$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft File: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft (raw, json) Hash identifier: 4OR6UqavnplTs/fcpAmAQyqvZhOHwgU0IAZnM9NgF3c= Subject key identifier: 75:CA:37:19:FD:00:C0:03:22:11:35:7C:5C:53:15:2B:E6:40:46:FC Authority key identifier: 1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87 Certificate issuer: /CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87 Certificate serial: 3E59D7CCC979F9343CDFCE3357E121093A0E0375 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft Manifest number: 025E Signing time: Sun 26 Oct 2025 22:31:36 +0000 Manifest this update: Sun 26 Oct 2025 22:26:36 +0000 Manifest next update: Mon 27 Oct 2025 23:48:36 +0000 Files and hashes: 1: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl (hash: wTran4CGqtAZSNbGlXIi/p5FzE2v26U/tqQkd5eBP/k=) 2: 326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa (hash: Ck9ZZ0tiSTG41w0m3od8Zz6h1DTJUjOEieFp2NJMOpw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 23:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:59:d7:cc:c9:79:f9:34:3c:df:ce:33:57:e1:21:09:3a:0e:03:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87 Validity Not Before: Oct 26 22:26:36 2025 GMT Not After : Oct 27 23:48:36 2025 GMT Subject: CN=75CA3719FD00C0032211357C5C53152BE64046FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:c2:33:a7:a9:fe:9f:8f:ee:df:aa:20:f3: a3:37:91:44:7e:f0:bd:64:a1:23:42:aa:6b:ba:7b: 8e:c9:27:69:16:dc:97:e7:ad:c7:d8:0c:42:ef:d8: ce:8f:20:53:15:91:74:e4:db:26:ad:55:95:e4:a2: 5b:4c:fe:f7:a9:74:61:51:e2:cd:45:3c:c2:87:8c: 30:0f:4e:37:96:23:44:b9:9c:6b:aa:c2:a5:11:08: 7a:56:7d:17:2f:70:79:e5:fc:c0:29:a1:53:93:78: 2d:3c:64:7e:27:c4:13:ca:64:cb:6f:76:b4:03:59: fe:24:f1:02:bd:23:61:6c:8b:d8:9c:ea:e6:e9:c5: a9:6c:77:90:26:2f:ab:56:2f:b4:29:07:66:6b:6a: 7e:8d:e4:0d:a1:4c:13:2a:e1:6e:5c:b8:f6:c1:f7: 8d:08:7c:e4:c8:d7:40:1e:78:8f:6d:76:65:b8:4b: bf:99:86:0f:bd:ca:0e:c2:2f:7c:78:53:50:79:7a: 34:34:f1:70:13:c1:4f:03:f4:11:ce:5f:cc:8a:23: d1:c3:e5:20:7c:0e:50:af:2d:73:52:af:06:0a:e2: 62:b5:f1:cc:87:98:c1:0f:49:ff:40:bf:a2:d2:4e: a6:af:77:7a:fd:b7:24:bb:12:cd:c6:f9:47:4e:6a: d4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CA:37:19:FD:00:C0:03:22:11:35:7C:5C:53:15:2B:E6:40:46:FC X509v3 Authority Key Identifier: keyid:1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:f3:a9:e9:d4:98:72:fc:57:3c:59:87:88:0d:52:ad:6b:2b: 08:ad:0f:4e:d0:03:4f:fc:ba:68:d1:68:24:41:ab:8a:cd:74: 