$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: 9M31ebyR8N4VTeg4RTs0ul6GVVBYhFH8e3VsGdPKSjU= Subject key identifier: FF:A2:C8:47:6C:09:F3:C2:2E:4A:84:1F:6A:0F:51:1F:D2:34:69:CC Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 0D99F9BB966B4852E2580E8ADA450C0AE4CA76A8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: 025E Signing time: Mon 27 Oct 2025 00:31:46 +0000 Manifest this update: Mon 27 Oct 2025 00:26:46 +0000 Manifest next update: Tue 28 Oct 2025 03:34:46 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: uoDdG+luBSLtxQc9Id2RC/h+Olj2e+fvnoZgQLLemQk=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:99:f9:bb:96:6b:48:52:e2:58:0e:8a:da:45:0c:0a:e4:ca:76:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: Oct 27 00:26:46 2025 GMT Not After : Oct 28 03:34:46 2025 GMT Subject: CN=FFA2C8476C09F3C22E4A841F6A0F511FD23469CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:78:2c:ad:0c:ba:96:7b:fe:1e:f7:ac:01:ba: 00:f5:3a:c9:9f:76:39:1f:f0:0a:ce:75:78:07:06: ab:fa:1d:01:f5:b0:14:98:36:17:04:c0:8b:20:08: 68:68:08:d3:7b:82:06:25:f6:7e:11:68:1c:69:a5: 5c:c6:bb:06:c4:29:b2:58:c6:f0:4e:16:14:c1:f3: 99:d7:19:e2:92:60:bd:6e:93:f7:db:e3:b4:5b:b9: 6c:43:a8:72:92:b7:24:56:23:77:a5:11:c4:cf:61: 41:1f:63:1e:70:62:14:e7:78:4f:00:37:37:8c:5c: 34:75:04:b8:fe:3a:26:d1:3e:e8:92:f1:99:d6:be: 5d:a5:28:7e:2e:1c:f0:40:4d:95:e2:31:53:ca:33: 3c:b9:ea:30:29:b2:bc:44:b2:b3:c2:8c:00:17:b9: ac:72:e3:b3:6a:51:9b:72:aa:aa:13:bf:8d:3f:7e: 94:ac:e5:65:98:5c:9f:20:63:f3:bb:ce:2b:82:d1: 73:c2:9d:16:c6:f1:c2:4f:90:d8:ed:1d:3f:88:fa: ef:f0:a3:f3:a3:ea:0a:43:34:92:53:1b:5d:86:06: ca:d6:fb:45:fc:1f:85:37:1e:58:e4:4a:e5:d3:4a: 46:7b:2c:c8:3c:04:54:46:ad:f4:d4:b6:b1:36:a5: 8a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A2:C8:47:6C:09:F3:C2:2E:4A:84:1F:6A:0F:51:1F:D2:34:69:CC X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:ba:6e:ab:12:dc:86:9d:3f:01:45:6d:d2:39:66:32:46:f9: 68:56:84:72:aa:bc:ca:36:64:71:8e:34:0f:ad:67:4f:f4:91: 41:8b:76:d1:33:98:23:ff:a1:b9:02:11:c4:7b:26:f2:4f:44: 45:2a:bc:62:37:20:b1:aa:06:ea:fe:f9:ab:67:4f:2f:1f:01: 97:de:48:20:36:36:e1:2b:ea:09:ad:c8:93:3b:26:dd:b7:f9: 9e:d6:00:cf:ac:e7:09:f7:e5:57:b6:3b:54:11:a5:3c:69:09: b6:25:9e:e8:39:0a:ee:47:9e:a0:76:13:a4:31:6b:d8:04:58: e3:c3:d6:de:8c:11:ad:07:74:e8:15:92:41:06:3a:4e:81:26: db:5d:b0:59:6c:23:41:e1:c1:f1:3a:c8:0f:2f:f1:89:c4:63: e5:7e:03:42:ee:83:d8:fe:fc:8b:c2:8e:d2:f5:d9:fb:39:78: 00:b6:a6:4c:b8:da:d2:3e:68:61:88:f3:cf:d3:f6:21:9d:77: a5:54:5d:34:3f:4a:b0:d1:c2:bb:6f:a0:92:59:b8:9b:28:85: 41:a7:96:ed:ee:3a:d3:57:f8:2a:ec:02:2a:bc:16:6a:69:d0: d6:60:28:1b:64:49:0d:5f:67:68:19:19:da:b6:38:75:5e:24: 69:b9:a0:1e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUDZn5u5ZrSFLiWA6K2kUMCuTKdqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNTEwMjcwMDI2NDZaFw0yNTEwMjgwMzM0NDZaMDMxMTAvBgNV BAMTKEZGQTJDODQ3NkMwOUYzQzIyRTRBODQxRjZBMEY1MTFGRDIzNDY5Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9eCytDLqWe/4e96wBugD1Osmf djkf8ArOdXgHBqv6HQH1sBSYNhcEwIsgCGhoCNN7ggYl9n4RaBxppVzGuwbEKbJY xvBOFhTB85nXGeKSYL1uk/fb47RbuWxDqHKStyRWI3elEcTPYUEfYx5wYhTneE8A NzeMXDR1BLj+OibRPuiS8ZnWvl2lKH4uHPBATZXiMVPKMzy56jApsrxEsrPCjAAX uaxy47NqUZtyqqoTv40/fpSs5WWYXJ8gY/O7ziuC0XPCnRbG8cJPkNjtHT+I+u/w o/Oj6gpDNJJTG12GBsrW+0X8H4U3HljkSuXTSkZ7LMg8BFRGrfTUtrE2pYobAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU/6LIR2wJ88IuSoQfag9RH9I0acwwHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMu6bqsS3IadPwFFbdI5 ZjJG+WhWhHKqvMo2ZHGONA+tZ0/0kUGLdtEzmCP/obkCEcR7JvJPREUqvGI3ILGq Bur++atnTy8fAZfeSCA2NuEr6gmtyJM7Jt23+Z7WAM+s5wn35Ve2O1QRpTxpCbYl nug5Cu5HnqB2E6Qxa9gEWOPD1t6MEa0HdOgVkkEGOk6BJttdsFlsI0HhwfE6yA8v 8YnEY+V+A0Lug9j+/IvCjtL12fs5eAC2pky42tI+aGGI88/T9iGdd6VUXTQ/SrDR wrtvoJJZuJsohUGnlu3uOtNX+CrsAiq8Fmpp0NZgKBtkSQ1fZ2gZGdq2OHVeJGm5 oB4= -----END CERTIFICATE-----Generated at Mon Oct 27 15:34:02 2025 by rpki-client