$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft File: 31586760843F668A816117EA02F6F30FE8F9C359.mft (raw, json) Hash identifier: ErMAJoJqnyEitQZbHlKM9fKi1pIsjZ4As4VQWTMwrV0= Subject key identifier: 2D:BD:65:77:9D:CD:AC:CE:33:88:EE:69:A8:AD:71:64:DC:B1:7A:9F Authority key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 Certificate issuer: /CN=31586760843F668A816117EA02F6F30FE8F9C359 Certificate serial: 218632AC53BDFF8C55441CB3EAE35D7518309031 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft Manifest number: 0257 Signing time: Mon 20 Oct 2025 02:31:18 +0000 Manifest this update: Mon 20 Oct 2025 02:26:18 +0000 Manifest next update: Tue 21 Oct 2025 03:59:18 +0000 Files and hashes: 1: 326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa (hash: K6ERbHzYMOmGY8zVjajZjctj/rooDOMsKI1zpR886Vs=) 2: 31586760843F668A816117EA02F6F30FE8F9C359.crl (hash: d08KLSFSnK48HDSiMEEN4eEqMjN6YQydC08MZVaaFo0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:86:32:ac:53:bd:ff:8c:55:44:1c:b3:ea:e3:5d:75:18:30:90:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31586760843F668A816117EA02F6F30FE8F9C359 Validity Not Before: Oct 20 02:26:18 2025 GMT Not After : Oct 21 03:59:18 2025 GMT Subject: CN=2DBD65779DCDACCE3388EE69A8AD7164DCB17A9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c1:ac:bc:53:e9:1d:b2:58:54:7e:bd:62:2d: 6d:eb:83:99:e2:b7:74:32:52:e0:3b:a2:62:8b:3f: 81:0c:44:de:45:99:fb:7c:93:79:c7:74:ee:06:21: 9e:67:37:ee:1d:49:6d:61:a4:a5:45:fe:27:67:2f: 96:13:47:71:52:c3:44:05:8b:bd:04:38:ac:f4:04: ce:af:ed:99:24:84:af:95:ca:c0:ae:e8:79:79:43: f6:d0:a0:32:3d:96:f7:1b:a3:79:c5:71:9f:bd:8c: a9:c2:06:d4:3f:d6:9b:83:2a:ce:c3:d0:ec:96:8f: 82:b4:91:c1:a3:c6:09:8e:d0:cc:04:93:96:d1:e2: a2:79:e9:98:ab:d3:1c:05:7b:0b:1c:64:29:dc:c7: b2:91:0f:8d:37:ea:e0:e1:66:43:80:1f:1e:00:c3: 92:01:86:e0:67:f0:6b:c0:02:16:eb:f2:41:d3:a2: 04:05:e3:0a:ef:80:ad:82:ac:5b:ad:bb:27:9c:56: 8a:d2:06:20:32:f9:63:69:98:20:b6:1f:a3:b4:22: 97:69:1d:61:2a:96:18:5f:3a:1b:5a:86:f5:87:f8: 87:28:3c:89:ed:4d:f8:83:0f:24:fe:14:79:e9:5c: 8a:21:10:b9:88:30:e8:00:28:bc:71:23:b8:06:84: 70:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BD:65:77:9D:CD:AC:CE:33:88:EE:69:A8:AD:71:64:DC:B1:7A:9F X509v3 Authority Key Identifier: keyid:31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:a8:76:ec:2e:f7:1a:d6:f8:9f:1b:2d:a9:37:a3:57:a3:86: 83:90:e9:1a:98:62:10:f6:b9:9f:c9:3c:e8:66:98:8e:7f:73: 