60:68:ee:68:ed:31:d1:b2:65:85:89:73:25:ec:38:bb:d7:8b: 86:97:3d:db:4e:3a:c2:24:ec:69:37:92:3b:a4:fa:70:bf:62: d2:83:88:90:5b:a5:2f:60:e2:f1:1d:7e:a9:82:34:0b:05:71: bf:72:08:a2:e0:aa:54:fb:72:60:18:10:36:1a:f9:2a:90:c2: 8f:2a:d7:af:3c:59:3f:7a:fb:0b:a7:5a:da:a2:b0:8e:b8:99: 47:de:6c:00:68:e9:19:41:e7:c8:6a:96:63:43:7b:01:1e:4a: 95:e4:d8:a9:11:b9:60:0a:a9:c6:b2:e2:b2:af:10:0a:06:34: fe:0a:cd:ca:6a:66:40:c4:13:e8:e6:52:91:d5:fb:0d:01:60: f0:52:5b:6c:2b:af:6d:0b:41:b9:da:d4:b2:35:06:d4:7d:4b: 50:87:4e:8a:59:aa:74:0e:f3:db:69:c1:f4:3c:25:6f:0e:9a: 83:7e:58:0a:a2:fc:b8:3d:13:dd:ca:56:9c:35:5a:f9:fd:ba: d9:e6:84:ab:0b:dd:29:dd:7e:bc:30:ce:24:0b:a8:0c:39:0a: ed:2c:7f:29 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUPlnXzMl5+TQ8384zV+EhCToOA3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZCOUM4NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3 MDFCMEY4NzAeFw0yNTEwMjYyMjI2MzZaFw0yNTEwMjcyMzQ4MzZaMDMxMTAvBgNV BAMTKDc1Q0EzNzE5RkQwMEMwMDMyMjExMzU3QzVDNTMxNTJCRTY0MDQ2RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIdcIzp6n+n4/u36og86M3kUR+ 8L1koSNCqmu6e47JJ2kW3JfnrcfYDELv2M6PIFMVkXTk2yatVZXkoltM/vepdGFR 4s1FPMKHjDAPTjeWI0S5nGuqwqURCHpWfRcvcHnl/MApoVOTeC08ZH4nxBPKZMtv drQDWf4k8QK9I2Fsi9ic6ubpxalsd5AmL6tWL7QpB2Zran6N5A2hTBMq4W5cuPbB 940IfOTI10AeeI9tdmW4S7+Zhg+9yg7CL3x4U1B5ejQ08XATwU8D9BHOX8yKI9HD 5SB8DlCvLXNSrwYK4mK18cyHmMEPSf9Av6LSTqavd3r9tyS7Es3G+UdOatS/AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUdco3Gf0AwAMiETV8XFMVK+ZARvwwHwYDVR0j BBgwFoAUH7nIUPkT1sCad22Ls4MnvnAbD4cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2NjNmMwZDBmNGMwNzQyNDM5MmQ4MjM4NzIwY2M2YTgyLzAv MUZCOUM4NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3MDFCMEY4Ny5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRkI5Qzg1MEY5MTNENkMwOUE3NzZEOEJCMzgzMjdC RTcwMUIwRjg3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2NjNmMw ZDBmNGMwNzQyNDM5MmQ4MjM4NzIwY2M2YTgyLzAvMUZCOUM4NTBGOTEzRDZDMDlB Nzc2RDhCQjM4MzI3QkU3MDFCMEY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIXzqenUmHL8VzxZh4gN Uq1rKwitD07QA0/8umjRaCRBq4rNdGBo7mjtMdGyZYWJcyXsOLvXi4aXPdtOOsIk 7Gk3kjuk+nC/YtKDiJBbpS9g4vEdfqmCNAsFcb9yCKLgqlT7cmAYEDYa+SqQwo8q 1688WT96+wunWtqisI64mUfebABo6RlB58hqlmNDewEeSpXk2KkRuWAKqcay4rKv EAoGNP4KzcpqZkDEE+jmUpHV+w0BYPBSW2wrr20LQbna1LI1BtR9S1CHTopZqnQO 89tpwfQ8JW8OmoN+WAqi/Lg9E93KVpw1Wvn9utnmhKsL3SndfrwwziQLqAw5Cu0s fyk= -----END CERTIFICATE-----Generated at Mon Oct 27 15:20:33 2025 by rpki-client