$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: FQe7XX7DRdkHVHRSOIiZd7nOemf/RXhQzxq8ntLcrKg= Subject key identifier: B4:4E:8A:DD:E3:7D:1A:85:DA:A6:F7:69:E8:BC:80:F7:C2:98:01:FD Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 35D9DFE556559E2B5CAAEC14A7F7446A2B202C8D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 0263 Signing time: Mon 27 Oct 2025 03:11:55 +0000 Manifest this update: Mon 27 Oct 2025 03:06:55 +0000 Manifest next update: Tue 28 Oct 2025 05:50:55 +0000 Files and hashes: 1: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: rnRIu2jKvZgrtXbDEvrd3knbru/MeVuQizYlXqgcAbo=) 2: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 3wo4yWYqUm70prj7oF5pGF3zOR0/7RB8Epa8stuidcg=) 3: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: vxaqD429klEPt03aXXniKGxzQoHI4Ar9F2T3pRAzV/Y=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d9:df:e5:56:55:9e:2b:5c:aa:ec:14:a7:f7:44:6a:2b:20:2c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Oct 27 03:06:55 2025 GMT Not After : Oct 28 05:50:55 2025 GMT Subject: CN=B44E8ADDE37D1A85DAA6F769E8BC80F7C29801FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b2:6f:a0:4c:1b:c9:74:21:13:e9:ad:f0:02: 2a:ed:1b:95:d1:15:03:f6:69:b3:9b:93:7c:9a:20: 82:54:36:d4:f2:6c:b7:6c:3d:b4:1a:af:db:6f:33: 8c:d3:9e:4a:fd:86:e4:4e:69:2b:53:c1:fc:b1:bf: 08:5c:39:c6:65:5c:0e:74:eb:00:74:d9:14:10:b7: ce:31:64:58:d4:c0:94:d0:ba:ff:90:42:09:6f:0a: 07:33:c1:0f:21:b6:0a:4f:9f:dd:1d:0f:63:e5:66: ab:61:69:b0:ec:f0:73:63:d8:1e:09:96:95:b5:dd: 87:c7:b1:88:05:eb:df:08:9a:c5:8e:0c:b4:47:00: 36:58:f4:fa:56:5a:fc:03:c3:0b:54:34:fb:a5:83: 8f:bf:9f:be:de:48:2e:f2:14:be:fe:f5:a5:55:2f: d1:23:04:ea:f9:d6:26:10:9d:24:a0:dd:e1:fe:d7: a5:d5:2c:9b:b9:2a:bb:da:0e:16:0c:3c:ed:ba:42: a1:98:28:75:e3:57:43:c9:74:55:8b:58:f7:ee:85: cf:c6:10:35:81:7f:ea:8a:3b:eb:3a:02:78:46:f4: 64:c9:d8:2a:f0:af:f3:41:db:0b:8a:dd:b3:5f:61: 7e:07:7d:aa:37:f0:2d:5d:e0:3f:c1:53:6f:13:d8: 2a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4E:8A:DD:E3:7D:1A:85:DA:A6:F7:69:E8:BC:80:F7:C2:98:01:FD X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:48:b2:e8:94:ca:7f:f1:f6:d3:2f:ed:de:f3:71:5a:76:0a: fc:e4:0e:8f:13:c2:21:97:39:c3:88:d0:5b:b8:e9:c5:c2:4e: 3a:f3:f7:47:96:3c:9e:21:df:49:35:dd:02:9e:46:20:9e:34: 56:aa:9a:b4:e7:3d:a6:96:64:58:d5:a3:a5:44:54:50:ae:fd: 85:95:a6:e5:33:d7:f9:78:ad:14:cb:f3:c9:d3:a7:3f:21:f4: 45:c6:6c:0c:8b:99:d6:35:7c:93:8a:33:62:2c:52:98:e1:e0: c1:63:21:c5:ba:52:d2:71:0d:9e:52:25:b0:71:2a:0c:a8:61: 37:b6:3e:80:ee:02:db:a9:03:bc:0b:c7:b5:7e:63:3e:fa:82: 88:2a:70:a7:e8:ca:d0:00:8b:7a:b2:10:00:23:6c:2b:d7:e5: fd:8f:25:83:c7:8a:8e:d1:ff:5f:9f:9e:ba:62:e4:83:b5:db: 7a:0d:10:11:ba:56:62:a6:35:c6:57:e1:8a:52:fc:5b:0e:9b: 35:fb:fb:c0:ea:52:1e:81:5b:bd:f8:df:fa:6b:58:a3:b3:61: 78:10:89:d5:e2:f9:e0:a0:5c:30:56:ee:5b:ad:87:4b:7f:89: 5c:c0:aa:49:7a:37:78:73:e0:b4:e5:c7:fa:63:e5:ce:00:97: 31:73:7d:d2 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUNdnf5VZVnitcquwUp/dEaisgLI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNTEwMjcwMzA2NTVaFw0yNTEwMjgwNTUwNTVaMDMxMTAvBgNV BAMTKEI0NEU4QURERTM3RDFBODVEQUE2Rjc2OUU4QkM4MEY3QzI5ODAxRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVsm+gTBvJdCET6a3wAirtG5XR FQP2abObk3yaIIJUNtTybLdsPbQar9tvM4zTnkr9huROaStTwfyxvwhcOcZlXA50 6wB02RQQt84xZFjUwJTQuv+QQglvCgczwQ8htgpPn90dD2PlZqthabDs8HNj2B4J lpW13YfHsYgF698ImsWODLRHADZY9PpWWvwDwwtUNPulg4+/n77eSC7yFL7+9aVV L9EjBOr51iYQnSSg3eH+16XVLJu5KrvaDhYMPO26QqGYKHXjV0PJdFWLWPfuhc/G EDWBf+qKO+s6AnhG9GTJ2Crwr/NB2wuK3bNfYX4Hfao38C1d4D/BU28T2CpnAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUtE6K3eN9GoXapvdp6LyA98KYAf0wHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI5IsuiUyn/x9tMv7d7z cVp2CvzkDo8TwiGXOcOI0Fu46cXCTjrz90eWPJ4h30k13QKeRiCeNFaqmrTnPaaW ZFjVo6VEVFCu/YWVpuUz1/l4rRTL88nTpz8h9EXGbAyLmdY1fJOKM2IsUpjh4MFj IcW6UtJxDZ5SJbBxKgyoYTe2PoDuAtupA7wLx7V+Yz76gogqcKfoytAAi3qyEAAj bCvX5f2PJYPHio7R/1+fnrpi5IO123oNEBG6VmKmNcZX4YpS/FsOmzX7+8DqUh6B W7343/prWKOzYXgQidXi+eCgXDBW7luth0t/iVzAqkl6N3hz4LTlx/pj5c4AlzFz fdI= -----END CERTIFICATE-----Generated at Mon Oct 27 15:26:38 2025 by rpki-client