$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft File: BBED14E9793905EC1EA5CE10AA03C497D737B115.mft (raw, json) Hash identifier: onl0H155A4K2G14Kbdv9ZSjyil1Bcn4pJD6S5m85KAU= Subject key identifier: EC:9F:71:54:FC:D3:B1:89:5A:5D:65:9A:95:38:96:71:A6:7E:38:34 Authority key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 Certificate issuer: /CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Certificate serial: 208A6E1894BEABF899C5D8D8F0459EFCE1A0CF6E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft Manifest number: 03ED Signing time: Wed 07 Oct 2026 11:50:30 +0000 Manifest this update: Wed 07 Oct 2026 11:45:29 +0000 Manifest next update: Thu 08 Oct 2026 13:32:29 +0000 Files and hashes: 1: 326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (hash: iB1A9jIxialpDzdT5FG7czmb2AtziEr97OBcvfPBU88=) 2: BBED14E9793905EC1EA5CE10AA03C497D737B115.crl (hash: KCDhJ7IZdX4BWTQ51cv8kJ0XjIInnQKqJWZjH1jy2ZI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 13:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:8a:6e:18:94:be:ab:f8:99:c5:d8:d8:f0:45:9e:fc:e1:a0:cf:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Validity Not Before: Oct 7 11:45:29 2026 GMT Not After : Oct 8 13:32:29 2026 GMT Subject: CN=EC9F7154FCD3B1895A5D659A95389671A67E3834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0e:5f:c1:d9:a0:b3:f4:4b:93:15:ea:dc:4e: e2:96:60:1e:4f:c1:2a:de:d9:7f:52:99:61:7c:24: 22:c8:ff:88:19:19:31:7d:ce:07:65:69:48:df:b3: eb:c4:73:d5:79:0a:f9:b6:bf:92:4e:ee:87:f3:ba: 78:4d:88:70:d6:00:0a:31:e6:3e:e3:11:ad:52:23: 02:80:69:f0:94:cb:22:46:e1:16:98:f2:57:d7:05: b8:89:d2:bd:cf:6b:bb:1b:88:a7:31:dd:36:5f:7f: 43:f0:3a:5c:79:87:19:86:c3:90:41:c0:85:02:28: 8a:c4:6a:e7:0a:86:b2:07:34:21:18:12:7f:d4:27: 77:f7:f9:04:48:2a:2d:c5:f3:96:a7:09:b3:9e:fb: 22:7a:3a:08:54:20:84:d7:2a:78:39:06:d2:8e:23: 6b:36:e0:ef:06:62:c9:94:d9:2e:10:8c:ca:97:92: ad:c4:eb:db:4d:0d:4f:fe:9b:0a:62:5b:95:d5:f4: 6b:c7:24:54:c3:93:12:78:74:fd:bf:0e:23:de:b1: 73:66:45:fa:da:f8:55:73:f7:84:0b:77:d8:62:1e: 44:48:3a:2f:c9:2d:10:d3:6d:2a:e6:6b:a1:e2:05: b4:7b:df:b7:af:e5:a8:b9:6c:94:bd:ce:a0:2b:16: 88:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9F:71:54:FC:D3:B1:89:5A:5D:65:9A:95:38:96:71:A6:7E:38:34 X509v3 Authority Key Identifier: keyid:BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:74:4f:f2:57:a8:d9:4c:53:bc:28:65:00:64:82:56:e0:6b: 31:9f:c2:ed:be:3e:67:e9:88:19:4a:be:60:59:e6:eb:06:b3: 63:ed:aa:d8:21:5f:50:2d:76:9b:33:4e:23:d5:be:1e:73:4f: 69:df:f9:30:7a:ff:c5:63:91:09:9e:1a:53:6f:05:dd:a7:0a: db:89:e0:7e:4b:f3:fb:c7:7b:55:02:a4:f7:26:a7:b7:60:8e: 84:aa:f9:a7:88:9b:72:67:1a:a4:30:f1:b2:7e:d0:c4:7a:23: a6:74:96:1a:6b:fb:a4:d8:14:4a:33:3a:87:99:dd:f7:eb:4a: 49:49:fb:4f:8f:4f:6e:c2:54:03:f8:fd:98:98:52:24:11:a5: 81:99:b7:2b:56:1f:6e:0a:1c:4e:29:de:b7:57:e3:22:05:fa: 7a:7f:0d:1e:50:21:53:06:98:99:e9:4d:2c:9b:ae:39:27:08: 3c:8a:33:35:82:92:cc:87:8b:bf:12:4d:7e:d9:7a:30:a6:97: e6:cc:20:9e:e5:26:ab:85:bb:01:15:fa:76:42:4a:fa:13:04: 01:69:1f:c8:d2:f0:b1:71:58:44:a4:6b:20:c6:65:a4:19:0f: 64:c4:88:a3:51:e0:8f:af:7f:0c:d2:ec:eb:8f:b7:12:eb:bf: e4:27:3c:78 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUIIpuGJS+q/iZxdjY8EWe/OGgz24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdE NzM3QjExNTAeFw0yNjEwMDcxMTQ1MjlaFw0yNjEwMDgxMzMyMjlaMDMxMTAvBgNV BAMTKEVDOUY3MTU0RkNEM0IxODk1QTVENjU5QTk1Mzg5NjcxQTY3RTM4MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTDl/B2aCz9EuTFercTuKWYB5P wSre2X9SmWF8JCLI/4gZGTF9zgdlaUjfs+vEc9V5Cvm2v5JO7ofzunhNiHDWAAox 5j7jEa1SIwKAafCUyyJG4RaY8lfXBbiJ0r3Pa7sbiKcx3TZff0PwOlx5hxmGw5BB wIUCKIrEaucKhrIHNCEYEn/UJ3f3+QRIKi3F85anCbOe+yJ6OghUIITXKng5BtKO I2s24O8GYsmU2S4QjMqXkq3E69tNDU/+mwpiW5XV9GvHJFTDkxJ4dP2/DiPesXNm Rfra+FVz94QLd9hiHkRIOi/JLRDTbSrma6HiBbR737ev5ai5bJS9zqArFoiLAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU7J9xVPzTsYlaXWWalTiWcaZ+ODQwHwYDVR0j BBgwFoAUu+0U6Xk5Bewepc4QqgPEl9c3sRUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNhOTdmNzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAv QkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdENzM3QjExNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CQkVEMTRFOTc5MzkwNUVDMUVBNUNFMTBBQTAzQzQ5 N0Q3MzdCMTE1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNhOTdm NzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAvQkJFRDE0RTk3OTM5MDVFQzFF QTVDRTEwQUEwM0M0OTdENzM3QjExNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF50T/JXqNlMU7woZQBk glbgazGfwu2+PmfpiBlKvmBZ5usGs2PtqtghX1AtdpszTiPVvh5zT2nf+TB6/8Vj kQmeGlNvBd2nCtuJ4H5L8/vHe1UCpPcmp7dgjoSq+aeIm3JnGqQw8bJ+0MR6I6Z0 lhpr+6TYFEozOoeZ3ffrSklJ+0+PT27CVAP4/ZiYUiQRpYGZtytWH24KHE4p3rdX 4yIF+np/DR5QIVMGmJnpTSybrjknCDyKMzWCksyHi78STX7ZejCml+bMIJ7lJquF uwEV+nZCSvoTBAFpH8jS8LFxWESkayDGZaQZD2TEiKNR4I+vfwzS7OuPtxLrv+Qn PHg= -----END CERTIFICATE-----Generated at Thu Oct 8 08:33:53 2026 by rpki-client