$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft File: B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json) Hash identifier: JjcNlef7k/Sgjweb/cYrK/g3hkzSVuv9RJtkhmQmUTc= Subject key identifier: 1E:0D:73:4C:24:54:EE:9E:F2:C2:51:12:A4:B3:4A:A9:22:AF:26:54 Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 Certificate issuer: /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Certificate serial: 583B7577DB5894DC3913DB31212EF4D719F9456A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft Manifest number: 026D Signing time: Wed 05 Nov 2025 01:29:31 +0000 Manifest this update: Wed 05 Nov 2025 01:24:31 +0000 Manifest next update: Thu 06 Nov 2025 05:06:31 +0000 Files and hashes: 1: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: nMLfH1nYsI5mPwv+N0MEzTUVq1YFB35SCmO/3EjXxsg=) 2: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: 8kypckVHdWXSfxw2QZFLd3DW9fX7DmqLz8BU5rRERPc=) 3: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: tOaIT6qTvs/T2L2c3rEpmXq3gx7f0jW4s/J1R0UAbuM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:3b:75:77:db:58:94:dc:39:13:db:31:21:2e:f4:d7:19:f9:45:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Validity Not Before: Nov 5 01:24:31 2025 GMT Not After : Nov 6 05:06:31 2025 GMT Subject: CN=1E0D734C2454EE9EF2C25112A4B34AA922AF2654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:db:e2:5b:87:d1:05:d6:00:51:58:d8:2e:ff: 5f:7a:ec:77:c2:93:be:61:91:2c:8f:1e:04:a8:33: fb:dd:14:91:c6:98:b6:23:21:df:b5:1d:70:3b:c8: 0d:d8:c9:37:20:25:1c:a0:bc:ad:34:94:06:e3:f4: d0:f8:01:e7:44:77:99:70:4c:54:47:31:44:30:75: 31:a7:4c:25:11:18:fa:7b:1b:af:54:9b:48:da:51: 4e:e3:b6:f8:ca:64:b0:62:4e:5a:30:03:92:48:5c: 50:02:bc:a9:00:71:b4:f5:29:70:f2:56:d7:b0:02: b1:a3:04:5e:da:2d:58:9d:c9:44:26:90:e9:db:2e: 39:62:5d:41:4a:e4:7e:91:fa:cd:01:de:9c:8b:72: d3:ed:eb:be:65:33:b9:40:46:b3:01:75:f0:39:0e: 69:7a:d2:5b:5c:96:a8:ca:af:6a:fa:39:91:0b:68: 17:0a:ec:3a:5e:f1:0f:f4:ee:15:f2:06:e0:1b:2c: 72:f6:e9:ee:4f:61:63:84:c9:c3:f1:5f:22:9e:29: 57:24:dd:25:2c:2e:9e:29:82:20:8d:34:89:c7:7e: 97:7d:8b:81:da:39:0c:c2:20:b1:bc:81:12:0e:bf: 59:b6:01:7e:6a:48:94:da:55:54:c4:f6:ec:d3:6d: 4f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0D:73:4C:24:54:EE:9E:F2:C2:51:12:A4:B3:4A:A9:22:AF:26:54 X509v3 Authority Key Identifier: keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f3:e7:a0:a9:5d:8b:3a:33:2e:47:83:16:30:35:dc:a7:ee: 61:54:31:88:e3:31:0d:16:ad:b2:2f:9c:4b:10:87:2e:d9:55: 65:77:d2:c4:2c:04:78:0d:a8:f9:28:34:ab:9e:b3:14:ed:c8: 3f:15:c4:77:a4:1d:8a:e8:3a:6f:ed:af:14:30:0d:b2:c4:29: 78:37:4c:53:8f:5f:80:e5:3d:22:37:8c:e0:1f:4b:cf:33:fa: c7:67:0c:31:8d:86:e3:bc:33:df:16:44:8a:93:ec:98:f7:8a: 19:25:1f:6f:15:ac:bd:0b:6e:c8:8a:e1:20:60:c4:ec:c9:1e: 61:31:58:b5:15:ae:65:99:d2:68:b3:6c:79:9d:04:f8:b8:4c: c4:4f:4c:7a:8a:73:1c:88:3e:11:74:85:ec:d0:41:74:f9:7a: 7c:34:e3:90:13:60:71:1d:ef:be:de:71:17:35:09:ad:e5:1a: 11:3d:48:8f:37:6f:af:a3:76:03:4f:be:e3:f7:dd:b3:b3:bb: 8e:67:25:8b:21:8c:73:a3:7b:1b:8d:1d:51:90:27:db:42:55: ab:57:7f:4d:9e:1a:d1:3d:a0:62:59:b5:8a:0b:d6:27:d3:19: d1:44:25:8a:ab:a4:b4:ef:53:d8:3b:d7:59:a3:1e:0c:71:ef: 11:14:12:e5 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUWDt1d9tYlNw5E9sxIS701xn5RWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG MjFFMDUxODAeFw0yNTExMDUwMTI0MzFaFw0yNTExMDYwNTA2MzFaMDMxMTAvBgNV BAMTKDFFMEQ3MzRDMjQ1NEVFOUVGMkMyNTExMkE0QjM0QUE5MjJBRjI2NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh2+Jbh9EF1gBRWNgu/1967HfC k75hkSyPHgSoM/vdFJHGmLYjId+1HXA7yA3YyTcgJRygvK00lAbj9ND4AedEd5lw TFRHMUQwdTGnTCURGPp7G69Um0jaUU7jtvjKZLBiTlowA5JIXFACvKkAcbT1KXDy VtewArGjBF7aLVidyUQmkOnbLjliXUFK5H6R+s0B3pyLctPt675lM7lARrMBdfA5 Dml60ltclqjKr2r6OZELaBcK7Dpe8Q/07hXyBuAbLHL26e5PYWOEycPxXyKeKVck 3SUsLp4pgiCNNInHfpd9i4HaOQzCILG8gRIOv1m2AX5qSJTaVVTE9uzTbU91AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUHg1zTCRU7p7ywlESpLNKqSKvJlQwHwYDVR0j BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD OEYyMUUwNTE4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzBhNDYz N2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAvQjg4QTk0RENBMDlFM0E2NTND MDZGNDc4NDM0REM3QzhGMjFFMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAETz56CpXYs6My5HgxYw Ndyn7mFUMYjjMQ0WrbIvnEsQhy7ZVWV30sQsBHgNqPkoNKuesxTtyD8VxHekHYro Om/trxQwDbLEKXg3TFOPX4DlPSI3jOAfS88z+sdnDDGNhuO8M98WRIqT7Jj3ihkl H28VrL0LbsiK4SBgxOzJHmExWLUVrmWZ0mizbHmdBPi4TMRPTHqKcxyIPhF0hezQ QXT5enw045ATYHEd777ecRc1Ca3lGhE9SI83b6+jdgNPvuP33bOzu45nJYshjHOj exuNHVGQJ9tCVatXf02eGtE9oGJZtYoL1ifTGdFEJYqrpLTvU9g711mjHgxx7xEU EuU= -----END CERTIFICATE-----Generated at Wed Nov 5 07:58:47 2025 by rpki-client