$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft File: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft (raw, json) Hash identifier: 0LtWl2bsYA1sIFiOAsx8s1rAEmQzJD0s9MSTdASJNJo= Subject key identifier: 42:D1:75:C7:FD:18:B6:79:99:CB:71:36:A1:E9:D0:03:4F:C4:8D:3A Authority key identifier: 06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5 Certificate issuer: /CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5 Certificate serial: 2610E8819F744F8E2C2DF5E78272E7E1B5188268 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft Manifest number: 026F Signing time: Wed 05 Nov 2025 01:09:31 +0000 Manifest this update: Wed 05 Nov 2025 01:04:31 +0000 Manifest next update: Thu 06 Nov 2025 03:48:31 +0000 Files and hashes: 1: 326131313a663263303a666663343a3a2f34382d3438203d3e20323136333733.roa (hash: iTb04aO1BMGaSLDC3asTwY2ZRYrbTl7Ocrr3rHizQyw=) 2: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl (hash: HztG1FzZvkdvCDDqQ6MRUhn6nf758TKFJxcjYsz1D2s=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:10:e8:81:9f:74:4f:8e:2c:2d:f5:e7:82:72:e7:e1:b5:18:82:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5 Validity Not Before: Nov 5 01:04:31 2025 GMT Not After : Nov 6 03:48:31 2025 GMT Subject: CN=42D175C7FD18B67999CB7136A1E9D0034FC48D3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b8:9d:71:5e:fe:35:15:97:be:91:aa:bb:80: 10:f7:3c:00:ee:fb:e8:8d:c3:76:d0:fa:37:df:6c: 33:e2:58:9d:25:68:7d:1a:ff:dc:49:c7:39:77:fc: f1:38:e2:cc:03:42:c3:0f:f6:c8:fb:05:92:91:b3: 6a:68:f4:77:f4:50:90:12:b3:d8:19:98:07:90:8f: 86:ce:8d:67:c9:83:c8:79:bb:19:b9:4b:2b:97:2d: 57:c8:c4:ed:ca:ea:1b:0b:ca:41:33:29:51:6d:70: d1:6c:a8:c5:60:09:ac:53:76:5c:f9:7e:94:df:d8: c8:9f:aa:3b:a0:93:d5:93:a1:ac:04:2a:f4:56:a5: 39:91:c0:25:a0:dc:b5:4a:44:dd:49:ef:7d:af:f0: 27:85:2d:75:4e:e5:01:ff:e5:79:e5:35:e1:5e:47: 6c:4d:01:d3:29:2d:d4:c1:ac:55:89:ef:6e:7e:82: 08:2d:69:3c:dc:bd:45:24:22:6f:ea:60:1c:e7:51: a0:bc:b7:c9:7c:4c:7f:3b:b7:91:88:c7:e8:8d:8a: 5d:14:1e:39:45:31:7b:1c:0b:aa:22:af:a5:0a:e1: 04:88:5e:cf:93:ac:cd:1d:ce:2b:77:bc:cb:e8:fd: 96:5a:4b:ef:bd:e5:c4:2b:69:2a:02:3d:2f:d4:30: f5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D1:75:C7:FD:18:B6:79:99:CB:71:36:A1:E9:D0:03:4F:C4:8D:3A X509v3 Authority Key Identifier: keyid:06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:b6:a9:fd:78:0c:68:f4:99:69:74:1a:ef:df:d3:51:dc:d0: cd:cc:d8:70:32:03:31:16:74:9b:a3:31:75:a3:ac:63:db:c9: 