$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft File: BBED14E9793905EC1EA5CE10AA03C497D737B115.mft (raw, json) Hash identifier: i82SKFNEiaUrS+t1TJN90quOG38gC3KFdAlebhWRnOQ= Subject key identifier: 27:F3:06:58:8E:8E:0B:02:D8:DB:A9:95:CF:A0:CB:1A:D2:42:06:E6 Authority key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 Certificate issuer: /CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Certificate serial: 0B047D98FC047D5CE89FD2C3A7F30E0FECC54C02 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft Manifest number: 0267 Signing time: Wed 05 Nov 2025 07:04:44 +0000 Manifest this update: Wed 05 Nov 2025 06:59:44 +0000 Manifest next update: Thu 06 Nov 2025 07:06:44 +0000 Files and hashes: 1: BBED14E9793905EC1EA5CE10AA03C497D737B115.crl (hash: qz74iCcIoR1rzV3wRkhpRDIiQ+fOTQysBfcispnOU0E=) 2: 326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (hash: MpewGrhFOYc7jc70q6ubpOkEuQ0IJ7Wp+DrSPfwP1vQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:04:7d:98:fc:04:7d:5c:e8:9f:d2:c3:a7:f3:0e:0f:ec:c5:4c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Validity Not Before: Nov 5 06:59:44 2025 GMT Not After : Nov 6 07:06:44 2025 GMT Subject: CN=27F306588E8E0B02D8DBA995CFA0CB1AD24206E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bf:18:f7:99:b9:a1:69:6b:46:ef:3c:c0:f5: ff:22:a6:c7:46:57:3a:4a:e9:57:97:cf:cc:84:5d: dd:d4:64:73:e7:fe:1c:44:12:76:09:6e:80:20:13: b9:cd:b7:5f:5a:f6:a0:d8:f3:d9:3a:dc:8d:91:f1: bd:2f:ec:c9:32:4c:09:e1:14:e4:cb:b1:4a:93:c3: 8f:c3:af:c9:fd:64:40:33:93:d0:b5:98:4a:a1:fd: 78:48:f8:63:f7:4b:1c:f5:6b:a8:af:a5:de:d9:86: 8e:f5:36:b3:f7:06:a6:ea:a9:85:1a:f6:b9:5b:e7: b1:f5:eb:5a:a2:18:fa:df:5e:2c:33:93:41:24:88: 1c:a7:ed:1a:7e:cc:4e:57:d9:fa:f0:a6:0c:b5:50: 97:33:73:c1:e9:f2:08:72:1a:0b:61:f4:ea:7d:e9: 2a:56:20:ca:40:56:43:11:1b:c5:77:b1:fc:98:85: 40:12:74:19:9c:72:0c:c4:df:81:82:cc:31:95:83: a7:66:18:6f:97:a2:df:43:5e:b2:c2:6c:9f:a1:60: 37:a1:d3:0f:38:cf:53:9f:63:cd:7f:df:86:48:e9: 04:28:d2:e0:88:5a:e6:a0:67:01:0a:69:a5:1a:4b: e6:cf:7f:f0:e0:9a:7f:c2:77:8a:17:11:ec:b5:ed: 2e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F3:06:58:8E:8E:0B:02:D8:DB:A9:95:CF:A0:CB:1A:D2:42:06:E6 X509v3 Authority Key Identifier: keyid:BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9f:c1:8e:b0:7c:af:dc:30:0d:e4:86:0c:45:1d:14:8d:91: 79:61:b3:1c:13:d5:4a:36:4e:41:ca:d8:19:11:2d:cf:b9:8b: f6:0d:eb:90:73:16:6e:77:62:3f:de:7d:17:e2:4c:d6:3e:5e: 90:2d:cf:3e:49:1f:a4:15:55:96:52:9b:94:22:dc:50:91:40: c2:6a:d1:6c:3e:7c:a9:4e:01:df:b4:b7:93:07:b3:a9:88:5c: 52:88:96:db:70:21:f7:f3:87:cf:79:c1:ac:53:95:9c:f9:8f: 6d:3a:43:a9:0b:c3:c4:f7:36:3a:b6:27:8c:b5:58:46:69:f8: 56:6a:55:32:b5:bb:98:ac:c2:5b:5e:bc:fe:02:cf:2a:1d:38: 89:06:0d:f3:f7:35:8e:c7:91:2a:ce:d7:df:cc:98:61:06:20: 5c:6a:5c:fa:d4:4e:db:ab:10:fc:16:5b:b6:da:1f:91:c3:08: 6c:4a:bf:6e:ca:08:4a:97:95:de:c2:a6:b1:77:f4:bf:5a:65: 67:fc:83:da:c0:19:ec:9d:59:a5:36:0b:b1:c0:e1:53:c6:d9: 36:3d:28:3a:b7:2d:35:be:b1:47:b0:f4:40:81:86:5f:47:fd: 37:d0:46:cd:22:7c:5a:d4:5d:4f:e2:70:d9:89:23:6c:a5:19: 61:e9:2a:f4 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUCwR9mPwEfVzon9LDp/MOD+zFTAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdE NzM3QjExNTAeFw0yNTExMDUwNjU5NDRaFw0yNTExMDYwNzA2NDRaMDMxMTAvBgNV BAMTKDI3RjMwNjU4OEU4RTBCMDJEOERCQTk5NUNGQTBDQjFBRDI0MjA2RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxvxj3mbmhaWtG7zzA9f8ipsdG VzpK6VeXz8yEXd3UZHPn/hxEEnYJboAgE7nNt19a9qDY89k63I2R8b0v7MkyTAnh FOTLsUqTw4/Dr8n9ZEAzk9C1mEqh/XhI+GP3Sxz1a6ivpd7Zho71NrP3BqbqqYUa 9rlb57H161qiGPrfXiwzk0EkiByn7Rp+zE5X2frwpgy1UJczc8Hp8ghyGgth9Op9 6SpWIMpAVkMRG8V3sfyYhUASdBmccgzE34GCzDGVg6dmGG+Xot9DXrLCbJ+hYDeh 0w84z1OfY81/34ZI6QQo0uCIWuagZwEKaaUaS+bPf/Dgmn/Cd4oXEey17S55AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUJ/MGWI6OCwLY26mVz6DLGtJCBuYwHwYDVR0j BBgwFoAUu+0U6Xk5Bewepc4QqgPEl9c3sRUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNhOTdmNzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAv QkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdENzM3QjExNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CQkVEMTRFOTc5MzkwNUVDMUVBNUNFMTBBQTAzQzQ5 N0Q3MzdCMTE1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNhOTdm NzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAvQkJFRDE0RTk3OTM5MDVFQzFF QTVDRTEwQUEwM0M0OTdENzM3QjExNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGyfwY6wfK/cMA3khgxF HRSNkXlhsxwT1Uo2TkHK2BkRLc+5i/YN65BzFm53Yj/efRfiTNY+XpAtzz5JH6QV VZZSm5Qi3FCRQMJq0Ww+fKlOAd+0t5MHs6mIXFKIlttwIffzh895waxTlZz5j206 Q6kLw8T3Njq2J4y1WEZp+FZqVTK1u5iswltevP4CzyodOIkGDfP3NY7HkSrO19/M mGEGIFxqXPrUTturEPwWW7baH5HDCGxKv27KCEqXld7CprF39L9aZWf8g9rAGeyd WaU2C7HA4VPG2TY9KDq3LTW+sUew9ECBhl9H/TfQRs0ifFrUXU/icNmJI2ylGWHp KvQ= -----END CERTIFICATE-----Generated at Wed Nov 5 09:51:32 2025 by rpki-client