$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft File: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft (raw, json) Hash identifier: MnfQuX2925/CDHIBO1uYL9nR+Hrpb4DvU42Mop92R8Y= Subject key identifier: 84:83:D2:95:4F:81:AC:C2:82:8D:0B:8E:D0:9B:D7:79:9D:76:8C:E0 Authority key identifier: 06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5 Certificate issuer: /CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5 Certificate serial: 10D1F6AFEDE9B186F5C31C2C87E6DF6C9150B9D5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft Manifest number: 0263 Signing time: Mon 27 Oct 2025 02:21:51 +0000 Manifest this update: Mon 27 Oct 2025 02:16:51 +0000 Manifest next update: Tue 28 Oct 2025 02:40:51 +0000 Files and hashes: 1: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl (hash: ChpmpSWMbUoaEvUdA3HJ4MvJnV3QgL6oFOnGRl42CuU=) 2: 326131313a663263303a666663343a3a2f34382d3438203d3e20323136333733.roa (hash: iTb04aO1BMGaSLDC3asTwY2ZRYrbTl7Ocrr3rHizQyw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d1:f6:af:ed:e9:b1:86:f5:c3:1c:2c:87:e6:df:6c:91:50:b9:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5 Validity Not Before: Oct 27 02:16:51 2025 GMT Not After : Oct 28 02:40:51 2025 GMT Subject: CN=8483D2954F81ACC2828D0B8ED09BD7799D768CE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0e:53:89:26:f7:63:ae:b9:cb:31:24:40:54: e2:e1:12:8c:dd:4a:f6:22:3e:51:f8:58:75:f6:84: 40:e6:ac:1c:2e:75:47:fb:f7:45:f2:48:c1:d6:c9: 9a:7d:35:5e:92:d5:53:d1:0e:22:c0:c2:d1:a4:ee: 66:c0:32:b8:54:a8:9a:43:a4:0e:fd:6c:25:b9:66: d5:cb:76:df:d3:65:18:9b:c4:3f:ca:ab:4c:c7:ee: 7c:74:2d:d4:ae:83:68:a6:6c:1c:b2:2f:e0:b5:8a: d0:fc:0a:ff:9b:e1:dd:2c:17:95:73:1c:70:d0:2b: a1:7b:32:ae:5c:9c:fb:41:d4:ee:d4:97:ef:21:a8: b1:ca:a1:f4:0e:e1:44:7d:1b:64:25:84:ab:fc:f4: 78:1c:93:ba:43:15:e3:99:9e:6c:60:c2:1b:9a:9e: c3:13:e0:35:af:56:cb:99:00:a2:1f:1e:d5:d9:8b: 9e:28:8a:53:a4:ad:3a:34:2f:22:6a:34:09:f5:c5: e0:60:18:c5:4d:4e:40:f9:5e:2d:ae:c4:9b:91:47: 0a:6c:fb:0b:f1:5d:3d:70:32:ac:5f:2b:fa:65:dc: 50:6d:2d:69:87:b7:d6:fe:09:2f:a5:68:dd:fe:75: 03:9a:e1:c6:39:bc:5b:af:3d:d2:92:69:cc:c2:07: 48:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:83:D2:95:4F:81:AC:C2:82:8D:0B:8E:D0:9B:D7:79:9D:76:8C:E0 X509v3 Authority Key Identifier: keyid:06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:3c:71:c4:7a:31:3c:56:a6:5c:c0:7e:bc:00:57:d2:db:d4: 7f:aa:39:f8:fa:8b:f5:48:ff:0a:66:55:2e:1d:9b:56:72:cd: 