$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft File: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft (raw, json) Hash identifier: 4azOsmV4D7ns6rsPehL7WpB/IhWmzgdEAlKV7Ux98pg= Subject key identifier: 67:D9:C9:DE:9D:A1:1C:D9:2C:1E:D0:54:3B:BC:92:30:C1:3A:0A:89 Authority key identifier: 1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87 Certificate issuer: /CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87 Certificate serial: 4C4C361FA6116128530FB6961E7534952CD9F4FF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft Manifest number: 0255 Signing time: Mon 20 Oct 2025 02:36:18 +0000 Manifest this update: Mon 20 Oct 2025 02:31:18 +0000 Manifest next update: Tue 21 Oct 2025 05:11:18 +0000 Files and hashes: 1: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl (hash: YSGa1UWP3OJOyIGbHCoPv2k+FJQc+TPd6HNsGTWGOxQ=) 2: 326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa (hash: Ck9ZZ0tiSTG41w0m3od8Zz6h1DTJUjOEieFp2NJMOpw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:4c:36:1f:a6:11:61:28:53:0f:b6:96:1e:75:34:95:2c:d9:f4:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87 Validity Not Before: Oct 20 02:31:18 2025 GMT Not After : Oct 21 05:11:18 2025 GMT Subject: CN=67D9C9DE9DA11CD92C1ED0543BBC9230C13A0A89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6f:0a:7a:6d:91:21:ce:2c:bb:93:45:44:a9: 82:0b:9a:a3:6d:5f:7f:2a:e8:d0:f0:f9:ef:44:96: 50:5f:7b:73:46:c1:a3:f2:7c:41:c0:22:54:e9:5f: bc:2d:93:a9:b2:9c:89:4e:c1:a1:3d:c1:23:c5:e5: 74:39:00:05:c6:d7:70:b1:24:92:8f:e5:ca:8c:86: ee:39:b8:45:dd:3f:98:45:87:22:e2:9c:64:9a:74: bd:63:e1:a5:67:3b:b2:c0:8b:21:52:d6:a4:ab:35: d2:70:19:49:46:59:f1:c1:f8:82:67:ea:7e:45:57: 26:c2:8d:60:96:cd:fe:62:35:c2:34:e6:27:c7:d9: ad:ee:87:30:38:d8:52:fb:22:80:32:b0:08:9e:d9: 38:0b:a7:35:30:16:ee:b1:bc:13:eb:c9:ae:09:5a: a9:bf:66:9c:f1:30:ce:7f:f5:57:8e:a6:5b:3b:a3: 61:08:8f:9a:74:84:c0:2c:f8:e0:58:10:71:12:2e: ec:54:9b:fd:3a:be:67:6a:ff:67:a1:63:7d:83:4b: ad:cc:a3:19:74:64:f0:ab:df:91:4c:22:89:33:47: 57:b6:9c:f3:1d:5a:4e:69:ea:48:3b:ab:f0:42:38: 88:60:cf:33:2e:f0:7a:cd:98:0a:28:9d:74:f5:6b: 63:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D9:C9:DE:9D:A1:1C:D9:2C:1E:D0:54:3B:BC:92:30:C1:3A:0A:89 X509v3 Authority Key Identifier: keyid:1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:94:4d:4c:10:8c:ec:18:2a:b4:40:3a:d3:1d:00:6b:e3:99: 4f:71:4d:7b:fd:48:03:f7:48:59:f9:bc:e6:98:5b:db:83:91: