$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft File: BBED14E9793905EC1EA5CE10AA03C497D737B115.mft (raw, json) Hash identifier: y93l3vyZr9YvvHR5kttOGD3kJWyxPaUHtgLthPsnyqs= Subject key identifier: EB:76:62:5D:59:56:43:1F:C0:64:17:BE:23:E6:33:FA:B5:DE:1A:E9 Authority key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 Certificate issuer: /CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Certificate serial: 0F61F727809B13A4D6772C2FF5AA9A513DF8FAB1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft Manifest number: 02FE Signing time: Thu 26 Mar 2026 07:31:37 +0000 Manifest this update: Thu 26 Mar 2026 07:26:34 +0000 Manifest next update: Fri 27 Mar 2026 07:59:34 +0000 Files and hashes: 1: 326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (hash: MpewGrhFOYc7jc70q6ubpOkEuQ0IJ7Wp+DrSPfwP1vQ=) 2: BBED14E9793905EC1EA5CE10AA03C497D737B115.crl (hash: XO5dejlB+G3shB55duG+5dXKHvjLnsyN/sGxou+HjF8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 07:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:61:f7:27:80:9b:13:a4:d6:77:2c:2f:f5:aa:9a:51:3d:f8:fa:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Validity Not Before: Mar 26 07:26:34 2026 GMT Not After : Mar 27 07:59:34 2026 GMT Subject: CN=EB76625D5956431FC06417BE23E633FAB5DE1AE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b9:bb:f4:f2:d3:25:b4:b2:8a:c9:d2:d3:3e: 72:f4:d3:0d:56:03:c9:cf:7f:9b:e3:d7:0a:d6:ad: 17:ce:2a:f4:02:f7:37:25:14:a1:0b:74:05:6d:34: c1:db:68:ed:9d:99:99:cf:2e:36:0a:76:0f:90:e3: 12:13:c6:c3:c7:a4:e9:c8:56:f8:69:da:ef:95:3f: 24:aa:3e:09:a2:40:70:21:a0:2f:6f:ad:ea:d4:fa: 60:bd:ca:00:15:42:f8:a9:d6:d0:37:e5:5b:99:21: 0e:b0:e8:e8:7f:f0:1d:2c:44:6d:9e:38:01:ef:fa: e9:e8:f0:4d:55:c0:fa:f8:7e:4d:95:08:53:8f:47: 6f:69:24:24:9b:88:15:8a:e0:9f:7f:37:d9:24:ea: 25:74:db:ce:67:1a:6a:a9:d5:e8:65:d8:bf:97:6f: 84:bf:0d:ab:1a:2f:85:47:00:c2:80:5b:af:36:d8: b7:f2:63:d9:68:20:36:3c:3a:a0:0e:7f:61:c7:76: 57:79:0d:69:b7:21:39:dc:50:7a:be:36:a9:20:21: 2a:26:5e:f3:de:d6:9a:f9:81:5c:ff:37:5a:cc:fa: 7e:e9:ab:03:33:28:07:96:3a:4e:09:dc:ed:1e:ec: cb:1b:f2:40:65:e7:ae:ec:e8:01:bf:18:8f:d8:5a: 05:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:76:62:5D:59:56:43:1F:C0:64:17:BE:23:E6:33:FA:B5:DE:1A:E9 X509v3 Authority Key Identifier: keyid:BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:31:1e:64:8c:ac:ca:b1:82:5b:ff:14:07:bb:39:95:14:68: c7:84:27:cb:c0:fa:b7:dd:7e:f6:bc:a4:2c:e0:4c:d5:27:22: e3:d9:40:a8:81:18:ab:49:04:15:85:90:57:9b:7c:1a:ef:0a: 87:41:37:67:7d:f3:de:93:e1:65:b3:df:b1:12:d5:2b:4b:3f: af:1c:c2:44:5a:ac:8c:7c:f7:7d:51:73:1b:b7:e9:69:70:f4: 9f:be:a3:f1:36:d7:88:42:1a:31:3b:6d:44:a7:9c:c6:40:88: 6f:51:7b:05:69:38:30:17:81:32:21:51:be:d1:7c:4f:2d:dd: fb:8d:38:67:65:c4:f0:45:92:12:00:df:3b:83:3f:76:49:d1: 35:00:14:a9:7c:a9:68:11:aa:7e:a7:28:1f:b1:ef:98:8f:42: e6:54:df:5a:61:54:06:3f:23:4a:e6:57:75:5a:e3:bf:cf:bc: c9:fa:94:37:17:a5:de:db:94:9d:0e:d2:e5:60:11:31:95:0b: 58:44:14:0c:35:25:bf:9c:9b:8e:49:01:ce:98:cf:59:8c:c8: 66:2f:52:72:b4:6a:8f:d7:c8:a6:d1:c9:1e:94:2d:38:c9:8a: 8f:cd:29:70:f5:2b:a7:7b:38:f9:8d:78:e5:03:8c:36:8e:bc: 6e:af:9f:d7 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUD2H3J4CbE6TWdywv9aqaUT34+rEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdE NzM3QjExNTAeFw0yNjAzMjYwNzI2MzRaFw0yNjAzMjcwNzU5MzRaMDMxMTAvBgNV BAMTKEVCNzY2MjVENTk1NjQzMUZDMDY0MTdCRTIzRTYzM0ZBQjVERTFBRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZubv08tMltLKKydLTPnL00w1W A8nPf5vj1wrWrRfOKvQC9zclFKELdAVtNMHbaO2dmZnPLjYKdg+Q4xITxsPHpOnI Vvhp2u+VPySqPgmiQHAhoC9vrerU+mC9ygAVQvip1tA35VuZIQ6w6Oh/8B0sRG2e OAHv+uno8E1VwPr4fk2VCFOPR29pJCSbiBWK4J9/N9kk6iV0285nGmqp1ehl2L+X b4S/DasaL4VHAMKAW6822LfyY9loIDY8OqAOf2HHdld5DWm3ITncUHq+NqkgISom XvPe1pr5gVz/N1rM+n7pqwMzKAeWOk4J3O0e7Msb8kBl567s6AG/GI/YWgVpAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU63ZiXVlWQx/AZBe+I+Yz+rXeGukwHwYDVR0j BBgwFoAUu+0U6Xk5Bewepc4QqgPEl9c3sRUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNhOTdmNzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAv QkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdENzM3QjExNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CQkVEMTRFOTc5MzkwNUVDMUVBNUNFMTBBQTAzQzQ5 N0Q3MzdCMTE1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNhOTdm NzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAvQkJFRDE0RTk3OTM5MDVFQzFF QTVDRTEwQUEwM0M0OTdENzM3QjExNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMExHmSMrMqxglv/FAe7 OZUUaMeEJ8vA+rfdfva8pCzgTNUnIuPZQKiBGKtJBBWFkFebfBrvCodBN2d9896T 4WWz37ES1StLP68cwkRarIx8931Rcxu36Wlw9J++o/E214hCGjE7bUSnnMZAiG9R ewVpODAXgTIhUb7RfE8t3fuNOGdlxPBFkhIA3zuDP3ZJ0TUAFKl8qWgRqn6nKB+x 75iPQuZU31phVAY/I0rmV3Va47/PvMn6lDcXpd7blJ0O0uVgETGVC1hEFAw1Jb+c m45JAc6Yz1mMyGYvUnK0ao/XyKbRyR6ULTjJio/NKXD1K6d7OPmNeOUDjDaOvG6v n9c= -----END CERTIFICATE-----Generated at Thu Mar 26 18:09:36 2026 by rpki-client