$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft File: 1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json) Hash identifier: 4cJ3k34JMN/EF3z1pyHmKcLvVHfUS0XjlDD778jGCSA= Subject key identifier: C2:A9:F5:6F:CB:DE:58:56:BA:71:B7:F2:1E:80:2B:97:E3:E9:11:0C Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F Certificate issuer: /CN=1D570B984E9C5E382B0A879AA21F6518621F059F Certificate serial: 11ABEC901E0028F1A6083EA661282868E6C2C49B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft Manifest number: 0255 Signing time: Sun 19 Oct 2025 17:15:26 +0000 Manifest this update: Sun 19 Oct 2025 17:10:26 +0000 Manifest next update: Mon 20 Oct 2025 19:45:26 +0000 Files and hashes: 1: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: ThdB7B28XX84rw9vbM6gMwUL052473wmO+kkCEi1GNE=) 2: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: SZhn4FgWqY4qggdiI6TrYJUIT99auk+OFjrgNv4awjA=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 19:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ab:ec:90:1e:00:28:f1:a6:08:3e:a6:61:28:28:68:e6:c2:c4:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F Validity Not Before: Oct 19 17:10:26 2025 GMT Not After : Oct 20 19:45:26 2025 GMT Subject: CN=C2A9F56FCBDE5856BA71B7F21E802B97E3E9110C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:8c:ed:83:0f:4f:41:ba:ba:a7:fa:d5:9e: 1e:3b:c9:42:bb:5d:f6:52:dd:d3:95:4d:5b:cd:84: a1:de:6b:9e:d0:27:88:08:1a:21:7d:33:76:e8:d5: dd:97:bd:43:40:79:c2:e8:c9:b5:c8:6d:2a:aa:a9: 99:2f:2a:11:bf:08:4e:5e:47:07:43:ef:02:a0:69: e1:45:e7:9c:53:2b:90:d4:2a:2a:00:75:f2:fe:f2: 97:35:a6:5a:51:bb:f0:e2:26:02:a7:7e:6f:7f:e5: a6:89:23:8c:21:d0:e4:15:11:2b:6c:12:02:8b:e2: bc:9f:ca:1e:72:02:c9:39:ec:a8:9d:ad:d7:39:ab: 95:18:e0:8b:33:33:ff:2e:4f:7d:b3:cd:44:11:92: 74:57:37:bb:f2:dc:b0:52:64:63:61:44:99:35:93: 3a:14:80:77:ab:bc:cf:4b:c0:45:a0:62:59:8d:2d: 58:37:66:23:f6:74:f7:47:8e:56:48:ff:fe:c2:f8: 2d:f2:71:b0:2e:41:a7:32:41:52:37:49:5d:d5:b6: e2:a8:71:7a:8c:02:a4:b7:81:69:49:09:76:af:6a: f7:ce:f3:1e:4f:c7:b0:b3:ff:cd:9a:18:61:f1:22: ce:a6:0c:5a:e1:df:dd:b0:07:84:f8:bd:18:2c:9a: 6d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A9:F5:6F:CB:DE:58:56:BA:71:B7:F2:1E:80:2B:97:E3:E9:11:0C X509v3 Authority Key Identifier: keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:87:96:c3:ec:8f:f5:cf:5c:c9:83:64:90:fe:ba:ca:15:7b: e3:1d:dd:1e:d7:55:fc:82:a8:9f:d9:41:8c:70:8c:d1:1c:06: 2b:94:83:44:20:47:5f:47:c1:02:bb:24:66:89:39:b6:25:c2: d5:de:69:54:3b:31:a1:f1:ad:79:6b:4e:7a:30:be:9c:9a:b7: 58:46:9d:7a:f9:69:11:56:07:ba:bd:b4:aa:c9:8d:b7:c6:1b: f1:64:ad:ae:88:46:75:cf:a2:65:a7:08:25:8d:22:e4:5f:1e: 02:3b:17:f1:8d:e9:7b:a8:34:97:e3:69:db:64:2e:79:0d:7f: 4d:cd:19:04:f4:04:cf:62:04:1f:2a:4b:17:c4:eb:12:11:90: a7:42:0b:a8:94:18:29:0a:95:10:60:44:5f:05:e3:05:0e:f3: 7a:17:ac:7a:18:ee:0d:c0:9b:a9:60:6d:5a:2a:13:d8:b6:9d: a3:ed:c6:0c:1f:0a:1c:72:60:78:97:70:7c:d8:4b:9f:ed:ca: 93:e6:a6:90:ed:4c:e0:2c:48:20:54:4d:f0:b6:4f:c1:a9:76: 4c:37:e4:bd:92:09:22:44:8c:e4:62:83:45:f9:f5:ef:e3:2a: be:91:c7:86:9c:25:70:7b:0f:86:41:92:3c:df:dc:3c:25:a9: 34:39:f6:ab -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUEavskB4AKPGmCD6mYSgoaObCxJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2 MjFGMDU5RjAeFw0yNTEwMTkxNzEwMjZaFw0yNTEwMjAxOTQ1MjZaMDMxMTAvBgNV BAMTKEMyQTlGNTZGQ0JERTU4NTZCQTcxQjdGMjFFODAyQjk3RTNFOTExMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIvYztgw9PQbq6p/rVnh47yUK7 XfZS3dOVTVvNhKHea57QJ4gIGiF9M3bo1d2XvUNAecLoybXIbSqqqZkvKhG/CE5e RwdD7wKgaeFF55xTK5DUKioAdfL+8pc1plpRu/DiJgKnfm9/5aaJI4wh0OQVESts EgKL4ryfyh5yAsk57Kidrdc5q5UY4IszM/8uT32zzUQRknRXN7vy3LBSZGNhRJk1 kzoUgHervM9LwEWgYlmNLVg3ZiP2dPdHjlZI//7C+C3ycbAuQacyQVI3SV3VtuKo cXqMAqS3gWlJCXavavfO8x5Px7Cz/82aGGHxIs6mDFrh392wB4T4vRgsmm09AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUwqn1b8veWFa6cbfyHoArl+PpEQwwHwYDVR0j BBgwFoAUHVcLmE6cXjgrCoeaoh9lGGIfBZ8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAv MUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRDU3MEI5ODRFOUM1RTM4MkIwQTg3OUFBMjFGNjUx ODYyMUYwNTlGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzRkNWMz MDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAvMUQ1NzBCOTg0RTlDNUUzODJC MEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGmHlsPsj/XPXMmDZJD+ usoVe+Md3R7XVfyCqJ/ZQYxwjNEcBiuUg0QgR19HwQK7JGaJObYlwtXeaVQ7MaHx rXlrTnowvpyat1hGnXr5aRFWB7q9tKrJjbfGG/Fkra6IRnXPomWnCCWNIuRfHgI7 F/GN6XuoNJfjadtkLnkNf03NGQT0BM9iBB8qSxfE6xIRkKdCC6iUGCkKlRBgRF8F 4wUO83oXrHoY7g3Am6lgbVoqE9i2naPtxgwfChxyYHiXcHzYS5/typPmppDtTOAs SCBUTfC2T8Gpdkw35L2SCSJEjORig0X59e/jKr6Rx4acJXB7D4ZBkjzf3DwlqTQ5 9qs= -----END CERTIFICATE-----Generated at Mon Oct 20 12:00:13 2025 by rpki-client