$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: Mcc17VuEartgF7OhyxsiscUlp3AfvHEA/u2Uez4OV8Q= Subject key identifier: 47:5E:FF:7F:F6:A7:86:AB:4E:1F:C4:08:73:65:54:19:B6:0B:C8:D5 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 5D8DF895AA1518AE32D9AF42FAAB39034C6ED278 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 0258 Signing time: Mon 20 Oct 2025 20:03:02 +0000 Manifest this update: Mon 20 Oct 2025 19:58:02 +0000 Manifest next update: Tue 21 Oct 2025 22:54:02 +0000 Files and hashes: 1: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: muHmeXAIlX/k/398r5xOQ2gZwCKLXpIYP2fLIiIKgGM=) 2: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: 40KX5Azg+QOWUNYOrdl6IsWrdX+iJJgcObJYGtl3Q6w=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 22:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:8d:f8:95:aa:15:18:ae:32:d9:af:42:fa:ab:39:03:4c:6e:d2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Oct 20 19:58:02 2025 GMT Not After : Oct 21 22:54:02 2025 GMT Subject: CN=475EFF7FF6A786AB4E1FC40873655419B60BC8D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1f:0e:a0:41:c5:88:8f:bc:b7:85:d2:c5:51: 43:24:13:ff:f7:8e:c9:bb:2d:f9:73:b5:1b:59:d8: 00:5b:35:44:dd:80:0e:23:a4:76:ee:61:5a:ea:ef: 0c:4a:f9:35:8d:9b:49:65:93:a6:3a:57:8c:35:94: 3d:71:a1:b8:c9:53:82:bf:6b:92:30:75:e9:4f:ba: eb:60:d1:90:d2:02:e3:50:73:29:45:9f:c1:8e:bc: 7b:db:66:fe:fc:20:f0:06:33:3d:92:36:aa:93:b6: 0b:29:f8:b8:ed:c7:ee:b2:a8:67:a1:b7:8d:5b:33: f7:29:86:21:a8:be:b5:65:fb:8c:9c:d3:08:7c:50: 1c:5e:03:34:58:58:d7:32:6b:22:3e:16:7f:26:ad: 5e:8b:9d:6f:25:49:3f:70:7a:81:aa:e6:b4:b6:5e: b5:ff:ba:78:3e:73:2a:a6:5d:ec:35:87:52:5c:8a: dc:c6:51:b6:76:c8:e3:d0:01:2f:a5:32:95:7e:83: 63:21:4a:1e:c0:ca:0d:b7:2c:bb:8a:1d:c2:34:5d: b9:58:83:26:86:ce:57:bc:9f:f7:96:60:ae:b8:bf: c3:2c:a8:0d:65:92:a2:2e:cb:b0:61:ec:e5:c0:78: 2d:be:48:78:be:f5:93:cb:7c:86:5b:3e:ca:5c:0e: 54:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5E:FF:7F:F6:A7:86:AB:4E:1F:C4:08:73:65:54:19:B6:0B:C8:D5 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:51:4c:f5:c6:a6:18:16:08:6f:bf:c4:1f:fa:f7:f8:29:07: 9c:a5:74:31:48:26:7e:3b:cd:33:70:f3:2e:40:d4:f6:43:1e: 0c:c5:05:d9:cd:2b:61:91:f4:4b:09:45:a9:40:d9:c8:62:00: f9:67:10:f0:d0:10:c8:6b:fc:ba:7c:e4:0b:50:4c:55:6a:ba: a8:9d:35:fd:f8:43:2d:13:a4:a3:1f:78:a6:d1:05:e5:99:16: a2:2b:0d:21:f7:88:64:57:99:21:64:02:c6:91:73:d5:3c:e0: ad:4b:26:98:27:35:7f:a4:3b:22:eb:5e:ec:46:04:45:2b:ac: 0d:4d:15:f4:21:0b:48:7d:df:f9:76:77:de:f2:24:74:c3:ef: a0:75:6a:af:60:33:7b:f9:72:56:84:93:c9:74:01:4f:e1:1b: e2:a9:b5:02:e8:0e:e2:57:ac:dd:15:a9:79:8e:de:12:df:62: 39:81:c2:90:e6:15:fb:c4:40:c1:2a:b6:01:b3:51:95:a5:65: da:f3:31:5c:8a:2b:8b:07:fa:67:be:7a:00:9e:6f:bb:d6:06: be:74:75:44:cc:20:44:f4:3d:8c:b8:74:31:e1:3c:cf:5d:74: 6e:84:f9:35:26:e6:53:6d:ee:c8:e2:b9:92:17:a5:cd:9d:e9: 43:a7:db:f5 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUXY34laoVGK4y2a9C+qs5A0xu0ngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNTEwMjAxOTU4MDJaFw0yNTEwMjEyMjU0MDJaMDMxMTAvBgNV BAMTKDQ3NUVGRjdGRjZBNzg2QUI0RTFGQzQwODczNjU1NDE5QjYwQkM4RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYHw6gQcWIj7y3hdLFUUMkE//3 jsm7LflztRtZ2ABbNUTdgA4jpHbuYVrq7wxK+TWNm0llk6Y6V4w1lD1xobjJU4K/ a5IwdelPuutg0ZDSAuNQcylFn8GOvHvbZv78IPAGMz2SNqqTtgsp+Ljtx+6yqGeh t41bM/cphiGovrVl+4yc0wh8UBxeAzRYWNcyayI+Fn8mrV6LnW8lST9weoGq5rS2 XrX/ung+cyqmXew1h1JcitzGUbZ2yOPQAS+lMpV+g2MhSh7Ayg23LLuKHcI0XblY gyaGzle8n/eWYK64v8MsqA1lkqIuy7Bh7OXAeC2+SHi+9ZPLfIZbPspcDlQFAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUR17/f/anhqtOH8QIc2VUGbYLyNUwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJlRTPXGphgWCG+/xB/6 9/gpB5yldDFIJn47zTNw8y5A1PZDHgzFBdnNK2GR9EsJRalA2chiAPlnEPDQEMhr /Lp85AtQTFVquqidNf34Qy0TpKMfeKbRBeWZFqIrDSH3iGRXmSFkAsaRc9U84K1L JpgnNX+kOyLrXuxGBEUrrA1NFfQhC0h93/l2d97yJHTD76B1aq9gM3v5claEk8l0 AU/hG+KptQLoDuJXrN0VqXmO3hLfYjmBwpDmFfvEQMEqtgGzUZWlZdrzMVyKK4sH +me+egCeb7vWBr50dUTMIET0PYy4dDHhPM9ddG6E+TUm5lNt7sjiuZIXpc2d6UOn 2/U= -----END CERTIFICATE-----Generated at Tue Oct 21 01:34:38 2025 by rpki-client