$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft File: B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json) Hash identifier: bEpDw3aUTTN2HS3N5X0U+qDG1VLIC93WLJCr6VAaxE0= Subject key identifier: 3F:AA:48:66:15:63:B9:F0:74:00:71:D3:05:41:40:C9:93:92:42:BD Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 Certificate issuer: /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Certificate serial: 7C4E567AB0CE3A7B25E128EA71787A762459223C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft Manifest number: 022B Signing time: Mon 15 Sep 2025 18:51:30 +0000 Manifest this update: Mon 15 Sep 2025 18:46:30 +0000 Manifest next update: Tue 16 Sep 2025 20:19:30 +0000 Files and hashes: 1: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: lMfHKvBPFM0Sob0Y/M+RXnohguOa1Oxp0liwS2rzIBI=) 2: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: tOaIT6qTvs/T2L2c3rEpmXq3gx7f0jW4s/J1R0UAbuM=) 3: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: nMLfH1nYsI5mPwv+N0MEzTUVq1YFB35SCmO/3EjXxsg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Sep 2025 20:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:4e:56:7a:b0:ce:3a:7b:25:e1:28:ea:71:78:7a:76:24:59:22:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Validity Not Before: Sep 15 18:46:30 2025 GMT Not After : Sep 16 20:19:30 2025 GMT Subject: CN=3FAA48661563B9F0740071D3054140C9939242BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:0c:66:3d:9b:80:fc:35:6e:e2:19:d2:10: 4b:6d:5d:1a:08:37:43:cb:d2:17:3a:c0:c3:43:4d: f4:e7:c2:cf:49:70:73:e3:50:0f:f6:64:87:fb:0d: 01:6c:3b:2d:28:6a:e1:5c:ba:e7:70:01:b0:d0:77: fa:af:c1:da:a7:57:26:53:c7:ab:a4:ec:5c:64:ae: 4f:a9:7e:2f:46:da:6c:ee:3b:01:d3:16:5a:c4:cf: 4f:9d:94:f8:2b:cd:7f:1c:e2:f2:75:c1:9c:1d:cf: cd:c6:3d:06:16:e5:d9:8a:6a:bf:3c:14:8c:4f:01: 28:5f:ac:b0:ac:31:f2:98:f8:12:29:a4:c7:af:5c: 02:c7:2b:c8:d5:b8:4d:fc:6a:f2:fd:f2:d2:20:66: b4:d5:bd:5f:8f:5a:26:51:5c:06:ce:ba:44:89:5f: 5a:8c:1a:9f:7c:a2:e3:79:f7:cb:f6:72:cc:44:38: a2:bf:58:f1:72:51:35:ff:14:93:41:33:c1:8b:40: be:ea:e0:d9:6b:61:18:f2:66:d2:9f:f4:5a:d2:f2: 60:57:5b:8e:f8:71:02:7c:ac:4b:13:af:67:23:f2: a4:0d:34:78:94:f1:9d:4c:ef:66:28:14:4b:74:60: e0:e0:c8:fc:1a:95:3b:57:eb:75:15:c4:3c:d3:82: ea:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AA:48:66:15:63:B9:F0:74:00:71:D3:05:41:40:C9:93:92:42:BD X509v3 Authority Key Identifier: keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:58:46:9b:d6:89:97:39:ce:78:40:24:b8:73:f5:e9:aa:f4: d5:0f:66:48:34:09:18:93:44:46:72:ba:2b:04:11:11:d2:2e: 62:6d:90:d7:28:df:17:a7:e7:c0:8d:b7:d0:b3:23:20:9b:ac: a7:b2:d5:70:94:63:6d:3b:60:b6:95:72:a2:15:fb:47:ad:79: be:cd:4f:26:79:a7:36:0a:c8:e9:ed:51:b8:63:22:f5:8a:e6: 69:a3:ed:a4:c2:4d:b4:ae:10:bc:c0:3b:1c:49:ff:0c:f1:80: b0:6d:9d:6a:6d:b7:14:9d:1d:55:ca:eb:d7:e6:69:04:45:2f: 80:b4:b1:a3:89:e1:96:9b:0a:f7:e6:50:9b:99:05:22:df:76: 28:46:af:28:e6:d6:75:57:cb:a8:06:88:3a:51:fb:95:d1:a6: 36:22:af:57:73:22:b5:4a:82:cc:57:ab:c9:3c:06:aa:6a:67: 15:0d:13:f8:1f:a7:13:cc:19:75:36:96:97:7e:2f:11:11:ad: 28:ad:98:e6:8d:c7:ec:9d:f9:32:04:6f:dc:59:02:04:96:83: 01:24:bc:03:2c:1e:88:d7:87:89:6c:80:b2:ff:1d:d5:ca:36: de:15:0f:19:95:52:11:dd:82:b3:b7:e7:bc:9b:4a:37:69:f5: d2:1a:86:f2 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUfE5WerDOOnsl4SjqcXh6diRZIjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG MjFFMDUxODAeFw0yNTA5MTUxODQ2MzBaFw0yNTA5MTYyMDE5MzBaMDMxMTAvBgNV BAMTKDNGQUE0ODY2MTU2M0I5RjA3NDAwNzFEMzA1NDE0MEM5OTM5MjQyQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01wxmPZuA/DVu4hnSEEttXRoI N0PL0hc6wMNDTfTnws9JcHPjUA/2ZIf7DQFsOy0oauFcuudwAbDQd/qvwdqnVyZT x6uk7Fxkrk+pfi9G2mzuOwHTFlrEz0+dlPgrzX8c4vJ1wZwdz83GPQYW5dmKar88 FIxPAShfrLCsMfKY+BIppMevXALHK8jVuE38avL98tIgZrTVvV+PWiZRXAbOukSJ X1qMGp98ouN598v2csxEOKK/WPFyUTX/FJNBM8GLQL7q4NlrYRjyZtKf9FrS8mBX W474cQJ8rEsTr2cj8qQNNHiU8Z1M72YoFEt0YODgyPwalTtX63UVxDzTguoBAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUP6pIZhVjufB0AHHTBUFAyZOSQr0wHwYDVR0j BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD OEYyMUUwNTE4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzBhNDYz N2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAvQjg4QTk0RENBMDlFM0E2NTND MDZGNDc4NDM0REM3QzhGMjFFMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACRYRpvWiZc5znhAJLhz 9emq9NUPZkg0CRiTREZyuisEERHSLmJtkNco3xen58CNt9CzIyCbrKey1XCUY207 YLaVcqIV+0eteb7NTyZ5pzYKyOntUbhjIvWK5mmj7aTCTbSuELzAOxxJ/wzxgLBt nWpttxSdHVXK69fmaQRFL4C0saOJ4ZabCvfmUJuZBSLfdihGryjm1nVXy6gGiDpR +5XRpjYir1dzIrVKgsxXq8k8BqpqZxUNE/gfpxPMGXU2lpd+LxERrSitmOaNx+yd +TIEb9xZAgSWgwEkvAMsHojXh4lsgLL/HdXKNt4VDxmVUhHdgrO357ybSjdp9dIa hvI= -----END CERTIFICATE-----Generated at Tue Sep 16 09:00:37 2025 by rpki-client