$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: eQz8rmfJkuLFbRMs+FmY7glriGmXLUXZcRW/k3c0kT8= Subject key identifier: CA:CB:3A:1B:A4:9C:A1:62:19:FC:E8:FE:68:94:12:39:59:58:1A:FE Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 5E63C5B57C66911B2E3002927DF7BB9F4E999F23 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 026F Signing time: Tue 04 Nov 2025 23:59:30 +0000 Manifest this update: Tue 04 Nov 2025 23:54:30 +0000 Manifest next update: Thu 06 Nov 2025 02:56:30 +0000 Files and hashes: 1: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 3wo4yWYqUm70prj7oF5pGF3zOR0/7RB8Epa8stuidcg=) 2: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: vxaqD429klEPt03aXXniKGxzQoHI4Ar9F2T3pRAzV/Y=) 3: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: ZGaLIRds0RKgrLPsyJtcUhSInLFLcTX/FXoCogYP+Z0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 02:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:63:c5:b5:7c:66:91:1b:2e:30:02:92:7d:f7:bb:9f:4e:99:9f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Nov 4 23:54:30 2025 GMT Not After : Nov 6 02:56:30 2025 GMT Subject: CN=CACB3A1BA49CA16219FCE8FE6894123959581AFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:41:2d:2d:68:0f:b9:f0:47:5b:7a:ca:7e:41: 6c:5d:11:f3:32:05:14:4d:a5:2d:17:84:2e:4e:17: 17:98:f7:53:ab:3d:c4:b5:c3:91:2a:4b:33:f7:22: d7:7d:41:0f:b2:87:02:3b:d8:5a:0f:e8:49:55:15: bd:23:57:33:ae:3b:fb:8d:0d:7f:42:b4:67:df:aa: 2b:cf:69:9a:1c:f2:bf:db:b9:3a:22:5e:86:ea:60: bb:36:88:8a:3c:29:c2:b6:2d:19:fb:8e:8d:b5:5a: bb:48:03:3f:f7:a4:fc:de:eb:52:ad:bb:a0:cf:df: 00:9a:3c:ce:04:b3:ba:21:d6:64:63:4c:ac:a4:12: 6d:7a:c1:61:03:2a:ca:36:6a:6e:8e:cc:53:05:5d: 45:5f:4b:01:bd:f0:1e:b9:dc:f4:95:77:ba:73:a4: 7b:19:86:9e:19:cb:cb:6a:90:69:f1:7f:c2:11:da: d3:4c:7c:78:ad:53:f9:25:4b:84:f1:68:43:f7:40: 0e:eb:cc:4d:27:05:a9:22:86:9b:24:74:42:df:01: ef:7a:e2:42:dd:fb:c2:19:f6:50:53:f5:2e:bc:72: ec:39:3c:c3:9b:4c:b9:cc:7b:aa:dc:0b:1b:05:a3: 16:70:cd:b8:c5:c0:36:20:39:33:2a:57:5d:9d:0a: 12:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CB:3A:1B:A4:9C:A1:62:19:FC:E8:FE:68:94:12:39:59:58:1A:FE X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e1:40:7d:59:52:ad:0d:6d:15:13:9b:28:a6:f6:ca:2e:95: 57:55:2b:46:18:1c:29:f3:81:80:89:0c:e8:ab:3e:72:3c:10: 57:b0:1f:1d:d3:43:ec:3c:04:bc:65:4e:8a:0c:2a:dc:fb:c5: a8:13:ad:e7:ad:70:4b:f1:90:ab:8a:72:06:48:86:b9:0a:7d: 30:ee:a6:20:17:09:f8:12:90:8c:58:50:b3:9f:33:0d:0d:4a: e5:85:44:2d:a3:32:60:f5:30:e9:18:e6:cf:7c:8b:28:0a:a9: 51:2c:82:1b:e3:b1:97:51:73:ca:e7:4c:5b:9c:f5:d4:be:73: 2e:45:ad:40:5e:1c:a2:3e:eb:63:7e:5e:f2:82:c8:83:1b:a9: 4c:fa:ca:4b:2c:74:9f:db:6a:c8:b1:e9:b3:62:60:7b:9e:d1: cd:0b:42:49:16:48:3e:70:0a:37:36:9e:76:e5:20:49:10:c1: b8:94:16:67:da:d9:39:f6:a3:25:b7:c4:1f:44:83:ad:5e:79: b4:d7:a2:c4:67:fd:02:25:7d:4e:80:e3:88:1b:ed:57:74:06: e2:95:96:f3:ff:6d:0a:3d:86:63:ac:eb:be:23:2f:ce:45:e2: ba:c5:f7:0f:07:f9:29:f9:21:6c:df:b0:0c:b9:5f:ad:62:52: 54:ba:9a:8c -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUXmPFtXxmkRsuMAKSffe7n06ZnyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNTExMDQyMzU0MzBaFw0yNTExMDYwMjU2MzBaMDMxMTAvBgNV BAMTKENBQ0IzQTFCQTQ5Q0ExNjIxOUZDRThGRTY4OTQxMjM5NTk1ODFBRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeQS0taA+58Edbesp+QWxdEfMy BRRNpS0XhC5OFxeY91OrPcS1w5EqSzP3Itd9QQ+yhwI72FoP6ElVFb0jVzOuO/uN DX9CtGffqivPaZoc8r/buToiXobqYLs2iIo8KcK2LRn7jo21WrtIAz/3pPze61Kt u6DP3wCaPM4Es7oh1mRjTKykEm16wWEDKso2am6OzFMFXUVfSwG98B653PSVd7pz pHsZhp4Zy8tqkGnxf8IR2tNMfHitU/klS4TxaEP3QA7rzE0nBakihpskdELfAe96 4kLd+8IZ9lBT9S68cuw5PMObTLnMe6rcCxsFoxZwzbjFwDYgOTMqV12dChInAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUyss6G6ScoWIZ/Oj+aJQSOVlYGv4wHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD/hQH1ZUq0NbRUTmyim 9soulVdVK0YYHCnzgYCJDOirPnI8EFewHx3TQ+w8BLxlTooMKtz7xagTreetcEvx kKuKcgZIhrkKfTDupiAXCfgSkIxYULOfMw0NSuWFRC2jMmD1MOkY5s98iygKqVEs ghvjsZdRc8rnTFuc9dS+cy5FrUBeHKI+62N+XvKCyIMbqUz6ykssdJ/basix6bNi YHue0c0LQkkWSD5wCjc2nnblIEkQwbiUFmfa2Tn2oyW3xB9Eg61eebTXosRn/QIl fU6A44gb7Vd0BuKVlvP/bQo9hmOs674jL85F4rrF9w8H+Sn5IWzfsAy5X61iUlS6 mow= -----END CERTIFICATE-----Generated at Wed Nov 5 17:15:12 2025 by rpki-client