$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: w9Rt4iKqw3vOYu9uDvzZsvHkuSoUkHzAQAVXsDIo1C4= Subject key identifier: 71:0F:A9:1A:6D:E4:64:85:1C:C3:6B:9A:0C:A3:D3:95:3C:5A:C2:1C Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 32B3C2233AFD937A3BED284CFA2B095A22FE6159 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 025B Signing time: Mon 20 Oct 2025 22:08:10 +0000 Manifest this update: Mon 20 Oct 2025 22:03:10 +0000 Manifest next update: Wed 22 Oct 2025 01:21:10 +0000 Files and hashes: 1: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 3wo4yWYqUm70prj7oF5pGF3zOR0/7RB8Epa8stuidcg=) 2: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: vxaqD429klEPt03aXXniKGxzQoHI4Ar9F2T3pRAzV/Y=) 3: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: 5ESSH7etA3tewEFPTwd+zi23ypqgUjx9aNH+vvU9YsE=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 22:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b3:c2:23:3a:fd:93:7a:3b:ed:28:4c:fa:2b:09:5a:22:fe:61:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Oct 20 22:03:10 2025 GMT Not After : Oct 22 01:21:10 2025 GMT Subject: CN=710FA91A6DE464851CC36B9A0CA3D3953C5AC21C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:3c:04:2f:8a:85:63:3d:00:9e:55:87:63: d8:d3:37:a6:1d:e2:66:40:89:67:c8:ba:21:df:c8: 00:b7:d7:72:68:37:69:aa:f6:fb:1b:60:bb:ce:a8: 78:d6:82:46:11:c4:bf:0e:8e:9d:73:56:62:ab:1c: 28:73:c6:1a:bb:bb:9a:42:df:02:de:72:1d:4f:c9: 9e:72:20:4e:27:b8:2c:99:73:96:7f:97:0f:60:f9: e2:57:bf:27:7f:e2:fa:e6:4b:3d:0b:e9:1f:73:66: 8b:b3:a3:e2:e0:f1:c9:07:39:17:18:88:0b:9b:c3: 95:ec:74:98:28:cc:a6:e3:64:a6:e8:e4:04:2a:5f: 8c:b2:9b:60:06:46:4f:63:d4:79:21:8c:30:1e:9d: 8c:03:1c:74:13:8a:d4:2b:cb:8a:39:cf:87:ff:59: 3b:39:e3:bc:31:15:6e:26:e9:f6:4c:5f:7c:55:a4: a0:85:ce:59:69:be:28:c2:7b:a8:96:76:91:ae:98: 0e:84:2c:9b:36:69:5e:c8:3e:48:61:72:70:53:f4: 7b:f9:c6:07:4d:f8:c2:9e:b5:f9:e1:21:58:17:15: de:9b:b3:5a:53:3d:3f:4c:78:87:ab:d9:a7:3d:4a: 13:ac:c8:b9:85:e8:ef:fe:4c:94:3c:c2:08:5f:5a: bb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0F:A9:1A:6D:E4:64:85:1C:C3:6B:9A:0C:A3:D3:95:3C:5A:C2:1C X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d7:e3:e0:af:28:fa:82:92:aa:9e:0e:a0:90:99:93:0c:3a: cb:fc:43:7c:ea:44:d5:70:93:b5:12:4d:8b:90:40:44:65:29: d6:07:ac:cd:25:32:7d:cf:06:cf:f9:2b:a6:a6:67:67:11:58: f5:c6:02:dc:f2:60:fb:20:18:80:24:70:9c:9f:05:7a:f9:3e: df:ff:7a:85:53:c8:91:2b:19:38:be:b6:e6:f3:49:3a:c8:92: 7d:a4:12:38:c7:2e:34:2f:3e:64:88:46:44:c2:da:e8:70:e4: b3:01:c5:76:98:5a:d3:98:f2:f8:85:84:e7:07:79:14:88:71: 55:53:ec:e0:3b:1c:38:64:8b:98:45:2c:14:3b:01:9b:7e:2b: bb:0c:2b:c8:2d:89:3e:d7:70:fd:59:62:04:9b:6b:98:79:2b: 54:a4:e4:1c:40:1a:c3:4c:f0:a9:19:c2:e7:07:34:81:3a:38: 7c:59:94:5f:83:d8:44:ec:5f:5f:16:3a:84:2a:6e:b6:03:1c: 58:08:04:b8:d6:15:3e:d6:7b:9b:8a:13:b0:47:42:8b:da:6d: a8:5e:da:d9:aa:8c:91:33:e4:13:b8:1c:5d:ed:5e:52:c8:78: 46:6d:33:43:d9:6b:8d:55:55:12:5c:24:af:8e:b4:b2:e3:c6: d0:72:1f:10 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUMrPCIzr9k3o77ShM+isJWiL+YVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNTEwMjAyMjAzMTBaFw0yNTEwMjIwMTIxMTBaMDMxMTAvBgNV BAMTKDcxMEZBOTFBNkRFNDY0ODUxQ0MzNkI5QTBDQTNEMzk1M0M1QUMyMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS1zwEL4qFYz0AnlWHY9jTN6Yd 4mZAiWfIuiHfyAC313JoN2mq9vsbYLvOqHjWgkYRxL8Ojp1zVmKrHChzxhq7u5pC 3wLech1PyZ5yIE4nuCyZc5Z/lw9g+eJXvyd/4vrmSz0L6R9zZouzo+Lg8ckHORcY iAubw5XsdJgozKbjZKbo5AQqX4yym2AGRk9j1HkhjDAenYwDHHQTitQry4o5z4f/ WTs547wxFW4m6fZMX3xVpKCFzllpvijCe6iWdpGumA6ELJs2aV7IPkhhcnBT9Hv5 xgdN+MKetfnhIVgXFd6bs1pTPT9MeIer2ac9ShOsyLmF6O/+TJQ8wghfWrstAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUcQ+pGm3kZIUcw2uaDKPTlTxawhwwHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHzX4+CvKPqCkqqeDqCQ mZMMOsv8Q3zqRNVwk7USTYuQQERlKdYHrM0lMn3PBs/5K6amZ2cRWPXGAtzyYPsg GIAkcJyfBXr5Pt//eoVTyJErGTi+tubzSTrIkn2kEjjHLjQvPmSIRkTC2uhw5LMB xXaYWtOY8viFhOcHeRSIcVVT7OA7HDhki5hFLBQ7AZt+K7sMK8gtiT7XcP1ZYgSb a5h5K1Sk5BxAGsNM8KkZwucHNIE6OHxZlF+D2ETsX18WOoQqbrYDHFgIBLjWFT7W e5uKE7BHQovabahe2tmqjJEz5BO4HF3tXlLIeEZtM0PZa41VVRJcJK+OtLLjxtBy HxA= -----END CERTIFICATE-----Generated at Tue Oct 21 07:04:43 2025 by rpki-client