$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft File: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft (raw, json) Hash identifier: +PmEOh8HKqY687dd8/+wdDGYQ5EbqzXPg7IxaYdgIOQ= Subject key identifier: 02:13:F1:7C:75:94:C5:97:B4:2C:ED:F9:86:01:0A:DD:B3:EB:C1:6A Authority key identifier: 06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5 Certificate issuer: /CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5 Certificate serial: 2D960D56F2938CCDACC117744890C0E4D1417807 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft Manifest number: 030C Signing time: Thu 26 Mar 2026 13:59:12 +0000 Manifest this update: Thu 26 Mar 2026 13:54:10 +0000 Manifest next update: Fri 27 Mar 2026 17:38:10 +0000 Files and hashes: 1: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl (hash: 5GKpKvo/nNrzVtfrPqNH3BW/3QpH01gvnDxMjhH1Pkw=) 2: 326131313a663263303a666663343a3a2f34382d3438203d3e20323136333733.roa (hash: iTb04aO1BMGaSLDC3asTwY2ZRYrbTl7Ocrr3rHizQyw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 08:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:96:0d:56:f2:93:8c:cd:ac:c1:17:74:48:90:c0:e4:d1:41:78:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5 Validity Not Before: Mar 26 13:54:10 2026 GMT Not After : Mar 27 17:38:10 2026 GMT Subject: CN=0213F17C7594C597B42CEDF986010ADDB3EBC16A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:41:63:43:c8:9b:fe:b4:e2:7e:79:6c:74:35: d2:d0:8d:ec:35:68:fd:b3:9d:92:4d:92:b7:5e:66: 12:e0:d1:8f:7b:52:cc:74:a0:b0:99:e9:c4:d5:8c: 33:dc:10:86:63:26:76:de:03:d9:61:7c:cc:3e:74: 43:6e:34:8a:38:b3:f7:95:f5:eb:60:4e:4f:f3:0f: 3d:fe:fe:2c:f3:ad:25:70:d3:83:9a:e0:5a:2f:e1: 11:b4:29:9a:e2:cf:d6:a5:e1:95:da:fe:58:5f:5c: c8:e3:65:f9:f1:ca:19:9e:5b:12:89:e6:d6:91:6c: dd:e8:47:65:e1:d0:df:4e:df:64:8a:6b:39:3a:16: eb:c1:1d:48:aa:fc:3b:39:f0:ef:17:d7:4e:22:ad: b7:4c:4a:1a:c5:4d:3a:7f:cf:cc:fc:55:cd:d3:a6: 93:d0:06:ef:cb:80:a6:c2:b7:c3:0a:0c:10:ff:67: 74:50:a0:81:9b:7e:49:50:0f:47:a6:3d:f2:75:5e: 01:ad:23:e7:02:ee:c1:d6:c4:f1:c4:fd:a1:b3:9b: fc:a4:39:01:97:67:4c:2e:d5:66:dd:5a:bb:20:17: eb:9d:5e:a2:f8:af:10:e1:81:85:25:92:4f:58:86: 6b:d0:50:b0:6e:5c:ba:15:2b:3c:5e:7b:10:ec:68: 0e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:13:F1:7C:75:94:C5:97:B4:2C:ED:F9:86:01:0A:DD:B3:EB:C1:6A X509v3 Authority Key Identifier: keyid:06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:5c:6f:01:19:b9:64:2b:19:e3:35:a8:26:26:2c:03:40:5a: 10:97:12:8d:5f:63:48:09:75:e1:9b:8d:bb:e5:36:94:45:8a: