$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft File: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft (raw, json) Hash identifier: svPUPrP/4d6V9943jGO27bsEW4m6uS2zVCeYPPndTTI= Subject key identifier: 68:CC:10:62:14:5C:81:73:18:05:C7:03:D7:59:69:FC:99:69:2C:FC Authority key identifier: 1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87 Certificate issuer: /CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87 Certificate serial: 54ADBBB2BCCC3BE8FED737C146357EC075AAE1AA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft Manifest number: 026A Signing time: Tue 04 Nov 2025 19:39:30 +0000 Manifest this update: Tue 04 Nov 2025 19:34:30 +0000 Manifest next update: Wed 05 Nov 2025 20:35:30 +0000 Files and hashes: 1: 326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa (hash: Ck9ZZ0tiSTG41w0m3od8Zz6h1DTJUjOEieFp2NJMOpw=) 2: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl (hash: pMZ/EayqOOHHfArxZgEXSpZf2lxTlXEkmmxPuqJbDIE=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 20:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ad:bb:b2:bc:cc:3b:e8:fe:d7:37:c1:46:35:7e:c0:75:aa:e1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87 Validity Not Before: Nov 4 19:34:30 2025 GMT Not After : Nov 5 20:35:30 2025 GMT Subject: CN=68CC1062145C81731805C703D75969FC99692CFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:13:b1:26:2e:5b:46:14:50:d7:bc:19:6e:b3: e8:51:cb:3c:58:95:21:ce:ff:79:19:f7:d9:2e:ac: b6:be:27:86:1d:f2:74:69:82:60:da:1c:d6:02:8e: 8c:2a:0a:cc:8e:55:b0:6b:38:12:a0:df:71:76:b1: 06:77:aa:cc:02:d6:4e:09:5b:ee:0a:a6:f0:6d:f4: e3:01:c4:46:1c:00:61:9a:f4:cd:e9:d7:31:a4:7e: 1f:d7:d5:06:b1:8c:ca:68:b5:61:50:d1:16:1d:79: ff:68:b2:30:bf:f1:48:ea:4c:71:77:f8:38:11:4a: 1c:53:3e:93:88:9b:ad:2d:df:ba:fc:ad:da:74:53: 84:26:57:25:30:90:cf:25:21:d1:43:aa:6e:96:c6: 10:69:38:46:13:77:26:40:d4:70:47:12:55:a6:f2: 5c:4f:e2:e4:e5:a7:eb:4c:28:72:d7:dd:5d:c7:67: 43:31:97:a0:16:76:fb:01:e3:42:b2:44:a9:5e:59: cc:e6:3d:9e:2f:c7:8c:7d:51:bb:ef:cc:9a:79:85: 79:2e:b3:c6:5c:ba:a9:e9:22:dc:6a:34:c7:ac:74: 5a:ef:4c:32:61:c4:d4:c8:96:40:b7:07:97:32:c6: cb:69:5c:39:2d:b9:d8:90:b3:6d:62:97:ed:84:6b: 90:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CC:10:62:14:5C:81:73:18:05:C7:03:D7:59:69:FC:99:69:2C:FC X509v3 Authority Key Identifier: keyid:1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:2d:e2:ce:dc:db:7d:41:43:35:a8:c4:87:2e:af:4c:e0:37: 85:e5:a1:cd:69:c9:9a:00:fc:ce:5f:26:3b:02:64:70:5a:35: 