$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft File: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft (raw, json) Hash identifier: /HBQz57wY7qoOctcvocPYDOWrINn+AysBAstZk1B8UI= Subject key identifier: 6C:A2:67:F6:D1:F9:C4:E3:47:3E:18:7B:15:C2:40:0F:81:58:DD:DD Authority key identifier: 10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42 Certificate issuer: /CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42 Certificate serial: 39718A0BA0A8B11848B402D929932003B64D6BD7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft Manifest number: 0263 Signing time: Mon 27 Oct 2025 07:56:56 +0000 Manifest this update: Mon 27 Oct 2025 07:51:56 +0000 Manifest next update: Tue 28 Oct 2025 10:35:56 +0000 Files and hashes: 1: 326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa (hash: 97DFsajVBa0EqLsX0/dV54HSIKbk5ZSaY4ztBppt1cY=) 2: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl (hash: TVXOBRB3/XvYxNlQoZN6vymXJZgqP1/mIUfLOnNpYNs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:71:8a:0b:a0:a8:b1:18:48:b4:02:d9:29:93:20:03:b6:4d:6b:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42 Validity Not Before: Oct 27 07:51:56 2025 GMT Not After : Oct 28 10:35:56 2025 GMT Subject: CN=6CA267F6D1F9C4E3473E187B15C2400F8158DDDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1b:d3:1d:f9:16:10:ba:6f:55:03:2e:96:00: fa:43:9d:ce:31:71:1b:11:3b:85:9e:ad:45:15:e3: 5d:d0:fb:cd:a9:89:19:63:6a:ac:76:c6:1d:fa:17: ed:cb:e7:05:2a:90:a9:07:3e:29:75:3a:77:0c:26: f9:f1:cd:82:bf:66:0e:d4:71:58:c4:f1:f9:d3:d6: 69:ad:f3:f4:68:d1:f3:a9:2e:5b:6c:9e:5c:ef:c8: 02:f8:e6:4d:2d:4a:e8:2a:62:95:f0:f4:78:62:1e: 58:c6:a8:7c:bb:94:e0:82:20:de:de:a6:6d:d4:a1: eb:64:3e:72:ee:e0:80:02:b6:ae:db:21:bc:5d:89: 6c:54:47:f7:1e:0c:49:75:7b:19:d4:36:a0:a4:bb: bf:a9:d9:63:ef:8b:8d:5f:43:04:e2:bc:0a:79:61: 5b:10:c1:e8:3b:a2:a0:fa:cf:c0:3c:22:da:0e:1f: 35:ba:f2:fa:34:0d:3e:85:79:1b:dd:61:58:6f:19: 02:17:b7:71:90:72:27:09:98:12:ad:27:48:9b:3d: bb:56:ac:3b:0f:44:1a:b3:6f:18:00:1f:4f:f6:c1: 45:de:b7:d0:f8:13:b3:20:df:69:a0:2c:ef:f0:bc: f3:8b:b1:14:8d:ab:fb:1a:4e:29:c3:02:97:f4:1f: 2b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A2:67:F6:D1:F9:C4:E3:47:3E:18:7B:15:C2:40:0F:81:58:DD:DD X509v3 Authority Key Identifier: keyid:10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4f:ea:06:70:7e:ad:ed:e9:0c:08:93:9d:c0:eb:e1:6d:72: c4:53:61:fc:0b:5d:0b:3d:73:73:00:ae:e8:d3:b5:2d:6c:6b: 