$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft File: 4742E76772F118A935D69FD40F69858085C80999.mft (raw, json) Hash identifier: dLts7VvUg0F7HmNOTS6WMIeW1Ft6J2eTw47I6J9NX3U= Subject key identifier: C9:3B:9C:1A:BF:D5:9F:05:F2:A2:33:6E:52:B1:07:28:E0:23:5E:FE Authority key identifier: 47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99 Certificate issuer: /CN=4742E76772F118A935D69FD40F69858085C80999 Certificate serial: 10AC18662C11F484F118F3010C6578C087691C03 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft Manifest number: 0261 Signing time: Mon 27 Oct 2025 14:16:59 +0000 Manifest this update: Mon 27 Oct 2025 14:11:59 +0000 Manifest next update: Tue 28 Oct 2025 15:01:59 +0000 Files and hashes: 1: 326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa (hash: gUgzdRxmuJNOQsawEIqvnF9DX0YCEOe/wm39FVRE0Uw=) 2: 4742E76772F118A935D69FD40F69858085C80999.crl (hash: i/XDZhYH0k4xlC+x1wSSSs0C6DiA95LaWYWcWdYmHkM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ac:18:66:2c:11:f4:84:f1:18:f3:01:0c:65:78:c0:87:69:1c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4742E76772F118A935D69FD40F69858085C80999 Validity Not Before: Oct 27 14:11:59 2025 GMT Not After : Oct 28 15:01:59 2025 GMT Subject: CN=C93B9C1ABFD59F05F2A2336E52B10728E0235EFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a5:cb:c0:37:5c:2a:9d:01:c5:89:d2:9a:e1: 98:95:93:d2:08:47:10:cc:69:a2:7c:7c:0c:b5:e0: b3:42:f5:87:68:06:eb:9d:8a:db:4e:ea:c2:90:d8: 1f:8c:9d:8d:d1:c9:2e:d0:e0:4e:0d:6d:f4:80:05: a2:2f:76:b3:0e:db:9f:20:11:bb:86:14:2a:70:f3: a8:74:77:51:2c:ad:92:c4:06:05:78:af:50:04:8f: ed:fc:e1:21:51:49:d6:50:1e:1e:eb:5d:9a:3c:68: 84:94:f5:92:d1:ed:b7:80:0c:07:7b:ef:7b:ec:9c: 29:9c:18:bd:e8:c7:38:47:ab:12:3a:82:c0:89:1b: fe:0f:86:b1:3e:81:e5:66:87:7b:44:90:59:fb:b2: f1:3c:75:db:0a:32:81:69:45:6a:61:b3:a1:35:42: 6f:0c:4e:12:bc:f2:df:71:f6:0e:89:c2:8b:ac:98: a6:a7:f2:e8:4b:62:58:fd:44:93:00:20:97:50:10: 2e:b1:d1:2b:5f:8b:86:85:87:62:48:72:52:da:68: 86:18:c1:ba:87:e6:b5:1e:1c:94:b4:78:c1:eb:36: 93:63:90:6a:3e:f0:08:e5:1d:b6:6b:82:01:86:2b: f8:0d:b1:d8:0d:9f:af:35:36:30:9c:07:1c:e7:4a: 28:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3B:9C:1A:BF:D5:9F:05:F2:A2:33:6E:52:B1:07:28:E0:23:5E:FE X509v3 Authority Key Identifier: keyid:47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:2b:9f:9b:22:3d:b2:95:cb:fb:e5:d0:7c:58:df:2b:0c:30: 84:7f:8d:64:0d:70:ff:fe:2b:32:8d:dd:53:14:39:8f:93:b9: c7:f0:c3:33:46:0d:d6:3a:3c:b5:2c:32:36:db:1c:1e:aa:8e: e3:46:43:3d:c6:e5:7f:38:f2:34:20:fa:6e:dc:77:21:5c:fc: bb:a7:a0:8f:ef:dd:c0:f4:d1:5f:d3:50:aa:89:a2:80:29:64: 8f:71:0c:e7:33:ba:b1:6c:25:a1:5e:37:e1:1c:34:ed:ca:a8: 2c:a5:d4:ab:07:e9:00:15:a9:3a:ff:c3:c9:01:58:d6:46:8e: bd:75:d4:36:f9:84:a0:36:bb:1c:fc:f2:c3:b0:70:07:aa:e5: 60:47:c1:e6:95:49:4b:3b:79:96:d7:c8:fa:c2:59:78:66:af: 68:8c:8a:15:35:4b:fd:1e:06:25:fe:3f:19:ad:5a:de:3d:7b: d0:5f:1c:b4:bf:cf:5f:8f:33:4c:b4:95:5a:c2:d5:c2:4c:b6: 6e:39:59:7b:ab:e5:77:04:8e:f6:1a:45:08:c8:23:be:5a:2c: 76:8e:a0:4c:8d:a4:df:aa:c5:c8:6a:76:af:32:31:8e:64:11: b0:44:93:51:5c:c9:f8:76:8c:b9:85:a6:6d:a6:3d:6c:2f:15: 74:85:00:b5 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUEKwYZiwR9ITxGPMBDGV4wIdpHAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc0MkU3Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4 NUM4MDk5OTAeFw0yNTEwMjcxNDExNTlaFw0yNTEwMjgxNTAxNTlaMDMxMTAvBgNV BAMTKEM5M0I5QzFBQkZENTlGMDVGMkEyMzM2RTUyQjEwNzI4RTAyMzVFRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPpcvAN1wqnQHFidKa4ZiVk9II RxDMaaJ8fAy14LNC9YdoBuudittO6sKQ2B+MnY3RyS7Q4E4NbfSABaIvdrMO258g EbuGFCpw86h0d1EsrZLEBgV4r1AEj+384SFRSdZQHh7rXZo8aISU9ZLR7beADAd7 73vsnCmcGL3oxzhHqxI6gsCJG/4PhrE+geVmh3tEkFn7svE8ddsKMoFpRWphs6E1 Qm8MThK88t9x9g6JwousmKan8uhLYlj9RJMAIJdQEC6x0Stfi4aFh2JIclLaaIYY wbqH5rUeHJS0eMHrNpNjkGo+8AjlHbZrggGGK/gNsdgNn681NjCcBxznSijpAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUyTucGr/VnwXyojNuUrEHKOAjXv4wHwYDVR0j BBgwFoAUR0LnZ3LxGKk11p/UD2mFgIXICZkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzYwYTA5MGMyN2MwNjRlMDc4YTdmNmU0NDZhNGZiZjcwLzAv NDc0MkU3Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4NUM4MDk5OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80NzQyRTc2NzcyRjExOEE5MzVENjlGRDQwRjY5ODU4 MDg1QzgwOTk5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzYwYTA5 MGMyN2MwNjRlMDc4YTdmNmU0NDZhNGZiZjcwLzAvNDc0MkU3Njc3MkYxMThBOTM1 RDY5RkQ0MEY2OTg1ODA4NUM4MDk5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJMrn5siPbKVy/vl0HxY 3ysMMIR/jWQNcP/+KzKN3VMUOY+TucfwwzNGDdY6PLUsMjbbHB6qjuNGQz3G5X84 8jQg+m7cdyFc/LunoI/v3cD00V/TUKqJooApZI9xDOczurFsJaFeN+EcNO3KqCyl 1KsH6QAVqTr/w8kBWNZGjr111Db5hKA2uxz88sOwcAeq5WBHweaVSUs7eZbXyPrC WXhmr2iMihU1S/0eBiX+PxmtWt49e9BfHLS/z1+PM0y0lVrC1cJMtm45WXur5XcE jvYaRQjII75aLHaOoEyNpN+qxchqdq8yMY5kEbBEk1Fcyfh2jLmFpm2mPWwvFXSF ALU= -----END CERTIFICATE-----Generated at Mon Oct 27 15:29:49 2025 by rpki-client