7f:d8:ca:1b:82:84:62:39:5e:7e:26:df:e9:7a:54:40:24:7d: f2:08:38:02:37:44:d7:88:4f:9f:1e:b6:85:d1:b9:4f:f5:79: 34:2a:74:58:38:2a:22:2b:4a:e0:09:e5:30:9b:ac:9e:aa:29: 6e:fd:88:97:04:ad:05:47:b8:1c:c1:10:52:2f:e4:dc:98:fb: 5c:d7:5a:c6:1e:b1:28:a2:5d:ae:92:c7:8b:05:76:88:92:73: bf:3d:6d:7f:b7:43:b5:ed:63:21:55:a0:f6:e0:f3:bf:4f:0c: f2:f3:28:1d:15:15:93:0b:f3:0a:1f:01:e7:fb:52:e5:32:63: 86:4a:35:f4:03:33:cf:39:7c:83:70:1b:2f:02:4a:d3:9b:a3: 12:ab:ed:ab:b8:67:b3:67:6f:82:f5:e7:ad:10:88:d4:70:35: f4:8f:b9:63:8e:2b:9c:4b:d7:32:1a:c0:03:58:06:e5:2a:5e: 89:e7:1c:4c:db:12:66:61:cd:20:0c:2c:f8:33:f9:10:1b:2f: 79:ce:aa:77:4b:60:42:0e:9a:67:83:d7:00:bf:79:d8:6a:1c: 46:d0:77:f6 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUENH2r+3psYb1wxwsh+bfbJFQudUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3REJDNkJDRjBGOTU4MkRGNzgzNjYzODlBRUFGNTk2 NTU2NUVGNTAeFw0yNTEwMjcwMjE2NTFaFw0yNTEwMjgwMjQwNTFaMDMxMTAvBgNV BAMTKDg0ODNEMjk1NEY4MUFDQzI4MjhEMEI4RUQwOUJENzc5OUQ3NjhDRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADlOJJvdjrrnLMSRAVOLhEozd SvYiPlH4WHX2hEDmrBwudUf790XySMHWyZp9NV6S1VPRDiLAwtGk7mbAMrhUqJpD pA79bCW5ZtXLdt/TZRibxD/Kq0zH7nx0LdSug2imbByyL+C1itD8Cv+b4d0sF5Vz HHDQK6F7Mq5cnPtB1O7Ul+8hqLHKofQO4UR9G2QlhKv89Hgck7pDFeOZnmxgwhua nsMT4DWvVsuZAKIfHtXZi54oilOkrTo0LyJqNAn1xeBgGMVNTkD5Xi2uxJuRRwps +wvxXT1wMqxfK/pl3FBtLWmHt9b+CS+laN3+dQOa4cY5vFuvPdKSaczCB0g3AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUhIPSlU+BrMKCjQuO0JvXeZ12jOAwHwYDVR0j BBgwFoAUBn28a88PlYLfeDZjia6vWWVWXvUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzAxNGI5MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzAv MDY3REJDNkJDRjBGOTU4MkRGNzgzNjYzODlBRUFGNTk2NTU2NUVGNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wNjdEQkM2QkNGMEY5NTgyREY3ODM2NjM4OUFFQUY1 OTY1NTY1RUY1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzAxNGI5 MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzAvMDY3REJDNkJDRjBGOTU4MkRG NzgzNjYzODlBRUFGNTk2NTU2NUVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK88ccR6MTxWplzAfrwA V9Lb1H+qOfj6i/VI/wpmVS4dm1ZyzX/YyhuChGI5Xn4m3+l6VEAkffIIOAI3RNeI T58etoXRuU/1eTQqdFg4KiIrSuAJ5TCbrJ6qKW79iJcErQVHuBzBEFIv5NyY+1zX WsYesSiiXa6Sx4sFdoiSc789bX+3Q7XtYyFVoPbg879PDPLzKB0VFZML8wofAef7 UuUyY4ZKNfQDM885fINwGy8CStOboxKr7au4Z7Nnb4L1560QiNRwNfSPuWOOK5xL 1zIawANYBuUqXonnHEzbEmZhzSAMLPgz+RAbL3nOqndLYEIOmmeD1wC/edhqHEbQ d/Y= -----END CERTIFICATE-----Generated at Mon Oct 27 15:29:50 2025 by rpki-client