$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft File: BBED14E9793905EC1EA5CE10AA03C497D737B115.mft (raw, json) Hash identifier: cXRkNen757RonVMc6RunM0XHwOXBNkb96abEzkrj3UA= Subject key identifier: D7:AF:C9:87:76:E7:31:F8:CB:5D:94:87:DF:F9:A4:C7:56:81:9C:08 Authority key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 Certificate issuer: /CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Certificate serial: 15F909CD0F7142C6943F232117596E292CD8936F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft Manifest number: 025B Signing time: Mon 27 Oct 2025 10:46:58 +0000 Manifest this update: Mon 27 Oct 2025 10:41:58 +0000 Manifest next update: Tue 28 Oct 2025 13:02:58 +0000 Files and hashes: 1: 326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (hash: MpewGrhFOYc7jc70q6ubpOkEuQ0IJ7Wp+DrSPfwP1vQ=) 2: BBED14E9793905EC1EA5CE10AA03C497D737B115.crl (hash: y5swDFi77nh95Z2Vb42NYk6Zygkh/U7H6kMo2FjWgYA=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f9:09:cd:0f:71:42:c6:94:3f:23:21:17:59:6e:29:2c:d8:93:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Validity Not Before: Oct 27 10:41:58 2025 GMT Not After : Oct 28 13:02:58 2025 GMT Subject: CN=D7AFC98776E731F8CB5D9487DFF9A4C756819C08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:01:21:38:da:88:51:29:7a:de:69:6a:e2:9d: 2b:e2:d7:64:3a:09:16:47:f7:c2:b8:af:a8:fa:07: 22:06:95:c2:d4:b8:de:d1:9b:d2:13:27:97:2a:66: a5:75:8d:24:d6:92:12:48:c9:de:62:c7:6d:fa:ba: 43:33:77:e2:fb:8f:42:ab:40:b9:8a:70:5c:66:ee: 59:65:46:56:bc:7f:46:5a:e2:33:55:5d:bb:63:7c: 2a:48:aa:fa:77:07:9b:8c:cc:50:77:7c:57:2d:b7: 47:2a:30:9b:e6:a9:65:de:23:06:bf:f8:f1:08:97: 8d:44:74:8c:97:8a:b2:8b:56:a1:5f:d3:99:52:aa: 99:f8:17:3c:2e:be:3e:4e:ff:3b:5c:ae:46:f5:6b: 85:5d:e5:98:c6:2f:20:15:f4:79:72:ba:b9:7a:68: 73:2b:a1:67:f3:8b:75:f8:4d:65:e1:81:c9:25:62: 99:df:9e:26:de:80:50:e0:03:03:44:a7:2a:81:bc: cd:f8:ec:fd:46:75:ce:14:0c:0c:03:9c:cc:2f:52: 32:9c:a1:ce:fa:4d:42:30:91:30:e6:01:62:9f:0b: 01:48:0f:fd:5b:0f:e1:9f:96:56:68:74:e7:69:62: c5:55:3c:4c:6f:7e:6b:b0:32:46:9a:b6:6b:c1:34: e4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AF:C9:87:76:E7:31:F8:CB:5D:94:87:DF:F9:A4:C7:56:81:9C:08 X509v3 Authority Key Identifier: keyid:BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:92:b2:c9:f1:fc:38:fd:81:eb:8e:db:0b:87:18:2e:a6:bd: 5e:cb:5b:6c:bd:2f:39:ad:3e:71:cd:ac:ef:18:2d:86:1d:15: 8e:93:84:be:71:4c:72:db:f1:fc:8e:5c:2b:97:d9:26:af:40: 31:ac:56:49:fc:5c:d3:24:33:d3:a8:07:ca:8a:4b:85:e3:9d: 12:d5:0a:71:e9:64:32:68:13:fa:82:0a:d9:95:de:94:af:61: 92:85:98:23:8f:d0:7c:50:d8:3f:5d:64:ed:ea:fa:f1:16:03: ad:6e:3b:fc:a4:c3:84:8b:09:eb:d6:dd:9f:af:05:01:9d:24: c1:64:06:26:8c:8e:b9:dd:08:0d:d4:45:ce:86:59:58:63:3c: b6:68:be:a9:b7:0c:38:7c:38:eb:97:f1:bf:cd:3e:a5:d3:f7: ce:ad:46:9d:5f:8d:71:f4:e0:b7:21:47:02:2a:a6:48:39:1c: 22:08:78:16:16:2f:75:af:a1:ed:bf:f3:f9:6c:a7:f3:a2:18: 8c:b2:8b:99:5c:22:74:4c:62:da:01:0d:af:45:2d:ae:f9:01: 73:93:b3:01:15:aa:84:55:4a:36:e8:19:54:69:5c:9a:57:25: b0:ac:61:3e:65:0a:ec:b6:7f:34:57:0e:db:16:c9:66:59:19: 23:df:45:78 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUFfkJzQ9xQsaUPyMhF1luKSzYk28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdE NzM3QjExNTAeFw0yNTEwMjcxMDQxNThaFw0yNTEwMjgxMzAyNThaMDMxMTAvBgNV BAMTKEQ3QUZDOTg3NzZFNzMxRjhDQjVEOTQ4N0RGRjlBNEM3NTY4MTlDMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnASE42ohRKXreaWrinSvi12Q6 CRZH98K4r6j6ByIGlcLUuN7Rm9ITJ5cqZqV1jSTWkhJIyd5ix236ukMzd+L7j0Kr QLmKcFxm7lllRla8f0Za4jNVXbtjfCpIqvp3B5uMzFB3fFctt0cqMJvmqWXeIwa/ +PEIl41EdIyXirKLVqFf05lSqpn4Fzwuvj5O/ztcrkb1a4Vd5ZjGLyAV9Hlyurl6 aHMroWfzi3X4TWXhgcklYpnfnibegFDgAwNEpyqBvM347P1Gdc4UDAwDnMwvUjKc oc76TUIwkTDmAWKfCwFID/1bD+GfllZodOdpYsVVPExvfmuwMkaatmvBNOQ/AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU16/Jh3bnMfjLXZSH3/mkx1aBnAgwHwYDVR0j BBgwFoAUu+0U6Xk5Bewepc4QqgPEl9c3sRUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNhOTdmNzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAv QkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdENzM3QjExNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CQkVEMTRFOTc5MzkwNUVDMUVBNUNFMTBBQTAzQzQ5 N0Q3MzdCMTE1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNhOTdm NzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAvQkJFRDE0RTk3OTM5MDVFQzFF QTVDRTEwQUEwM0M0OTdENzM3QjExNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAA+Sssnx/Dj9geuO2wuH GC6mvV7LW2y9LzmtPnHNrO8YLYYdFY6ThL5xTHLb8fyOXCuX2SavQDGsVkn8XNMk M9OoB8qKS4XjnRLVCnHpZDJoE/qCCtmV3pSvYZKFmCOP0HxQ2D9dZO3q+vEWA61u O/ykw4SLCevW3Z+vBQGdJMFkBiaMjrndCA3URc6GWVhjPLZovqm3DDh8OOuX8b/N PqXT986tRp1fjXH04LchRwIqpkg5HCIIeBYWL3Wvoe2/8/lsp/OiGIyyi5lcInRM YtoBDa9FLa75AXOTswEVqoRVSjboGVRpXJpXJbCsYT5lCuy2fzRXDtsWyWZZGSPf RXg= -----END CERTIFICATE-----Generated at Mon Oct 27 15:29:49 2025 by rpki-client