$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json) Hash identifier: EBlkjyTnBMQfTmWVxlndBy0YJHk9CDcwr9czE86KjvQ= Subject key identifier: 97:A2:D1:2A:10:97:87:9D:3B:A0:15:0D:89:C4:03:43:2D:74:3E:1D Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Certificate serial: 502437961BE4FFCD060D874F81FDEF1ADB8C8828 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft Manifest number: 0322 Signing time: Sat 10 Oct 2026 02:52:58 +0000 Manifest this update: Sat 10 Oct 2026 02:47:56 +0000 Manifest next update: Sun 11 Oct 2026 05:39:56 +0000 Files and hashes: 1: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: L+1h16hqe5b6+z7N8u7x7TykjH2jTDLZMR0VrvmIskg=) 2: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: V7a7LRqWRSavnh0Ifl2d/PovkOzhE52bZJXDIw2uFaM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Oct 2026 05:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:24:37:96:1b:e4:ff:cd:06:0d:87:4f:81:fd:ef:1a:db:8c:88:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Validity Not Before: Oct 10 02:47:56 2026 GMT Not After : Oct 11 05:39:56 2026 GMT Subject: CN=97A2D12A1097879D3BA0150D89C403432D743E1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:48:ed:75:b5:da:d6:98:7a:1d:e3:6d:f5:d4: 0e:41:bc:66:a8:9a:3f:7a:ce:c5:28:40:c1:a9:35: bb:9d:bc:3e:45:b6:64:84:e1:05:30:c6:ab:06:63: 74:68:a5:b6:1b:cf:14:fd:40:b8:bb:96:1d:b8:20: 87:d4:b7:43:eb:4a:da:db:03:a6:6a:51:92:a6:36: 6a:72:2c:c6:0d:7a:d5:55:30:7b:b9:3f:71:7c:e6: 8e:81:16:91:b8:40:62:64:a3:7d:d0:9a:73:56:48: d6:5b:b2:81:ea:8b:05:ed:fe:5b:9f:e9:3a:eb:df: d2:a0:8d:04:ab:85:fc:81:8d:1d:c2:8f:a6:43:b6: d4:14:cf:cc:05:dd:4f:b9:d0:21:1c:90:4b:dd:57: ee:fc:cf:49:5b:19:14:2a:da:fa:0d:4b:de:99:fd: 9a:df:7b:81:be:bc:98:19:e1:4d:91:c4:ce:61:5f: 77:c8:bc:04:74:66:f5:56:bc:57:4f:67:2b:f7:d0: 4f:44:53:2a:17:c1:d7:91:8b:e0:d2:03:29:05:5e: 59:ce:99:47:5a:2d:df:e3:52:5d:71:c8:4a:49:9a: ca:88:9f:97:28:22:a9:a5:1f:a6:c4:ba:30:ec:43: 1b:ff:ab:24:5b:50:3a:73:c5:6d:a7:90:3d:a1:d5: 37:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A2:D1:2A:10:97:87:9D:3B:A0:15:0D:89:C4:03:43:2D:74:3E:1D X509v3 Authority Key Identifier: keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:94:cd:eb:8c:37:5d:b6:9c:43:17:6c:b0:5d:07:9c:81:31: ce:69:11:fc:24:38:b7:6d:e3:2f:99:a4:06:d9:c2:d3:72:14: f3:55:a2:e4:0a:83:a8:09:f8:c2:b7:f7:65:9c:99:c5:72:fb: 69:a8:81:0f:d8:e2:1b:54:98:a8:fa:52:49:e5:16:f6:56:59: cb:33:73:82:6d:c8:b7:db:93:96:17:db:b1:0f:72:2c:de:55: de:3e:4f:c4:36:fb:f7:2f:bb:e5:15:0f:d3:ba:83:7c:c9:dc: 46:e1:43:44:7e:c7:42:46:38:f5:ba:f2:c8:14:90:72:a0:50: 31:c9:8c:14:41:72:ca:17:51:3e:c5:36:05:47:a0:cf:ee:a6: dd:fe:d5:f9:70:11:4d:96:c8:e3:1b:f4:a5:b1:2d:dd:bb:ea: 77:5a:66:76:de:5d:30:0f:11:a9:f6:ec:f6:f3:87:8c:2f:a2: e6:46:38:6c:3f:dc:b7:0c:79:35:1f:4d:22:8b:3a:26:3c:9a: a9:2a:2e:ba:b6:d3:2d:f8:cb:b2:90:c5:e6:40:86:1b:ce:3e: 91:55:9e:a6:93:6e:89:70:8c:98:ee:f3:9f:b4:d0:04:b6:1f: 4c:2f:ec:cc:b6:b9:0c:5f:bd:e0:ed:9a:ed:be:d7:a1:b0:43: f3:e3:be:18 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUUCQ3lhvk/80GDYdPgf3vGtuMiCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdE NTQ3ODZEMzAeFw0yNjEwMTAwMjQ3NTZaFw0yNjEwMTEwNTM5NTZaMDMxMTAvBgNV BAMTKDk3QTJEMTJBMTA5Nzg3OUQzQkEwMTUwRDg5QzQwMzQzMkQ3NDNFMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPSO11tdrWmHod42311A5BvGao mj96zsUoQMGpNbudvD5FtmSE4QUwxqsGY3RopbYbzxT9QLi7lh24IIfUt0PrStrb A6ZqUZKmNmpyLMYNetVVMHu5P3F85o6BFpG4QGJko33QmnNWSNZbsoHqiwXt/luf 6Trr39KgjQSrhfyBjR3Cj6ZDttQUz8wF3U+50CEckEvdV+78z0lbGRQq2voNS96Z /Zrfe4G+vJgZ4U2RxM5hX3fIvAR0ZvVWvFdPZyv30E9EUyoXwdeRi+DSAykFXlnO mUdaLd/jUl1xyEpJmsqIn5coIqmlH6bEujDsQxv/qyRbUDpzxW2nkD2h1TfxAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUl6LRKhCXh507oBUNicQDQy10Ph0wHwYDVR0j BBgwFoAUbZS517fBinpJen6fXi4il9VHhtMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzFlYmZkNTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAv NkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82RDk0QjlEN0I3QzE4QTdBNDk3QTdFOUY1RTJFMjI5 N0Q1NDc4NkQzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzFlYmZk NTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAvNkQ5NEI5RDdCN0MxOEE3QTQ5 N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF6UzeuMN122nEMXbLBd B5yBMc5pEfwkOLdt4y+ZpAbZwtNyFPNVouQKg6gJ+MK392WcmcVy+2mogQ/Y4htU mKj6UknlFvZWWcszc4JtyLfbk5YX27EPcizeVd4+T8Q2+/cvu+UVD9O6g3zJ3Ebh Q0R+x0JGOPW68sgUkHKgUDHJjBRBcsoXUT7FNgVHoM/upt3+1flwEU2WyOMb9KWx Ld276ndaZnbeXTAPEan27Pbzh4wvouZGOGw/3LcMeTUfTSKLOiY8mqkqLrq20y34 y7KQxeZAhhvOPpFVnqaTbolwjJju85+00AS2H0wv7My2uQxfveDtmu2+16GwQ/Pj vhg= -----END CERTIFICATE-----Generated at Sat Oct 10 17:50:23 2026 by rpki-client