$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json) Hash identifier: kZmO/22EqYnKWa0tCgfxOgVB0BRscExJyKZIcxDF6CE= Subject key identifier: 47:D1:91:53:02:45:C7:DD:23:E3:F3:9A:84:66:18:8C:B4:06:57:7E Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Certificate serial: 18F25F5A5A5D2B769DD43E24F8ABF667DC725903 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft Manifest number: 022C Signing time: Thu 26 Mar 2026 12:46:21 +0000 Manifest this update: Thu 26 Mar 2026 12:41:19 +0000 Manifest next update: Fri 27 Mar 2026 13:55:19 +0000 Files and hashes: 1: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: V7a7LRqWRSavnh0Ifl2d/PovkOzhE52bZJXDIw2uFaM=) 2: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: Jey5jJGJOL6gPA18sGZVOGvXSd0rpnVmqso60+fOVQU=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 08:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f2:5f:5a:5a:5d:2b:76:9d:d4:3e:24:f8:ab:f6:67:dc:72:59:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Validity Not Before: Mar 26 12:41:19 2026 GMT Not After : Mar 27 13:55:19 2026 GMT Subject: CN=47D191530245C7DD23E3F39A8466188CB406577E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:43:38:54:b9:85:04:2e:af:05:80:4b:c1:9c: eb:84:92:93:3e:8b:29:d2:66:0f:11:bc:9e:03:ef: 88:da:70:a1:9c:ef:b8:d2:d7:5b:e1:ed:54:9f:d2: 90:e8:f2:d0:d1:7e:21:61:88:f0:f1:6c:91:d0:97: 6c:7f:e4:1e:d4:28:a2:c8:09:53:2e:0d:ba:65:9d: 32:69:a4:2a:73:43:5f:80:16:9e:6d:dd:be:24:b8: 91:d7:a3:86:e4:49:01:95:30:46:24:b7:36:fd:bb: 57:93:08:58:01:62:a5:2c:9c:67:d3:d6:39:fd:29: 91:7d:39:fd:f8:28:2f:ab:2a:dc:2a:14:9a:b1:39: bd:4b:31:76:07:64:d6:1f:66:bc:ab:74:3d:27:56: 18:93:5f:94:bd:f6:60:4b:29:d6:aa:10:b1:5f:30: 3a:7c:81:52:87:8c:cc:93:86:fe:25:7b:9f:3d:94: aa:59:a4:6f:ef:4e:6a:b3:cf:07:e4:79:df:d5:55: 94:c7:68:35:ee:a6:7c:d3:f2:f6:da:fb:89:fe:f4: 66:98:83:5f:e7:d2:ef:95:f9:d6:74:8d:32:00:25: 76:3d:1c:99:0b:b2:a1:38:5f:52:09:28:0b:92:51: 32:de:d1:c8:80:c9:98:fc:98:d4:fa:e7:de:d9:b5: 9a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D1:91:53:02:45:C7:DD:23:E3:F3:9A:84:66:18:8C:B4:06:57:7E X509v3 Authority Key Identifier: keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:18:69:e5:56:77:0a:28:b8:52:6a:e8:ee:06:0c:f3:23:4f: 36:43:92:ff:c1:c6:62:a8:04:ff:20:e0:b3:12:a9:c9:29:75: 57:62:2f:26:cd:69:d6:64:83:d7:72:d0:b3:ca:e2:19:72:40: 1b:37:93:f5:53:ab:12:88:3f:0e:9d:ae:fe:49:a6:cf:e5:d4: cc:78:43:b7:e8:81:48:46:97:5c:97:1a:70:07:8e:aa:05:2e: 19:64:b0:12:5d:30:81:f0:e3:e0:ee:81:53:df:45:95:29:39: 92:36:6a:fa:d6:e9:ae:a1:2d:43:60:df:57:47:62:ae:99:34: 98:d7:c2:79:91:11:d4:6e:a8:1d:bc:ab:c7:4a:eb:fd:55:4c: c4:6c:cf:7b:17:8a:be:e6:19:7f:8b:32:eb:81:14:36:a5:f4: 88:fe:de:6e:d7:c6:c0:80:b4:49:4f:2f:49:f7:0b:aa:85:0c: e1:2e:ee:0e:84:b7:ea:ea:4c:3c:af:d5:ce:90:21:d5:63:1e: 88:3e:f7:32:0e:58:7c:a0:eb:12:93:e6:7f:b7:c8:63:20:90: b7:da:57:1a:c4:88:e3:a5:e2:9c:c4:2f:7c:5f:f5:56:4e:5e: 5e:20:42:d6:72:e2:7f:10:82:97:5d:4f:38:ae:d2:6a:a4:be: 06:45:52:c7 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUGPJfWlpdK3ad1D4k+Kv2Z9xyWQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdE NTQ3ODZEMzAeFw0yNjAzMjYxMjQxMTlaFw0yNjAzMjcxMzU1MTlaMDMxMTAvBgNV BAMTKDQ3RDE5MTUzMDI0NUM3REQyM0UzRjM5QTg0NjYxODhDQjQwNjU3N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiQzhUuYUELq8FgEvBnOuEkpM+ iynSZg8RvJ4D74jacKGc77jS11vh7VSf0pDo8tDRfiFhiPDxbJHQl2x/5B7UKKLI CVMuDbplnTJppCpzQ1+AFp5t3b4kuJHXo4bkSQGVMEYktzb9u1eTCFgBYqUsnGfT 1jn9KZF9Of34KC+rKtwqFJqxOb1LMXYHZNYfZryrdD0nVhiTX5S99mBLKdaqELFf MDp8gVKHjMyThv4le589lKpZpG/vTmqzzwfked/VVZTHaDXupnzT8vba+4n+9GaY g1/n0u+V+dZ0jTIAJXY9HJkLsqE4X1IJKAuSUTLe0ciAyZj8mNT6597ZtZqpAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUR9GRUwJFx90j4/OahGYYjLQGV34wHwYDVR0j BBgwFoAUbZS517fBinpJen6fXi4il9VHhtMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzFlYmZkNTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAv NkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82RDk0QjlEN0I3QzE4QTdBNDk3QTdFOUY1RTJFMjI5 N0Q1NDc4NkQzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzFlYmZk NTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAvNkQ5NEI5RDdCN0MxOEE3QTQ5 N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGwYaeVWdwoouFJq6O4G DPMjTzZDkv/BxmKoBP8g4LMSqckpdVdiLybNadZkg9dy0LPK4hlyQBs3k/VTqxKI Pw6drv5Jps/l1Mx4Q7fogUhGl1yXGnAHjqoFLhlksBJdMIHw4+DugVPfRZUpOZI2 avrW6a6hLUNg31dHYq6ZNJjXwnmREdRuqB28q8dK6/1VTMRsz3sXir7mGX+LMuuB FDal9Ij+3m7XxsCAtElPL0n3C6qFDOEu7g6Et+rqTDyv1c6QIdVjHog+9zIOWHyg 6xKT5n+3yGMgkLfaVxrEiOOl4pzEL3xf9VZOXl4gQtZy4n8QgpddTziu0mqkvgZF Usc= -----END CERTIFICATE-----Generated at Thu Mar 26 22:12:03 2026 by rpki-client