$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft File: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft (raw, json) Hash identifier: I+VN2vgIwfvy3d1vPyiBnh/trvNi03lTN49n5J45Flo= Subject key identifier: 64:4E:23:17:D0:88:0C:50:A0:63:A3:9B:C5:A3:01:FC:27:41:E3:A0 Authority key identifier: 5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0 Certificate issuer: /CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0 Certificate serial: 0EDF49F4ED2F272673980C1092DC4B5C4EE2DABA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft Manifest number: 026B Signing time: Tue 04 Nov 2025 23:39:30 +0000 Manifest this update: Tue 04 Nov 2025 23:34:30 +0000 Manifest next update: Thu 06 Nov 2025 01:41:30 +0000 Files and hashes: 1: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl (hash: 6gxbyqlzMNcQsgkeZEypM4zvReelf3OcXI3/3zMqqSs=) 2: 326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa (hash: Fb1/PRkI0lrTKbp777DJ9P81eGra7/CB0uA9Vm+bs1w=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 01:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:df:49:f4:ed:2f:27:26:73:98:0c:10:92:dc:4b:5c:4e:e2:da:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0 Validity Not Before: Nov 4 23:34:30 2025 GMT Not After : Nov 6 01:41:30 2025 GMT Subject: CN=644E2317D0880C50A063A39BC5A301FC2741E3A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:f8:1a:05:7b:12:a4:ba:54:4a:18:fa:84: e6:c8:37:80:a4:8e:bb:1c:bd:c3:e5:32:c9:68:5f: f6:12:a2:9f:89:9f:70:06:d5:21:61:8d:8f:ce:5d: c1:00:42:d9:89:5b:c6:79:78:cc:7a:4f:f2:e6:ef: c1:a5:6a:96:21:46:d6:c6:f6:8d:15:a6:8f:b3:42: 3f:01:9a:b3:c4:88:63:f7:89:e4:90:6a:bb:fb:27: 8e:b9:b4:5e:11:1c:a2:cd:b4:20:dd:5d:23:75:68: 3b:89:91:91:41:4b:b2:32:10:a7:b8:7a:fb:d7:74: 44:73:1a:1a:40:22:68:c2:1a:d8:54:b0:b8:3a:17: 76:19:d6:32:10:0e:9c:da:80:a2:47:d2:13:36:cc: aa:46:b7:5e:31:8e:f9:c7:1a:71:c0:97:06:d6:a9: 74:74:bd:aa:89:01:48:15:47:a5:f1:b5:22:a1:00: 42:f9:bd:11:64:72:e7:a1:cc:74:7d:cb:6b:3c:d2: ba:14:56:a5:43:a0:aa:db:68:a2:9a:62:f7:dc:a2: 2d:fb:e1:4a:26:1d:21:b5:4b:6a:08:36:0d:f0:be: 8f:2c:cd:43:ec:6f:fc:2f:ec:fe:d6:d8:15:9e:c6: 52:2e:68:67:61:65:ae:22:28:4d:b1:cc:40:21:5f: 0e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4E:23:17:D0:88:0C:50:A0:63:A3:9B:C5:A3:01:FC:27:41:E3:A0 X509v3 Authority Key Identifier: keyid:5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c5:da:91:94:dd:17:4d:fd:76:12:d6:75:c5:05:ef:2a:5e: 