6e:c6:99:66:f5:ec:3c:1f:ad:9b:33:f3:53:e3:64:83:64:24: f5:c2:04:99:4a:b5:a9:e4:c3:15:5c:c5:56:2f:d4:5c:00:45: eb:1d:61:f8:1f:01:34:8f:fc:b2:a5:ad:95:8b:e2:3a:cf:ba: 8a:b5:f4:56:a6:af:02:67:54:cc:12:22:f5:55:10:95:8e:92: 52:b8:cf:7a:50:65:c3:c5:98:8c:39:92:d9:e1:24:3e:b0:49: d2:0d:74:3b:56:2e:77:fa:c8:65:06:73:63:4f:28:cf:db:40: 59:00:14:35:cc:30:41:2a:cb:fd:35:70:ce:e1:19:bc:e8:bd: 7c:d1:c3:8a:ab:74:e6:87:d8:12:84:b9:24:94:78:01:59:a5: e7:85:e8:fb:d9:e4:74:4f:ff:f8:69:42:48:62:04:46:c9:04: da:ad:5b:b3:1a:fa:d8:6c:ea:8c:ed:f9:2a:95:0b:8e:35:bb: 7d:52:f3:1f:e6:d6:3d:de:f8:28:d1:40:37:f1:7e:23:0d:6e: 17:cd:c1:90:41:94:4e:f4:bf:b5:e7:59:66:34:dc:93:97:1d: 8d:3e:0c:47 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUVK27srzMO+j+1zfBRjV+wHWq4aowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZCOUM4NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3 MDFCMEY4NzAeFw0yNTExMDQxOTM0MzBaFw0yNTExMDUyMDM1MzBaMDMxMTAvBgNV BAMTKDY4Q0MxMDYyMTQ1QzgxNzMxODA1QzcwM0Q3NTk2OUZDOTk2OTJDRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7E7EmLltGFFDXvBlus+hRyzxY lSHO/3kZ99kurLa+J4Yd8nRpgmDaHNYCjowqCsyOVbBrOBKg33F2sQZ3qswC1k4J W+4KpvBt9OMBxEYcAGGa9M3p1zGkfh/X1QaxjMpotWFQ0RYdef9osjC/8UjqTHF3 +DgRShxTPpOIm60t37r8rdp0U4QmVyUwkM8lIdFDqm6WxhBpOEYTdyZA1HBHElWm 8lxP4uTlp+tMKHLX3V3HZ0Mxl6AWdvsB40KyRKleWczmPZ4vx4x9UbvvzJp5hXku s8ZcuqnpItxqNMesdFrvTDJhxNTIlkC3B5cyxstpXDktudiQs21il+2Ea5DJAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUaMwQYhRcgXMYBccD11lp/JlpLPwwHwYDVR0j BBgwFoAUH7nIUPkT1sCad22Ls4MnvnAbD4cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2NjNmMwZDBmNGMwNzQyNDM5MmQ4MjM4NzIwY2M2YTgyLzAv MUZCOUM4NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3MDFCMEY4Ny5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRkI5Qzg1MEY5MTNENkMwOUE3NzZEOEJCMzgzMjdC RTcwMUIwRjg3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2NjNmMw ZDBmNGMwNzQyNDM5MmQ4MjM4NzIwY2M2YTgyLzAvMUZCOUM4NTBGOTEzRDZDMDlB Nzc2RDhCQjM4MzI3QkU3MDFCMEY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABct4s7c231BQzWoxIcu r0zgN4Xloc1pyZoA/M5fJjsCZHBaNW7GmWb17DwfrZsz81PjZINkJPXCBJlKtank wxVcxVYv1FwAResdYfgfATSP/LKlrZWL4jrPuoq19FamrwJnVMwSIvVVEJWOklK4 z3pQZcPFmIw5ktnhJD6wSdINdDtWLnf6yGUGc2NPKM/bQFkAFDXMMEEqy/01cM7h GbzovXzRw4qrdOaH2BKEuSSUeAFZpeeF6PvZ5HRP//hpQkhiBEbJBNqtW7Ma+ths 6ozt+SqVC441u31S8x/m1j3e+CjRQDfxfiMNbhfNwZBBlE70v7XnWWY03JOXHY0+ DEc= -----END CERTIFICATE-----Generated at Wed Nov 5 11:46:04 2025 by rpki-client