$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft File: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft (raw, json) Hash identifier: oQtddUf6+f6GuuTXIX9nO4xZ8o4isgZMoFenZpiywvs= Subject key identifier: 8C:BB:75:B4:08:47:23:26:06:F2:45:9E:5F:E8:13:37:EB:82:ED:A4 Authority key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 Certificate issuer: /CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Certificate serial: 1F5B4451D437DF919C3E3816C0B777E22BB8F332 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft Manifest number: 026F Signing time: Wed 05 Nov 2025 00:29:31 +0000 Manifest this update: Wed 05 Nov 2025 00:24:31 +0000 Manifest next update: Thu 06 Nov 2025 00:37:31 +0000 Files and hashes: 1: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl (hash: tA28B5La/Y6cBp4uv5tiwgQmGqqbMyuiX10y4vbFakQ=) 2: 326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (hash: rxzc3BrYti6kxmXubVnEFiS+UC7vkumI3P6AvUB5lwM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 00:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:5b:44:51:d4:37:df:91:9c:3e:38:16:c0:b7:77:e2:2b:b8:f3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Validity Not Before: Nov 5 00:24:31 2025 GMT Not After : Nov 6 00:37:31 2025 GMT Subject: CN=8CBB75B40847232606F2459E5FE81337EB82EDA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:92:16:df:ab:b1:cd:33:b5:e3:19:29:54:da: 0a:47:db:d5:58:9b:2a:53:25:ca:62:e8:de:20:d2: 66:98:63:03:a6:bc:01:13:6b:c8:03:52:0b:49:96: 3b:c3:d9:ea:cc:d6:69:2e:7b:6b:c3:3b:e8:01:cd: 92:a2:78:40:62:c6:82:d5:4c:ad:4f:68:4e:9e:87: 5e:5f:9b:37:47:4f:f7:5f:bf:47:88:3f:0c:75:58: 34:da:b7:df:2f:da:e6:0a:16:bc:76:27:2d:b1:13: 50:34:41:4d:4a:44:9c:33:46:d7:05:ea:34:f8:ff: 8e:f6:4c:df:84:33:95:d2:6e:5f:75:85:0c:91:eb: dd:a2:81:2f:af:ce:ae:be:bd:b0:38:dd:bb:8a:5a: 7a:63:17:17:33:39:20:78:e9:e5:92:1c:5a:2a:7d: a3:0f:bd:6d:af:42:8d:30:f4:1c:8e:e7:8c:9f:36: d4:54:3f:7f:db:62:a0:dd:2e:9d:8d:26:ed:52:72: c4:68:76:e3:2e:5b:27:5d:d3:6f:3a:bc:80:a7:54: 5d:ee:48:15:b8:50:6e:76:54:84:6c:c4:d0:03:85: 8f:2c:bf:e0:3b:0a:7e:db:73:60:40:69:78:ca:90: dd:6b:a0:64:08:ad:62:8a:10:a0:32:f7:05:dc:ed: 40:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BB:75:B4:08:47:23:26:06:F2:45:9E:5F:E8:13:37:EB:82:ED:A4 X509v3 Authority Key Identifier: keyid:1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:6d:d1:cb:07:08:17:2d:4d:1d:56:38:da:03:e0:67:ce:c2: a2:a1:60:b3:73:ad:c8:06:23:80:35:69:18:bf:48:33:8e:e1: e2:91:13:b3:95:1c:d3:f7:19:75:f4:39:3b:e6:d5:24:5c:70: 1c:ca:47:92:59:3a:8c:61:44:5e:eb:0e:26:6f:83:15:c6:21: 9a:19:87:b8:27:c4:95:76:14:c2:91:be:88:d8:8c:a0:6b:e5: d4:c6:a9:52:cf:5f:af:cf:05:7a:da:f7:43:dc:3f:bb:6a:84: 6a:b1:61:84:9c:62:7e:f9:e6:50:23:8d:2f:9c:75:2b:8a:f7: 3b:33:0e:0c:8d:f8:61:59:af:ec:2e:f6:46:39:4a:6b:cb:10: 88:a2:51:08:78:46:1d:45:2e:09:39:9b:43:69:d0:32:cb:57: d8:e1:64:7f:ea:69:41:e8:1c:f1:5b:6f:41:55:9f:c9:ea:9e: aa:9f:2e:8b:3f:b3:2e:e4:70:45:d8:bc:47:6c:ed:0f:9a:bb: 15:1f:af:d7:c0:c7:88:7d:ba:2d:08:9d:96:bc:d7:15:71:c3: 4a:16:79:8d:01:06:a6:a4:b3:7e:de:b5:2b:a0:9e:5f:99:12: 72:60:ba:af:2f:7d:55:53:81:b1:1a:b3:ef:f5:7a:65:f1:65: 75:53:9a:2f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUH1tEUdQ335GcPjgWwLd34iu48zIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJB NkI3RUY3MTAeFw0yNTExMDUwMDI0MzFaFw0yNTExMDYwMDM3MzFaMDMxMTAvBgNV BAMTKDhDQkI3NUI0MDg0NzIzMjYwNkYyNDU5RTVGRTgxMzM3RUI4MkVEQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXkhbfq7HNM7XjGSlU2gpH29VY mypTJcpi6N4g0maYYwOmvAETa8gDUgtJljvD2erM1mkue2vDO+gBzZKieEBixoLV TK1PaE6eh15fmzdHT/dfv0eIPwx1WDTat98v2uYKFrx2Jy2xE1A0QU1KRJwzRtcF 6jT4/472TN+EM5XSbl91hQyR692igS+vzq6+vbA43buKWnpjFxczOSB46eWSHFoq faMPvW2vQo0w9ByO54yfNtRUP3/bYqDdLp2NJu1ScsRoduMuWydd0286vICnVF3u SBW4UG52VIRsxNADhY8sv+A7Cn7bc2BAaXjKkN1roGQIrWKKEKAy9wXc7UBpAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUjLt1tAhHIyYG8kWeX+gTN+uC7aQwHwYDVR0j BBgwFoAUGrsI1BpaaXQyDZeId2mhW6a373EwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2IzZGE1Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAv MUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQUJCMDhENDFBNUE2OTc0MzIwRDk3ODg3NzY5QTE1 QkE2QjdFRjcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2IzZGE1 Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAvMUFCQjA4RDQxQTVBNjk3NDMy MEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJdt0csHCBctTR1WONoD 4GfOwqKhYLNzrcgGI4A1aRi/SDOO4eKRE7OVHNP3GXX0OTvm1SRccBzKR5JZOoxh RF7rDiZvgxXGIZoZh7gnxJV2FMKRvojYjKBr5dTGqVLPX6/PBXra90PcP7tqhGqx YYScYn755lAjjS+cdSuK9zszDgyN+GFZr+wu9kY5SmvLEIiiUQh4Rh1FLgk5m0Np 0DLLV9jhZH/qaUHoHPFbb0FVn8nqnqqfLos/sy7kcEXYvEds7Q+auxUfr9fAx4h9 ui0InZa81xVxw0oWeY0BBqaks37etSugnl+ZEnJguq8vfVVTgbEas+/1emXxZXVT mi8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:55:07 2025 by rpki-client