$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft File: F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft (raw, json) Hash identifier: KGllB2Bg41jz16gUFPJwB115PPgB1gMsS5yKjUXAX6I= Subject key identifier: 4A:F2:70:4F:11:E1:D8:DB:E8:DC:4A:99:AB:16:29:1A:E5:94:29:DC Authority key identifier: F5:D5:46:31:B7:09:1E:1F:4B:8B:02:E7:0F:F7:6F:07:3F:8B:23:20 Certificate issuer: /CN=F5D54631B7091E1F4B8B02E70FF76F073F8B2320 Certificate serial: 7AE7E275A2B8863EF5B5601161E501F50F2E0851 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft Manifest number: 0142 Signing time: Mon 27 Oct 2025 00:26:46 +0000 Manifest this update: Mon 27 Oct 2025 00:21:46 +0000 Manifest next update: Tue 28 Oct 2025 03:46:46 +0000 Files and hashes: 1: F5D54631B7091E1F4B8B02E70FF76F073F8B2320.crl (hash: MS3oEm7rnchPJ/tK1H3G68AtsNIvQQC8CDqITX9KjPQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e7:e2:75:a2:b8:86:3e:f5:b5:60:11:61:e5:01:f5:0f:2e:08:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5D54631B7091E1F4B8B02E70FF76F073F8B2320 Validity Not Before: Oct 27 00:21:46 2025 GMT Not After : Oct 28 03:46:46 2025 GMT Subject: CN=4AF2704F11E1D8DBE8DC4A99AB16291AE59429DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:41:c9:56:0e:6b:b0:c9:2c:08:8d:50:28:11: cc:1c:bd:11:f1:ac:0e:f1:e4:56:0e:a1:3d:1b:25: 5b:d8:62:02:b9:99:60:a5:4f:5b:79:38:3d:bb:3d: c8:ac:7e:c5:75:09:97:c7:f4:c2:b4:71:44:59:b9: 1b:5c:b0:07:b7:a1:e5:d1:45:7a:75:39:22:82:e8: 84:1a:aa:bb:4e:ee:a9:fb:5a:93:f9:44:62:e9:7b: 61:8a:76:db:00:bd:42:d6:4b:95:f9:86:2d:60:31: ed:9b:97:e9:22:3d:3a:26:da:81:f1:7a:d5:e1:87: 91:0d:10:02:91:1c:3e:c7:3b:9e:56:70:c5:c2:f8: 23:7b:49:22:79:77:87:e2:a4:63:2d:c6:b9:06:d5: 4d:8b:56:6c:e5:c7:03:05:a2:7c:66:0a:df:7f:2d: e9:21:49:e1:c0:59:92:ea:36:30:3e:35:10:73:80: a5:8d:14:d0:97:6d:de:b1:b8:c9:b5:e5:98:17:46: e2:68:81:da:d0:70:78:b8:17:32:61:00:ec:f2:e1: 9b:1a:c8:3b:af:07:f9:c0:54:55:20:eb:33:51:eb: c5:fa:34:92:d3:06:51:ed:ec:de:65:d8:c2:b1:37: 42:0d:c2:d1:0c:79:ef:71:85:80:85:0c:54:ff:2b: 12:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F2:70:4F:11:E1:D8:DB:E8:DC:4A:99:AB:16:29:1A:E5:94:29:DC X509v3 Authority Key Identifier: keyid:F5:D5:46:31:B7:09:1E:1F:4B:8B:02:E7:0F:F7:6F:07:3F:8B:23:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:89:02:c3:7f:ec:ca:7e:27:0d:05:a9:c2:aa:3e:9a:1f:2e: fa:84:ea:57:07:4b:8a:92:49:43:8a:27:08:c4:3b:73:76:56: 