$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft File: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft (raw, json) Hash identifier: bLoFfQYMlYkwzsdjg2GmhTR3s8UB95aEWDJqSZXw2J0= Subject key identifier: DA:AB:9C:3B:78:CB:8E:C0:5A:57:ED:E1:00:C3:C1:85:3A:BC:24:92 Authority key identifier: DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1 Certificate issuer: /CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1 Certificate serial: 38E79C4CACEB0C84D6740B0F1763D8D3DB3477FB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft Manifest number: 0258 Signing time: Sun 19 Oct 2025 23:30:56 +0000 Manifest this update: Sun 19 Oct 2025 23:25:55 +0000 Manifest next update: Tue 21 Oct 2025 02:16:55 +0000 Files and hashes: 1: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl (hash: Ma9o5YjksZ4TLeIGfR+sBDPN2Clyh0jNjny058sdRcE=) 2: 326131313a663263303a666665303a3a2f34342d3434203d3e20323038303531.roa (hash: tFJBYIhXxfWIXiULV/y0FG2z1kGnNqMQG/QFmAkPW/4=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 02:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e7:9c:4c:ac:eb:0c:84:d6:74:0b:0f:17:63:d8:d3:db:34:77:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1 Validity Not Before: Oct 19 23:25:55 2025 GMT Not After : Oct 21 02:16:55 2025 GMT Subject: CN=DAAB9C3B78CB8EC05A57EDE100C3C1853ABC2492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1a:e4:d6:e8:dd:de:59:f8:ff:a3:e6:fe:9b: a9:d8:b3:46:96:e4:e1:28:6f:aa:32:b0:a5:6e:7e: 0e:de:8b:39:c5:22:eb:0e:00:2d:22:34:97:22:6d: 1f:cb:47:86:81:0b:25:80:aa:58:82:b5:24:a3:48: 39:0f:3f:1a:1e:f1:8b:c8:d8:e6:03:b3:09:61:90: a2:ef:bb:f4:7d:9d:4a:69:6c:6f:a4:9a:d8:3d:23: db:31:84:69:6f:b6:ae:db:b9:e7:1c:13:65:e6:ef: 98:38:55:aa:ae:47:4e:69:47:29:89:5a:12:b6:a4: 1f:a6:23:95:a6:b1:6c:05:a2:bd:5b:86:61:ef:48: d5:6b:4c:26:18:b1:16:c9:dd:8c:e4:99:a8:63:dd: 8e:f0:b7:61:34:d8:bf:b0:f3:12:20:9d:7e:34:65: 21:69:48:2f:64:0e:fa:13:f9:e2:cd:63:ce:e2:bf: cb:1c:04:4b:ce:83:fb:b1:e0:8c:ae:02:ac:ae:e0: 6f:4b:a3:07:23:4b:01:a7:84:0c:65:3a:ef:0b:3b: d7:a8:25:9d:1e:6e:25:f6:91:61:79:55:c7:f6:04: fc:18:a2:48:ca:a2:df:c7:b7:5e:e4:16:3f:36:c6: 79:1b:d1:c9:53:1d:77:ca:3f:74:01:14:5e:26:ac: 67:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AB:9C:3B:78:CB:8E:C0:5A:57:ED:E1:00:C3:C1:85:3A:BC:24:92 X509v3 Authority Key Identifier: keyid:DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b1:f6:a9:0e:b5:41:ec:13:0a:48:4c:ff:d9:7e:32:d9:14: 19:dd:cb:67:ff:5b:32:d8:85:c1:8d:5f:55:d4:10:7e:98:7b: