$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: hDEOsfYB2jOXsOPPgywtWW9Y7G+koXFVoSoML3EZhHM= Subject key identifier: 4E:1D:AF:A3:61:68:32:74:20:80:E0:B8:7E:B2:26:A3:32:B1:77:02 Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 37EF5592F885C82C055B5166EEFBECE9626DECB9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: 0255 Signing time: Mon 20 Oct 2025 02:46:19 +0000 Manifest this update: Mon 20 Oct 2025 02:41:19 +0000 Manifest next update: Tue 21 Oct 2025 06:16:19 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: 8Ur5/yvIDa6ujhDMzws9Z3HXXhQbDglzDUeC1pWC7uc=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ef:55:92:f8:85:c8:2c:05:5b:51:66:ee:fb:ec:e9:62:6d:ec:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: Oct 20 02:41:19 2025 GMT Not After : Oct 21 06:16:19 2025 GMT Subject: CN=4E1DAFA3616832742080E0B87EB226A332B17702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3c:54:cc:43:5d:a1:62:54:eb:b7:be:2a:f8: 51:b8:13:14:d6:48:97:2a:c9:33:09:f7:bc:da:7e: cf:5b:62:19:6d:d4:e5:f7:55:ff:78:9f:eb:a0:b9: 97:98:bc:15:9f:70:f7:35:6d:c6:38:9c:d1:c5:c3: 3e:f3:31:e8:25:dd:f4:d5:97:74:e9:16:be:f7:19: 2c:54:e9:70:2b:97:e8:06:00:8d:9b:dd:48:ce:a3: 15:6c:9f:b9:cf:6a:30:d7:e2:07:b9:5d:1b:9e:a1: 08:ad:28:29:fa:9a:67:b4:89:db:23:d7:6d:68:fb: bf:8f:7f:15:d9:07:3d:cc:5f:9f:28:0c:b0:15:8e: 66:aa:d8:fd:5b:bf:57:38:c7:c9:37:9e:d3:a8:6d: 85:f4:0c:13:2d:65:db:23:e8:53:0e:92:87:4d:b2: d6:ad:41:c4:19:7c:70:f9:ea:7e:9d:83:90:98:ce: 18:c4:ef:11:36:9d:d0:0f:95:7e:e5:23:46:ba:fb: e4:84:e8:c9:46:f7:82:0e:14:c6:b3:3c:33:14:d9: 0d:73:67:d7:6d:3a:d5:de:e8:63:7e:d8:cc:73:35: 83:62:f1:1e:38:f6:95:b3:15:89:71:64:5e:47:5a: 6b:51:8b:49:87:0a:0e:1e:24:12:38:d5:4a:38:9b: 40:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1D:AF:A3:61:68:32:74:20:80:E0:B8:7E:B2:26:A3:32:B1:77:02 X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:e3:0f:eb:b9:43:98:d9:64:99:65:b5:46:53:78:72:a5:cf: 81:b9:b3:7b:85:ca:39:6d:a5:52:24:2f:d1:27:a8:77:38:79: 75:cb:fb:81:22:00:cc:fb:49:7b:a8:2d:b0:02:7a:4e:80:fc: 05:99:6f:61:6b:45:e0:e4:92:a8:d3:e4:ca:aa:86:2f:50:fd: 5c:5b:a3:17:d8:2e:50:76:2f:b8:65:48:88:88:7b:55:91:23: ea:2e:b3:fe:ec:38:6b:07:d5:c3:eb:81:77:84:8f:5d:0a:91: aa:84:08:48:c5:df:a7:79:4d:12:07:0a:15:ba:ba:aa:64:32: 2b:5e:53:17:60:28:13:e7:a1:28:e9:49:9b:30:ff:18:4c:fe: 1f:e7:7a:39:09:27:d0:63:f0:5e:68:87:1c:9d:b1:c8:fb:37: 22:b4:cc:6f:46:e6:88:91:4a:3e:65:06:eb:3f:aa:a7:78:4b: 3b:db:8f:4c:e0:38:d0:38:84:05:e9:44:fc:44:d0:dd:e6:01: 3d:3f:a3:93:97:a8:bc:03:d7:fd:2f:ae:c9:b4:83:90:1c:50: 06:53:b3:a0:02:ae:f8:88:53:73:7a:9e:41:ba:a2:76:6c:73: 7e:45:64:f0:33:25:2d:f5:c8:bf:75:da:2f:ab:9c:0f:18:d3: 4b:53:2c:7d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUN+9VkviFyCwFW1Fm7vvs6WJt7LkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNTEwMjAwMjQxMTlaFw0yNTEwMjEwNjE2MTlaMDMxMTAvBgNV BAMTKDRFMURBRkEzNjE2ODMyNzQyMDgwRTBCODdFQjIyNkEzMzJCMTc3MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUPFTMQ12hYlTrt74q+FG4ExTW SJcqyTMJ97zafs9bYhlt1OX3Vf94n+uguZeYvBWfcPc1bcY4nNHFwz7zMegl3fTV l3TpFr73GSxU6XArl+gGAI2b3UjOoxVsn7nPajDX4ge5XRueoQitKCn6mme0idsj 121o+7+PfxXZBz3MX58oDLAVjmaq2P1bv1c4x8k3ntOobYX0DBMtZdsj6FMOkodN statQcQZfHD56n6dg5CYzhjE7xE2ndAPlX7lI0a6++SE6MlG94IOFMazPDMU2Q1z Z9dtOtXe6GN+2MxzNYNi8R449pWzFYlxZF5HWmtRi0mHCg4eJBI41Uo4m0DFAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUTh2vo2FoMnQggOC4frImozKxdwIwHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJbjD+u5Q5jZZJlltUZT eHKlz4G5s3uFyjltpVIkL9EnqHc4eXXL+4EiAMz7SXuoLbACek6A/AWZb2FrReDk kqjT5Mqqhi9Q/VxboxfYLlB2L7hlSIiIe1WRI+ous/7sOGsH1cPrgXeEj10KkaqE CEjF36d5TRIHChW6uqpkMiteUxdgKBPnoSjpSZsw/xhM/h/nejkJJ9Bj8F5ohxyd scj7NyK0zG9G5oiRSj5lBus/qqd4Szvbj0zgONA4hAXpRPxE0N3mAT0/o5OXqLwD 1/0vrsm0g5AcUAZTs6ACrviIU3N6nkG6onZsc35FZPAzJS31yL912i+rnA8Y00tT LH0= -----END CERTIFICATE-----Generated at Mon Oct 20 10:31:20 2025 by rpki-client