$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft File: 6482EA67DB858D1440DD67B955223E4341BA4E97.mft (raw, json) Hash identifier: GMf4kbR6YimBnzgXl/WL3O5uzVyzqg5WaIvMFwkwPIM= Subject key identifier: 0D:73:2A:C1:C2:53:C8:46:25:1C:37:06:17:91:1B:9A:6C:05:03:80 Authority key identifier: 64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97 Certificate issuer: /CN=6482EA67DB858D1440DD67B955223E4341BA4E97 Certificate serial: 4C04F1C78771993FF02083ABAEF60ED3761BB54B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft Manifest number: 0258 Signing time: Sun 19 Oct 2025 13:50:07 +0000 Manifest this update: Sun 19 Oct 2025 13:45:07 +0000 Manifest next update: Mon 20 Oct 2025 17:07:07 +0000 Files and hashes: 1: 326131313a663263303a666666393a3a2f34382d3438203d3e20323034373235.roa (hash: MdiZ+9TbSNzfNPtu/3qU2TdQ6jBsbjIkWQpbqOwaXo4=) 2: 6482EA67DB858D1440DD67B955223E4341BA4E97.crl (hash: FhhWNTjA6fW7035tQ8TOlQQrrZ2PgvOj4J453kfAlEE=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 17:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:04:f1:c7:87:71:99:3f:f0:20:83:ab:ae:f6:0e:d3:76:1b:b5:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6482EA67DB858D1440DD67B955223E4341BA4E97 Validity Not Before: Oct 19 13:45:07 2025 GMT Not After : Oct 20 17:07:07 2025 GMT Subject: CN=0D732AC1C253C846251C370617911B9A6C050380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:df:72:3d:33:f2:db:fd:58:a6:95:4e:e0:70: 3f:f0:a2:a6:0f:dc:3e:43:b6:1b:ef:4f:1f:97:02: 20:68:c1:3e:c4:df:a2:ec:ef:83:f5:cd:8b:10:4c: 8b:6b:e1:38:94:ce:90:36:1a:46:52:29:9c:0b:19: a6:a0:42:10:33:7c:10:88:3b:17:76:56:21:bd:d5: 96:37:a3:6c:06:3b:ea:48:f9:a8:71:b9:e8:89:7a: b1:ce:87:79:b0:1d:63:79:a6:9d:1a:d1:2b:13:a7: b7:31:ca:b2:bb:60:18:c4:67:6c:4e:3c:8d:40:99: e0:3e:8d:ea:fc:e6:a6:60:9d:0e:32:a6:3f:0f:1a: 91:96:70:54:e1:e2:e4:87:ff:06:9d:5f:73:9b:b0: 33:28:32:70:a9:83:45:3e:c8:b0:c1:a7:02:21:67: 43:10:7b:ea:d3:b1:28:85:f4:3d:30:2a:30:c5:69: 9f:c8:45:18:c7:d0:f7:df:67:f8:e3:41:f5:c9:61: 77:73:b4:32:d9:e8:55:a8:03:82:a3:74:18:b0:24: a1:37:59:ae:73:ec:73:cf:5d:6d:e1:ad:54:4c:3a: 0a:5c:5a:62:1f:e5:61:47:7e:a9:ee:0d:b1:4d:ac: 39:0e:c6:91:fe:28:ac:cb:41:a6:b8:b3:df:57:93: 2d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:73:2A:C1:C2:53:C8:46:25:1C:37:06:17:91:1B:9A:6C:05:03:80 X509v3 Authority Key Identifier: keyid:64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:82:d8:60:ee:04:79:e0:2d:73:62:4b:70:32:29:b6:ea:36: