:51:97:ad:0a:a1:91:fc:84:74: c7:06:bd:dc:35:f7:bd:67:ec:13:52:71:0a:f8:a8:a2:5d:68: 92:86:0e:06:9a:c0:a3:73:3a:d4:6d:82:64:08:24:d4:d5:e5: b5:c6:39:f1:f0:f9:a5:4d:45:5b:21:a8:ac:ae:dd:d2:c7:57: 88:86:f5:a3:90:84:f8:40:a3:ea:84:6b:d2:be:79:9b:93:64: aa:43:8a:ce:ba:7d:9f:c3:96:a2:c3:e1:c5:3b:7d:32:8f:40: 9e:65:ea:1e:61:5c:19:a2:7f:20:ee:a3:7c:5a:d9:b4:23:2a: 50:18:f2:11:72:01:de:26:f6:58:30:bc:85:bb:16:7e:e5:5e: 96:3f:b5:b5:ab:ca:1b:3b:12:da:00:92:cb:d4:12:ab:1a:c9: 04:8a:59:0b:a7:ef:71:ce:ca:b9:ab:01:79:b4:ad:67:63:6f: 88:05:38:43:da:75:b5:16:27:b7:7c:51:0b:58:18:28:89:9d: d2:95:3e:75 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUQMoVYBlEvxApg96OYhSgZzNe5akwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlCREQxMDkyQUNFOUExMEU0Qzk0RkFEOEIyREEzRERD Q0Y2NEE5RTAeFw0yNTEwMTkxNzA1MjZaFw0yNTEwMjAxODEyMjZaMDMxMTAvBgNV BAMTKDAzODVGQ0VDMEI0MkQyRDVFNjk5MzVFREFGMzVFREUzRjY1NTYyMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQbi25bVwgRhIx55d8ulCWHLCL c4QLJp+mI4n9UDvFSz+FAL7J/7d7PMXjUDxeytZGqX21krDsnikiNNTmtC7ojSEN RyrKVll0oOb2b7NQFo2I9c6o58weP2W78tQnpNFp/tmZvmJtlel8fr7rpTAEDRLf 6Xtzpgy5mDQqb2RcuDI88+tTWdqhgFE7sGCnaFeBk8TztI98vHu4UTthsAw7K2Ui me8Nc6C9yyNiVo5XfvqjI5v7GeRkrnzmantee4mRfSrlAg8OcUU8ihGDbUP9Qn+p gMm6kuCIpmb4ujezmC6vaoJK7D1+wZpiJTyKV7f7+JvqfnUKImAMK8iLQe8PAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUA4X87AtC0tXmmTXtrzXt4/ZVYiAwHwYDVR0j BBgwFoAUab3RCSrOmhDkyU+tiy2j3cz2Sp4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzMzOWJiNGNmZjNiNDQ3MzI4NTRkOWFlZmYxMDY3ZDkxLzAv NjlCREQxMDkyQUNFOUExMEU0Qzk0RkFEOEIyREEzRERDQ0Y2NEE5RS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82OUJERDEwOTJBQ0U5QTEwRTRDOTRGQUQ4QjJEQTNE RENDRjY0QTlFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzMzOWJi NGNmZjNiNDQ3MzI4NTRkOWFlZmYxMDY3ZDkxLzAvNjlCREQxMDkyQUNFOUExMEU0 Qzk0RkFEOEIyREEzRERDQ0Y2NEE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAALqZKZatnnL6MdW/FOp eOYS2xeMN/LG/jgseULI4ojrCmP1l3yE7OTbKbtoQmVCRaQzxSrKc6hkBxq6HAe5 6lGXrQqhkfyEdMcGvdw1971n7BNScQr4qKJdaJKGDgaawKNzOtRtgmQIJNTV5bXG OfHw+aVNRVshqKyu3dLHV4iG9aOQhPhAo+qEa9K+eZuTZKpDis66fZ/DlqLD4cU7 fTKPQJ5l6h5hXBmifyDuo3xa2bQjKlAY8hFyAd4m9lgwvIW7Fn7lXpY/tbWryhs7 EtoAksvUEqsayQSKWQun73HOyrmrAXm0rWdjb4gFOEPadbUWJ7d8UQtYGCiJndKV PnU= -----END CERTIFICATE-----Generated at Mon Oct 20 07:20:08 2025 by rpki-client