$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json) Hash identifier: jmE0Lpo0wa916CFHy5+fITvRm068v4WsaVX3T6O4pO0= Subject key identifier: 77:AF:2D:B2:D4:82:56:52:2A:04:1B:24:45:6B:20:D5:3F:B0:D2:6E Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Certificate serial: 50EF1BD2F75EE5C6937278E8480304C2319A5235 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft Manifest number: 018F Signing time: Tue 04 Nov 2025 21:49:30 +0000 Manifest this update: Tue 04 Nov 2025 21:44:30 +0000 Manifest next update: Thu 06 Nov 2025 00:57:30 +0000 Files and hashes: 1: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: VcFl2NKtpcmbmaeNnqIh8wzqS0exRo3Go5EzbXUGx/g=) 2: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: iRjGhm9MAYijKikuNXa9CZKLfnQlB6md5E2iJLdE/iQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 00:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ef:1b:d2:f7:5e:e5:c6:93:72:78:e8:48:03:04:c2:31:9a:52:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Validity Not Before: Nov 4 21:44:30 2025 GMT Not After : Nov 6 00:57:30 2025 GMT Subject: CN=77AF2DB2D48256522A041B24456B20D53FB0D26E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:48:ca:79:5b:2d:1e:f8:2b:b0:f7:bf:29:4f: bd:b0:19:ac:f4:d8:af:6e:d3:63:de:c7:bc:ee:0d: 0d:31:8a:a9:70:ef:4f:cf:13:d1:f4:fc:a4:e5:01: 2d:02:3b:6b:19:5f:1e:eb:c7:ed:40:13:73:0e:56: ea:03:4c:83:09:5f:06:b9:db:7c:b9:22:27:be:78: ee:b1:9f:bd:25:62:3f:15:fc:5c:37:96:b6:98:99: e1:9d:6a:36:a8:0f:a5:3e:1b:94:a6:5d:f4:a8:6d: 5a:c0:70:88:24:82:58:53:f1:2e:3e:51:de:ae:e2: 41:81:35:c6:f7:4d:03:9d:d5:1b:c3:c7:01:59:b8: a2:ae:d9:cc:b6:09:6e:84:8b:3c:e4:26:92:1b:8c: fa:21:ab:a9:59:96:1f:6b:58:4b:1a:be:84:af:92: 20:b5:11:09:5e:14:76:2c:f5:f4:7f:17:3b:38:b5: c7:e0:15:d8:89:53:3f:fa:67:bd:13:1a:2a:d5:56: 82:a5:b2:09:93:d2:13:56:66:7f:1b:51:de:a4:a5: f7:2c:dc:b0:53:4e:b1:c8:c7:00:e5:88:8e:f2:14: 3a:f1:f6:27:50:04:d8:21:e8:09:31:c3:79:d8:d8: 44:4b:18:68:70:2e:cc:1e:0a:4c:b4:2a:9b:2d:96: c3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AF:2D:B2:D4:82:56:52:2A:04:1B:24:45:6B:20:D5:3F:B0:D2:6E X509v3 Authority Key Identifier: keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:b0:45:0b:ea:1f:01:43:3f:52:e3:fe:2b:24:7d:10:af:7d: 89:fd:7d:37:97:7d:dc:dd:69:09:43:79:d9:01:81:d2:0e:ff: b9:f8:01:3b:e0:0e:af:33:de:15:5d:8b:a7:eb:08:d7:27:4c: d8:8b:c8:42:6a:89:f7:f6:7a:35:88:64:ba:ad:19:ba:93:98: 36:b1:b3:28:60:36:f1:5d:b2:57:16:b8:67:d3:06:9b:89:fa: e6:81:f0:db:dc:0a:4b:f2:1f:21:c9:f5:65:2e:38:87:19:14: 3a:a7:a1:ce:ac:40:e8:ae:d5:16:ed:ec:8e:f1:df:54:ed:c3: e5:85:25:75:23:45:91:bc:ee:82:97:37:c4:b5:f7:d9:e0:13: fe:1f:ab:03:10:4a:c2:95:2a:80:6f:10:37:ca:d2:2c:f1:a0: be:82:9f:43:fc:de:c2:d8:b3:a6:09:0a:29:46:67:d6:4d:78: ba:00:57:07:76:59:d0:7c:1f:ed:d8:24:0e:49:40:18:ee:3d: 60:e6:10:91:4e:4c:ce:19:65:b6:cb:63:8b:43:90:c9:47:a6: dc:6e:c1:21:b5:af:4f:89:96:e2:f4:1c:0b:0f:3d:c8:e2:d6: 0a:f9:7e:90:d7:c8:c3:93:cb:77:ef:a2:0b:9d:93:7b:71:ea: 39:6f:83:a1 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUUO8b0vde5caTcnjoSAMEwjGaUjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdE NTQ3ODZEMzAeFw0yNTExMDQyMTQ0MzBaFw0yNTExMDYwMDU3MzBaMDMxMTAvBgNV BAMTKDc3QUYyREIyRDQ4MjU2NTIyQTA0MUIyNDQ1NkIyMEQ1M0ZCMEQyNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1SMp5Wy0e+Cuw978pT72wGaz0 2K9u02Pex7zuDQ0xiqlw70/PE9H0/KTlAS0CO2sZXx7rx+1AE3MOVuoDTIMJXwa5 23y5Iie+eO6xn70lYj8V/Fw3lraYmeGdajaoD6U+G5SmXfSobVrAcIgkglhT8S4+ Ud6u4kGBNcb3TQOd1RvDxwFZuKKu2cy2CW6EizzkJpIbjPohq6lZlh9rWEsavoSv kiC1EQleFHYs9fR/Fzs4tcfgFdiJUz/6Z70TGirVVoKlsgmT0hNWZn8bUd6kpfcs 3LBTTrHIxwDliI7yFDrx9idQBNgh6Akxw3nY2ERLGGhwLsweCky0KpstlsOzAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUd68tstSCVlIqBBskRWsg1T+w0m4wHwYDVR0j BBgwFoAUbZS517fBinpJen6fXi4il9VHhtMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzFlYmZkNTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAv NkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82RDk0QjlEN0I3QzE4QTdBNDk3QTdFOUY1RTJFMjI5 N0Q1NDc4NkQzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzFlYmZk NTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAvNkQ5NEI5RDdCN0MxOEE3QTQ5 N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABewRQvqHwFDP1Lj/isk fRCvfYn9fTeXfdzdaQlDedkBgdIO/7n4ATvgDq8z3hVdi6frCNcnTNiLyEJqiff2 ejWIZLqtGbqTmDaxsyhgNvFdslcWuGfTBpuJ+uaB8NvcCkvyHyHJ9WUuOIcZFDqn oc6sQOiu1Rbt7I7x31Ttw+WFJXUjRZG87oKXN8S199ngE/4fqwMQSsKVKoBvEDfK 0izxoL6Cn0P83sLYs6YJCilGZ9ZNeLoAVwd2WdB8H+3YJA5JQBjuPWDmEJFOTM4Z ZbbLY4tDkMlHptxuwSG1r0+JluL0HAsPPcji1gr5fpDXyMOTy3fvogudk3tx6jlv g6E= -----END CERTIFICATE-----Generated at Wed Nov 5 09:50:31 2025 by rpki-client