$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: Vggu+Yp/oNFz1hg3cpZ42H+z4ypBTvW5qo9NzoYXmZg= Subject key identifier: A8:6C:63:74:4A:9D:6F:A6:23:77:AD:CF:34:B8:C6:C7:85:F7:C9:C5 Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 3EF7038EB9E72DD6F86FA0B2D1005A9BEFBB3803 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: 026A Signing time: Wed 05 Nov 2025 03:29:32 +0000 Manifest this update: Wed 05 Nov 2025 03:24:32 +0000 Manifest next update: Thu 06 Nov 2025 03:30:32 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: nPHGHMLjPadv+z+JFQ9bF19HGr+AMNn8g/XL48GuF4g=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f7:03:8e:b9:e7:2d:d6:f8:6f:a0:b2:d1:00:5a:9b:ef:bb:38:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: Nov 5 03:24:32 2025 GMT Not After : Nov 6 03:30:32 2025 GMT Subject: CN=A86C63744A9D6FA62377ADCF34B8C6C785F7C9C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:12:7b:2e:db:5b:8a:43:87:8b:08:a1:61:b8: 87:32:0e:f1:7c:b8:f8:d5:a4:03:e2:fe:f2:33:dd: 00:4a:7c:0a:df:f8:d8:21:26:27:31:a5:63:b4:37: 22:02:46:9b:53:53:0b:fd:8f:01:fe:9a:61:15:57: b0:2c:84:57:72:6d:de:82:65:57:3e:db:e7:b6:2b: 39:25:c2:27:90:2e:25:c7:c2:a8:6f:4b:2a:51:2e: 61:11:e7:f2:06:a9:81:e6:a3:f7:b9:de:35:94:45: 33:aa:70:dd:c0:c0:80:b3:a2:97:a9:d9:bb:3b:a2: b6:e5:10:d4:9d:66:03:6b:ea:b5:88:e3:dc:81:69: 12:91:26:7a:3c:7c:e3:fe:dd:a3:b6:9f:12:81:93: 51:e1:39:e0:52:6e:91:70:62:d7:cf:6b:f6:cf:89: b6:05:27:da:c5:e1:df:51:6c:4d:11:a5:6c:89:9b: 47:4d:28:4f:6d:90:1d:ac:05:1c:14:4b:da:dc:18: be:7f:e7:1e:13:6e:b0:75:75:91:b7:1e:61:07:9a: dc:f2:a4:aa:a8:dc:41:13:66:0b:33:e3:02:8a:92: 63:cd:63:23:31:2f:2d:06:5b:bd:2d:dc:ea:15:1f: a2:bd:bd:b3:15:56:c6:a6:26:76:ee:8a:04:97:9f: 77:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6C:63:74:4A:9D:6F:A6:23:77:AD:CF:34:B8:C6:C7:85:F7:C9:C5 X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:44:d6:14:95:bf:a8:10:67:dd:4d:cf:25:c2:78:1d:b5:9c: d6:6c:ff:6c:39:f1:b5:3d:6c:34:93:ef:1e:dd:f8:3b:6f:ed: 60:e2:27:ca:22:fd:79:6a:d8:f7:9d:a1:6c:f8:fa:ee:18:22: e3:4d:87:80:3a:cb:b3:d5:5b:c8:b2:e3:24:5a:ca:a7:d5:9d: 9e:85:c8:25:75:5e:71:fb:cd:7a:94:c2:8a:f7:25:b7:53:bc: 9b:89:25:fa:5b:8a:c4:31:69:40:2c:fb:d6:8d:5d:0e:37:1e: 71:e1:48:f0:39:64:d9:c3:21:f6:94:08:25:61:0d:83:e7:b8: 12:b4:32:57:c0:23:30:1c:96:17:bf:ff:2f:35:3e:77:61:66: 01:1d:81:db:3b:b0:5b:d7:0f:2f:a5:37:94:bb:e8:4f:d2:66: 01:1e:1d:e6:b3:7e:74:77:64:bc:e9:c6:29:de:3b:6f:29:a8: de:f7:2f:de:30:8c:6a:73:2b:8a:b7:d3:95:b8:b3:1c:0d:c9: 9f:d5:85:aa:e3:bf:3d:6b:b1:0c:83:d1:97:b1:c0:11:4f:74: dd:12:43:d2:1a:02:a3:a1:7c:6c:61:d7:8b:1a:02:26:38:12: fd:b5:86:71:bc:cb:37:b0:66:8d:51:e0:35:d7:91:ac:f5:2d: 6f:1c:fe:ff -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUPvcDjrnnLdb4b6Cy0QBam++7OAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNTExMDUwMzI0MzJaFw0yNTExMDYwMzMwMzJaMDMxMTAvBgNV BAMTKEE4NkM2Mzc0NEE5RDZGQTYyMzc3QURDRjM0QjhDNkM3ODVGN0M5QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmEnsu21uKQ4eLCKFhuIcyDvF8 uPjVpAPi/vIz3QBKfArf+NghJicxpWO0NyICRptTUwv9jwH+mmEVV7AshFdybd6C ZVc+2+e2KzklwieQLiXHwqhvSypRLmER5/IGqYHmo/e53jWURTOqcN3AwICzopep 2bs7orblENSdZgNr6rWI49yBaRKRJno8fOP+3aO2nxKBk1HhOeBSbpFwYtfPa/bP ibYFJ9rF4d9RbE0RpWyJm0dNKE9tkB2sBRwUS9rcGL5/5x4TbrB1dZG3HmEHmtzy pKqo3EETZgsz4wKKkmPNYyMxLy0GW70t3OoVH6K9vbMVVsamJnbuigSXn3d3AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUqGxjdEqdb6Yjd63PNLjGx4X3ycUwHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH5E1hSVv6gQZ91NzyXC eB21nNZs/2w58bU9bDST7x7d+Dtv7WDiJ8oi/Xlq2PedoWz4+u4YIuNNh4A6y7PV W8iy4yRayqfVnZ6FyCV1XnH7zXqUwor3JbdTvJuJJfpbisQxaUAs+9aNXQ43HnHh SPA5ZNnDIfaUCCVhDYPnuBK0MlfAIzAclhe//y81PndhZgEdgds7sFvXDy+lN5S7 6E/SZgEeHeazfnR3ZLzpxineO28pqN73L94wjGpzK4q305W4sxwNyZ/Vharjvz1r sQyD0ZexwBFPdN0SQ9IaAqOhfGxh14saAiY4Ev21hnG8yzewZo1R4DXXkaz1LW8c /v8= -----END CERTIFICATE-----Generated at Wed Nov 5 23:46:51 2025 by rpki-client