7b:36:11:40:c5:56:c2:1d:8e:f8:35:9b:45:92:14:75:81:c6: 7c:bf:aa:d3:76:b3:76:e5:98:e8:3d:90:e3:0f:8c:1d:e8:6b: 2e:29:91:43:f4:ee:b2:3e:cd:d2:5f:9d:4e:fb:df:ae:e1:15: 47:6e:90:71:be:3e:03:6b:bd:04:8d:47:15:06:bd:22:82:27: 02:04:de:ae:0e:4d:be:0f:66:2c:eb:ac:fd:1d:b3:74:35:a5: 67:d5:ab:d4:ea:f5:5d:bb:55:ff:03:f6:ce:37:6f:40:5a:df: d2:d5:85:af:6c:10:e3:5e:d1:a1:9c:97:29:75:c3:98:3b:ee: b6:0b:b5:86:b5:bb:89:e1:2d:73:ca:f6:70:b2:e5:63:22:9f: 69:8f:1b:5b:b9:24:74:67:ca:2f:8d:6e:d8:69:a9:9d:f4:20: d1:dd:16:e5:4b:29:03:53:23:37:e4:6a:f1:b0:b4:9b:4e:92: d9:8b:b5:80:8d:4e:4b:92:8c:06:ca:79:48:7e:62:cc:be:ac: 7b:c8:0e:e0:7e:bf:eb:b6:e0:0c:cc:84:12:0c:be:34:15:3b: b9:21:dd:50:68:c2:00:c5:1c:eb:8a:1d:36:81:97:c9:30:1d: 7a:74:59:0e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUDt9J9O0vJyZzmAwQktxLXE7i2rowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCRTJGNjA5OTk2NDc2QUFGRTE0NkJDNUE3MjQyOUIw QjIwNUZDMDAeFw0yNTExMDQyMzM0MzBaFw0yNTExMDYwMTQxMzBaMDMxMTAvBgNV BAMTKDY0NEUyMzE3RDA4ODBDNTBBMDYzQTM5QkM1QTMwMUZDMjc0MUUzQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8PgaBXsSpLpUShj6hObIN4Ck jrscvcPlMsloX/YSop+Jn3AG1SFhjY/OXcEAQtmJW8Z5eMx6T/Lm78GlapYhRtbG 9o0Vpo+zQj8BmrPEiGP3ieSQarv7J465tF4RHKLNtCDdXSN1aDuJkZFBS7IyEKe4 evvXdERzGhpAImjCGthUsLg6F3YZ1jIQDpzagKJH0hM2zKpGt14xjvnHGnHAlwbW qXR0vaqJAUgVR6XxtSKhAEL5vRFkcuehzHR9y2s80roUVqVDoKrbaKKaYvfcoi37 4UomHSG1S2oINg3wvo8szUPsb/wv7P7W2BWexlIuaGdhZa4iKE2xzEAhXw7DAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUZE4jF9CIDFCgY6ObxaMB/CdB46AwHwYDVR0j BBgwFoAUWr4vYJmWR2qv4Ua8WnJCmwsgX8AwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY0ODMyNjExYmEwNjRkNmI4ZjljMmI3YzczZmJkODRiLzAv NUFCRTJGNjA5OTk2NDc2QUFGRTE0NkJDNUE3MjQyOUIwQjIwNUZDMC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy81QUJFMkY2MDk5OTY0NzZBQUZFMTQ2QkM1QTcyNDI5 QjBCMjA1RkMwLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY0ODMy NjExYmEwNjRkNmI4ZjljMmI3YzczZmJkODRiLzAvNUFCRTJGNjA5OTk2NDc2QUFG RTE0NkJDNUE3MjQyOUIwQjIwNUZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI7F2pGU3RdN/XYS1nXF Be8qXns2EUDFVsIdjvg1m0WSFHWBxny/qtN2s3blmOg9kOMPjB3oay4pkUP07rI+ zdJfnU77367hFUdukHG+PgNrvQSNRxUGvSKCJwIE3q4OTb4PZizrrP0ds3Q1pWfV q9Tq9V27Vf8D9s43b0Ba39LVha9sEONe0aGclyl1w5g77rYLtYa1u4nhLXPK9nCy 5WMin2mPG1u5JHRnyi+NbthpqZ30INHdFuVLKQNTIzfkavGwtJtOktmLtYCNTkuS jAbKeUh+Ysy+rHvIDuB+v+u24AzMhBIMvjQVO7kh3VBowgDFHOuKHTaBl8kwHXp0 WQ4= -----END CERTIFICATE-----Generated at Wed Nov 5 09:55:17 2025 by rpki-client