f6:fb:ad:4e:4e:ea:ba:36:71:df:3f:2f:ae:2e:a3:0a:fc:e4: 51:32:b7:6c:06:95:49:ca:c0:09:eb:81:62:30:e2:e7:95:10: 5f:9e:41:3c:a9:16:27:c7:aa:26:a4:7f:73:d0:74:cf:85:5d: 72:5d:db:66:0b:ed:17:71:ee:2a:69:60:d7:2f:7c:54:1d:b3: 3f:c7:ce:19:e3:2e:9c:a5:b4:97:fb:b9:fa:71:a2:80:2a:e2: d1:0f:a0:d7:68:c4:cf:aa:a8:e0:c8:31:f3:ef:9c:c6:21:55: d0:bc:3e:24:82:6c:ec:a1:84:83:2a:ca:72:94:7a:6f:0f:12: 6f:53:bf:a6:69:62:9f:ad:01:41:9d:32:68:51:38:25:e1:3e: 3d:4e:72:02:ba:be:e0:21:c5:4c:b1:bc:9f:19:62:ee:4f:ba: 3f:93:20:c2:a9:f6:69:4e:1c:75:6a:c7:4c:c5:82:c2:b3:b6: 7d:f2:68:0a:5c:4a:3c:8d:b7:7c:75:94:61:0e:21:1f:8c:71: cd:7a:9b:4b:83:be:72:61:7a:48:cf:57:5e:ac:1d:38:1e:6d: 5a:8b:0c:a4:f5:9c:1f:ab:af:bd:6d:2a:0c:15:4f:28:d0:1f: cc:72:7e:bc -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUTATxx4dxmT/wIIOrrvYO03YbtUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ4MkVBNjdEQjg1OEQxNDQwREQ2N0I5NTUyMjNFNDM0 MUJBNEU5NzAeFw0yNTEwMTkxMzQ1MDdaFw0yNTEwMjAxNzA3MDdaMDMxMTAvBgNV BAMTKDBENzMyQUMxQzI1M0M4NDYyNTFDMzcwNjE3OTExQjlBNkMwNTAzODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC333I9M/Lb/VimlU7gcD/woqYP 3D5DthvvTx+XAiBowT7E36Ls74P1zYsQTItr4TiUzpA2GkZSKZwLGaagQhAzfBCI Oxd2ViG91ZY3o2wGO+pI+ahxueiJerHOh3mwHWN5pp0a0SsTp7cxyrK7YBjEZ2xO PI1AmeA+jer85qZgnQ4ypj8PGpGWcFTh4uSH/wadX3ObsDMoMnCpg0U+yLDBpwIh Z0MQe+rTsSiF9D0wKjDFaZ/IRRjH0PffZ/jjQfXJYXdztDLZ6FWoA4KjdBiwJKE3 Wa5z7HPPXW3hrVRMOgpcWmIf5WFHfqnuDbFNrDkOxpH+KKzLQaa4s99Xky0vAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUDXMqwcJTyEYlHDcGF5EbmmwFA4AwHwYDVR0j BBgwFoAUZILqZ9uFjRRA3We5VSI+Q0G6TpcwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzU0NDhlNmFhMjYwNjQxYTE5N2I4MjUxYWMwYzNlNjMwLzAv NjQ4MkVBNjdEQjg1OEQxNDQwREQ2N0I5NTUyMjNFNDM0MUJBNEU5Ny5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82NDgyRUE2N0RCODU4RDE0NDBERDY3Qjk1NTIyM0U0 MzQxQkE0RTk3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzU0NDhl NmFhMjYwNjQxYTE5N2I4MjUxYWMwYzNlNjMwLzAvNjQ4MkVBNjdEQjg1OEQxNDQw REQ2N0I5NTUyMjNFNDM0MUJBNEU5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKqC2GDuBHngLXNiS3Ay KbbqNvb7rU5O6ro2cd8/L64uowr85FEyt2wGlUnKwAnrgWIw4ueVEF+eQTypFifH qiakf3PQdM+FXXJd22YL7Rdx7ippYNcvfFQdsz/HzhnjLpyltJf7ufpxooAq4tEP oNdoxM+qqODIMfPvnMYhVdC8PiSCbOyhhIMqynKUem8PEm9Tv6ZpYp+tAUGdMmhR OCXhPj1OcgK6vuAhxUyxvJ8ZYu5Puj+TIMKp9mlOHHVqx0zFgsKztn3yaApcSjyN t3x1lGEOIR+Mcc16m0uDvnJhekjPV16sHTgebVqLDKT1nB+rr71tKgwVTyjQH8xy frw= -----END CERTIFICATE-----Generated at Mon Oct 20 10:19:43 2025 by rpki-client