32:76:5f:c2:74:49:bf:88:e4:15:f2:ab:42:3e:a3:e7:47:8d: c9:99:89:aa:a0:43:18:01:d3:36:68:64:a4:bf:45:16:ef:d0: 3f:88:5a:74:5e:3f:46:c5:3a:41:42:19:70:5a:f9:19:22:c1: 0e:21:8b:e0:d5:9c:84:00:c0:ee:3b:60:16:73:b5:ea:e6:e9: 58:94:19:03:d7:85:01:a8:c1:93:47:12:ec:4b:59:91:c7:08: 0b:59:8a:1a:f0:7f:76:a6:08:1a:fd:24:be:a5:c3:0b:66:e6: 10:8c:e3:64:bc:35:86:50:55:05:18:63:64:af:98:02:6f:c6: 44:a0:6c:c0:b8:16:9e:fd:42:93:86:e5:38:b8:57:45:3e:b1: e7:ed:42:86:dd:46:bb:ae:83:4d:12:01:15:cb:58:a3:d6:d0: 43:fd:eb:36:e3:dd:eb:7b:7d:b6:71:22:94:3d:0d:4f:25:fb: 05:af:b6:db:c8:ae:50:f3:6b:01:8f:8f:32:85:77:78:99:f1: 43:30:00:a0:fd:96:9c:7a:bf:e8:39:fc:d9:21:6f:0d:9b:10: 54:b3:7c:b5 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUeufidaK4hj71tWARYeUB9Q8uCFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVENTQ2MzFCNzA5MUUxRjRCOEIwMkU3MEZGNzZGMDcz RjhCMjMyMDAeFw0yNTEwMjcwMDIxNDZaFw0yNTEwMjgwMzQ2NDZaMDMxMTAvBgNV BAMTKDRBRjI3MDRGMTFFMUQ4REJFOERDNEE5OUFCMTYyOTFBRTU5NDI5REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeQclWDmuwySwIjVAoEcwcvRHx rA7x5FYOoT0bJVvYYgK5mWClT1t5OD27PcisfsV1CZfH9MK0cURZuRtcsAe3oeXR RXp1OSKC6IQaqrtO7qn7WpP5RGLpe2GKdtsAvULWS5X5hi1gMe2bl+kiPTom2oHx etXhh5ENEAKRHD7HO55WcMXC+CN7SSJ5d4fipGMtxrkG1U2LVmzlxwMFonxmCt9/ LekhSeHAWZLqNjA+NRBzgKWNFNCXbd6xuMm15ZgXRuJogdrQcHi4FzJhAOzy4Zsa yDuvB/nAVFUg6zNR68X6NJLTBlHt7N5l2MKxN0INwtEMee9xhYCFDFT/KxLvAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUSvJwTxHh2Nvo3EqZqxYpGuWUKdwwHwYDVR0j BBgwFoAU9dVGMbcJHh9LiwLnD/dvBz+LIyAwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzZmNTE2MzIwNTA5YjRkMmQ5M2VmMmQ1NjEwZjVmMjMwLzAv RjVENTQ2MzFCNzA5MUUxRjRCOEIwMkU3MEZGNzZGMDczRjhCMjMyMC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GNUQ1NDYzMUI3MDkxRTFGNEI4QjAyRTcwRkY3NkYw NzNGOEIyMzIwLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzZmNTE2 MzIwNTA5YjRkMmQ5M2VmMmQ1NjEwZjVmMjMwLzAvRjVENTQ2MzFCNzA5MUUxRjRC OEIwMkU3MEZGNzZGMDczRjhCMjMyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACWJAsN/7Mp+Jw0FqcKq PpofLvqE6lcHS4qSSUOKJwjEO3N2VjJ2X8J0Sb+I5BXyq0I+o+dHjcmZiaqgQxgB 0zZoZKS/RRbv0D+IWnReP0bFOkFCGXBa+RkiwQ4hi+DVnIQAwO47YBZzterm6ViU GQPXhQGowZNHEuxLWZHHCAtZihrwf3amCBr9JL6lwwtm5hCM42S8NYZQVQUYY2Sv mAJvxkSgbMC4Fp79QpOG5Ti4V0U+seftQobdRruug00SARXLWKPW0EP96zbj3et7 fbZxIpQ9DU8l+wWvttvIrlDzawGPjzKFd3iZ8UMwAKD9lpx6v+g5/Nkhbw2bEFSz fLU= -----END CERTIFICATE-----Generated at Mon Oct 27 15:38:41 2025 by rpki-client