$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft File: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft (raw, json) Hash identifier: vFtu7pUkV+FgpXuvl/65WqZXTV9jwDF8+7p2vbXqTKY= Subject key identifier: C4:65:44:C3:2A:15:5A:ED:E9:7B:49:E2:AA:CA:0C:4B:FA:3F:1C:4F Authority key identifier: 06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5 Certificate issuer: /CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5 Certificate serial: 7118FA3DF28EE0C2D6611564003A8715006DEC0F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft Manifest number: 034A Signing time: Tue 12 May 2026 15:28:35 +0000 Manifest this update: Tue 12 May 2026 15:23:35 +0000 Manifest next update: Wed 13 May 2026 16:27:35 +0000 Files and hashes: 1: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl (hash: 2y4olHtGpgNrrZ56gWi/+p2qxeHjXgc05yY2kIJVgmE=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 16:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:18:fa:3d:f2:8e:e0:c2:d6:61:15:64:00:3a:87:15:00:6d:ec:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5 Validity Not Before: May 12 15:23:35 2026 GMT Not After : May 13 16:27:35 2026 GMT Subject: CN=C46544C32A155AEDE97B49E2AACA0C4BFA3F1C4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fb:c8:ea:4c:0c:8b:bd:c9:f1:a2:5f:1c:0e: a4:05:33:6b:62:db:92:52:ea:01:e5:3a:a3:05:65: 51:51:06:d6:f7:7c:29:64:e0:bb:1c:6e:07:31:1a: de:af:3e:1a:2f:e1:fa:ec:36:6a:49:15:71:b3:f1: 35:35:f6:cb:cd:ba:73:af:e0:48:e7:7f:3b:27:a4: 91:6c:08:a5:4a:3e:8b:ec:f2:5e:0a:e8:d6:37:e6: e1:d9:44:a8:94:7a:13:42:11:4a:6c:3c:eb:ba:c1: cf:ec:1d:e9:2b:39:da:6b:b7:67:23:0f:72:e2:0f: 99:28:df:a3:4e:84:fb:4e:ef:60:c7:7e:11:08:79: 6d:43:d3:02:33:9a:ec:f6:45:48:f3:96:bd:41:f5: 10:f9:68:66:34:b8:53:b8:02:a4:20:38:90:f0:d9: d6:01:aa:42:e7:e8:ad:f0:7e:a1:7b:da:d7:4f:f6: 18:9a:17:9e:e2:21:0b:93:95:86:56:e9:bb:f4:81: ce:a7:c4:11:58:93:de:21:30:08:fe:94:a8:e8:1e: a2:8c:59:a4:3b:12:44:1f:0d:46:b7:93:a3:64:ad: b9:70:f9:a0:14:8c:df:a2:3d:cd:c6:43:5a:75:6a: ce:58:52:c5:b4:87:ed:5f:98:da:ff:28:89:24:1f: 7c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:65:44:C3:2A:15:5A:ED:E9:7B:49:E2:AA:CA:0C:4B:FA:3F:1C:4F X509v3 Authority Key Identifier: keyid:06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:7f:b3:35:28:08:78:8d:c1:db:67:1a:55:78:b0:c4:22:71: 9f:40:94:a3:1f:a4:cb:f3:51:0d:f4:9a:51:a9:59:17:43:fe: fc:b8:13:c8:79:81:cd:26:67:85:00:1e:09:f5:fa:aa:1d:71: a8:f0:52:16:1e:ff:7a:0f:8a:d5:e7:14:0b:b0:e5:7a:28:14: 7d:cb:d1:5e:ab:bd:c6:30:13:e9:db:3d:c4:73:3f:01:11:52: 1d:45:36:16:25:20:f6:6c:bf:3f:1b:dc:4b:90:9f:99:77:bb: cc:15:78:ac:da:40:d1:34:0c:9c:13:70:8c:da:70:c8:ca:cd: 09:62:ca:6b:c9:eb:a5:27:ba:54:6a:22:73:be:62:0d:bd:ed: 22:ce:6f:27:ef:c4:47:94:3e:cc:4c:c5:5a:8b:5d:3a:27:bb: 2a:7f:be:3f:8b:6d:85:a5:7e:99:d4:d9:6d:24:71:89:bd:51: 2f:79:e6:c3:a0:45:68:93:e4:4c:b7:24:75:23:c2:b4:fe:79: 2e:44:fa:58:91:fa:c9:77:e4:6d:ae:ae:39:19:72:79:ba:bb: 72:74:d1:5e:2d:61:0a:6d:96:14:6d:1f:7a:5b:31:c9:aa:bd: b8:83:39:e9:15:2a:86:07:77:93:32:d1:8c:09:4c:f2:a9:e2: 92:7a:c3:7d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUcRj6PfKO4MLWYRVkADqHFQBt7A8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3REJDNkJDRjBGOTU4MkRGNzgzNjYzODlBRUFGNTk2 NTU2NUVGNTAeFw0yNjA1MTIxNTIzMzVaFw0yNjA1MTMxNjI3MzVaMDMxMTAvBgNV BAMTKEM0NjU0NEMzMkExNTVBRURFOTdCNDlFMkFBQ0EwQzRCRkEzRjFDNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ+8jqTAyLvcnxol8cDqQFM2ti 25JS6gHlOqMFZVFRBtb3fClk4LscbgcxGt6vPhov4frsNmpJFXGz8TU19svNunOv 4EjnfzsnpJFsCKVKPovs8l4K6NY35uHZRKiUehNCEUpsPOu6wc/sHekrOdprt2cj D3LiD5ko36NOhPtO72DHfhEIeW1D0wIzmuz2RUjzlr1B9RD5aGY0uFO4AqQgOJDw 2dYBqkLn6K3wfqF72tdP9hiaF57iIQuTlYZW6bv0gc6nxBFYk94hMAj+lKjoHqKM WaQ7EkQfDUa3k6Nkrblw+aAUjN+iPc3GQ1p1as5YUsW0h+1fmNr/KIkkH3zXAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUxGVEwyoVWu3pe0niqsoMS/o/HE8wHwYDVR0j BBgwFoAUBn28a88PlYLfeDZjia6vWWVWXvUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzAxNGI5MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzAv MDY3REJDNkJDRjBGOTU4MkRGNzgzNjYzODlBRUFGNTk2NTU2NUVGNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wNjdEQkM2QkNGMEY5NTgyREY3ODM2NjM4OUFFQUY1 OTY1NTY1RUY1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzAxNGI5 MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzAvMDY3REJDNkJDRjBGOTU4MkRG NzgzNjYzODlBRUFGNTk2NTU2NUVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMJ/szUoCHiNwdtnGlV4 sMQicZ9AlKMfpMvzUQ30mlGpWRdD/vy4E8h5gc0mZ4UAHgn1+qodcajwUhYe/3oP itXnFAuw5XooFH3L0V6rvcYwE+nbPcRzPwERUh1FNhYlIPZsvz8b3EuQn5l3u8wV eKzaQNE0DJwTcIzacMjKzQliymvJ66UnulRqInO+Yg297SLObyfvxEeUPsxMxVqL XTonuyp/vj+LbYWlfpnU2W0kcYm9US955sOgRWiT5Ey3JHUjwrT+eS5E+liR+sl3 5G2urjkZcnm6u3J00V4tYQptlhRtH3pbMcmqvbiDOekVKoYHd5My0YwJTPKp4pJ6 w30= -----END CERTIFICATE-----Generated at Wed May 13 09:06:59 2026 by rpki-client