$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json) Hash identifier: cH6SV3dIHYxl63CZBqgtvSLY1a1lyHgJaDFHc6CY4/0= Subject key identifier: A6:78:0C:72:A1:08:A1:14:5F:68:67:31:F4:C6:ED:86:16:07:DC:95 Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Certificate serial: 70990E7440D263697AE4E1764626D7CAE38DAC47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft Manifest number: 012B Signing time: Sun 19 Oct 2025 18:25:29 +0000 Manifest this update: Sun 19 Oct 2025 18:20:29 +0000 Manifest next update: Mon 20 Oct 2025 21:10:29 +0000 Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: bz2FNwDNrdBXjCBqpXbCgUmkjBLblSTMYnpTkPem8N0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:99:0e:74:40:d2:63:69:7a:e4:e1:76:46:26:d7:ca:e3:8d:ac:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Validity Not Before: Oct 19 18:20:29 2025 GMT Not After : Oct 20 21:10:29 2025 GMT Subject: CN=A6780C72A108A1145F686731F4C6ED861607DC95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:69:44:72:e4:16:e4:89:6b:2d:51:22:f3:db: 48:cb:61:73:fe:8b:e3:b3:c1:6b:8b:69:36:aa:18: 0d:38:19:5d:53:cc:f3:dc:f2:d5:bd:69:98:1f:50: 56:0f:2f:2b:0e:ed:3f:7a:5f:7f:16:1b:11:54:87: 8c:c7:c4:36:af:05:8e:ef:91:59:62:38:f7:2c:81: 9a:80:ad:2a:dd:d2:67:50:67:77:af:bd:98:2a:18: ac:cd:cc:b3:8a:f7:f9:3d:0d:c2:7f:24:d9:80:96: 73:71:d4:26:49:63:0a:57:8d:a8:b4:8f:e8:42:2c: 3f:c7:ff:23:14:96:3e:05:08:19:6c:ee:23:15:b0: 51:47:f1:6e:29:5b:39:03:6f:9f:42:cf:cd:29:0a: a6:91:86:7b:58:22:56:e0:be:e8:95:e0:1f:91:59: e9:31:b3:c8:fa:6d:98:61:22:a0:e1:dd:08:44:7c: dd:20:d0:56:4c:11:f1:a3:14:30:91:c8:5a:da:24: 1e:5d:c6:bb:e2:da:03:18:41:41:9f:41:79:82:d0: 74:da:0a:8f:3a:1a:4b:f9:cc:df:6f:e3:b0:3d:80: 88:f3:54:15:55:1e:5f:95:fc:16:15:74:42:81:5b: e2:ec:82:4b:96:c7:79:84:fa:15:e3:8d:b1:b7:4c: dd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:78:0C:72:A1:08:A1:14:5F:68:67:31:F4:C6:ED:86:16:07:DC:95 X509v3 Authority Key Identifier: keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:72:a2:6d:8c:8b:f3:ee:bc:8a:7b:2b:12:55:d5:89:10:e6: 4c:df:69:cb:86:f3:47:1f:7e:3b:eb:b7:84:63:d1:55:04:b9: 5b:a0:f9:d3:47:63:3c:0b:b4:c0:dd:35:23:ed:05:f8:84:50: 4b:e6:a3:d0:f0:93:28:e5:a5:6f:f6:6b:4a:eb:4e:54:bd:9c: ad:26:e6:3a:ff:46:bd:9f:a1:04:ca:d9:1c:3e:38:d7:cf:17: c9:43:5b:68:1c:f8:99:b2:94:2a:db:78:cd:d6:1e:9a:9c:cf: 24:75:81:3e:9a:e6:0d:53:04:ac:50:80:92:17:6d:fc:4d:43: 96:f0:b5:ee:ea:61:b3:4d:21:a3:58:1a:cc:cc:6b:05:c5:e6: d1:4f:d8:0e:5f:dd:18:fa:34:a9:4e:16:1d:c3:4d:b6:30:db: c2:95:ea:42:e8:e4:35:0a:84:c5:7b:64:40:96:ec:25:48:24: b8:db:e4:88:86:54:d2:d1:43:a7:83:95:b7:61:02:86:d7:1c: e4:3f:d9:f2:78:76:f6:41:94:9d:4e:f0:7c:f1:e2:2a:a8:8f: 01:34:8d:ef:a6:37:92:43:60:7a:07:ea:a4:b5:8a:94:13:aa: eb:ab:ca:bd:f6:56:28:7f:4b:38:14:4b:47:1a:e0:47:74:12: 26:2f:90:35 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUcJkOdEDSY2l65OF2RibXyuONrEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz REREMDgwRDAeFw0yNTEwMTkxODIwMjlaFw0yNTEwMjAyMTEwMjlaMDMxMTAvBgNV BAMTKEE2NzgwQzcyQTEwOEExMTQ1RjY4NjczMUY0QzZFRDg2MTYwN0RDOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5aURy5BbkiWstUSLz20jLYXP+ i+OzwWuLaTaqGA04GV1TzPPc8tW9aZgfUFYPLysO7T96X38WGxFUh4zHxDavBY7v kVliOPcsgZqArSrd0mdQZ3evvZgqGKzNzLOK9/k9DcJ/JNmAlnNx1CZJYwpXjai0 j+hCLD/H/yMUlj4FCBls7iMVsFFH8W4pWzkDb59Cz80pCqaRhntYIlbgvuiV4B+R Wekxs8j6bZhhIqDh3QhEfN0g0FZMEfGjFDCRyFraJB5dxrvi2gMYQUGfQXmC0HTa Co86Gkv5zN9v47A9gIjzVBVVHl+V/BYVdEKBW+LsgkuWx3mE+hXjjbG3TN3VAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUpngMcqEIoRRfaGcx9MbthhYH3JUwHwYDVR0j BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAChyom2Mi/PuvIp7KxJV 1YkQ5kzfacuG80cffjvrt4Rj0VUEuVug+dNHYzwLtMDdNSPtBfiEUEvmo9Dwkyjl pW/2a0rrTlS9nK0m5jr/Rr2foQTK2Rw+ONfPF8lDW2gc+JmylCrbeM3WHpqczyR1 gT6a5g1TBKxQgJIXbfxNQ5bwte7qYbNNIaNYGszMawXF5tFP2A5f3Rj6NKlOFh3D TbYw28KV6kLo5DUKhMV7ZECW7CVIJLjb5IiGVNLRQ6eDlbdhAobXHOQ/2fJ4dvZB lJ1O8Hzx4iqojwE0je+mN5JDYHoH6qS1ipQTquuryr32Vih/SzgUS0ca4Ed0EiYv kDU= -----END CERTIFICATE-----Generated at Mon Oct 20 07:19:09 2025 by rpki-client