$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft File: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft (raw, json) Hash identifier: oOEco4dtwC6uU+p6Ln2AnfoUo2kjJI6zsZMIKGs4hrQ= Subject key identifier: B1:AE:FD:FA:41:56:F4:96:FE:B9:18:42:A5:17:29:D1:10:61:90:AB Authority key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 Certificate issuer: /CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Certificate serial: 4603CEFA81F475761126D6A6446D8EED7B6328E7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft Manifest number: 025A Signing time: Mon 20 Oct 2025 02:06:16 +0000 Manifest this update: Mon 20 Oct 2025 02:01:16 +0000 Manifest next update: Tue 21 Oct 2025 04:38:16 +0000 Files and hashes: 1: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl (hash: +LeDMHo8AVczgZPP10prMCfDYJuco5v4tv7dEoHeRBk=) 2: 326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (hash: rxzc3BrYti6kxmXubVnEFiS+UC7vkumI3P6AvUB5lwM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 12:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:03:ce:fa:81:f4:75:76:11:26:d6:a6:44:6d:8e:ed:7b:63:28:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Validity Not Before: Oct 20 02:01:16 2025 GMT Not After : Oct 21 04:38:16 2025 GMT Subject: CN=B1AEFDFA4156F496FEB91842A51729D1106190AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3b:de:5a:87:fb:41:29:e1:77:48:0e:ca:e0: dc:c4:11:6f:6b:e5:98:2b:43:5c:57:b0:8b:b6:26: 80:5c:06:d8:95:a6:93:f5:33:0a:cf:d0:d7:00:2e: e7:20:25:ce:e6:f6:1c:74:cd:43:d3:b5:e9:89:32: 22:f9:11:0b:be:67:07:aa:a0:72:48:a6:35:a5:32: 13:9e:22:a4:49:e7:2a:00:67:01:7c:b7:80:e7:d0: 79:2e:f4:d3:4b:89:25:e6:31:8d:9f:30:71:d0:7b: f4:17:c9:09:8c:fd:24:8a:21:0c:b0:36:9b:9e:f1: 96:58:ad:7c:04:b9:33:95:34:e4:f1:4d:01:2a:24: 95:89:7e:c8:db:35:a6:aa:1d:03:a5:cc:f4:5f:ad: c7:7c:8e:db:e0:5c:56:e5:fa:cc:a4:26:69:1b:e2: b4:91:49:63:91:56:2d:b8:9e:d9:91:23:bf:2c:e0: 81:6e:14:61:18:31:62:dd:29:87:cd:c3:be:08:17: a9:90:d8:35:96:01:7f:77:45:7b:49:3b:26:45:a3: f4:98:e5:47:e3:8b:a7:80:e2:8e:fd:b7:fe:a4:c3: 3d:58:99:65:f4:fb:d8:ef:f3:c6:8a:a9:63:5b:11: 17:2d:2c:81:43:82:ed:89:29:7f:98:29:c1:e4:95: 2e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AE:FD:FA:41:56:F4:96:FE:B9:18:42:A5:17:29:D1:10:61:90:AB X509v3 Authority Key Identifier: keyid:1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:d3:07:5e:83:44:34:4a:a0:e8:34:a5:16:e9:06:3b:cb:35: 7d:3e:07:6d:53:04:46:36:7a:c1:74:6a:3b:89:68:93:e4:a1: a1:40:ca:22:05:7a:53:d4:e6:ac:90:da:37:e3:42:ee:e1:79: b9:6d:d3:ae:96:d7:63:98:aa:62:3d:c4:93:fa:cb:29:15:c3: 9f:90:89:04:8b:80:84:07:76:35:e1:09:a7:61:8a:ab:be:4a: 50:28:1e:60:ab:0c:d0:3c:41:1a:bf:0a:46:94:b6:b6:46:e1: c1:bb:ed:d3:8d:e3:46:07:76:31:9b:22:0d:85:d0:5d:be:ae: 3c:98:b7:cb:62:5a:e4:5a:c1:e3:64:98:b6:df:5a:46:2c:27: ed:f0:a3:3b:e7:40:b0:70:83:e5:fd:cf:73:3c:2b:cb:da:0a: bb:d1:a9:91:dc:7a:b7:76:2d:1b:fd:84:fe:19:f0:d8:d2:a4: 09:20:6d:84:f0:3a:69:86:99:02:05:90:2d:ad:6e:96:c2:9e: 72:c2:c5:5c:06:c0:33:44:6b:50:54:9a:18:3b:e6:84:14:e1: b3:ca:88:0c:99:22:59:b7:ee:60:e8:0d:a5:5b:bd:81:29:b2: ba:69:aa:cf:22:ea:94:c5:5f:ab:13:49:ac:c9:f0:41:33:37: 3e:17:d9:f1 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIURgPO+oH0dXYRJtamRG2O7XtjKOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJB NkI3RUY3MTAeFw0yNTEwMjAwMjAxMTZaFw0yNTEwMjEwNDM4MTZaMDMxMTAvBgNV BAMTKEIxQUVGREZBNDE1NkY0OTZGRUI5MTg0MkE1MTcyOUQxMTA2MTkwQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKO95ah/tBKeF3SA7K4NzEEW9r 5ZgrQ1xXsIu2JoBcBtiVppP1MwrP0NcALucgJc7m9hx0zUPTtemJMiL5EQu+Zweq oHJIpjWlMhOeIqRJ5yoAZwF8t4Dn0Hku9NNLiSXmMY2fMHHQe/QXyQmM/SSKIQyw Npue8ZZYrXwEuTOVNOTxTQEqJJWJfsjbNaaqHQOlzPRfrcd8jtvgXFbl+sykJmkb 4rSRSWORVi24ntmRI78s4IFuFGEYMWLdKYfNw74IF6mQ2DWWAX93RXtJOyZFo/SY 5Ufji6eA4o79t/6kwz1YmWX0+9jv88aKqWNbERctLIFDgu2JKX+YKcHklS7xAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUsa79+kFW9Jb+uRhCpRcp0RBhkKswHwYDVR0j BBgwFoAUGrsI1BpaaXQyDZeId2mhW6a373EwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2IzZGE1Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAv MUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQUJCMDhENDFBNUE2OTc0MzIwRDk3ODg3NzY5QTE1 QkE2QjdFRjcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2IzZGE1 Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAvMUFCQjA4RDQxQTVBNjk3NDMy MEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABjTB16DRDRKoOg0pRbp BjvLNX0+B21TBEY2esF0ajuJaJPkoaFAyiIFelPU5qyQ2jfjQu7heblt066W12OY qmI9xJP6yykVw5+QiQSLgIQHdjXhCadhiqu+SlAoHmCrDNA8QRq/CkaUtrZG4cG7 7dON40YHdjGbIg2F0F2+rjyYt8tiWuRaweNkmLbfWkYsJ+3wozvnQLBwg+X9z3M8 K8vaCrvRqZHcerd2LRv9hP4Z8NjSpAkgbYTwOmmGmQIFkC2tbpbCnnLCxVwGwDNE a1BUmhg75oQU4bPKiAyZIlm37mDoDaVbvYEpsrppqs8i6pTFX6sTSazJ8EEzNz4X 2fE= -----END CERTIFICATE-----Generated at Mon Oct 20 04:41:40 2025 by rpki-client