36:3f:00:78:b7:51:ca:88:6a:58:a3:f0:8e:bf:f9:18:8c:e8: cd:3b:f9:d0:17:e9:45:aa:2a:36:91:a9:75:20:8e:7b:bf:d1: 32:43:44:67:50:04:f0:a8:10:fe:60:46:d0:92:1f:49:71:8e: 4a:06:20:cd:2c:f7:a9:16:b3:38:dd:92:f9:4b:48:83:f3:bf: ea:15:44:23:bb:39:a5:54:7a:d5:e9:97:0f:68:20:e4:c2:72: d4:ce:9c:fb:2f:fb:9e:48:26:2d:b3:27:79:08:84:63:3d:e3: 07:a4:e7:9a:04:64:90:ca:e9:51:ab:83:c6:95:2b:3f:82:37: 82:9a:8e:70:27:6e:a3:88:fe:7b:3c:db:6c:d9:44:77:5d:a1: 90:43:a4:32:e5:b3:e4:05:f4:56:c3:c4:aa:4d:18:91:47:8c: 08:5c:54:15:1a:73:6b:73:c5:aa:e0:aa:19:77:ee:8f:8d:fb: 45:29:17:c3:cd:18:86:d7:ea:df:d3:c3:50:2d:28:af:ef:db: fc:94:91:c5:a4:ba:09:2f:84:6d:08:06:be:13:fb:c0:ba:e0: 9b:12:39:67 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUJhDogZ90T44sLfXngnLn4bUYgmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3REJDNkJDRjBGOTU4MkRGNzgzNjYzODlBRUFGNTk2 NTU2NUVGNTAeFw0yNTExMDUwMTA0MzFaFw0yNTExMDYwMzQ4MzFaMDMxMTAvBgNV BAMTKDQyRDE3NUM3RkQxOEI2Nzk5OUNCNzEzNkExRTlEMDAzNEZDNDhEM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRuJ1xXv41FZe+kaq7gBD3PADu ++iNw3bQ+jffbDPiWJ0laH0a/9xJxzl3/PE44swDQsMP9sj7BZKRs2po9Hf0UJAS s9gZmAeQj4bOjWfJg8h5uxm5SyuXLVfIxO3K6hsLykEzKVFtcNFsqMVgCaxTdlz5 fpTf2Mifqjugk9WToawEKvRWpTmRwCWg3LVKRN1J732v8CeFLXVO5QH/5XnlNeFe R2xNAdMpLdTBrFWJ725+gggtaTzcvUUkIm/qYBznUaC8t8l8TH87t5GIx+iNil0U HjlFMXscC6oir6UK4QSIXs+TrM0dzit3vMvo/ZZaS++95cQraSoCPS/UMPWjAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUQtF1x/0YtnmZy3E2oenQA0/EjTowHwYDVR0j BBgwFoAUBn28a88PlYLfeDZjia6vWWVWXvUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzAxNGI5MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzAv MDY3REJDNkJDRjBGOTU4MkRGNzgzNjYzODlBRUFGNTk2NTU2NUVGNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wNjdEQkM2QkNGMEY5NTgyREY3ODM2NjM4OUFFQUY1 OTY1NTY1RUY1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzAxNGI5 MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzAvMDY3REJDNkJDRjBGOTU4MkRG NzgzNjYzODlBRUFGNTk2NTU2NUVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGm2qf14DGj0mWl0Gu/f 01Hc0M3M2HAyAzEWdJujMXWjrGPbyTY/AHi3UcqIalij8I6/+RiM6M07+dAX6UWq KjaRqXUgjnu/0TJDRGdQBPCoEP5gRtCSH0lxjkoGIM0s96kWszjdkvlLSIPzv+oV RCO7OaVUetXplw9oIOTCctTOnPsv+55IJi2zJ3kIhGM94wek55oEZJDK6VGrg8aV Kz+CN4KajnAnbqOI/ns822zZRHddoZBDpDLls+QF9FbDxKpNGJFHjAhcVBUac2tz xargqhl37o+N+0UpF8PNGIbX6t/Tw1AtKK/v2/yUkcWkugkvhG0IBr4T+8C64JsS OWc= -----END CERTIFICATE-----Generated at Wed Nov 5 11:03:50 2025 by rpki-client