$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft File: B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json) Hash identifier: ghObC2Lyz8vU2c4i+SmmqeNM4siNlXQt0yFcyoeDhWo= Subject key identifier: B9:41:68:91:5F:7B:EF:52:15:12:28:AE:27:BB:A1:D4:A5:25:B8:D6 Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 Certificate issuer: /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Certificate serial: 09700CA6CC8585742A5E92E347D57A93C77D6DF0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft Manifest number: 0308 Signing time: Thu 26 Mar 2026 10:09:12 +0000 Manifest this update: Thu 26 Mar 2026 10:04:10 +0000 Manifest next update: Fri 27 Mar 2026 13:33:10 +0000 Files and hashes: 1: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: CCf78NGwS7QlPS/ajp5YAg4r4teZxnYq0Pa0mCcilho=) 2: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: nMLfH1nYsI5mPwv+N0MEzTUVq1YFB35SCmO/3EjXxsg=) 3: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: tOaIT6qTvs/T2L2c3rEpmXq3gx7f0jW4s/J1R0UAbuM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 08:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:70:0c:a6:cc:85:85:74:2a:5e:92:e3:47:d5:7a:93:c7:7d:6d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Validity Not Before: Mar 26 10:04:10 2026 GMT Not After : Mar 27 13:33:10 2026 GMT Subject: CN=B94168915F7BEF52151228AE27BBA1D4A525B8D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7d:a8:b3:1d:34:ee:33:38:1d:cb:cb:c9:8a: 65:94:57:7b:13:01:7e:12:53:66:25:43:3d:21:1c: 22:de:f0:ab:c3:73:1b:3b:3a:f2:20:0f:8f:c5:2a: 67:df:ee:72:68:4b:78:f0:eb:dd:b9:43:10:7a:ba: 96:73:c7:38:27:8e:94:72:8d:fb:5b:c9:86:60:5e: a7:b6:7f:f1:70:5c:50:2f:45:7e:a6:8e:99:5a:bb: 7f:a6:29:07:f1:42:9d:16:bc:2a:6b:08:6c:12:0f: 3e:21:28:cf:cc:50:99:9d:b8:25:37:35:5d:83:37: c1:80:00:ad:fb:67:19:02:38:23:69:bf:86:49:dc: 0e:1c:36:39:cd:8d:d9:03:a3:ae:a5:eb:4e:d3:23: a8:ae:dc:3b:73:43:69:9b:91:2d:ea:c1:f2:cd:cd: 91:41:87:85:e5:60:ef:d0:f9:c0:b8:03:95:21:78: 1d:cf:90:fb:54:8d:db:64:4a:0f:14:16:78:55:68: c8:aa:e0:73:56:5b:74:3b:3e:90:d2:fb:bd:70:73: 3a:ad:c4:f0:f4:9f:77:b6:81:d3:d2:00:68:6e:3f: be:dd:49:d9:be:47:89:1e:29:9e:15:ce:49:8a:56: bd:26:21:73:a6:b7:4c:4c:76:4d:0f:11:46:b9:29: f6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:41:68:91:5F:7B:EF:52:15:12:28:AE:27:BB:A1:D4:A5:25:B8:D6 X509v3 Authority Key Identifier: keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:83:f5:f7:5f:11:7c:3e:1e:49:0e:3c:bb:da:ca:94:9d:00: 91:2b:38:f9:e8:60:67:e7:fd:26:31:40:f4:cd:a1:a3:fa:c5: e3:39:24:2d:d8:ea:48:04:c6:55:56:64:cc:a6:fc:a2:11:ae: d9:e5:5d:e2:de:66:5e:be:65:93:37:80:d5:26:aa:88:d9:bb: 60:a0:ba:6f:5e:69:e1:79:77:99:bd:73:97:c0:21:73:db:d4: 7a:4e:4d:59:1c:8d:22:f5:ef:23:46:dd:3b:ca:cf:71:7e:85: ad:5f:95:b8:ef:68:35:9d:4b:d2:6a:45:1e:97:36:2b:a8:fd: 19:f5:58:c6:83:29:69:74:e1:bc:d6:92:a9:ec:14:f5:32:9e: c2:20:60:ba:32:51:2e:61:eb:47:5c:16:24:ab:cf:a9:45:9b: 68:24:9c:ab:84:bc:46:9d:06:fa:67:09:db:9c:d5:7b:fb:a8: 9d:ef:32:9c:8d:54:3d:e0:35:a9:b3:a4:98:0a:a4:e3:99:6a: 7b:8d:60:5b:02:b4:0e:eb:ad:df:d9:56:8d:6a:6b:84:b8:fc: 17:31:f4:59:2b:26:9f:51:06:f7:2f:e7:1a:e8:42:ae:10:50: 76:83:0e:07:35:f3:36:63:d3:70:63:20:7b:87:2c:19:ed:02: 63:4c:83:74 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUCXAMpsyFhXQqXpLjR9V6k8d9bfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG MjFFMDUxODAeFw0yNjAzMjYxMDA0MTBaFw0yNjAzMjcxMzMzMTBaMDMxMTAvBgNV BAMTKEI5NDE2ODkxNUY3QkVGNTIxNTEyMjhBRTI3QkJBMUQ0QTUyNUI4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMfaizHTTuMzgdy8vJimWUV3sT AX4SU2YlQz0hHCLe8KvDcxs7OvIgD4/FKmff7nJoS3jw6925QxB6upZzxzgnjpRy jftbyYZgXqe2f/FwXFAvRX6mjplau3+mKQfxQp0WvCprCGwSDz4hKM/MUJmduCU3 NV2DN8GAAK37ZxkCOCNpv4ZJ3A4cNjnNjdkDo66l607TI6iu3DtzQ2mbkS3qwfLN zZFBh4XlYO/Q+cC4A5UheB3PkPtUjdtkSg8UFnhVaMiq4HNWW3Q7PpDS+71wczqt xPD0n3e2gdPSAGhuP77dSdm+R4keKZ4VzkmKVr0mIXOmt0xMdk0PEUa5KfYRAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUuUFokV9771IVEiiuJ7uh1KUluNYwHwYDVR0j BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD OEYyMUUwNTE4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzBhNDYz N2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAvQjg4QTk0RENBMDlFM0E2NTND MDZGNDc4NDM0REM3QzhGMjFFMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHqD9fdfEXw+HkkOPLva ypSdAJErOPnoYGfn/SYxQPTNoaP6xeM5JC3Y6kgExlVWZMym/KIRrtnlXeLeZl6+ ZZM3gNUmqojZu2Cgum9eaeF5d5m9c5fAIXPb1HpOTVkcjSL17yNG3TvKz3F+ha1f lbjvaDWdS9JqRR6XNiuo/Rn1WMaDKWl04bzWkqnsFPUynsIgYLoyUS5h60dcFiSr z6lFm2gknKuEvEadBvpnCduc1Xv7qJ3vMpyNVD3gNamzpJgKpOOZanuNYFsCtA7r rd/ZVo1qa4S4/Bcx9FkrJp9RBvcv5xroQq4QUHaDDgc18zZj03BjIHuHLBntAmNM g3Q= -----END CERTIFICATE-----Generated at Thu Mar 26 19:45:18 2026 by rpki-client