$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft File: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft (raw, json) Hash identifier: bJo57E12X29PVVsSJFAgT3hXpC4vwCaWrdvoAr8XED0= Subject key identifier: F9:1F:8E:F4:3C:42:A5:44:8C:F8:CC:E4:2E:3F:7D:1D:F0:14:2D:1C Authority key identifier: 5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0 Certificate issuer: /CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0 Certificate serial: 2534C599EB6F6EF62895A6E1DD5419AE7A957693 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft Manifest number: 022A Signing time: Tue 16 Sep 2025 18:18:39 +0000 Manifest this update: Tue 16 Sep 2025 18:13:39 +0000 Manifest next update: Wed 17 Sep 2025 19:49:39 +0000 Files and hashes: 1: 326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa (hash: Fb1/PRkI0lrTKbp777DJ9P81eGra7/CB0uA9Vm+bs1w=) 2: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl (hash: PUZHYn4kBmLyKcHirgMGIH63jmHGcsr85UhUvMr977U=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Sep 2025 08:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:34:c5:99:eb:6f:6e:f6:28:95:a6:e1:dd:54:19:ae:7a:95:76:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0 Validity Not Before: Sep 16 18:13:39 2025 GMT Not After : Sep 17 19:49:39 2025 GMT Subject: CN=F91F8EF43C42A5448CF8CCE42E3F7D1DF0142D1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:77:13:6b:dc:30:11:6f:91:61:1b:50:55:27: 30:08:be:21:b1:41:b1:63:f0:e0:df:48:57:b7:6a: aa:a1:a5:8b:f6:35:18:b6:92:d4:c9:68:27:bc:c7: 68:1d:e9:ef:af:b9:2b:e0:6a:f7:43:fd:9d:0c:ea: de:13:97:a2:f1:51:8d:43:9f:fd:80:8a:4c:5d:39: 6e:cd:10:e2:10:c2:da:70:42:da:58:6b:f5:5e:60: 1a:8c:9d:01:ef:6e:15:47:3d:07:57:70:c4:1a:99: 88:3e:4b:a7:af:05:1b:f9:7c:69:44:88:27:ce:2f: 78:11:9d:ec:f3:84:01:6c:e8:23:64:d7:ac:33:1b: ca:25:9c:33:17:fb:e5:a9:03:49:bf:ab:59:d8:fc: 7f:a4:bc:71:e3:8b:c9:40:dd:42:d1:2e:61:43:28: 91:ed:e0:80:d9:8b:f4:43:de:0a:f7:dc:14:e9:b3: d1:8b:bc:21:7f:31:85:1d:dd:c3:9c:db:59:75:3b: e4:eb:05:42:ac:03:5e:ef:1f:42:de:88:72:94:ec: a6:cf:bb:07:db:cf:9e:cd:08:f2:8b:e9:6f:41:3b: 0f:6e:89:3a:bb:55:aa:05:be:bc:10:98:3c:dd:58: c2:3e:9e:5e:66:fe:4c:ab:ed:b2:89:0b:7d:2c:6b: 47:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1F:8E:F4:3C:42:A5:44:8C:F8:CC:E4:2E:3F:7D:1D:F0:14:2D:1C X509v3 Authority Key Identifier: keyid:5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:91:d8:52:69:85:c9:a9:e2:b5:07:09:78:91:e9:4e:8f:33: 