
$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
File: B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json)
Hash identifier: UEYbgyukjIprnaiG/eSVTxJhQ5kR3bKbJXuhevEZcTU=
Subject key identifier: E7:39:0C:47:D7:A2:AB:1C:44:A0:F8:7F:B8:2F:E5:CE:7C:76:64:0C
Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
Certificate issuer: /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Certificate serial: 23F00B10B72A2137E2AD1778E1AF9A6FE469FBDB
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
Manifest number: 0405
Signing time: Wed 14 Oct 2026 23:02:43 +0000
Manifest this update: Wed 14 Oct 2026 22:57:42 +0000
Manifest next update: Thu 15 Oct 2026 23:16:42 +0000
Files and hashes: 1: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: 2sePAPUEOQoAKQMhjbIhHQZNDh9JaoOIhsJxiw8MLb0=)
2: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: elgEW1aflrNdCdgrDrZhMXXhu4mKyg1SqJu+vklMHhY=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 09:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f0:0b:10:b7:2a:21:37:e2:ad:17:78:e1:af:9a:6f:e4:69:fb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Validity
Not Before: Oct 14 22:57:42 2026 GMT
Not After : Oct 15 23:16:42 2026 GMT
Subject: CN=E7390C47D7A2AB1C44A0F87FB82FE5CE7C76640C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:bb:67:40:8e:6a:f6:6d:c1:ce:fc:b4:69:
e7:91:0d:50:e1:c6:d2:63:35:49:14:8a:f0:d0:57:
5e:14:fc:1c:d5:84:f7:dd:64:fd:6f:9c:9f:f1:f8:
6b:5e:94:76:70:d7:ed:fe:fd:4e:8e:9a:5f:3b:ce:
88:9f:1e:23:c6:b1:ad:ff:aa:bb:71:ea:4b:62:73:
b3:e9:04:6b:1b:6f:03:bf:54:33:4f:a6:9e:2d:af:
1b:49:cb:77:bb:a0:a5:6c:c6:db:56:2a:e3:0b:ed:
f1:ae:0c:29:2b:6a:7e:e4:a1:bd:22:61:38:cb:e3:
75:ff:a6:e6:4b:06:d8:61:30:da:c1:80:47:ee:a2:
58:24:9b:d0:b6:33:3b:b0:fb:74:37:4d:e5:f7:bb:
64:f5:17:09:61:6a:70:5e:05:bb:3b:27:c7:01:9a:
6c:06:fa:a7:82:0f:aa:43:34:1a:82:a5:90:be:02:
03:d4:55:50:ed:f4:3d:16:53:46:e6:0c:3d:9c:99:
0b:ea:83:a7:75:f0:8b:a8:72:74:90:78:87:99:de:
87:de:d4:8e:c0:1a:8d:fb:ed:65:b5:ea:88:c4:5e:
3f:75:ca:d5:43:58:48:bf:fd:82:41:9e:32:e2:68:
8f:0e:2b:c7:02:68:58:58:3e:7b:2c:ee:40:c6:30:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:39:0C:47:D7:A2:AB:1C:44:A0:F8:7F:B8:2F:E5:CE:7C:76:64:0C
X509v3 Authority Key Identifier:
keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:01:23:01:28:03:a5:34:95:4a:ce:49:64:aa:17:ab:8f:9a:
a0:31:a6:23:f9:2d:51:b2:b5:12:73:ab:81:d2:f2:7c:76:91:
a2:ad:fe:8d:ae:13:c2:f4:df:43:33:05:06:7e:b8:6a:de:13:
c4:99:f1:0c:ce:c3:b4:3a:9a:12:3e:67:e2:2d:29:e3:8f:75:
56:41:06:cb:82:a3:43:4a:b0:54:b6:08:51:e4:27:fa:b7:95:
2b:a5:95:15:4f:2a:05:d9:97:b7:e9:51:69:8b:02:03:d8:a4:
a9:d8:5b:f3:06:d9:18:25:53:18:74:40:9c:21:75:1e:ad:ff:
f7:a4:00:fe:83:9c:a3:be:7a:4a:e1:3c:37:ab:46:7f:a5:eb:
01:ee:9b:bc:8e:a4:b3:8f:80:79:b0:5e:09:e5:91:71:cf:11:
4a:1c:4b:68:02:2c:6e:09:d2:db:ae:72:64:1c:3b:fa:99:24:
d8:07:13:71:df:57:19:2f:98:d3:f2:39:a3:2f:e1:c0:56:68:
52:f2:6e:36:0b:a9:7b:71:48:91:55:88:1b:60:58:55:f8:f1:
de:80:3e:cf:16:4a:93:60:29:53:f4:cd:5c:25:bd:7d:6b:99:
72:07:48:54:4b:5d:e8:2f:a9:76:af:87:33:9b:29:65:0b:14:
34:dc:95:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 01:51:20 2026 by rpki-client