$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft File: 1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json) Hash identifier: gmnQhENpDL7H6vdiO8HhLU38I+L4EhcG8zCHBq4P710= Subject key identifier: 7E:6A:45:A5:97:ED:6F:2D:21:4C:68:A7:07:65:BD:8A:FD:D8:B9:BB Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F Certificate issuer: /CN=1D570B984E9C5E382B0A879AA21F6518621F059F Certificate serial: 3BBF9B0DCE4F21E12ACC0879280F2273DB1E1486 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft Manifest number: 026B Signing time: Wed 05 Nov 2025 02:49:32 +0000 Manifest this update: Wed 05 Nov 2025 02:44:32 +0000 Manifest next update: Thu 06 Nov 2025 04:47:32 +0000 Files and hashes: 1: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: JJR5uYfcSWqyUcVc3Yu8e8mPltjZk/f+i8Y6qp8FzaQ=) 2: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: SZhn4FgWqY4qggdiI6TrYJUIT99auk+OFjrgNv4awjA=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:bf:9b:0d:ce:4f:21:e1:2a:cc:08:79:28:0f:22:73:db:1e:14:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F Validity Not Before: Nov 5 02:44:32 2025 GMT Not After : Nov 6 04:47:32 2025 GMT Subject: CN=7E6A45A597ED6F2D214C68A70765BD8AFDD8B9BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0e:74:b4:3b:ed:2f:56:39:62:91:34:82:bf: 89:0f:ff:a2:ba:b8:58:c4:6b:b8:83:e2:e0:64:0c: b2:45:db:e6:43:14:ac:06:ef:41:0c:4e:2f:ce:6e: 1e:fd:77:1b:0f:57:c2:b2:b8:7c:bf:f4:ff:d0:06: 79:15:64:f5:c8:fe:32:85:e4:ad:2d:6f:e1:05:7b: e9:9f:99:54:c2:0a:c4:c0:1d:db:54:84:2d:1a:6f: a7:07:71:38:36:3e:8f:52:80:79:44:f3:ca:a3:cf: f8:a4:04:3a:36:b7:88:fa:0e:fe:6d:ed:b3:79:e0: 20:1a:2a:b8:28:3e:42:4f:df:7a:01:0f:ee:44:e8: 6e:c7:84:13:f4:23:02:43:c4:b7:e7:75:86:c3:f3: e7:12:ff:8a:70:69:0e:42:cc:f8:13:69:58:a2:67: 67:e5:6e:72:f1:f4:04:31:e2:52:9c:c7:6d:b5:de: 0e:30:48:d2:2c:00:90:0f:b3:d9:80:06:bb:13:8e: b9:ea:4b:13:b6:48:a3:6e:5e:61:25:57:57:8c:df: 6a:4c:57:2b:cb:8a:22:45:00:27:5f:11:e0:a0:fa: 47:f0:f6:65:d1:cf:d2:5c:e1:bf:0d:1b:c9:8e:f3: dc:a3:2a:cb:fb:38:39:3d:56:8e:d6:44:67:e9:91: 9d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6A:45:A5:97:ED:6F:2D:21:4C:68:A7:07:65:BD:8A:FD:D8:B9:BB X509v3 Authority Key Identifier: keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:53:9a:ff:d5:18:9a:03:29:ec:50:b6:02:93:1c:74:7a:92: 3e:a9:59:5e:38:89:19:78:3f:fa:46:6b:f3:84:03:c2:67:95: 4f:d3:79:d4:79:67:6a:6f:4f:b9:20:6c:01:17:3a:90:f3:4f: 1b:fe:a3:43:41:32:25:e2:4b:e3:1a:6c:40:9c:27:fa:ba:31: 98:4d:bb:c2:0c:d9:22:18:52:9f:43:33:ce:79:9d:5f:22:13: c7:e7:f7:3f:a8:1e:50:cd:ff:cf:7c:e9:82:bb:7c:03:b8:24: 36:86:d1:32:36:2b:b3:4a:1a:70:23:0e:5c:ab:2a:8d:c6:7a: d5:3c:f5:cc:9d:0f:68:43:5e:d5:74:94:3c:d1:d5:57:3f:b0: 14:91:06:9a:0c:5a:42:99:c4:9c:3f:63:07:96:9e:e8:d7:2a: e2:3d:59:b5:e2:7a:27:d0:72:a5:85:cc:5a:fe:d5:58:38:6e: 5c:7d:45:79:a2:e7:cf:38:85:af:31:a5:a9:ce:f3:f8:5c:0b: 46:cd:e1:36:12:7a:e6:cc:90:ec:cd:df:cd:92:5d:c7:6d:d0: cb:75:6b:57:54:83:39:c7:41:f5:51:55:49:32:2b:91:20:a7: 8b:01:0d:bf:2c:cf:6f:d2:5e:42:87:cc:28:a4:25:15:ec:bc: 43:c6:b1:68 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUO7+bDc5PIeEqzAh5KA8ic9seFIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2 MjFGMDU5RjAeFw0yNTExMDUwMjQ0MzJaFw0yNTExMDYwNDQ3MzJaMDMxMTAvBgNV BAMTKDdFNkE0NUE1OTdFRDZGMkQyMTRDNjhBNzA3NjVCRDhBRkREOEI5QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuDnS0O+0vVjlikTSCv4kP/6K6 uFjEa7iD4uBkDLJF2+ZDFKwG70EMTi/Obh79dxsPV8KyuHy/9P/QBnkVZPXI/jKF 5K0tb+EFe+mfmVTCCsTAHdtUhC0ab6cHcTg2Po9SgHlE88qjz/ikBDo2t4j6Dv5t 7bN54CAaKrgoPkJP33oBD+5E6G7HhBP0IwJDxLfndYbD8+cS/4pwaQ5CzPgTaVii Z2flbnLx9AQx4lKcx2213g4wSNIsAJAPs9mABrsTjrnqSxO2SKNuXmElV1eM32pM VyvLiiJFACdfEeCg+kfw9mXRz9Jc4b8NG8mO89yjKsv7ODk9Vo7WRGfpkZ2rAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUfmpFpZftby0hTGinB2W9iv3YubswHwYDVR0j BBgwFoAUHVcLmE6cXjgrCoeaoh9lGGIfBZ8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAv MUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRDU3MEI5ODRFOUM1RTM4MkIwQTg3OUFBMjFGNjUx ODYyMUYwNTlGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzRkNWMz MDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAvMUQ1NzBCOTg0RTlDNUUzODJC MEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD9Tmv/VGJoDKexQtgKT HHR6kj6pWV44iRl4P/pGa/OEA8JnlU/TedR5Z2pvT7kgbAEXOpDzTxv+o0NBMiXi S+MabECcJ/q6MZhNu8IM2SIYUp9DM855nV8iE8fn9z+oHlDN/8986YK7fAO4JDaG 0TI2K7NKGnAjDlyrKo3GetU89cydD2hDXtV0lDzR1Vc/sBSRBpoMWkKZxJw/YweW nujXKuI9WbXieifQcqWFzFr+1Vg4blx9RXmi5884ha8xpanO8/hcC0bN4TYSeubM kOzN382SXcdt0Mt1a1dUgznHQfVRVUkyK5Egp4sBDb8sz2/SXkKHzCikJRXsvEPG sWg= -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:07 2025 by rpki-client