
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
File: B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json)
Hash identifier: mC1+LJiaDtU+m8X6gj1zWfEFz1TlyajT0tvhACjv/RE=
Subject key identifier: 28:E9:DE:99:CA:58:15:9B:68:23:9B:C6:19:43:FB:48:A9:30:59:87
Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
Certificate issuer: /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Certificate serial: 474E8349EABDA7C6F4C324478BFA3300798B07D8
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
Manifest number: 03A7
Signing time: Fri 24 Jul 2026 05:42:17 +0000
Manifest this update: Fri 24 Jul 2026 05:37:17 +0000
Manifest next update: Sat 25 Jul 2026 06:44:17 +0000
Files and hashes: 1: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: elgEW1aflrNdCdgrDrZhMXXhu4mKyg1SqJu+vklMHhY=)
2: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: WMCwvhx+BsoM09kVr7vt6CNEsslvva7ZpYklx3s075I=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:4e:83:49:ea:bd:a7:c6:f4:c3:24:47:8b:fa:33:00:79:8b:07:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Validity
Not Before: Jul 24 05:37:17 2026 GMT
Not After : Jul 25 06:44:17 2026 GMT
Subject: CN=28E9DE99CA58159B68239BC61943FB48A9305987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:bb:e3:d9:ff:48:9e:df:48:3c:ed:99:51:e7:
f5:c6:ff:91:4a:8c:62:53:45:3a:1a:76:33:48:6d:
f8:3f:2e:29:fe:e9:27:bb:71:fd:17:88:34:e0:45:
77:9d:b7:45:f1:58:a3:99:68:cd:4a:f6:16:25:06:
ac:30:e6:20:c8:3b:92:9d:99:52:5a:d5:76:67:b1:
54:ff:55:f8:3f:57:91:ab:12:12:5e:3c:67:b6:56:
5f:8b:8e:fa:63:b1:51:2e:bb:d0:3c:ff:52:22:f1:
22:4c:7c:22:7c:ca:15:1b:bf:f6:66:80:54:8d:1d:
36:f0:5c:9d:2d:7e:ac:3f:90:38:bf:c9:c4:96:1d:
e8:ce:69:81:01:50:36:c4:39:62:f1:b4:ff:b0:84:
f3:14:41:43:8d:44:c0:88:e8:2f:52:f7:21:88:db:
26:ff:38:06:4a:2e:fd:a4:69:51:3a:ce:ca:12:8b:
a6:6c:aa:69:a0:eb:8e:7d:ba:5f:e9:65:f9:0e:87:
1c:0c:4d:87:1b:aa:7c:2c:44:f2:96:ad:2c:85:77:
c1:4f:f3:70:f0:80:3d:6b:ad:5b:81:8b:17:46:a4:
41:7b:bf:6f:c5:63:8b:c7:6c:89:c6:c8:96:7e:f6:
64:40:cd:36:63:e7:67:7d:72:4d:69:8d:c7:f2:41:
5f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E9:DE:99:CA:58:15:9B:68:23:9B:C6:19:43:FB:48:A9:30:59:87
X509v3 Authority Key Identifier:
keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:1b:b0:6e:73:65:5b:be:b6:f9:41:09:09:b4:7e:04:1f:0e:
44:18:56:1b:bf:64:42:6c:53:8c:38:7b:f1:1d:e7:c6:7b:fc:
16:2b:98:d4:00:94:71:7c:c9:36:8a:cb:b8:52:2a:ba:4d:f4:
49:d4:5d:79:a9:bc:b4:a1:48:7b:c3:78:4b:1a:07:12:be:cd:
a9:15:e4:2e:3d:30:a0:16:27:6a:7c:65:a0:ce:a1:e2:1b:dd:
b7:35:52:bd:da:9b:be:10:9e:4b:ea:d4:1d:9f:f2:0a:80:26:
b6:46:ae:9a:dd:e0:7f:b5:cb:a9:ec:76:cb:78:71:b8:29:f3:
9f:1f:b0:a5:13:7a:9a:96:6f:6f:99:bb:a5:cb:e1:fa:84:47:
6c:ad:eb:d3:58:e9:b8:96:ad:2b:73:8f:c1:9c:fd:46:a6:dd:
79:db:20:2c:53:26:77:54:f3:69:68:5e:28:d1:e3:eb:b8:ed:
6d:34:76:b5:4d:66:ed:47:14:a3:17:d1:20:c0:41:c3:03:a4:
2e:1a:03:3a:e0:85:0e:01:af:74:88:ea:30:20:96:d0:2b:44:
0f:f9:db:19:d2:5a:1f:51:72:ad:41:2f:3e:a3:2e:17:2f:a0:
f4:97:5e:e8:54:65:30:d4:91:fa:8a:d1:07:ca:3d:bd:46:0b:
48:f4:86:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:30:28 2026 by rpki-client