$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft File: B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json) Hash identifier: /6JbugMZj1Qwfxsc15jCw3k6l0n38bFWM5ot57U4rR8= Subject key identifier: 97:41:D9:F1:CA:09:0C:3C:16:88:7F:82:04:9A:E0:0D:AE:C7:5D:AB Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77 Certificate issuer: /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777 Certificate serial: 64E21E9ABA6553DD1F31AC5D3415CD926057ECA2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft Manifest number: 0348 Signing time: Tue 12 May 2026 23:07:16 +0000 Manifest this update: Tue 12 May 2026 23:02:16 +0000 Manifest next update: Thu 14 May 2026 01:18:16 +0000 Files and hashes: 1: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: elgEW1aflrNdCdgrDrZhMXXhu4mKyg1SqJu+vklMHhY=) 2: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: K2rP3StgFTVLC/Uaw9fDAFbzpcZVBB21WRt983T1OKU=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 00:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e2:1e:9a:ba:65:53:dd:1f:31:ac:5d:34:15:cd:92:60:57:ec:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777 Validity Not Before: May 12 23:02:16 2026 GMT Not After : May 14 01:18:16 2026 GMT Subject: CN=9741D9F1CA090C3C16887F82049AE00DAEC75DAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fb:eb:96:be:9a:28:86:5b:bb:02:5c:4a:4a: e3:a3:b8:6e:06:10:12:f6:72:d4:cd:72:00:03:2b: fc:00:ec:dc:88:96:a2:12:54:34:1e:fc:bb:4a:dc: 48:e7:3b:dd:bf:a9:36:59:c7:f1:69:82:2c:43:70: 99:ec:37:16:5f:71:23:ed:28:38:5a:ee:d5:9b:1f: 33:ee:16:3f:c3:31:cc:0a:9e:c1:8f:e9:d1:24:e4: 68:cc:88:33:79:3e:5d:45:47:e8:49:d3:18:75:63: 7b:e1:db:7b:52:05:5f:bd:78:c8:94:3b:e9:b1:07: 39:3b:bc:2f:80:3f:44:5d:94:af:2d:59:e7:ef:ee: 96:4d:20:77:21:65:c2:6f:92:76:95:b7:d9:21:83: cc:ce:57:68:4b:e6:92:1c:49:0f:86:e3:64:8b:f6: ea:34:f9:3e:86:f3:5c:76:8a:0d:38:18:8a:e1:e0: 41:d7:59:b1:ae:8d:52:8a:cd:a8:57:fa:68:d7:ef: 70:06:2f:50:73:fc:69:70:0c:04:63:a7:ec:3d:1e: 4a:bd:7a:fd:9a:0f:df:f4:87:08:35:74:6f:99:38: b0:5b:d9:38:7d:09:d4:bf:e6:2d:4a:37:df:2e:09: 0f:94:82:41:7b:8a:aa:a9:f7:22:ad:05:11:40:a0: da:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:41:D9:F1:CA:09:0C:3C:16:88:7F:82:04:9A:E0:0D:AE:C7:5D:AB X509v3 Authority Key Identifier: keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:91:e3:f5:e2:23:e1:01:57:1e:1a:54:88:85:b0:83:fa:31: d1:cc:f8:84:8a:15:a0:a1:f4:fb:92:15:e9:5c:be:f0:91:a3: 86:f5:2f:34:03:8b:f6:e7:ba:26:c2:6e:16:ca:c1:ae:b8:d1: 8b:e6:6b:b7:cc:20:f3:89:ae:3d:86:cb:08:8a:f5:98:28:25: 15:34:bc:65:fe:53:8b:78:f8:c8:b4:82:1e:f2:4f:8c:05:9d: bf:5e:30:e6:73:65:5b:f1:2c:91:7d:5b:98:06:db:d1:fa:22: 85:3a:b7:9f:54:d1:28:21:e7:f1:1a:51:6b:77:95:c2:e9:43: 9d:76:04:d8:ce:3b:e2:b2:0c:0c:6f:c5:2c:f5:91:d1:94:de: 9b:4f:d1:5c:d6:df:23:33:a2:fa:d4:82:a1:3b:7c:1a:a5:1d: dc:1a:e2:94:38:3b:3a:64:1b:e2:b2:19:1b:bf:3d:cb:86:bc: 19:9d:1c:ab:0f:a9:63:20:66:e2:40:e3:ad:5f:6a:e2:88:72: b0:e5:38:c1:89:c4:40:5e:8c:8e:50:39:7c:65:42:85:1e:e0: cf:1d:3c:95:6d:57:c2:c2:29:45:6c:c8:98:9b:29:47:98:6f: b3:c5:31:ac:2b:62:7f:e7:a0:99:c0:6c:51:e9:92:cf:cd:ac: 29:88:f3:0e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUZOIemrplU90fMaxdNBXNkmBX7KIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RE RUEwODc3NzAeFw0yNjA1MTIyMzAyMTZaFw0yNjA1MTQwMTE4MTZaMDMxMTAvBgNV BAMTKDk3NDFEOUYxQ0EwOTBDM0MxNjg4N0Y4MjA0OUFFMDBEQUVDNzVEQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj++uWvpoohlu7AlxKSuOjuG4G EBL2ctTNcgADK/wA7NyIlqISVDQe/LtK3EjnO92/qTZZx/FpgixDcJnsNxZfcSPt KDha7tWbHzPuFj/DMcwKnsGP6dEk5GjMiDN5Pl1FR+hJ0xh1Y3vh23tSBV+9eMiU O+mxBzk7vC+AP0RdlK8tWefv7pZNIHchZcJvknaVt9khg8zOV2hL5pIcSQ+G42SL 9uo0+T6G81x2ig04GIrh4EHXWbGujVKKzahX+mjX73AGL1Bz/GlwDARjp+w9Hkq9 ev2aD9/0hwg1dG+ZOLBb2Th9CdS/5i1KN98uCQ+UgkF7iqqp9yKtBRFAoNp9AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUl0HZ8coJDDwWiH+CBJrgDa7HXaswHwYDVR0j BBgwFoAUuCIqhFwM3Fno02muI+EWzd6gh3cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzA5ODBlMjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAv QjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODIyMkE4NDVDMENEQzU5RThEMzY5QUUyM0UxMTZD RERFQTA4Nzc3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzA5ODBl MjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAvQjgyMjJBODQ1QzBDREM1OUU4 RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMOR4/XiI+EBVx4aVIiF sIP6MdHM+ISKFaCh9PuSFelcvvCRo4b1LzQDi/bnuibCbhbKwa640Yvma7fMIPOJ rj2GywiK9ZgoJRU0vGX+U4t4+Mi0gh7yT4wFnb9eMOZzZVvxLJF9W5gG29H6IoU6 t59U0Sgh5/EaUWt3lcLpQ512BNjOO+KyDAxvxSz1kdGU3ptP0VzW3yMzovrUgqE7 fBqlHdwa4pQ4OzpkG+KyGRu/PcuGvBmdHKsPqWMgZuJA461fauKIcrDlOMGJxEBe jI5QOXxlQoUe4M8dPJVtV8LCKUVsyJibKUeYb7PFMawrYn/noJnAbFHpks/NrCmI 8w4= -----END CERTIFICATE-----Generated at Wed May 13 17:26:29 2026 by rpki-client