$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: oqiK/WPJRT7OowS7wHy78xeKI7TBoyhClLHHvk6G+vo= Subject key identifier: 08:3D:16:7E:C8:3E:13:6A:F8:13:CF:D4:99:84:7C:09:8A:0E:64:99 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 0C9518AA66663A0054C2255899F0F14C49060432 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 026D Signing time: Wed 05 Nov 2025 17:15:13 +0000 Manifest this update: Wed 05 Nov 2025 17:10:12 +0000 Manifest next update: Thu 06 Nov 2025 18:29:12 +0000 Files and hashes: 1: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: v2UM8WOMQgYd7OMrgply9nWm+cZGtSIhtkVgozUV97Q=) 2: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: 40KX5Azg+QOWUNYOrdl6IsWrdX+iJJgcObJYGtl3Q6w=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 05:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:95:18:aa:66:66:3a:00:54:c2:25:58:99:f0:f1:4c:49:06:04:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Nov 5 17:10:12 2025 GMT Not After : Nov 6 18:29:12 2025 GMT Subject: CN=083D167EC83E136AF813CFD499847C098A0E6499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:0f:cd:1e:f7:64:1d:36:ea:86:50:8d:eb: 5e:38:9e:ae:fb:47:65:4f:0d:50:d4:23:9f:1e:8d: ed:b6:55:e1:eb:f7:37:61:aa:2e:f2:7d:d3:8e:f8: 99:e0:a2:76:dc:7f:c3:9a:b2:03:a0:37:5f:17:83: 73:51:1d:8a:9b:0e:e0:fb:fc:50:18:ee:37:e3:fe: 64:70:f5:f8:8c:09:79:6a:2a:05:94:61:e8:4b:64: f5:f0:72:d9:ab:d7:e6:87:53:f9:12:0b:4a:bc:d6: 9d:06:d7:d3:9c:9e:f6:79:ae:2c:fa:3d:60:7c:11: dd:c4:f0:14:56:0c:8b:fe:b8:b9:2f:d8:6f:4a:ff: f4:3a:15:6a:11:57:9a:6e:4b:87:0c:1a:0f:42:75: 35:a6:00:aa:2f:60:e8:47:b5:8c:af:5d:45:80:6a: c0:5a:18:59:af:90:3f:c2:f7:59:b9:d1:64:4b:60: 3f:e8:fc:57:61:dd:3e:f4:73:db:b1:9c:6e:39:17: 60:a0:0f:c7:aa:ea:a7:91:b3:ac:92:8f:11:89:51: ec:ed:0f:4d:39:95:45:1d:43:0c:2f:a2:bc:72:39: 93:0d:62:53:18:09:80:ae:64:6f:e0:0c:a2:51:7a: 0a:e9:1e:d0:c2:76:de:eb:90:ab:f3:bf:b1:90:6d: c7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3D:16:7E:C8:3E:13:6A:F8:13:CF:D4:99:84:7C:09:8A:0E:64:99 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:e7:25:1f:07:d1:1c:d9:18:6d:6b:61:b5:b5:1d:c7:c5:1f: 96:c6:ce:a3:8a:92:27:27:3f:3d:0d:d2:92:69:30:06:ce:82: 7c:b3:bb:94:a8:c6:76:b9:89:f4:3b:0f:9d:44:c3:b1:a6:ba: b7:b2:e8:c6:f5:dd:d5:83:e4:e2:07:99:9a:77:f2:5f:3a:e7: 8a:b3:be:db:7c:60:ef:4c:19:41:53:70:fd:09:ca:fb:2d:c5: f6:6e:58:12:0f:bf:46:c3:86:e8:9e:b5:60:72:fd:7d:09:6e: da:15:d3:2f:30:12:51:f5:5f:04:d6:e5:bd:17:8c:ff:f1:4f: 94:5b:f6:5c:3c:c2:d2:6a:bd:88:a7:bd:2d:8b:8e:fc:f6:d8: 4a:31:18:92:49:6c:83:9b:73:a9:a2:c9:8a:fa:80:6f:90:09: 83:1e:f1:09:7b:af:43:93:4c:bd:ca:e8:9e:40:24:f1:17:c3: 53:71:82:77:20:65:70:ee:4f:94:f9:17:89:a1:c9:c4:61:a6: 55:94:77:d0:8a:d7:5f:28:64:9e:6e:86:21:28:77:d0:7f:f9: 8b:81:3c:8d:4d:d6:05:e9:99:a4:fb:1c:68:2f:46:28:ab:c8: f1:a6:f1:fc:f4:c2:c8:a0:93:ad:80:0e:6b:8a:5b:c3:80:6d: 0b:c5:29:2d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUDJUYqmZmOgBUwiVYmfDxTEkGBDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNTExMDUxNzEwMTJaFw0yNTExMDYxODI5MTJaMDMxMTAvBgNV BAMTKDA4M0QxNjdFQzgzRTEzNkFGODEzQ0ZENDk5ODQ3QzA5OEEwRTY0OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0iw/NHvdkHTbqhlCN6144nq77 R2VPDVDUI58eje22VeHr9zdhqi7yfdOO+Jngonbcf8OasgOgN18Xg3NRHYqbDuD7 /FAY7jfj/mRw9fiMCXlqKgWUYehLZPXwctmr1+aHU/kSC0q81p0G19OcnvZ5riz6 PWB8Ed3E8BRWDIv+uLkv2G9K//Q6FWoRV5puS4cMGg9CdTWmAKovYOhHtYyvXUWA asBaGFmvkD/C91m50WRLYD/o/Fdh3T70c9uxnG45F2CgD8eq6qeRs6ySjxGJUezt D005lUUdQwwvorxyOZMNYlMYCYCuZG/gDKJRegrpHtDCdt7rkKvzv7GQbcfZAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUCD0Wfsg+E2r4E8/UmYR8CYoOZJkwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKrnJR8H0RzZGG1rYbW1 HcfFH5bGzqOKkicnPz0N0pJpMAbOgnyzu5Soxna5ifQ7D51Ew7Gmurey6Mb13dWD 5OIHmZp38l8654qzvtt8YO9MGUFTcP0JyvstxfZuWBIPv0bDhuietWBy/X0JbtoV 0y8wElH1XwTW5b0XjP/xT5Rb9lw8wtJqvYinvS2Ljvz22EoxGJJJbIObc6miyYr6 gG+QCYMe8Ql7r0OTTL3K6J5AJPEXw1NxgncgZXDuT5T5F4mhycRhplWUd9CK118o ZJ5uhiEod9B/+YuBPI1N1gXpmaT7HGgvRiiryPGm8fz0wsigk62ADmuKW8OAbQvF KS0= -----END CERTIFICATE-----Generated at Thu Nov 6 00:23:19 2025 by rpki-client