$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json) Hash identifier: wM+P00t1pRzoiVp2tctcIzYj5aqUvxtwvjQBpc3Ab2k= Subject key identifier: 2A:20:1A:67:A1:FE:0F:E3:D7:34:71:BC:4D:B3:4F:4D:14:F7:0F:26 Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Certificate serial: 224124BBC63B043C094304A59031C0D35C54AA8A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft Manifest number: 0184 Signing time: Mon 27 Oct 2025 14:16:59 +0000 Manifest this update: Mon 27 Oct 2025 14:11:59 +0000 Manifest next update: Tue 28 Oct 2025 17:55:59 +0000 Files and hashes: 1: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: ar9/IB2TpbRJW+nwzktbB1j8oMrtuDcOZdqM5ZnZmts=) 2: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: iRjGhm9MAYijKikuNXa9CZKLfnQlB6md5E2iJLdE/iQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:41:24:bb:c6:3b:04:3c:09:43:04:a5:90:31:c0:d3:5c:54:aa:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Validity Not Before: Oct 27 14:11:59 2025 GMT Not After : Oct 28 17:55:59 2025 GMT Subject: CN=2A201A67A1FE0FE3D73471BC4DB34F4D14F70F26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:8f:bd:eb:56:ed:69:e0:65:cb:3a:df:a6: 6a:16:67:b2:04:3c:b1:7b:bf:2a:a2:cb:1c:3d:fb: e3:98:8d:53:60:86:8f:61:2d:cc:1d:e6:e0:cf:72: b5:3a:86:ab:c5:9a:19:f3:9d:76:fd:f1:82:9b:74: f1:45:a8:36:92:53:e7:d9:75:40:db:a2:be:57:6a: 35:4f:0f:f8:40:d7:d3:82:64:dd:ab:7e:03:ba:66: 90:3d:f9:b7:17:f1:f5:0d:f0:cc:2c:f1:d4:5d:46: 97:7e:4a:b7:42:dd:7f:db:da:ea:68:5b:96:80:8e: 7e:5e:1a:2e:35:a2:5c:03:55:49:e8:4b:50:26:b6: ce:8e:e1:d8:fd:1e:87:49:d2:a0:6c:f6:b6:d2:2a: 59:09:82:b0:b2:44:1b:ed:34:b6:14:a9:25:c9:6c: 90:ae:37:c1:c9:84:2a:d2:4e:cf:26:e9:8a:93:e8: 59:d4:f1:f9:23:67:29:4a:7d:c7:c6:bb:20:4e:b9: e0:3d:d7:f2:01:52:63:9e:d5:05:ab:02:93:a6:8e: 4f:26:7b:9f:1b:da:44:51:12:3b:8d:6e:32:2e:ab: 0f:f8:d4:77:aa:f6:53:8b:91:f1:1b:1e:86:95:8a: 1f:7d:23:be:df:17:0c:49:3f:bc:f6:68:bc:a4:b1: 5c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:20:1A:67:A1:FE:0F:E3:D7:34:71:BC:4D:B3:4F:4D:14:F7:0F:26 X509v3 Authority Key Identifier: keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:25:51:f5:e6:b4:b8:c1:67:dd:d2:d0:1a:62:5b:55:68:47: fa:6e:52:9c:86:db:61:b2:9f:60:94:62:9b:48:03:2c:d0:ba: 5d:f5:f7:f9:47:88:d9:58:f0:61:e5:23:dd:22:1d:4a:cb:ab: 9e:94:b5:c7:ad:bb:98:35:d8:95:06:03:f4:6f:3c:40:af:4a: 2a:c4:e6:83:51:d2:98:1c:9b:ca:3f:c3:35:83:28:93:82:15: c5:b3:d6:3e:28:93:0a:a8:ef:1a:ef:fe:ed:2f:51:f2:ac:b9: e6:15:c6:eb:94:d7:3b:16:c6:0b:70:fb:eb:e4:b9:b5:80:da: 20:fc:e5:33:a2:59:7d:c6:32:97:bc:2a:39:a6:81:44:88:d2: ee:96:f7:fd:2f:a7:48:12:45:75:84:c4:2d:8c:57:29:e0:67: 20:d0:b7:50:02:26:dc:07:3d:67:df:8f:c1:80:5d:f8:5b:9c: 46:f8:b1:b8:bd:bd:5f:26:58:84:84:97:cf:c2:bd:b3:f2:5f: 58:b6:82:c7:70:06:97:00:fc:8b:fb:43:67:a1:63:8f:ad:f1: 40:b1:c4:a3:8f:2c:99:2a:28:d7:31:0b:19:e1:b2:91:86:65: 04:c9:1e:41:7c:42:e1:90:cf:30:57:9f:99:71:2d:2c:79:d2: 94:4e:22:b6 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUIkEku8Y7BDwJQwSlkDHA01xUqoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdE NTQ3ODZEMzAeFw0yNTEwMjcxNDExNTlaFw0yNTEwMjgxNzU1NTlaMDMxMTAvBgNV BAMTKDJBMjAxQTY3QTFGRTBGRTNENzM0NzFCQzREQjM0RjREMTRGNzBGMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0aY+961btaeBlyzrfpmoWZ7IE PLF7vyqiyxw9++OYjVNgho9hLcwd5uDPcrU6hqvFmhnznXb98YKbdPFFqDaSU+fZ dUDbor5XajVPD/hA19OCZN2rfgO6ZpA9+bcX8fUN8Mws8dRdRpd+SrdC3X/b2upo W5aAjn5eGi41olwDVUnoS1Amts6O4dj9HodJ0qBs9rbSKlkJgrCyRBvtNLYUqSXJ bJCuN8HJhCrSTs8m6YqT6FnU8fkjZylKfcfGuyBOueA91/IBUmOe1QWrApOmjk8m e58b2kRREjuNbjIuqw/41Heq9lOLkfEbHoaVih99I77fFwxJP7z2aLyksVwXAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUKiAaZ6H+D+PXNHG8TbNPTRT3DyYwHwYDVR0j BBgwFoAUbZS517fBinpJen6fXi4il9VHhtMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzFlYmZkNTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAv NkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82RDk0QjlEN0I3QzE4QTdBNDk3QTdFOUY1RTJFMjI5 N0Q1NDc4NkQzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzFlYmZk NTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAvNkQ5NEI5RDdCN0MxOEE3QTQ5 N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIElUfXmtLjBZ93S0Bpi W1VoR/puUpyG22Gyn2CUYptIAyzQul319/lHiNlY8GHlI90iHUrLq56Utcetu5g1 2JUGA/RvPECvSirE5oNR0pgcm8o/wzWDKJOCFcWz1j4okwqo7xrv/u0vUfKsueYV xuuU1zsWxgtw++vkubWA2iD85TOiWX3GMpe8KjmmgUSI0u6W9/0vp0gSRXWExC2M VyngZyDQt1ACJtwHPWffj8GAXfhbnEb4sbi9vV8mWISEl8/CvbPyX1i2gsdwBpcA /Iv7Q2ehY4+t8UCxxKOPLJkqKNcxCxnhspGGZQTJHkF8QuGQzzBXn5lxLSx50pRO IrY= -----END CERTIFICATE-----Generated at Mon Oct 27 15:32:44 2025 by rpki-client