$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft File: F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft (raw, json) Hash identifier: JMIngtCFNCOBua/exLhZocFm43uWiCpWX6GLTzHk7Ug= Subject key identifier: 30:5D:84:33:43:7C:8F:27:07:B4:9F:94:5F:39:A7:54:AB:DE:F7:97 Authority key identifier: F5:D5:46:31:B7:09:1E:1F:4B:8B:02:E7:0F:F7:6F:07:3F:8B:23:20 Certificate issuer: /CN=F5D54631B7091E1F4B8B02E70FF76F073F8B2320 Certificate serial: 59A201ECB217A9168E4D37BA6C93143EDB45102A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft Manifest number: 0138 Signing time: Sun 19 Oct 2025 17:00:25 +0000 Manifest this update: Sun 19 Oct 2025 16:55:25 +0000 Manifest next update: Mon 20 Oct 2025 18:15:25 +0000 Files and hashes: 1: F5D54631B7091E1F4B8B02E70FF76F073F8B2320.crl (hash: D0KS6WimmOsDAT0xES2okN7wraZ/tZidYkcEbCxo/m8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 12:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a2:01:ec:b2:17:a9:16:8e:4d:37:ba:6c:93:14:3e:db:45:10:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5D54631B7091E1F4B8B02E70FF76F073F8B2320 Validity Not Before: Oct 19 16:55:25 2025 GMT Not After : Oct 20 18:15:25 2025 GMT Subject: CN=305D8433437C8F2707B49F945F39A754ABDEF797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cd:b5:5f:9d:bf:43:fe:5b:5c:7a:1f:85:ab: 09:91:96:ae:61:21:97:68:18:58:9c:05:1d:6d:17: 09:36:88:24:22:a1:c0:54:c6:35:2e:b5:75:a1:34: 85:cc:65:42:64:68:7b:30:ad:ae:3c:08:10:d5:a3: d1:9d:07:f2:ed:45:4a:04:65:a5:83:82:c3:ce:ff: 93:c0:d9:0c:53:35:ed:4d:0d:1e:03:1e:87:d6:ac: e4:c5:91:90:a0:fd:9d:5c:75:94:06:bd:97:e0:c0: 20:6e:bf:ca:df:0c:74:96:18:bf:f9:60:7c:45:fd: ea:ac:4d:da:b0:8a:e8:13:53:08:41:d7:b9:28:43: 82:dc:96:f4:fc:0a:40:30:6b:3c:ee:48:5b:16:35: a9:8d:3b:d1:5d:e9:94:b7:4d:3c:66:3b:1e:03:38: 1e:2c:c1:47:75:96:96:2e:21:12:71:d5:82:16:33: 9a:ab:7f:fa:0b:e4:4c:b3:3f:48:2e:d7:22:68:31: e9:7c:49:c0:3d:03:f9:f3:63:e1:36:d0:cd:97:8a: 79:a3:f1:52:87:17:6b:72:26:b7:87:57:6c:4e:cb: 2b:52:5b:ab:64:a5:cf:36:b6:79:7d:e8:11:77:1d: 77:b4:dd:7b:2e:05:a0:43:3b:3d:c9:b1:34:4f:58: ba:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5D:84:33:43:7C:8F:27:07:B4:9F:94:5F:39:A7:54:AB:DE:F7:97 X509v3 Authority Key Identifier: keyid:F5:D5:46:31:B7:09:1E:1F:4B:8B:02:E7:0F:F7:6F:07:3F:8B:23:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:84:d9:01:30:bd:62:22:b4:6c:d2:12:3a:1d:29:fb:a4:32: b9:47:36:6c:ec:12:a1:26:e6:7e:5d:d5:08:3b:c8:a2:0e:d7: 