$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft File: F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft (raw, json) Hash identifier: JF/Nh1h8zqGj4TODoyNo0tDhcaJDU/xQ+DhnkyPbyfQ= Subject key identifier: FC:77:67:EF:42:5E:01:1C:EE:D4:E6:E4:E2:77:E8:4D:78:35:23:5B Authority key identifier: F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 Certificate issuer: /CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Certificate serial: 19D809FD2A9599D823C308B4F1F68A916630EFBE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft Manifest number: 026C Signing time: Tue 04 Nov 2025 22:04:30 +0000 Manifest this update: Tue 04 Nov 2025 21:59:30 +0000 Manifest next update: Wed 05 Nov 2025 22:19:30 +0000 Files and hashes: 1: F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl (hash: Ke4Mtk81/NMOyrkDPvL0ydFHV0jq1gAKl7NkVa8mbTc=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d8:09:fd:2a:95:99:d8:23:c3:08:b4:f1:f6:8a:91:66:30:ef:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Validity Not Before: Nov 4 21:59:30 2025 GMT Not After : Nov 5 22:19:30 2025 GMT Subject: CN=FC7767EF425E011CEED4E6E4E277E84D7835235B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f9:fb:5c:f2:03:15:69:62:67:bc:4d:7f:56: c9:c8:2a:f1:c5:a7:4a:75:d4:64:2f:1b:9d:28:ab: 4a:a9:37:ff:0f:27:79:24:7e:78:17:be:d3:01:6e: 84:d1:18:05:1c:99:b9:f4:48:43:dc:9c:41:47:f8: 60:9d:28:d0:9f:ea:94:c9:9c:d1:4d:dc:de:19:10: 1d:a4:0c:a9:06:fc:5b:de:94:c9:83:8c:31:dd:9f: 58:ee:3b:b1:2b:2e:2e:19:6b:4a:e7:69:da:09:04: 2a:50:ea:bb:1a:ea:b0:17:20:2d:dd:c2:2f:9f:0e: 1d:29:b0:60:d5:59:75:47:87:c4:10:e1:c8:55:8c: 77:ad:95:9b:f9:fe:a6:cf:fd:d1:31:3b:71:2b:16: 8e:3b:f3:cd:24:97:9c:68:e9:c3:7d:7a:aa:39:51: 93:47:8e:31:de:17:d6:6c:99:fe:f2:7e:5f:5c:87: f7:be:98:a9:ec:1c:89:c9:30:be:40:23:15:98:18: 78:d7:30:69:21:40:51:bb:ed:44:1e:b2:0a:2f:cb: fb:a9:0c:63:30:49:03:cf:a2:dd:89:fe:9d:bb:10: ba:9b:fb:ae:20:cc:99:ef:bc:d9:08:34:d7:26:05: 80:21:5e:5d:d9:d1:d7:19:35:ca:c2:ab:e9:d5:fd: ae:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:77:67:EF:42:5E:01:1C:EE:D4:E6:E4:E2:77:E8:4D:78:35:23:5B X509v3 Authority Key Identifier: keyid:F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:59:c3:cb:e6:b8:37:06:df:54:ba:0e:24:bb:08:5b:47:bf: f4:9c:04:a4:3e:dc:e4:3c:0c:10:2e:43:3b:7b:94:9d:3f:64: 15:17:72:56:98:38:0f:09:b4:a2:f8:44:02:e4:2d:17:f8:1f: f1:cc:21:60:04:e5:1c:eb:b4:3b:50:23:84:e4:92:dc:10:cb: 63:5a:e2:d5:80:8c:0f:98:ca:e8:cc:6d:20:d7:44:36:bd:a4: 0f:e2:b8:21:5c:56:7c:3b:4f:07:6a:f2:9f:16:3d:75:a7:46: 34:66:a5:2d:9c:0b:7e:e7:91:f5:42:8f:8f:e0:0f:f5:04:66: 1e:50:12:00:6d:76:f1:d6:9c:ae:25:b0:c0:ea:96:b6:99:4f: 8b:b3:e4:db:33:2a:9c:86:97:06:6f:50:13:77:ec:49:7b:61: 51:14:d0:a9:8e:48:06:c3:26:0e:b5:7d:cd:16:4b:15:7c:6b: 86:ae:28:3a:aa:6d:b7:51:ec:96:84:6a:c1:fb:35:f6:26:1e: e6:28:5a:b1:54:cc:f8:b7:c0:09:6e:2d:f3:88:80:a6:55:70: 07:5a:61:dd:37:61:83:55:83:48:71:6b:cc:16:b4:c4:c3:09: 67:77:cc:26:32:15:c7:eb:29:a7:2b:4c:e0:34:dc:70:4d:8c: 87:52:94:10 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUGdgJ/SqVmdgjwwi08faKkWYw774wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2 OTg2RDdDNjAeFw0yNTExMDQyMTU5MzBaFw0yNTExMDUyMjE5MzBaMDMxMTAvBgNV BAMTKEZDNzc2N0VGNDI1RTAxMUNFRUQ0RTZFNEUyNzdFODRENzgzNTIzNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr+ftc8gMVaWJnvE1/VsnIKvHF p0p11GQvG50oq0qpN/8PJ3kkfngXvtMBboTRGAUcmbn0SEPcnEFH+GCdKNCf6pTJ nNFN3N4ZEB2kDKkG/FvelMmDjDHdn1juO7ErLi4Za0rnadoJBCpQ6rsa6rAXIC3d wi+fDh0psGDVWXVHh8QQ4chVjHetlZv5/qbP/dExO3ErFo47880kl5xo6cN9eqo5 UZNHjjHeF9Zsmf7yfl9ch/e+mKnsHInJML5AIxWYGHjXMGkhQFG77UQesgovy/up DGMwSQPPot2J/p27ELqb+64gzJnvvNkINNcmBYAhXl3Z0dcZNcrCq+nV/a6nAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU/Hdn70JeARzu1Obk4nfoTXg1I1swHwYDVR0j BBgwFoAU95TfoAnqkLTLuzQN5MJVRGmG18YwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2RlNTMzMzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAv Rjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GNzk0REZBMDA5RUE5MEI0Q0JCQjM0MERFNEMyNTU0 NDY5ODZEN0M2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2RlNTMz Mzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAvRjc5NERGQTAwOUVBOTBCNENC QkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADxZw8vmuDcG31S6DiS7 CFtHv/ScBKQ+3OQ8DBAuQzt7lJ0/ZBUXclaYOA8JtKL4RALkLRf4H/HMIWAE5Rzr tDtQI4TkktwQy2Na4tWAjA+YyujMbSDXRDa9pA/iuCFcVnw7Twdq8p8WPXWnRjRm pS2cC37nkfVCj4/gD/UEZh5QEgBtdvHWnK4lsMDqlraZT4uz5NszKpyGlwZvUBN3 7El7YVEU0KmOSAbDJg61fc0WSxV8a4auKDqqbbdR7JaEasH7NfYmHuYoWrFUzPi3 wAluLfOIgKZVcAdaYd03YYNVg0hxa8wWtMTDCWd3zCYyFcfrKacrTOA03HBNjIdS lBA= -----END CERTIFICATE-----Generated at Wed Nov 5 15:33:47 2025 by rpki-client