$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft File: 31586760843F668A816117EA02F6F30FE8F9C359.mft (raw, json) Hash identifier: mo0uYE7A4HpE2dXJ8DGiidtWeHHwfHMT6ip1voeQyY8= Subject key identifier: AB:D5:CC:F4:CE:70:22:EB:E6:AC:90:45:27:4B:C1:E8:1E:09:B4:23 Authority key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 Certificate issuer: /CN=31586760843F668A816117EA02F6F30FE8F9C359 Certificate serial: 3A88E7BF0461FE6316096641A31A7D0BF917A964 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft Manifest number: 026D Signing time: Wed 05 Nov 2025 08:04:47 +0000 Manifest this update: Wed 05 Nov 2025 07:59:47 +0000 Manifest next update: Thu 06 Nov 2025 11:51:47 +0000 Files and hashes: 1: 31586760843F668A816117EA02F6F30FE8F9C359.crl (hash: f0CiQfUrYNi54spT1iOw1GAOicKZClwUy6AWm79u2CE=) 2: 326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa (hash: K6ERbHzYMOmGY8zVjajZjctj/rooDOMsKI1zpR886Vs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:88:e7:bf:04:61:fe:63:16:09:66:41:a3:1a:7d:0b:f9:17:a9:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31586760843F668A816117EA02F6F30FE8F9C359 Validity Not Before: Nov 5 07:59:47 2025 GMT Not After : Nov 6 11:51:47 2025 GMT Subject: CN=ABD5CCF4CE7022EBE6AC9045274BC1E81E09B423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:5b:6d:58:ef:1b:a4:20:bf:b1:e3:62:d7: 30:e9:47:b4:a5:47:56:cf:2e:9f:26:e5:9b:52:8e: b3:8c:ee:2d:c2:4c:cd:49:e6:a8:fa:e4:e3:73:be: 21:2a:a4:96:9e:13:15:82:aa:38:9c:72:d0:04:0d: ad:68:be:c9:1f:5e:41:48:9f:f0:cb:0a:e6:e8:0d: 6c:fc:ae:83:59:97:1f:ed:2d:5b:14:17:ac:1e:22: 94:17:3e:13:94:12:97:52:50:cf:ae:f2:27:1b:76: ff:60:06:72:66:6a:3c:04:d5:5f:8a:14:b6:b2:42: 9a:03:57:aa:f0:86:7e:42:cf:e2:53:5b:2d:5a:83: 1c:2d:a3:b5:ed:b6:32:d5:ed:dd:d7:e6:4f:87:0e: 1b:b3:72:d1:2a:85:9b:32:76:c2:aa:0e:2f:94:d0: ee:73:89:51:c6:72:5f:be:03:28:fa:a7:e4:d5:d5: 09:fd:a7:03:f7:01:7c:f9:f2:c4:29:af:57:c8:24: 5a:b7:fd:b3:93:13:7d:15:69:1c:ca:20:3d:7d:e6: 09:5c:8f:7e:66:e5:a0:a8:68:30:d7:ad:43:b0:67: 53:7a:b6:c2:c1:5d:f7:bd:bb:d4:b4:7c:81:ed:9e: 38:2f:a2:1d:1e:36:c4:8c:43:7c:43:8f:97:c5:d9: 74:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D5:CC:F4:CE:70:22:EB:E6:AC:90:45:27:4B:C1:E8:1E:09:B4:23 X509v3 Authority Key Identifier: keyid:31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:27:5d:12:49:4e:97:7f:b1:f1:04:87:d4:8f:c2:f0:4d:0c: 50:98:3f:16:63:f9:99:71:0d:2b:f3:6c:ad:f1:c6:52:05:7a: 66:0c:95:8f:f8:22:95:8a:ba:88:5d:d4:70:88:7f:5a:20:b1: 1b:bc:1e:94:ff:3d:8e:ca:52:dc:61:39:67:eb:4b:5f:42:5a: 80:2a:99:bd:09:cb:ca:b6:35:ba:72:72:12:0e:89:d2:ad:e5: 87:11:99:50:38:8c:24:ac:ab:2d:4b:2e:99:79:a7:6e:a6:c2: 8a:ea:6d:4c:3d:0c:5a:86:01:0c:e0:66:b1:0f:47:ae:13:ea: 87:79:73:93:62:94:3c:91:3a:75:dc:ac:36:88:10:e3:64:a9: e5:00:f6:1b:99:18:8a:48:c8:f9:97:c3:40:12:55:b6:8c:7f: 49:75:92:2a:78:98:1e:9f:f8:b3:e9:03:ae:2a:c2:11:85:be: 96:b0:cc:40:47:58:7a:02:4e:68:d5:07:52:1f:24:e3:23:ed: f0:88:ef:8b:9f:c7:7a:08:92:e7:48:15:4d:6d:55:74:d3:21: bc:fa:bc:4b:57:58:f0:d1:fe:48:de:c0:eb:54:fb:e8:46:ea: d5:ea:a0:fc:61:2f:30:07:1f:ef:d2:4e:d3:e6:40:1a:9b:58: b3:47:6e:70 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUOojnvwRh/mMWCWZBoxp9C/kXqWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZF OEY5QzM1OTAeFw0yNTExMDUwNzU5NDdaFw0yNTExMDYxMTUxNDdaMDMxMTAvBgNV BAMTKEFCRDVDQ0Y0Q0U3MDIyRUJFNkFDOTA0NTI3NEJDMUU4MUUwOUI0MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNXlttWO8bpCC/seNi1zDpR7Sl R1bPLp8m5ZtSjrOM7i3CTM1J5qj65ONzviEqpJaeExWCqjicctAEDa1ovskfXkFI n/DLCuboDWz8roNZlx/tLVsUF6weIpQXPhOUEpdSUM+u8icbdv9gBnJmajwE1V+K FLayQpoDV6rwhn5Cz+JTWy1agxwto7XttjLV7d3X5k+HDhuzctEqhZsydsKqDi+U 0O5ziVHGcl++Ayj6p+TV1Qn9pwP3AXz58sQpr1fIJFq3/bOTE30VaRzKID195glc j35m5aCoaDDXrUOwZ1N6tsLBXfe9u9S0fIHtnjgvoh0eNsSMQ3xDj5fF2XTTAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUq9XM9M5wIuvmrJBFJ0vB6B4JtCMwHwYDVR0j BBgwFoAUMVhnYIQ/ZoqBYRfqAvbzD+j5w1kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3YzVkNGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAv MzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZFOEY5QzM1OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zMTU4Njc2MDg0M0Y2NjhBODE2MTE3RUEwMkY2RjMw RkU4RjlDMzU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3YzVk NGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAvMzE1ODY3NjA4NDNGNjY4QTgx NjExN0VBMDJGNkYzMEZFOEY5QzM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAonXRJJTpd/sfEEh9SP wvBNDFCYPxZj+ZlxDSvzbK3xxlIFemYMlY/4IpWKuohd1HCIf1ogsRu8HpT/PY7K UtxhOWfrS19CWoAqmb0Jy8q2NbpychIOidKt5YcRmVA4jCSsqy1LLpl5p26mworq bUw9DFqGAQzgZrEPR64T6od5c5NilDyROnXcrDaIEONkqeUA9huZGIpIyPmXw0AS VbaMf0l1kip4mB6f+LPpA64qwhGFvpawzEBHWHoCTmjVB1IfJOMj7fCI74ufx3oI kudIFU1tVXTTIbz6vEtXWPDR/kjewOtU++hG6tXqoPxhLzAHH+/STtPmQBqbWLNH bnA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:55:49 2025 by rpki-client