$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft File: B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json) Hash identifier: kiheWRAwaAemupHYQ0Zu1dMshrM7h6g3m3TYuQR1E+U= Subject key identifier: 00:7A:B4:8D:75:D2:CE:4A:58:00:96:19:35:9B:68:74:73:A3:0A:54 Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77 Certificate issuer: /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777 Certificate serial: 2EF787DDDDA3BDE45271582682163EDE2D00E09D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft Manifest number: 0262 Signing time: Sun 26 Oct 2025 23:01:36 +0000 Manifest this update: Sun 26 Oct 2025 22:56:36 +0000 Manifest next update: Tue 28 Oct 2025 02:58:36 +0000 Files and hashes: 1: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: MlubGqxKcu9/AdY4j4/cMK0ZlCKeMWkqNbhfRk1N6mE=) 2: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: 35oBxcleJn49GidBQzBBkM34B44xx7JSVs9CHeqqXk0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f7:87:dd:dd:a3:bd:e4:52:71:58:26:82:16:3e:de:2d:00:e0:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777 Validity Not Before: Oct 26 22:56:36 2025 GMT Not After : Oct 28 02:58:36 2025 GMT Subject: CN=007AB48D75D2CE4A58009619359B687473A30A54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ba:04:3c:c0:c5:e4:22:76:31:e8:ba:26:0d: c0:1e:1b:41:3b:59:32:95:fe:15:7e:96:dd:13:b6: ae:1e:57:57:99:ea:14:71:01:93:67:9f:91:64:2c: a7:9c:3e:e6:d5:08:74:ec:88:ae:60:64:e4:cc:1c: 20:bf:c6:fe:10:f1:7c:68:a7:b9:e8:5a:19:f9:78: 87:15:7f:58:95:00:9d:d3:40:d1:b6:ab:66:b7:3d: 76:06:e1:69:99:63:40:2d:c5:2f:e2:cb:c6:58:57: 7f:59:e7:40:ee:83:7b:01:78:32:4e:fb:2e:8e:d9: e4:6d:e7:de:f2:5d:6e:7c:57:ac:c9:34:20:6f:de: be:e4:60:8d:cd:ca:ba:0e:cc:e5:06:1f:6f:cc:d9: c7:cd:73:24:56:ba:71:75:45:d1:85:56:96:ff:c8: b3:82:8a:82:3c:4a:16:8b:b4:0e:58:df:88:57:b4: 48:70:7b:f3:73:11:cd:0c:44:9c:64:47:35:94:21: c8:0b:54:d6:60:7c:f7:45:b6:a5:4f:b3:7f:25:06: 7a:60:e0:7e:9d:b4:0f:30:70:ef:6f:67:a5:72:0a: 13:8e:7a:f0:38:44:fa:65:bf:d2:60:a8:fb:81:f1: 46:01:81:f2:29:ac:e2:a5:03:fe:81:07:06:d8:00: c7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7A:B4:8D:75:D2:CE:4A:58:00:96:19:35:9B:68:74:73:A3:0A:54 X509v3 Authority Key Identifier: keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:34:d8:fc:9a:09:18:30:18:3c:7d:03:14:d8:93:00:7c:dd: 6a:f4:7f:dd:4c:c5:6a:82:d0:ba:66:88:20:0e:61:05:3c:f7: 13:3d:6d:d2:ff:6d:bc:c8:32:5f:9d:b8:1b:34:95:96:74:62: c2:45:7b:49:9e:74:29:8b:5e:97:e9:1d:16:3c:f2:63:b7:08: cd:93:f8:26:71:bf:07:b0:b2:f0:e3:3d:97:59:af:b4:97:ef: bb:49:e2:d9:c5:77:e5:f6:ed:10:ba:a1:0c:63:f9:c5:4b:ee: 98:05:77:5d:6d:34:b7:88:fd:9b:4f:81:b1:59:a9:4f:b3:b8: c4:65:ef:72:b5:de:8b:1e:19:77:e7:ad:ef:77:de:1d:66:7d: f0:58:cb:20:6d:3f:19:89:eb:36:5a:2f:d9:3f:f4:51:a8:5a: 1a:49:ec:8e:a9:47:e0:f9:fd:0d:22:75:b8:4e:46:3e:e8:50: b4:92:60:f8:a3:a2:9e:6a:96:20:2c:6d:5b:30:6f:a9:af:a2: 5b:1c:6c:13:e3:b6:18:39:5a:8d:cc:6c:59:2a:b3:cf:7e:1c: c5:e0:92:ca:27:ee:36:54:b2:c3:0e:ce:33:5f:f7:bc:f9:c2: d5:96:b4:14:8e:85:46:7f:b6:59:76:df:97:08:10:84:92:12: 54:e1:31:a2 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIULveH3d2jveRScVgmghY+3i0A4J0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RE RUEwODc3NzAeFw0yNTEwMjYyMjU2MzZaFw0yNTEwMjgwMjU4MzZaMDMxMTAvBgNV BAMTKDAwN0FCNDhENzVEMkNFNEE1ODAwOTYxOTM1OUI2ODc0NzNBMzBBNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaugQ8wMXkInYx6LomDcAeG0E7 WTKV/hV+lt0Ttq4eV1eZ6hRxAZNnn5FkLKecPubVCHTsiK5gZOTMHCC/xv4Q8Xxo p7noWhn5eIcVf1iVAJ3TQNG2q2a3PXYG4WmZY0AtxS/iy8ZYV39Z50Dug3sBeDJO +y6O2eRt597yXW58V6zJNCBv3r7kYI3NyroOzOUGH2/M2cfNcyRWunF1RdGFVpb/ yLOCioI8ShaLtA5Y34hXtEhwe/NzEc0MRJxkRzWUIcgLVNZgfPdFtqVPs38lBnpg 4H6dtA8wcO9vZ6VyChOOevA4RPplv9JgqPuB8UYBgfIprOKlA/6BBwbYAMfDAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUAHq0jXXSzkpYAJYZNZtodHOjClQwHwYDVR0j BBgwFoAUuCIqhFwM3Fno02muI+EWzd6gh3cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzA5ODBlMjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAv QjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODIyMkE4NDVDMENEQzU5RThEMzY5QUUyM0UxMTZD RERFQTA4Nzc3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzA5ODBl MjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAvQjgyMjJBODQ1QzBDREM1OUU4 RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMI02PyaCRgwGDx9AxTY kwB83Wr0f91MxWqC0LpmiCAOYQU89xM9bdL/bbzIMl+duBs0lZZ0YsJFe0medCmL XpfpHRY88mO3CM2T+CZxvwewsvDjPZdZr7SX77tJ4tnFd+X27RC6oQxj+cVL7pgF d11tNLeI/ZtPgbFZqU+zuMRl73K13oseGXfnre933h1mffBYyyBtPxmJ6zZaL9k/ 9FGoWhpJ7I6pR+D5/Q0idbhORj7oULSSYPijop5qliAsbVswb6mvolscbBPjthg5 Wo3MbFkqs89+HMXgkson7jZUssMOzjNf97z5wtWWtBSOhUZ/tll235cIEISSElTh MaI= -----END CERTIFICATE-----Generated at Mon Oct 27 15:22:33 2025 by rpki-client