35:e2:05:44:47:11:ec:0a:f6:fa:b2:aa:86:e2:07:3e:d1:77: ca:54:72:8e:27:10:3c:30:fa:57:d1:e1:76:61:5b:de:77:0d: 21:31:43:20:98:98:cc:29:2b:1f:3c:3c:eb:bb:fd:50:23:57: 75:a0:b3:80:43:ce:a8:eb:c5:02:c4:ce:62:be:b5:7b:70:63: 85:45:cd:83:13:94:25:f8:bb:05:2a:65:18:21:74:0a:2f:bc: b1:83:7c:7f:fb:56:55:83:18:95:50:05:0b:09:f8:aa:93:e3: 85:2f:84:62:3b:e2:e0:26:71:c5:2d:5d:19:07:3e:a9:ef:84: eb:35:40:1c:30:0a:ab:64:03:57:cd:ba:81:7f:1e:b9:44:d0: f7:c3:1c:82:41:0f:ef:ad:54:3c:e2:ea:3c:fc:1a:dc:78:35: ad:92:d7:00:6f:5b:29:ac:4c:2c:88:7e:bc:6e:4c:84:94:e5: ee:0b:84:e9:1a:4e:1c:c2:f0:5d:3c:84:52:22:dc:d1:6d:7e: 91:7a:b1:cc:9d:14:37:34:df:86:fe:ee:d5:66:8d:65:bb:67: 5c:38:5b:da:30:6f:bf:54:8f:27:0f:66:d0:00:2f:60:88:a4: 9e:8d:82:0b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUJTTFmetvbvYolabh3VQZrnqVdpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCRTJGNjA5OTk2NDc2QUFGRTE0NkJDNUE3MjQyOUIw QjIwNUZDMDAeFw0yNTA5MTYxODEzMzlaFw0yNTA5MTcxOTQ5MzlaMDMxMTAvBgNV BAMTKEY5MUY4RUY0M0M0MkE1NDQ4Q0Y4Q0NFNDJFM0Y3RDFERjAxNDJEMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdxNr3DARb5FhG1BVJzAIviGx QbFj8ODfSFe3aqqhpYv2NRi2ktTJaCe8x2gd6e+vuSvgavdD/Z0M6t4Tl6LxUY1D n/2AikxdOW7NEOIQwtpwQtpYa/VeYBqMnQHvbhVHPQdXcMQamYg+S6evBRv5fGlE iCfOL3gRnezzhAFs6CNk16wzG8olnDMX++WpA0m/q1nY/H+kvHHji8lA3ULRLmFD KJHt4IDZi/RD3gr33BTps9GLvCF/MYUd3cOc21l1O+TrBUKsA17vH0LeiHKU7KbP uwfbz57NCPKL6W9BOw9uiTq7VaoFvrwQmDzdWMI+nl5m/kyr7bKJC30sa0dlAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU+R+O9DxCpUSM+MzkLj99HfAULRwwHwYDVR0j BBgwFoAUWr4vYJmWR2qv4Ua8WnJCmwsgX8AwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY0ODMyNjExYmEwNjRkNmI4ZjljMmI3YzczZmJkODRiLzAv NUFCRTJGNjA5OTk2NDc2QUFGRTE0NkJDNUE3MjQyOUIwQjIwNUZDMC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy81QUJFMkY2MDk5OTY0NzZBQUZFMTQ2QkM1QTcyNDI5 QjBCMjA1RkMwLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY0ODMy NjExYmEwNjRkNmI4ZjljMmI3YzczZmJkODRiLzAvNUFCRTJGNjA5OTk2NDc2QUFG RTE0NkJDNUE3MjQyOUIwQjIwNUZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGGR2FJphcmp4rUHCXiR 6U6PMzXiBURHEewK9vqyqobiBz7Rd8pUco4nEDww+lfR4XZhW953DSExQyCYmMwp Kx88POu7/VAjV3Wgs4BDzqjrxQLEzmK+tXtwY4VFzYMTlCX4uwUqZRghdAovvLGD fH/7VlWDGJVQBQsJ+KqT44UvhGI74uAmccUtXRkHPqnvhOs1QBwwCqtkA1fNuoF/ HrlE0PfDHIJBD++tVDzi6jz8Gtx4Na2S1wBvWymsTCyIfrxuTISU5e4LhOkaThzC 8F08hFIi3NFtfpF6scydFDc034b+7tVmjWW7Z1w4W9owb79UjycPZtAAL2CIpJ6N ggs= -----END CERTIFICATE-----Generated at Tue Sep 16 20:01:35 2025 by rpki-client