$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json) Hash identifier: Oh9SsaFxyIAak6kqM696srCAwFjRmiFwjIi1NfI7aN4= Subject key identifier: 42:81:CA:42:B9:15:D8:C0:3A:76:7C:BF:8F:2D:4B:50:5E:07:88:00 Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Certificate serial: 0AB88CEFBA67B423F5EA5CAE5A91C055FB36417C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft Manifest number: 0135 Signing time: Mon 27 Oct 2025 01:36:51 +0000 Manifest this update: Mon 27 Oct 2025 01:31:50 +0000 Manifest next update: Tue 28 Oct 2025 04:06:50 +0000 Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: 5QGhOyllEI202n/kxuGQRCvrn0Jao11rGVOmzfFU3gc=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b8:8c:ef:ba:67:b4:23:f5:ea:5c:ae:5a:91:c0:55:fb:36:41:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Validity Not Before: Oct 27 01:31:50 2025 GMT Not After : Oct 28 04:06:50 2025 GMT Subject: CN=4281CA42B915D8C03A767CBF8F2D4B505E078800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6c:c9:0a:15:f8:c9:b8:4e:09:76:b3:cd:94: 79:a7:e4:29:b3:f5:5b:2c:8b:80:c0:20:c3:d5:a6: 31:6b:7d:b0:26:02:bc:7d:e9:94:2b:4e:54:29:d8: 81:7d:23:df:58:cd:5a:54:f9:2d:92:32:39:b8:83: 91:08:89:f5:06:22:74:71:a4:42:27:8d:9a:61:6a: 5f:33:00:eb:02:39:5e:79:eb:a7:38:4f:b0:03:44: 3f:07:09:1e:4c:8c:e3:09:2a:6a:53:0b:f3:30:d0: 8b:1d:42:43:8d:1d:9d:01:77:cf:37:0e:9d:31:02: 8c:13:70:ca:5b:2f:00:96:fa:92:4c:92:7e:0e:50: 73:3a:62:96:00:d1:ad:dc:13:ce:ac:69:e2:4e:46: 98:21:7f:d6:c2:4f:53:1a:c6:72:db:47:fe:8e:6e: 06:f9:51:4a:20:a9:a0:da:12:53:ff:8b:b6:01:0a: 1b:dd:b4:19:8c:6c:22:d1:54:89:b3:b6:5c:79:31: f7:70:7b:aa:97:41:27:c9:cd:8c:11:de:90:ee:64: 75:76:20:92:31:1f:c6:51:8e:5c:88:83:75:b3:b2: fd:5d:19:e3:03:3f:7d:9b:57:21:64:8a:54:6f:a5: f0:fc:3e:cb:fa:31:a2:93:ec:ab:d6:6c:68:89:c5: 99:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:81:CA:42:B9:15:D8:C0:3A:76:7C:BF:8F:2D:4B:50:5E:07:88:00 X509v3 Authority Key Identifier: keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:53:e8:88:f4:2b:6e:f7:42:10:a2:72:a6:50:97:47:31:87: a5:37:c5:c1:bf:b3:37:60:00:72:e0:2f:8a:ff:99:9e:61:7a: fe:b6:0a:3c:90:9c:df:42:1e:d6:38:5a:4d:f7:a9:da:bd:cb: 20:18:46:12:be:90:69:c9:99:70:30:ba:1d:13:43:c1:de:ad: 1e:97:d8:2c:30:da:14:75:59:1c:8d:af:aa:aa:e3:77:9e:75: 00:61:7b:c0:57:5e:94:c3:eb:ce:d1:dc:42:71:c9:3f:e8:0f: 5d:63:d4:fa:59:13:c1:70:4a:3c:a2:b4:d2:ae:07:51:22:eb: 16:5e:5a:39:7a:13:4e:32:1f:b0:f6:b7:79:b6:59:e7:98:af: 4c:d3:e2:53:c3:96:27:4a:50:b2:ce:ee:92:40:c5:65:2c:b2: 5a:8b:77:d3:78:02:e9:6a:db:0c:0d:28:c4:bb:8e:af:7b:9c: 53:39:dd:21:33:3b:4b:57:21:cc:a0:20:08:90:37:9f:9b:58: 2b:14:4b:dd:a6:19:5d:12:98:ad:12:a4:c9:e7:99:5b:02:53: b1:7e:c9:f2:7b:2e:01:fb:b4:ab:86:a8:44:f4:21:ff:f6:b3: f7:41:ad:17:f6:b4:6a:e8:34:d5:a9:53:c4:37:c3:ff:09:55: 88:5d:bb:78 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUCriM77pntCP16lyuWpHAVfs2QXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz REREMDgwRDAeFw0yNTEwMjcwMTMxNTBaFw0yNTEwMjgwNDA2NTBaMDMxMTAvBgNV BAMTKDQyODFDQTQyQjkxNUQ4QzAzQTc2N0NCRjhGMkQ0QjUwNUUwNzg4MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6bMkKFfjJuE4JdrPNlHmn5Cmz 9Vssi4DAIMPVpjFrfbAmArx96ZQrTlQp2IF9I99YzVpU+S2SMjm4g5EIifUGInRx pEInjZphal8zAOsCOV5566c4T7ADRD8HCR5MjOMJKmpTC/Mw0IsdQkONHZ0Bd883 Dp0xAowTcMpbLwCW+pJMkn4OUHM6YpYA0a3cE86saeJORpghf9bCT1MaxnLbR/6O bgb5UUogqaDaElP/i7YBChvdtBmMbCLRVImztlx5Mfdwe6qXQSfJzYwR3pDuZHV2 IJIxH8ZRjlyIg3Wzsv1dGeMDP32bVyFkilRvpfD8Psv6MaKT7KvWbGiJxZmbAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUQoHKQrkV2MA6dny/jy1LUF4HiAAwHwYDVR0j BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADZT6Ij0K273QhCicqZQ l0cxh6U3xcG/szdgAHLgL4r/mZ5hev62CjyQnN9CHtY4Wk33qdq9yyAYRhK+kGnJ mXAwuh0TQ8HerR6X2Cww2hR1WRyNr6qq43eedQBhe8BXXpTD687R3EJxyT/oD11j 1PpZE8FwSjyitNKuB1Ei6xZeWjl6E04yH7D2t3m2WeeYr0zT4lPDlidKULLO7pJA xWUsslqLd9N4Aulq2wwNKMS7jq97nFM53SEzO0tXIcygIAiQN5+bWCsUS92mGV0S mK0SpMnnmVsCU7F+yfJ7LgH7tKuGqET0If/2s/dBrRf2tGroNNWpU8Q3w/8JVYhd u3g= -----END CERTIFICATE-----Generated at Mon Oct 27 15:31:01 2025 by rpki-client