c8:fd:61:1a:f8:02:ae:cf:2b:9b:79:28:3a:91:00:70:b4:64: 3a:6a:8b:90:cc:c9:5c:b0:9f:c0:f6:83:d5:d8:ee:9d:44:e8: 91:1a:92:7a:d8:54:19:ab:4b:4e:ca:bb:d7:b7:bc:3b:05:b8: ec:f7:5f:ee:49:4e:71:0e:c6:e2:9b:d2:48:11:53:f6:06:81: 34:b6:01:c0:47:ee:7e:8d:e4:bc:50:05:28:cf:e6:86:89:d9: 04:fc:e4:09:8e:39:58:0f:47:bd:b7:d8:88:06:31:53:51:d2: 8c:52:cc:2e:6b:73:c7:83:df:50:b6:25:54:37:72:69:65:cf: 75:a9:bf:2f:f0:a0:c2:b1:9b:9d:c4:6d:e9:04:65:03:5e:1b: 0e:42:b8:db:71:76:79:68:c6:a1:73:e2:4f:8d:1b:2c:a5:40: 4b:a3:ab:0b:c9:97:25:50:30:5f:18:fc:32:dc:06:5f:9e:7f: fe:fd:41:5c:7a:0d:79:68:c7:9d:d5:3c:e9:13:9d:fd:9a:19: 23:c4:3d:02:c4:6b:b8:96:35:4e:50:01:da:e0:15:d0:9d:2e: db:68:40:5b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIULZYNVvKTjM2swRd0SJDA5NFBeAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3REJDNkJDRjBGOTU4MkRGNzgzNjYzODlBRUFGNTk2 NTU2NUVGNTAeFw0yNjAzMjYxMzU0MTBaFw0yNjAzMjcxNzM4MTBaMDMxMTAvBgNV BAMTKDAyMTNGMTdDNzU5NEM1OTdCNDJDRURGOTg2MDEwQUREQjNFQkMxNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvQWNDyJv+tOJ+eWx0NdLQjew1 aP2znZJNkrdeZhLg0Y97Usx0oLCZ6cTVjDPcEIZjJnbeA9lhfMw+dENuNIo4s/eV 9etgTk/zDz3+/izzrSVw04Oa4Fov4RG0KZriz9al4ZXa/lhfXMjjZfnxyhmeWxKJ 5taRbN3oR2Xh0N9O32SKazk6FuvBHUiq/Ds58O8X104irbdMShrFTTp/z8z8Vc3T ppPQBu/LgKbCt8MKDBD/Z3RQoIGbfklQD0emPfJ1XgGtI+cC7sHWxPHE/aGzm/yk OQGXZ0wu1WbdWrsgF+udXqL4rxDhgYUlkk9YhmvQULBuXLoVKzxeexDsaA7LAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUAhPxfHWUxZe0LO35hgEK3bPrwWowHwYDVR0j BBgwFoAUBn28a88PlYLfeDZjia6vWWVWXvUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzAxNGI5MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzAv MDY3REJDNkJDRjBGOTU4MkRGNzgzNjYzODlBRUFGNTk2NTU2NUVGNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wNjdEQkM2QkNGMEY5NTgyREY3ODM2NjM4OUFFQUY1 OTY1NTY1RUY1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzAxNGI5 MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzAvMDY3REJDNkJDRjBGOTU4MkRG NzgzNjYzODlBRUFGNTk2NTU2NUVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKFcbwEZuWQrGeM1qCYm LANAWhCXEo1fY0gJdeGbjbvlNpRFisj9YRr4Aq7PK5t5KDqRAHC0ZDpqi5DMyVyw n8D2g9XY7p1E6JEaknrYVBmrS07Ku9e3vDsFuOz3X+5JTnEOxuKb0kgRU/YGgTS2 AcBH7n6N5LxQBSjP5oaJ2QT85AmOOVgPR7232IgGMVNR0oxSzC5rc8eD31C2JVQ3 cmllz3Wpvy/woMKxm53EbekEZQNeGw5CuNtxdnloxqFz4k+NGyylQEujqwvJlyVQ MF8Y/DLcBl+ef/79QVx6DXlox53VPOkTnf2aGSPEPQLEa7iWNU5QAdrgFdCdLtto QFs= -----END CERTIFICATE-----Generated at Thu Mar 26 21:00:10 2026 by rpki-client