$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft File: BBED14E9793905EC1EA5CE10AA03C497D737B115.mft (raw, json) Hash identifier: 1sRfkl4WH9xcOU8O+oyyxl4tKQox7T7fRBZyQhOtdkw= Subject key identifier: 03:3D:43:1F:56:39:F4:6C:4C:DB:3C:4F:AB:3E:BE:5D:6B:46:70:56 Authority key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 Certificate issuer: /CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Certificate serial: 45B0C05BE6625AB34F182DFD71951D26499AEF5B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft Manifest number: 0252 Signing time: Mon 20 Oct 2025 15:57:39 +0000 Manifest this update: Mon 20 Oct 2025 15:52:38 +0000 Manifest next update: Tue 21 Oct 2025 16:27:38 +0000 Files and hashes: 1: BBED14E9793905EC1EA5CE10AA03C497D737B115.crl (hash: KWe8Ett7JtRJ1CI6ee0xTZ4ojyUFUmv94auo2w2e/1U=) 2: 326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (hash: MpewGrhFOYc7jc70q6ubpOkEuQ0IJ7Wp+DrSPfwP1vQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 06:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:b0:c0:5b:e6:62:5a:b3:4f:18:2d:fd:71:95:1d:26:49:9a:ef:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Validity Not Before: Oct 20 15:52:38 2025 GMT Not After : Oct 21 16:27:38 2025 GMT Subject: CN=033D431F5639F46C4CDB3C4FAB3EBE5D6B467056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:16:29:73:20:51:4b:f9:4e:25:6d:e4:91:12: 43:49:ed:8c:9a:fe:5f:3f:14:23:02:35:bc:38:0d: 2c:3c:18:de:b7:7f:95:71:f3:d3:c1:89:9f:94:af: 90:2e:b7:7d:4a:a7:e9:fa:b0:40:0f:ac:a2:53:a1: 13:56:01:bb:77:45:32:46:ff:0a:97:b6:86:86:7b: 61:ee:a7:31:57:50:fc:ca:81:4c:2c:fc:5d:40:51: 3f:95:62:df:51:81:8a:b5:79:ee:ce:5e:fc:ce:3e: 49:2a:33:41:87:0c:f8:b8:52:0f:f8:f7:b1:d5:e0: 81:e3:82:43:ce:a4:e2:b2:5b:28:e6:08:f2:71:57: f1:c1:0c:2b:e0:23:f8:a6:d3:76:25:21:bd:39:13: 5d:e9:d8:66:84:e7:e8:3e:98:dd:01:47:32:bb:07: f6:d2:6b:35:2e:5f:ca:53:85:c0:60:1a:8a:d7:88: 6d:be:8e:d3:0c:6c:38:05:2f:3e:51:bf:2f:cb:6b: 87:49:41:21:2d:40:44:ee:6f:d7:03:b4:63:b2:a2: b4:55:76:e6:7b:d2:28:ab:de:3b:b7:4b:29:3d:c1: 0c:69:7c:88:9d:93:0c:5e:b0:46:26:00:0a:91:1d: c9:8f:50:2b:d6:ed:b9:9a:fd:dd:a8:67:d9:42:70: 96:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3D:43:1F:56:39:F4:6C:4C:DB:3C:4F:AB:3E:BE:5D:6B:46:70:56 X509v3 Authority Key Identifier: keyid:BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:84:84:08:ad:94:dd:78:07:7c:ea:26:ec:4b:ad:9a:4b:a7: 7f:6f:34:29:b7:6d:61:a1:be:33:ab:48:9d:a7:39:78:06:34: cf:12:a0:37:65:d8:3b:5b:c5:26:46:f7:94:63:b9:11:f1:94: 82:2f:d9:49:c1:d0:fa:42:80:8e:b3:cd:da:31:5a:56:91:d6: 66:6d:a2:78:f6:da:a3:eb:d5:cc:c8:7e:ae:37:9a:bf:97:8e: 4a:05:f7:94:62:cf:28:18:55:c3:a3:6b:ca:3a:80:25:86:2c: 35:ea:ee:65:ab:f8:13:8a:1f:b3:c8:b1:08:06:13:ad:22:22: 6d:ee:42:a3:be:07:c4:e3:a7:e3:16:04:1c:3e:cd:30:97:9a: 6a:b8:26:62:83:6f:45:15:dc:d6:07:8a:e7:3a:eb:4b:81:b5: e7:c9:85:02:e2:d4:ac:d5:02:61:73:d7:3d:bf:9b:f6:5c:e3: 99:9d:78:a7:03:cb:a7:5e:98:26:9e:0f:fd:ee:20:e4:fa:bb: 69:77:52:3a:b4:f2:9d:03:c7:37:bd:bb:43:fb:a8:84:3b:e3: 58:70:fc:fd:e4:09:f0:a4:16:c1:2d:26:b2:6b:03:66:dd:50: a0:51:9b:84:09:92:30:66:ae:d3:c5:7b:60:4b:e1:39:b8:e7: 2d:df:3c:d0 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIURbDAW+ZiWrNPGC39cZUdJkma71swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdE NzM3QjExNTAeFw0yNTEwMjAxNTUyMzhaFw0yNTEwMjExNjI3MzhaMDMxMTAvBgNV BAMTKDAzM0Q0MzFGNTYzOUY0NkM0Q0RCM0M0RkFCM0VCRTVENkI0NjcwNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVFilzIFFL+U4lbeSREkNJ7Yya /l8/FCMCNbw4DSw8GN63f5Vx89PBiZ+Ur5Aut31Kp+n6sEAPrKJToRNWAbt3RTJG /wqXtoaGe2HupzFXUPzKgUws/F1AUT+VYt9RgYq1ee7OXvzOPkkqM0GHDPi4Ug/4 97HV4IHjgkPOpOKyWyjmCPJxV/HBDCvgI/im03YlIb05E13p2GaE5+g+mN0BRzK7 B/bSazUuX8pThcBgGorXiG2+jtMMbDgFLz5Rvy/La4dJQSEtQETub9cDtGOyorRV duZ70iir3ju3Syk9wQxpfIidkwxesEYmAAqRHcmPUCvW7bma/d2oZ9lCcJatAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUAz1DH1Y59GxM2zxPqz6+XWtGcFYwHwYDVR0j BBgwFoAUu+0U6Xk5Bewepc4QqgPEl9c3sRUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNhOTdmNzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAv QkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdENzM3QjExNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CQkVEMTRFOTc5MzkwNUVDMUVBNUNFMTBBQTAzQzQ5 N0Q3MzdCMTE1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNhOTdm NzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAvQkJFRDE0RTk3OTM5MDVFQzFF QTVDRTEwQUEwM0M0OTdENzM3QjExNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADiEhAitlN14B3zqJuxL rZpLp39vNCm3bWGhvjOrSJ2nOXgGNM8SoDdl2DtbxSZG95RjuRHxlIIv2UnB0PpC gI6zzdoxWlaR1mZtonj22qPr1czIfq43mr+XjkoF95RizygYVcOja8o6gCWGLDXq 7mWr+BOKH7PIsQgGE60iIm3uQqO+B8Tjp+MWBBw+zTCXmmq4JmKDb0UV3NYHiuc6 60uBtefJhQLi1KzVAmFz1z2/m/Zc45mdeKcDy6demCaeD/3uIOT6u2l3Ujq08p0D xze9u0P7qIQ741hw/P3kCfCkFsEtJrJrA2bdUKBRm4QJkjBmrtPFe2BL4Tm45y3f PNA= -----END CERTIFICATE-----Generated at Mon Oct 20 20:33:02 2025 by rpki-client