$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: JCQMKmYcDkl6H7X9LrHw67Nwuw5PwRgBYXorK2gdvbY= Subject key identifier: AF:46:80:5A:7B:8C:7D:5C:CF:8C:D6:D8:44:A5:D9:8D:EE:9E:29:0C Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 620853693A4BA653ED6843A6D83491794E9A205C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 0260 Signing time: Sun 26 Oct 2025 22:31:36 +0000 Manifest this update: Sun 26 Oct 2025 22:26:36 +0000 Manifest next update: Mon 27 Oct 2025 23:00:36 +0000 Files and hashes: 1: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: Fz8U1wt9zU31GPtD7zpCfveW3pswo5nHyjtJNWCVBAI=) 2: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: 40KX5Azg+QOWUNYOrdl6IsWrdX+iJJgcObJYGtl3Q6w=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:08:53:69:3a:4b:a6:53:ed:68:43:a6:d8:34:91:79:4e:9a:20:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Oct 26 22:26:36 2025 GMT Not After : Oct 27 23:00:36 2025 GMT Subject: CN=AF46805A7B8C7D5CCF8CD6D844A5D98DEE9E290C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:ad:7b:a3:e2:43:b3:56:2f:2d:e4:dd:84: df:c8:32:b5:32:58:8e:aa:44:58:ff:79:50:e8:61: 70:c0:0e:94:40:19:6e:f5:55:97:4f:9e:22:51:ce: 51:43:70:e8:fa:83:75:75:dc:fd:e7:72:06:57:b2: 72:63:e9:87:fc:d2:39:ee:c3:45:2d:62:b0:da:0f: 99:71:57:9b:c7:f9:7f:0c:04:ea:58:f5:63:9b:16: a0:97:1e:90:3b:c0:87:ae:d3:45:e8:73:b1:6d:bb: 40:b1:9c:93:cb:16:f3:8a:41:4b:4b:b2:66:4a:07: de:b8:fa:13:25:36:bd:0a:60:a8:1a:21:ae:e0:c5: 49:94:31:81:b1:03:d5:6e:ca:0a:7d:5e:a4:1c:86: ef:3b:a2:64:e8:f4:be:8f:6e:b4:7c:91:92:c3:0d: 21:bf:00:63:4e:3b:22:ca:6a:a1:96:61:2d:88:98: aa:f2:51:f9:31:a1:fc:30:dc:6e:67:0d:39:b8:2d: 90:9a:6c:65:ff:00:8b:1b:44:77:92:48:22:a1:63: fa:fd:2a:7f:42:ed:81:cd:6b:e6:96:20:cc:74:0c: 09:d7:f6:8d:9b:f9:c6:ea:aa:cf:38:86:0f:c2:be: 96:d2:c3:68:75:7b:7a:72:b2:a4:e6:61:c9:a7:8f: 50:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:46:80:5A:7B:8C:7D:5C:CF:8C:D6:D8:44:A5:D9:8D:EE:9E:29:0C X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a3:f7:ae:cf:47:b1:d8:f2:24:a7:5d:97:09:e1:f5:6b:3d: 06:10:f8:81:c7:70:2e:47:6f:b0:21:47:47:b1:37:e8:43:85: 59:9a:45:ba:a7:57:a5:84:76:62:28:08:4f:20:f5:65:63:26: 58:89:ec:73:a7:2b:ca:29:b8:3b:83:76:a9:1c:59:77:c8:ab: 82:39:30:77:df:55:8b:86:cb:ae:55:f7:7a:e4:f5:c9:62:cb: de:77:41:6a:6d:b1:8d:4f:3f:50:ef:79:46:d1:53:f1:d6:dc: 86:a8:d1:85:8e:5d:16:19:a1:a2:32:85:29:91:07:5b:f5:f4: d0:c5:18:2e:68:55:27:d9:b9:5d:35:79:3a:6c:60:20:db:c6: c1:d2:8b:7d:3a:37:76:d4:34:bd:c6:73:3c:80:ef:ff:90:e8: 8f:cb:36:ca:af:f4:7b:b0:03:d0:58:4d:ff:16:95:dd:ef:29: 5e:03:4a:cf:6d:c9:ff:4c:5c:82:ad:59:6c:d0:51:b9:4d:d1: 67:68:e1:f8:d3:32:97:b0:5c:a5:77:64:1d:dd:d9:0d:13:73: 46:97:79:e7:7c:71:0e:02:0d:50:4e:06:fd:42:fc:1b:fa:c9: a1:df:25:30:96:ed:bd:b6:cd:8c:8d:30:3f:8b:dd:ad:59:18: 63:d5:c8:5f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUYghTaTpLplPtaEOm2DSReU6aIFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNTEwMjYyMjI2MzZaFw0yNTEwMjcyMzAwMzZaMDMxMTAvBgNV BAMTKEFGNDY4MDVBN0I4QzdENUNDRjhDRDZEODQ0QTVEOThERUU5RTI5MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqvq17o+JDs1YvLeTdhN/IMrUy WI6qRFj/eVDoYXDADpRAGW71VZdPniJRzlFDcOj6g3V13P3ncgZXsnJj6Yf80jnu w0UtYrDaD5lxV5vH+X8MBOpY9WObFqCXHpA7wIeu00Xoc7Ftu0CxnJPLFvOKQUtL smZKB964+hMlNr0KYKgaIa7gxUmUMYGxA9Vuygp9XqQchu87omTo9L6PbrR8kZLD DSG/AGNOOyLKaqGWYS2ImKryUfkxofww3G5nDTm4LZCabGX/AIsbRHeSSCKhY/r9 Kn9C7YHNa+aWIMx0DAnX9o2b+cbqqs84hg/CvpbSw2h1e3pysqTmYcmnj1DbAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUr0aAWnuMfVzPjNbYRKXZje6eKQwwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJuj967PR7HY8iSnXZcJ 4fVrPQYQ+IHHcC5Hb7AhR0exN+hDhVmaRbqnV6WEdmIoCE8g9WVjJliJ7HOnK8op uDuDdqkcWXfIq4I5MHffVYuGy65V93rk9cliy953QWptsY1PP1DveUbRU/HW3Iao 0YWOXRYZoaIyhSmRB1v19NDFGC5oVSfZuV01eTpsYCDbxsHSi306N3bUNL3GczyA 7/+Q6I/LNsqv9HuwA9BYTf8Wld3vKV4DSs9tyf9MXIKtWWzQUblN0Wdo4fjTMpew XKV3ZB3d2Q0Tc0aXeed8cQ4CDVBOBv1C/Bv6yaHfJTCW7b22zYyNMD+L3a1ZGGPV yF8= -----END CERTIFICATE-----Generated at Mon Oct 27 15:16:29 2025 by rpki-client