$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft File: B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json) Hash identifier: NOz1Agux+HamRz/qFeiK6KoSTTBoUjRyMazDLI0VYyw= Subject key identifier: 9A:66:DD:8A:B1:6A:36:88:FD:BB:50:65:68:8A:7D:65:76:EF:76:6B Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 Certificate issuer: /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Certificate serial: 45028ED5FE9CBFA13E3D92B3F8491788699AE8F6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft Manifest number: 0347 Signing time: Tue 12 May 2026 20:02:58 +0000 Manifest this update: Tue 12 May 2026 19:57:58 +0000 Manifest next update: Wed 13 May 2026 23:21:58 +0000 Files and hashes: 1: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: DaLBmrX/Qdsgxr0MO20ShmGQH+Fowp37lEmejER/9Js=) 2: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: nO1YT0HdU2m72ueMZYtU7pGui3eQWYc9n6VJnhvZh24=) 3: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: 4QQNsk8lBa8O942cPNbgOsUIiLitH/4e3K7Oj090cpQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:02:8e:d5:fe:9c:bf:a1:3e:3d:92:b3:f8:49:17:88:69:9a:e8:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Validity Not Before: May 12 19:57:58 2026 GMT Not After : May 13 23:21:58 2026 GMT Subject: CN=9A66DD8AB16A3688FDBB5065688A7D6576EF766B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:f1:5c:f5:7b:15:71:6b:f6:ed:56:24:cb: 50:cd:15:74:e7:d0:49:86:b3:e2:0c:be:42:90:ab: 88:0c:b4:18:7b:85:53:e2:27:b3:6c:ad:cd:4c:00: 16:bc:07:81:0c:29:6b:d1:46:8f:02:67:06:fe:09: c6:b1:da:ce:df:b5:15:43:13:91:12:15:91:50:1b: 8d:05:31:87:c5:ba:a2:db:e6:60:b8:35:1b:71:d8: bc:79:82:2a:3c:17:0a:a4:c6:20:e3:76:dc:8d:8e: dc:1d:a3:32:b0:6c:a5:6d:d1:3d:eb:dc:15:6c:53: 91:10:33:c9:03:8b:17:89:01:80:4b:26:1e:3e:f5: eb:90:8c:ab:0d:3d:03:ec:0e:d8:bc:48:ea:3f:be: af:48:c8:03:0a:eb:b3:10:0e:f2:7d:ea:3c:04:da: 61:32:0b:a0:10:5f:25:b0:f1:97:6f:bf:93:c0:92: 1e:7b:68:9a:c1:98:26:b9:0b:b0:88:3a:d6:d6:0e: f6:f2:9a:95:d0:43:79:51:b3:65:20:03:ff:92:98: da:5c:6e:d5:cb:97:93:a9:7d:1b:ca:e7:cf:af:10: 84:82:e4:69:62:84:0a:57:4e:7c:47:41:ea:06:ce: 3f:89:b5:e6:7a:d3:23:1b:68:fd:cd:93:41:8c:6f: 55:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:66:DD:8A:B1:6A:36:88:FD:BB:50:65:68:8A:7D:65:76:EF:76:6B X509v3 Authority Key Identifier: keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:82:ec:9e:ea:95:eb:4e:c0:c0:04:61:39:b5:30:f5:26:b7: 29:0a:5d:b2:6e:48:49:ff:93:ee:1d:e4:fc:83:f8:c8:98:fb: dc:89:fb:69:51:ac:4a:57:bf:e4:86:ef:1c:1d:b1:59:f9:8a: 58:19:09:20:18:cb:c7:9c:a5:65:db:2b:d5:fe:cf:14:f4:09: c6:f1:8d:e4:57:24:e7:e8:34:5c:01:93:61:d6:5c:c8:98:74: ef:a7:b1:5c:38:2d:86:41:63:5d:32:8c:db:ba:0a:9e:c3:fb: aa:35:fe:a6:04:42:a4:c7:63:b1:fc:7f:44:d0:97:18:50:7a: 4f:83:1b:49:0f:dd:7d:07:7c:78:b8:df:af:39:26:1a:8a:ce: 32:48:0d:30:19:50:b5:e8:f5:d7:de:54:6b:86:5a:a7:ed:77: 7d:20:9e:91:54:77:f4:51:7c:93:a0:74:f1:cf:58:2c:53:84: 72:99:92:05:b8:10:48:21:36:88:54:b6:0f:a5:56:14:13:c4: 95:7d:41:46:d0:66:55:71:5d:7c:0a:25:04:2d:2d:70:bc:0f: de:09:4e:3b:6b:21:ac:e5:be:5a:7d:37:9d:a6:79:c5:f4:19: 1c:85:9e:07:1e:e4:6c:f5:63:4a:be:59:76:a4:a6:d1:53:9f: a3:2f:ba:12 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIURQKO1f6cv6E+PZKz+EkXiGma6PYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG MjFFMDUxODAeFw0yNjA1MTIxOTU3NThaFw0yNjA1MTMyMzIxNThaMDMxMTAvBgNV BAMTKDlBNjZERDhBQjE2QTM2ODhGREJCNTA2NTY4OEE3RDY1NzZFRjc2NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLi/Fc9XsVcWv27VYky1DNFXTn 0EmGs+IMvkKQq4gMtBh7hVPiJ7Nsrc1MABa8B4EMKWvRRo8CZwb+Ccax2s7ftRVD E5ESFZFQG40FMYfFuqLb5mC4NRtx2Lx5gio8FwqkxiDjdtyNjtwdozKwbKVt0T3r 3BVsU5EQM8kDixeJAYBLJh4+9euQjKsNPQPsDti8SOo/vq9IyAMK67MQDvJ96jwE 2mEyC6AQXyWw8Zdvv5PAkh57aJrBmCa5C7CIOtbWDvbympXQQ3lRs2UgA/+SmNpc btXLl5OpfRvK58+vEISC5GlihApXTnxHQeoGzj+JteZ60yMbaP3Nk0GMb1VBAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUmmbdirFqNoj9u1BlaIp9ZXbvdmswHwYDVR0j BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD OEYyMUUwNTE4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzBhNDYz N2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAvQjg4QTk0RENBMDlFM0E2NTND MDZGNDc4NDM0REM3QzhGMjFFMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABGC7J7qletOwMAEYTm1 MPUmtykKXbJuSEn/k+4d5PyD+MiY+9yJ+2lRrEpXv+SG7xwdsVn5ilgZCSAYy8ec pWXbK9X+zxT0CcbxjeRXJOfoNFwBk2HWXMiYdO+nsVw4LYZBY10yjNu6Cp7D+6o1 /qYEQqTHY7H8f0TQlxhQek+DG0kP3X0HfHi43685JhqKzjJIDTAZULXo9dfeVGuG Wqftd30gnpFUd/RRfJOgdPHPWCxThHKZkgW4EEghNohUtg+lVhQTxJV9QUbQZlVx XXwKJQQtLXC8D94JTjtrIazlvlp9N52mecX0GRyFngce5Gz1Y0q+WXakptFTn6Mv uhI= -----END CERTIFICATE-----Generated at Wed May 13 14:25:42 2026 by rpki-client