$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft File: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft (raw, json) Hash identifier: k4Mey43SXlX9qU1Sc8oSL5iS3V6bi/JBzc9LN/SaXTs= Subject key identifier: EB:D8:1D:0A:E3:F8:EA:2D:79:75:5D:E6:51:20:8C:B3:23:91:19:D7 Authority key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 Certificate issuer: /CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Certificate serial: 2C23369D5655DCC408C3EE61C0F81E950D7A129B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft Manifest number: 022D Signing time: Tue 16 Sep 2025 11:17:57 +0000 Manifest this update: Tue 16 Sep 2025 11:12:57 +0000 Manifest next update: Wed 17 Sep 2025 11:53:57 +0000 Files and hashes: 1: 326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (hash: rxzc3BrYti6kxmXubVnEFiS+UC7vkumI3P6AvUB5lwM=) 2: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl (hash: iBILcvVoeQYUHC/BqOgKDsiZaVDSpImKeJwwyoVjsbw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Sep 2025 08:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:23:36:9d:56:55:dc:c4:08:c3:ee:61:c0:f8:1e:95:0d:7a:12:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Validity Not Before: Sep 16 11:12:57 2025 GMT Not After : Sep 17 11:53:57 2025 GMT Subject: CN=EBD81D0AE3F8EA2D79755DE651208CB3239119D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:53:7a:44:0d:73:98:c9:53:65:77:5b:05:35: a2:66:73:70:90:96:67:12:c5:9a:3e:34:f3:fc:1c: 06:df:18:c3:dc:47:0f:ff:88:24:63:75:8a:14:f8: 6c:60:ff:d4:1d:6b:56:87:8f:a8:7f:0e:53:6b:12: 09:e1:f9:b2:02:d3:97:62:ef:3d:aa:70:e5:58:fe: 95:37:30:89:93:d3:f3:f6:62:b5:1b:dd:e6:3e:af: b0:4f:22:63:f8:48:f9:97:d0:eb:33:64:88:ed:29: f8:ce:8a:75:2a:15:41:9b:26:a9:6c:62:86:f3:d0: 7a:8a:8f:03:4e:1e:7e:a6:4d:6c:33:e1:3a:94:df: 44:d3:f8:7c:ec:87:75:43:60:4c:ba:61:76:38:cf: 48:46:a9:76:1a:6a:45:ad:ac:ce:57:8f:9a:f8:40: af:c2:da:a1:f0:1e:1a:dc:28:3e:d2:00:52:11:e9: 60:31:0a:07:17:90:be:e6:2a:bb:79:13:95:8a:7c: 73:b9:56:32:7a:72:e9:8b:aa:f3:62:91:0f:68:1e: 74:87:ba:6f:85:69:bf:94:72:20:b9:b3:8e:3a:b5: 32:45:0f:66:b0:5c:42:92:4b:38:45:52:3d:62:db: 86:42:38:5a:67:3c:2b:11:38:fa:65:92:d2:18:db: 7c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D8:1D:0A:E3:F8:EA:2D:79:75:5D:E6:51:20:8C:B3:23:91:19:D7 X509v3 Authority Key Identifier: keyid:1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:6e:1c:39:b7:96:20:c7:c7:50:70:8c:85:a2:fc:5b:f8:08: 22:52:6a:36:16:c5:c7:21:80:6d:71:fd:34:4d:2e:20:d1:9e: 9e:0b:e6:a2:a9:a1:24:82:9c:de:c9:b6:6e:7f:1d:df:2d:1d: 3f:23:70:f6:05:56:8e:28:d6:fc:12:0b:f5:ac:1b:03:dd:4b: af:0b:ea:ea:38:f2:d0:26:98:a6:ac:e1:19:73:89:8f:74:b2: 1b:84:15:eb:11:bf:45:67:e3:19:db:3d:32:1b:64:5a:cb:a4: 02:cd:60:ec:b9:8a:40:f5:22:2a:57:ca:64:dc:07:3b:98:e1: 4f:7b:cb:6b:8f:53:7f:28:7e:15:ff:f1:83:63:1f:99:42:08: 77:c3:44:99:55:13:1f:89:6f:d2:a4:b7:ad:d7:64:cc:bb:06: b8:a3:08:b9:7f:e6:b4:95:af:d9:23:3d:b6:4b:b1:66:d8:42: 5c:b3:21:3b:d4:6a:8f:ff:7a:81:82:69:79:77:65:13:17:9c: ef:22:b0:92:c2:a1:00:9a:6c:4d:c8:e0:f4:2b:a6:f3:87:6b: 29:76:8f:cd:a0:84:8d:41:f3:e9:dc:be:75:27:a8:b4:d2:ee: 0e:28:0e:04:b0:bb:be:b5:53:8f:11:1f:cb:83:93:09:9f:56: e6:5f:a8:8a -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIULCM2nVZV3MQIw+5hwPgelQ16EpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJB NkI3RUY3MTAeFw0yNTA5MTYxMTEyNTdaFw0yNTA5MTcxMTUzNTdaMDMxMTAvBgNV BAMTKEVCRDgxRDBBRTNGOEVBMkQ3OTc1NURFNjUxMjA4Q0IzMjM5MTE5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJU3pEDXOYyVNld1sFNaJmc3CQ lmcSxZo+NPP8HAbfGMPcRw//iCRjdYoU+Gxg/9Qda1aHj6h/DlNrEgnh+bIC05di 7z2qcOVY/pU3MImT0/P2YrUb3eY+r7BPImP4SPmX0OszZIjtKfjOinUqFUGbJqls Yobz0HqKjwNOHn6mTWwz4TqU30TT+Hzsh3VDYEy6YXY4z0hGqXYaakWtrM5Xj5r4 QK/C2qHwHhrcKD7SAFIR6WAxCgcXkL7mKrt5E5WKfHO5VjJ6cumLqvNikQ9oHnSH um+Fab+UciC5s446tTJFD2awXEKSSzhFUj1i24ZCOFpnPCsROPplktIY23w5AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU69gdCuP46i15dV3mUSCMsyORGdcwHwYDVR0j BBgwFoAUGrsI1BpaaXQyDZeId2mhW6a373EwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2IzZGE1Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAv MUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQUJCMDhENDFBNUE2OTc0MzIwRDk3ODg3NzY5QTE1 QkE2QjdFRjcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2IzZGE1 Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAvMUFCQjA4RDQxQTVBNjk3NDMy MEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHduHDm3liDHx1BwjIWi /Fv4CCJSajYWxcchgG1x/TRNLiDRnp4L5qKpoSSCnN7Jtm5/Hd8tHT8jcPYFVo4o 1vwSC/WsGwPdS68L6uo48tAmmKas4RlziY90shuEFesRv0Vn4xnbPTIbZFrLpALN YOy5ikD1IipXymTcBzuY4U97y2uPU38ofhX/8YNjH5lCCHfDRJlVEx+Jb9Kkt63X ZMy7BrijCLl/5rSVr9kjPbZLsWbYQlyzITvUao//eoGCaXl3ZRMXnO8isJLCoQCa bE3I4PQrpvOHayl2j82ghI1B8+ncvnUnqLTS7g4oDgSwu761U48RH8uDkwmfVuZf qIo= -----END CERTIFICATE-----Generated at Tue Sep 16 19:49:28 2025 by rpki-client