e6:e4:85:66:28:60:64:1d:83:52:57:a7:52:8d:f6:7f:2b:96: 8f:0c:ba:33:27:e3:01:fe:a2:a5:22:6b:5a:08:60:74:93:77: 79:04:95:7b:f9:f5:92:21:27:7f:a1:e8:83:20:64:af:74:32: 6f:42:3d:9c:e2:ef:7e:d3:86:4a:13:d0:a5:a6:d9:50:da:78: dc:62:90:37:38:e8:81:30:02:33:23:7e:49:90:94:b5:09:5d: 3e:76:ac:ff:b7:88:fa:ec:da:71:d1:c7:dd:f3:a3:ec:e0:40: 94:df:6a:a4:41:fe:88:e2:2d:92:07:8e:5d:12:05:75:5f:cc: a1:35:30:dd:48:64:63:1b:68:21:b1:34:19:03:35:cd:db:f6: 65:9c:f4:0f:6e:54:bf:7d:84:2f:f7:d0:fc:68:06:37:41:40: c3:2a:07:e3:87:5f:a9:46:26:e3:5b:8c:3d:16:5d:52:74:a6: 0b:bf:2e:01:b6:2c:b6:b0:32:7a:7e:8e:6e:21:c5:d3:bd:d9: 1d:2f:f1:8d:f4:f8:bc:72:6a:8c:1c:65:4a:44:c4:28:15:f1: dd:15:08:bc -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUTEw2H6YRYShTD7aWHnU0lSzZ9P8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZCOUM4NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3 MDFCMEY4NzAeFw0yNTEwMjAwMjMxMThaFw0yNTEwMjEwNTExMThaMDMxMTAvBgNV BAMTKDY3RDlDOURFOURBMTFDRDkyQzFFRDA1NDNCQkM5MjMwQzEzQTBBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIbwp6bZEhziy7k0VEqYILmqNt X38q6NDw+e9EllBfe3NGwaPyfEHAIlTpX7wtk6mynIlOwaE9wSPF5XQ5AAXG13Cx JJKP5cqMhu45uEXdP5hFhyLinGSadL1j4aVnO7LAiyFS1qSrNdJwGUlGWfHB+IJn 6n5FVybCjWCWzf5iNcI05ifH2a3uhzA42FL7IoAysAie2TgLpzUwFu6xvBPrya4J Wqm/ZpzxMM5/9VeOpls7o2EIj5p0hMAs+OBYEHESLuxUm/06vmdq/2ehY32DS63M oxl0ZPCr35FMIokzR1e2nPMdWk5p6kg7q/BCOIhgzzMu8HrNmAoonXT1a2MjAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUZ9nJ3p2hHNksHtBUO7ySMME6CokwHwYDVR0j BBgwFoAUH7nIUPkT1sCad22Ls4MnvnAbD4cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2NjNmMwZDBmNGMwNzQyNDM5MmQ4MjM4NzIwY2M2YTgyLzAv MUZCOUM4NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3MDFCMEY4Ny5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRkI5Qzg1MEY5MTNENkMwOUE3NzZEOEJCMzgzMjdC RTcwMUIwRjg3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2NjNmMw ZDBmNGMwNzQyNDM5MmQ4MjM4NzIwY2M2YTgyLzAvMUZCOUM4NTBGOTEzRDZDMDlB Nzc2RDhCQjM4MzI3QkU3MDFCMEY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGWUTUwQjOwYKrRAOtMd AGvjmU9xTXv9SAP3SFn5vOaYW9uDkebkhWYoYGQdg1JXp1KN9n8rlo8MujMn4wH+ oqUia1oIYHSTd3kElXv59ZIhJ3+h6IMgZK90Mm9CPZzi737ThkoT0KWm2VDaeNxi kDc46IEwAjMjfkmQlLUJXT52rP+3iPrs2nHRx93zo+zgQJTfaqRB/ojiLZIHjl0S BXVfzKE1MN1IZGMbaCGxNBkDNc3b9mWc9A9uVL99hC/30PxoBjdBQMMqB+OHX6lG JuNbjD0WXVJ0pgu/LgG2LLawMnp+jm4hxdO92R0v8Y30+LxyaowcZUpExCgV8d0V CLw= -----END CERTIFICATE-----Generated at Mon Oct 20 07:57:55 2025 by rpki-client