$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft File: F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft (raw, json) Hash identifier: 5TxZQkrA62a/eySTODggZi45xipEsRtUbsKCXvskR7M= Subject key identifier: D2:43:50:6A:D7:00:D9:4B:6A:1C:DA:F3:18:20:2F:6B:06:8D:47:6A Authority key identifier: F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 Certificate issuer: /CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Certificate serial: 2C9FC72B07CD7ECEDECC25F908D5708539DA26C1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft Manifest number: 0256 Signing time: Sun 19 Oct 2025 17:00:24 +0000 Manifest this update: Sun 19 Oct 2025 16:55:24 +0000 Manifest next update: Mon 20 Oct 2025 18:38:24 +0000 Files and hashes: 1: F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl (hash: CUsR8st5/UfpvC98PmdR5FVLp+IdwP7bQQKJ3ROX8Wc=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 18:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:9f:c7:2b:07:cd:7e:ce:de:cc:25:f9:08:d5:70:85:39:da:26:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Validity Not Before: Oct 19 16:55:24 2025 GMT Not After : Oct 20 18:38:24 2025 GMT Subject: CN=D243506AD700D94B6A1CDAF318202F6B068D476A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4b:77:df:0d:ac:b1:79:63:14:4d:19:52:7e: 96:50:98:3b:25:25:22:18:db:fe:ce:a3:11:9e:8e: dd:1f:62:e5:fa:2c:19:12:0e:48:81:60:09:38:00: cf:4e:8a:7f:51:64:3e:ae:be:7e:98:1d:a7:7b:68: f2:7b:12:e4:32:a3:b2:d0:95:57:f9:88:4d:64:9d: 13:08:26:59:54:b2:19:b3:4e:1e:d6:38:58:06:21: 4b:b1:4d:9c:35:c9:cc:71:f4:56:08:7a:64:2c:b6: e9:f1:e7:04:da:b9:34:b2:48:17:c0:33:d6:f0:f2: 69:c9:2f:8c:e1:7d:b8:15:36:4a:3f:9e:1a:51:82: cf:b0:71:a5:97:38:e0:4d:a5:89:90:ba:dd:1a:08: 5e:d4:bf:bd:f6:f3:bf:2b:c1:22:6d:17:d2:07:23: 95:b5:a3:ba:49:36:3e:4b:7d:10:74:d8:51:bf:52: 87:f5:35:08:a9:29:bf:d0:c3:45:a4:72:44:b1:06: 0a:da:aa:5c:ab:48:57:22:70:6c:3f:0a:ca:58:8b: 8d:59:13:c5:6e:8e:1c:01:bf:70:12:5e:27:1b:fb: 40:ec:20:35:64:8b:00:18:c2:1f:bf:80:2c:37:7a: 4c:c1:cf:d8:b1:3f:7d:ac:61:ad:8e:39:62:7f:6c: e5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:43:50:6A:D7:00:D9:4B:6A:1C:DA:F3:18:20:2F:6B:06:8D:47:6A X509v3 Authority Key Identifier: keyid:F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:cd:83:86:5c:ac:c4:bc:c0:0d:db:fc:b6:a1:3c:10:38:c1: 6c:5f:95:68:3c:b9:ab:e3:ab:b6:41:4f:73:37:a7:8d:e8:8a: d0:60:15:57:a9:b1:ab:7a:7f:e5:d8:09:f7:a8:31:55:f7:36: 27:d1:85:6e:65:3c:26:1f:91:30:25:b1:ae:52:10:1b:94:36: a4:10:f4:d0:2c:b4:d6:96:fa:3f:84:5b:68:a8:7a:6f:60:fe: 20:55:81:3c:85:2c:0f:50:2f:10:ef:7f:24:47:90:a9:e4:1c: 82:97:8c:e5:cf:3c:68:cf:4e:db:d3:c4:37:3f:68:eb:f6:9d: 0a:78:fc:7a:48:70:9a:f3:ff:70:36:d6:8e:52:c4:e0:85:e7: 22:3a:31:e2:1c:32:29:c1:bc:8b:c2:e3:a5:5d:c1:44:60:d7: 68:c4:4d:61:87:af:b6:c5:1d:b4:58:ed:1b:f0:01:b9:f9:a5: 16:b3:96:d0:06:00:f3:f4:20:30:54:1e:89:8f:1d:e1:6c:c4: bf:b4:02:d8:f1:65:12:2d:09:b5:aa:ea:1e:88:dc:98:ac:d2: ed:a7:b6:c9:d3:c0:9e:6b:94:ec:12:10:f5:40:8e:38:41:69: e5:c5:26:5a:2c:21:b4:a4:0c:fc:c2:e0:0e:de:af:11:43:d9: a8:ed:40:55 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIULJ/HKwfNfs7ezCX5CNVwhTnaJsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2 OTg2RDdDNjAeFw0yNTEwMTkxNjU1MjRaFw0yNTEwMjAxODM4MjRaMDMxMTAvBgNV BAMTKEQyNDM1MDZBRDcwMEQ5NEI2QTFDREFGMzE4MjAyRjZCMDY4RDQ3NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyS3ffDayxeWMUTRlSfpZQmDsl JSIY2/7OoxGejt0fYuX6LBkSDkiBYAk4AM9Oin9RZD6uvn6YHad7aPJ7EuQyo7LQ lVf5iE1knRMIJllUshmzTh7WOFgGIUuxTZw1ycxx9FYIemQstunx5wTauTSySBfA M9bw8mnJL4zhfbgVNko/nhpRgs+wcaWXOOBNpYmQut0aCF7Uv732878rwSJtF9IH I5W1o7pJNj5LfRB02FG/Uof1NQipKb/Qw0WkckSxBgraqlyrSFcicGw/CspYi41Z E8VujhwBv3ASXicb+0DsIDVkiwAYwh+/gCw3ekzBz9ixP32sYa2OOWJ/bOV3AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU0kNQatcA2UtqHNrzGCAvawaNR2owHwYDVR0j BBgwFoAU95TfoAnqkLTLuzQN5MJVRGmG18YwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2RlNTMzMzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAv Rjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GNzk0REZBMDA5RUE5MEI0Q0JCQjM0MERFNEMyNTU0 NDY5ODZEN0M2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2RlNTMz Mzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAvRjc5NERGQTAwOUVBOTBCNENC QkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK/Ng4ZcrMS8wA3b/Lah PBA4wWxflWg8uavjq7ZBT3M3p43oitBgFVepsat6f+XYCfeoMVX3NifRhW5lPCYf kTAlsa5SEBuUNqQQ9NAstNaW+j+EW2ioem9g/iBVgTyFLA9QLxDvfyRHkKnkHIKX jOXPPGjPTtvTxDc/aOv2nQp4/HpIcJrz/3A21o5SxOCF5yI6MeIcMinBvIvC46Vd wURg12jETWGHr7bFHbRY7RvwAbn5pRazltAGAPP0IDBUHomPHeFsxL+0AtjxZRIt CbWq6h6I3Jis0u2ntsnTwJ5rlOwSEPVAjjhBaeXFJlosIbSkDPzC4A7erxFD2ajt QFU= -----END CERTIFICATE-----Generated at Mon Oct 20 11:32:28 2025 by rpki-client