09:c8:07:1d:53:e0:84:7e:04:eb:92:a8:bb:f2:d8:35:cf:1c: 9b:b1:7e:21:0e:c1:d7:26:f6:c0:03:3a:75:b6:90:88:87:e5: 67:27:7c:db:3d:23:e6:7e:87:99:2d:7f:a8:53:a4:99:16:95: b9:ad:ee:3d:0a:50:5d:cb:9b:7a:eb:8e:8a:d0:1a:14:79:ea: 15:17:b3:2f:a4:24:f6:c3:a0:39:53:b3:39:06:c1:a7:42:50: 20:89:cb:9f:41:0a:70:ed:61:bc:4f:0c:d0:ce:2a:25:3d:d3: cc:ba:bf:6c:1c:ae:43:db:73:74:7b:91:61:e2:f6:46:fc:49: 35:f2:97:80:b0:ea:7f:cc:ef:33:1c:bb:6e:66:72:40:29:14: 8f:23:af:f7:c4:b9:48:61:b5:c5:5c:da:9a:77:fa:16:79:71: 98:8d:55:9f:60:ae:cc:91:02:df:47:70:5f:03:0f:ac:ff:69: ce:a2:78:8f:d3:d6:dd:85:90:54:79:ab:5a:db:bc:dc:50:7f: 1a:2d:8b:df:f7:29:b9:03:65:b9:e8:00:d2:25:14:f0:aa:94: de:59:a8:cb -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUIYYyrFO9/4xVRByz6uNddRgwkDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZF OEY5QzM1OTAeFw0yNTEwMjAwMjI2MThaFw0yNTEwMjEwMzU5MThaMDMxMTAvBgNV BAMTKDJEQkQ2NTc3OURDREFDQ0UzMzg4RUU2OUE4QUQ3MTY0RENCMTdBOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3way8U+kdslhUfr1iLW3rg5ni t3QyUuA7omKLP4EMRN5Fmft8k3nHdO4GIZ5nN+4dSW1hpKVF/idnL5YTR3FSw0QF i70EOKz0BM6v7ZkkhK+VysCu6Hl5Q/bQoDI9lvcbo3nFcZ+9jKnCBtQ/1puDKs7D 0OyWj4K0kcGjxgmO0MwEk5bR4qJ56Zir0xwFewscZCncx7KRD4036uDhZkOAHx4A w5IBhuBn8GvAAhbr8kHTogQF4wrvgK2CrFutuyecVorSBiAy+WNpmCC2H6O0Ipdp HWEqlhhfOhtahvWH+IcoPIntTfiDDyT+FHnpXIohELmIMOgAKLxxI7gGhHA7AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQULb1ld53NrM4ziO5pqK1xZNyxep8wHwYDVR0j BBgwFoAUMVhnYIQ/ZoqBYRfqAvbzD+j5w1kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3YzVkNGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAv MzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZFOEY5QzM1OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zMTU4Njc2MDg0M0Y2NjhBODE2MTE3RUEwMkY2RjMw RkU4RjlDMzU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3YzVk NGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAvMzE1ODY3NjA4NDNGNjY4QTgx NjExN0VBMDJGNkYzMEZFOEY5QzM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEWoduwu9xrW+J8bLak3 o1ejhoOQ6RqYYhD2uZ/JPOhmmI5/cwnIBx1T4IR+BOuSqLvy2DXPHJuxfiEOwdcm 9sADOnW2kIiH5WcnfNs9I+Z+h5ktf6hTpJkWlbmt7j0KUF3Lm3rrjorQGhR56hUX sy+kJPbDoDlTszkGwadCUCCJy59BCnDtYbxPDNDOKiU908y6v2wcrkPbc3R7kWHi 9kb8STXyl4Cw6n/M7zMcu25mckApFI8jr/fEuUhhtcVc2pp3+hZ5cZiNVZ9grsyR At9HcF8DD6z/ac6ieI/T1t2FkFR5q1rbvNxQfxoti9/3KbkDZbnoANIlFPCqlN5Z qMs= -----END CERTIFICATE-----Generated at Mon Oct 20 07:32:15 2025 by rpki-client