42:a8:34:79:da:33:e3:73:ed:14:ec:ed:e9:0c:06:69:22:bd: 27:ad:b2:9e:63:e6:c6:b7:f6:27:0d:38:68:c5:3c:a3:ce:f6: 6f:d9:72:b9:18:d2:73:f4:f2:96:f3:8f:79:02:7a:60:6b:12: 95:c8:d4:66:20:22:d7:e0:54:69:eb:43:25:39:be:42:06:45: e1:b8:ab:f0:dd:d0:1e:8d:f9:14:a8:a9:16:39:24:ea:82:cc: f5:7e:fe:3e:d6:64:ba:18:75:cc:93:f3:37:29:75:d9:50:55: ef:65:75:e1:99:29:cf:17:1d:2b:37:a4:fc:19:a0:aa:0d:51: 1f:85:b5:64:bd:49:27:44:c7:fa:dd:4c:98:02:3a:93:c0:82: 5e:fd:d0:9f:4d:d1:b9:f6:e4:8f:eb:4b:79:af:31:5d:bb:93: 86:82:24:ff:94:03:57:20:76:b2:13:97:33:51:6e:aa:c2:3e: ed:59:69:7d:26:ac:90:32:66:78:3e:7a:8c:87:b8:1a:b9:cc: 38:74:63:80:bb:01:c5:7e:ac:5d:c7:82:10:69:8a:7c:58:09: 04:29:62:dd -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUWaIB7LIXqRaOTTe6bJMUPttFECowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVENTQ2MzFCNzA5MUUxRjRCOEIwMkU3MEZGNzZGMDcz RjhCMjMyMDAeFw0yNTEwMTkxNjU1MjVaFw0yNTEwMjAxODE1MjVaMDMxMTAvBgNV BAMTKDMwNUQ4NDMzNDM3QzhGMjcwN0I0OUY5NDVGMzlBNzU0QUJERUY3OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUzbVfnb9D/ltceh+FqwmRlq5h IZdoGFicBR1tFwk2iCQiocBUxjUutXWhNIXMZUJkaHswra48CBDVo9GdB/LtRUoE ZaWDgsPO/5PA2QxTNe1NDR4DHofWrOTFkZCg/Z1cdZQGvZfgwCBuv8rfDHSWGL/5 YHxF/eqsTdqwiugTUwhB17koQ4LclvT8CkAwazzuSFsWNamNO9Fd6ZS3TTxmOx4D OB4swUd1lpYuIRJx1YIWM5qrf/oL5EyzP0gu1yJoMel8ScA9A/nzY+E20M2Xinmj 8VKHF2tyJreHV2xOyytSW6tkpc82tnl96BF3HXe03XsuBaBDOz3JsTRPWLqXAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUMF2EM0N8jycHtJ+UXzmnVKve95cwHwYDVR0j BBgwFoAU9dVGMbcJHh9LiwLnD/dvBz+LIyAwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzZmNTE2MzIwNTA5YjRkMmQ5M2VmMmQ1NjEwZjVmMjMwLzAv RjVENTQ2MzFCNzA5MUUxRjRCOEIwMkU3MEZGNzZGMDczRjhCMjMyMC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GNUQ1NDYzMUI3MDkxRTFGNEI4QjAyRTcwRkY3NkYw NzNGOEIyMzIwLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzZmNTE2 MzIwNTA5YjRkMmQ5M2VmMmQ1NjEwZjVmMjMwLzAvRjVENTQ2MzFCNzA5MUUxRjRC OEIwMkU3MEZGNzZGMDczRjhCMjMyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKmE2QEwvWIitGzSEjod KfukMrlHNmzsEqEm5n5d1Qg7yKIO10KoNHnaM+Nz7RTs7ekMBmkivSetsp5j5sa3 9icNOGjFPKPO9m/ZcrkY0nP08pbzj3kCemBrEpXI1GYgItfgVGnrQyU5vkIGReG4 q/Dd0B6N+RSoqRY5JOqCzPV+/j7WZLoYdcyT8zcpddlQVe9ldeGZKc8XHSs3pPwZ oKoNUR+FtWS9SSdEx/rdTJgCOpPAgl790J9N0bn25I/rS3mvMV27k4aCJP+UA1cg drITlzNRbqrCPu1ZaX0mrJAyZng+eoyHuBq5zDh0Y4C7AcV+rF3HghBpinxYCQQp Yt0= -----END CERTIFICATE-----Generated at Mon Oct 20 00:01:21 2025 by rpki-client