53:64:c6:4c:70:6b:70:5f:21:f3:8a:ee:fa:e8:95:59:23:08: b8:8a:d0:ad:b7:3c:bc:c5:46:9d:bb:65:79:3b:68:96:04:e7: f2:05:a1:61:22:95:2e:24:f4:5b:28:70:ce:96:1c:ee:9b:71: b3:4d:6a:7a:d0:e5:eb:23:d9:31:3f:14:d5:ef:71:dc:45:76: f5:4e:b4:14:47:ec:ce:20:b6:cb:ba:21:46:a3:01:5c:a4:56: a5:4d:7e:50:4a:c7:b7:5d:cb:a6:ea:f4:f9:57:f2:fe:ce:1c: 57:45:b8:8b:41:90:e7:61:c6:87:8f:ac:21:17:2c:4f:10:3d: 42:04:46:a0:b3:d3:aa:ba:29:ea:bf:82:1e:e3:e7:52:99:f1: 55:83:fb:fb:4d:d9:f6:de:6d:90:93:84:74:e7:eb:c1:c7:1d: 7f:29:cc:e5:be:d8:ed:e2:2e:13:4d:ed:ad:89:0b:e3:68:d5: 4c:b3:2c:29:ab:2b:7e:8b:ce:09:0f:26:d5:ac:5a:b5:61:7c: 51:c0:fe:c8:d3:a1:7b:29:7b:10:48:7e:e2:ca:e4:62:bd:4f: 90:61:c7:74 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUOXGKC6CosRhItALZKZMgA7ZNa9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCNTEzMzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRD NkJBNkE0MjAeFw0yNTEwMjcwNzUxNTZaFw0yNTEwMjgxMDM1NTZaMDMxMTAvBgNV BAMTKDZDQTI2N0Y2RDFGOUM0RTM0NzNFMTg3QjE1QzI0MDBGODE1OEREREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfG9Md+RYQum9VAy6WAPpDnc4x cRsRO4WerUUV413Q+82piRljaqx2xh36F+3L5wUqkKkHPil1OncMJvnxzYK/Zg7U cVjE8fnT1mmt8/Ro0fOpLltsnlzvyAL45k0tSugqYpXw9HhiHljGqHy7lOCCIN7e pm3UoetkPnLu4IACtq7bIbxdiWxUR/ceDEl1exnUNqCku7+p2WPvi41fQwTivAp5 YVsQweg7oqD6z8A8ItoOHzW68vo0DT6FeRvdYVhvGQIXt3GQcicJmBKtJ0ibPbtW rDsPRBqzbxgAH0/2wUXet9D4E7Mg32mgLO/wvPOLsRSNq/saTinDApf0Hys9AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUbKJn9tH5xONHPhh7FcJAD4FY3d0wHwYDVR0j BBgwFoAUELUTOcW8znCcttahSSGq9Ma6akIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2VjYjM0YjA0NjkxZTQ5OTVhNjA2OTUyZTgzNmI0ZWNjLzAv MTBCNTEzMzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRDNkJBNkE0Mi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xMEI1MTMzOUM1QkNDRTcwOUNCNkQ2QTE0OTIxQUFG NEM2QkE2QTQyLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2VjYjM0 YjA0NjkxZTQ5OTVhNjA2OTUyZTgzNmI0ZWNjLzAvMTBCNTEzMzlDNUJDQ0U3MDlD QjZENkExNDkyMUFBRjRDNkJBNkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFpP6gZwfq3t6QwIk53A 6+FtcsRTYfwLXQs9c3MArujTtS1sa1Nkxkxwa3BfIfOK7vrolVkjCLiK0K23PLzF Rp27ZXk7aJYE5/IFoWEilS4k9FsocM6WHO6bcbNNanrQ5esj2TE/FNXvcdxFdvVO tBRH7M4gtsu6IUajAVykVqVNflBKx7ddy6bq9PlX8v7OHFdFuItBkOdhxoePrCEX LE8QPUIERqCz06q6Keq/gh7j51KZ8VWD+/tN2fbebZCThHTn68HHHX8pzOW+2O3i LhNN7a2JC+No1UyzLCmrK36LzgkPJtWsWrVhfFHA/sjToXspexBIfuLK5GK9T5Bh x3Q= -----END CERTIFICATE-----Generated at Mon Oct 27 15:29:49 2025 by rpki-client