$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft File: 1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json) Hash identifier: VPrH+anmCYkdtPdznLuZwKiwkIv37+3yXM0RSVq0yI8= Subject key identifier: 3F:8D:2D:B4:45:C6:66:D6:A0:73:56:1B:CC:50:88:33:5A:60:55:F3 Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F Certificate issuer: /CN=1D570B984E9C5E382B0A879AA21F6518621F059F Certificate serial: 23BF7E0070CAB0B3E5C418874CBFD2BEEFF0A4D6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft Manifest number: 025F Signing time: Mon 27 Oct 2025 04:31:56 +0000 Manifest this update: Mon 27 Oct 2025 04:26:56 +0000 Manifest next update: Tue 28 Oct 2025 07:12:56 +0000 Files and hashes: 1: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: nThdDY5ChVy7wJv6J+Tcok32xMX57iwB2xZdVP1TD2I=) 2: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: SZhn4FgWqY4qggdiI6TrYJUIT99auk+OFjrgNv4awjA=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:bf:7e:00:70:ca:b0:b3:e5:c4:18:87:4c:bf:d2:be:ef:f0:a4:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F Validity Not Before: Oct 27 04:26:56 2025 GMT Not After : Oct 28 07:12:56 2025 GMT Subject: CN=3F8D2DB445C666D6A073561BCC5088335A6055F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e9:06:4d:89:4b:74:a9:73:e9:eb:58:53:e5: b6:a9:c9:d5:fb:5f:a4:19:34:9f:2d:a4:5e:ad:a7: 66:63:65:ec:1c:ad:df:b1:95:42:68:df:fd:10:16: d1:eb:2a:07:9e:60:15:b0:f8:10:f1:d3:cb:bb:95: 53:33:4a:f2:21:e8:fa:ec:ff:74:7f:e8:b9:0d:74: a5:d7:11:08:ae:d8:ec:2c:74:a3:9b:90:ad:76:56: 31:af:70:0d:7a:5e:c6:45:70:d2:5a:b6:89:f6:28: 4d:89:57:4d:02:75:55:43:e5:a3:60:65:34:62:d4: ba:46:ad:d0:27:4e:c9:28:f7:18:45:3b:1e:94:e2: 8d:16:d6:45:e2:c0:81:e9:f8:c5:f3:af:87:0e:3c: 56:5b:32:6b:5e:94:72:62:c8:f6:0b:cb:b7:b2:78: 95:a0:66:d6:e5:4a:89:b8:ce:65:e5:28:b8:21:9d: 65:88:ca:34:6d:eb:f4:ae:bf:b3:6f:98:a0:a2:55: f5:3c:f2:bb:e6:c8:58:c9:1c:c7:87:d8:cb:11:8a: 6b:9d:58:5a:79:35:39:c8:6f:d0:98:7f:f3:51:f0: cb:c2:74:01:0a:1b:63:ca:b6:d8:df:48:54:1d:63: 0a:dd:ec:65:00:99:61:50:ec:dd:1e:8f:60:e3:e1: 53:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8D:2D:B4:45:C6:66:D6:A0:73:56:1B:CC:50:88:33:5A:60:55:F3 X509v3 Authority Key Identifier: keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b6:c1:3f:1d:63:d3:24:62:02:71:d7:70:fd:59:6b:bc:ad: 3d:bb:af:c3:e4:e4:44:ff:c2:fc:4a:f7:78:2d:04:38:59:a3: df:79:4b:9a:e8:82:5c:d6:5a:dc:c9:66:2e:51:ca:35:d2:65: e8:58:93:1f:1e:13:84:1b:e8:26:74:aa:e1:50:28:b6:50:c8: fe:a9:32:9a:03:5f:e3:34:c9:80:b0:91:97:e3:29:d8:62:bf: 24:1a:50:c2:eb:6b:87:d2:4c:11:f8:dd:f5:b2:c8:c1:4d:ca: 15:c5:d9:41:89:0d:5d:82:89:cc:62:6a:21:44:43:3c:2d:44: f1:21:c8:5a:04:43:40:29:e2:6c:b4:65:d5:1b:cc:8c:f0:d7: 56:8b:05:21:1d:e8:57:f0:f7:19:17:ea:03:b2:2f:76:22:50: 76:52:2d:67:6c:aa:89:98:b2:b4:13:c7:d3:3b:43:4e:1a:79: a2:a5:9f:70:bb:de:ed:3b:19:db:d5:d3:69:1d:ae:fc:d1:aa: 76:5c:1b:88:92:90:a4:d8:25:34:7c:f5:5b:f1:6d:27:1b:98: b2:d2:fa:0c:31:0e:18:8f:45:b4:2a:66:c9:39:af:af:9e:bc: bb:2e:c8:f7:a5:e8:0f:69:58:47:d8:d6:ef:0d:58:2d:05:26: c6:a1:df:79 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUI79+AHDKsLPlxBiHTL/Svu/wpNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2 MjFGMDU5RjAeFw0yNTEwMjcwNDI2NTZaFw0yNTEwMjgwNzEyNTZaMDMxMTAvBgNV BAMTKDNGOEQyREI0NDVDNjY2RDZBMDczNTYxQkNDNTA4ODMzNUE2MDU1RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY6QZNiUt0qXPp61hT5bapydX7 X6QZNJ8tpF6tp2ZjZewcrd+xlUJo3/0QFtHrKgeeYBWw+BDx08u7lVMzSvIh6Prs /3R/6LkNdKXXEQiu2OwsdKObkK12VjGvcA16XsZFcNJaton2KE2JV00CdVVD5aNg ZTRi1LpGrdAnTsko9xhFOx6U4o0W1kXiwIHp+MXzr4cOPFZbMmtelHJiyPYLy7ey eJWgZtblSom4zmXlKLghnWWIyjRt6/Suv7NvmKCiVfU88rvmyFjJHMeH2MsRimud WFp5NTnIb9CYf/NR8MvCdAEKG2PKttjfSFQdYwrd7GUAmWFQ7N0ej2Dj4VOPAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUP40ttEXGZtagc1YbzFCIM1pgVfMwHwYDVR0j BBgwFoAUHVcLmE6cXjgrCoeaoh9lGGIfBZ8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAv MUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRDU3MEI5ODRFOUM1RTM4MkIwQTg3OUFBMjFGNjUx ODYyMUYwNTlGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzRkNWMz MDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAvMUQ1NzBCOTg0RTlDNUUzODJC MEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEK2wT8dY9MkYgJx13D9 WWu8rT27r8Pk5ET/wvxK93gtBDhZo995S5roglzWWtzJZi5RyjXSZehYkx8eE4Qb 6CZ0quFQKLZQyP6pMpoDX+M0yYCwkZfjKdhivyQaUMLra4fSTBH43fWyyMFNyhXF 2UGJDV2CicxiaiFEQzwtRPEhyFoEQ0Ap4my0ZdUbzIzw11aLBSEd6Ffw9xkX6gOy L3YiUHZSLWdsqomYsrQTx9M7Q04aeaKln3C73u07GdvV02kdrvzRqnZcG4iSkKTY JTR89VvxbScbmLLS+gwxDhiPRbQqZsk5r6+evLsuyPel6A9pWEfY1u8NWC0FJsah 33k= -----END CERTIFICATE-----Generated at Mon Oct 27 15:37:23 2025 by rpki-client