c5:3d:c9:d2:e1:85:ba:4f:9a:95:9a:b2:01:be:cb:ad:a3:a7: 8a:3e:62:cb:6d:f8:f5:8b:86:ba:dc:3d:08:3a:f1:11:7f:74: 8b:6a:51:ef:3d:f3:d7:76:ed:ff:43:ba:06:99:c9:2d:df:6b: 8c:64:52:af:77:e3:3a:86:d5:78:cb:d7:3f:ab:6e:20:03:73: e7:c9:e5:8a:b0:bf:31:00:c9:c9:db:25:03:d0:6c:1f:5b:98: 6f:d1:b6:51:d4:f8:85:3a:b1:ab:85:bc:7f:9d:0f:22:02:07: 97:36:1c:51:83:f0:d7:1c:44:62:16:cd:84:8b:40:5e:18:a4: 21:b1:f8:15:3c:28:6e:8a:f6:e8:e0:4d:bb:4f:68:93:7c:ca: db:d2:eb:47:32:02:f8:ee:92:93:ae:5e:83:fa:08:7c:42:f9: 32:16:74:36:3d:ea:93:a7:55:3d:d7:b4:42:26:f3:cd:6f:27: db:cf:80:74:2b:79:61:b9:3f:08:d1:16:cc:90:ba:5c:a7:a3: a0:a4:aa:80:97:78:4a:b8:78:57:62:81:48:3f:d1:11:e2:99: d8:b5:95:79 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUOOecTKzrDITWdAsPF2PY09s0d/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMyRDM0RkUwRjhDOTBCMkE4Q0FFQzQ3MjdENkJBMzFC OThEMjVEMTAeFw0yNTEwMTkyMzI1NTVaFw0yNTEwMjEwMjE2NTVaMDMxMTAvBgNV BAMTKERBQUI5QzNCNzhDQjhFQzA1QTU3RURFMTAwQzNDMTg1M0FCQzI0OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgGuTW6N3eWfj/o+b+m6nYs0aW 5OEob6oysKVufg7eiznFIusOAC0iNJcibR/LR4aBCyWAqliCtSSjSDkPPxoe8YvI 2OYDswlhkKLvu/R9nUppbG+kmtg9I9sxhGlvtq7bueccE2Xm75g4VaquR05pRymJ WhK2pB+mI5WmsWwFor1bhmHvSNVrTCYYsRbJ3Yzkmahj3Y7wt2E02L+w8xIgnX40 ZSFpSC9kDvoT+eLNY87iv8scBEvOg/ux4IyuAqyu4G9LowcjSwGnhAxlOu8LO9eo JZ0ebiX2kWF5Vcf2BPwYokjKot/Ht17kFj82xnkb0clTHXfKP3QBFF4mrGfnAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU2qucO3jLjsBaV+3hAMPBhTq8JJIwHwYDVR0j BBgwFoAU3C00/g+MkLKoyuxHJ9a6MbmNJdEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzVjNTUyMmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzAv REMyRDM0RkUwRjhDOTBCMkE4Q0FFQzQ3MjdENkJBMzFCOThEMjVEMS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9EQzJEMzRGRTBGOEM5MEIyQThDQUVDNDcyN0Q2QkEz MUI5OEQyNUQxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzVjNTUy MmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzAvREMyRDM0RkUwRjhDOTBCMkE4 Q0FFQzQ3MjdENkJBMzFCOThEMjVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADmx9qkOtUHsEwpITP/Z fjLZFBndy2f/WzLYhcGNX1XUEH6Ye8U9ydLhhbpPmpWasgG+y62jp4o+Ystt+PWL hrrcPQg68RF/dItqUe8989d27f9DugaZyS3fa4xkUq934zqG1XjL1z+rbiADc+fJ 5YqwvzEAycnbJQPQbB9bmG/RtlHU+IU6sauFvH+dDyICB5c2HFGD8NccRGIWzYSL QF4YpCGx+BU8KG6K9ujgTbtPaJN8ytvS60cyAvjukpOuXoP6CHxC+TIWdDY96pOn VT3XtEIm881vJ9vPgHQreWG5PwjRFsyQulyno6CkqoCXeEq4eFdigUg/0RHimdi1 lXk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:25:50 2025 by rpki-client