$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft File: BBED14E9793905EC1EA5CE10AA03C497D737B115.mft (raw, json) Hash identifier: bgWzjq6NZxqMTAGffSk95tnpMgjOv9WKUCrjuxFRuUQ= Subject key identifier: 00:39:5F:49:4B:FA:90:A7:F4:BA:27:B9:BD:85:D1:7C:60:9A:77:22 Authority key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 Certificate issuer: /CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Certificate serial: 089380276CF19AA12C050903285DEFB7BC4FE740 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft Manifest number: 033C Signing time: Wed 13 May 2026 02:48:41 +0000 Manifest this update: Wed 13 May 2026 02:43:41 +0000 Manifest next update: Thu 14 May 2026 04:54:41 +0000 Files and hashes: 1: 326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (hash: iB1A9jIxialpDzdT5FG7czmb2AtziEr97OBcvfPBU88=) 2: BBED14E9793905EC1EA5CE10AA03C497D737B115.crl (hash: Y5nl1gVHcMj9u38bQsnHJuL1x7f00gXRAdwsKChlDzI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 00:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:93:80:27:6c:f1:9a:a1:2c:05:09:03:28:5d:ef:b7:bc:4f:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Validity Not Before: May 13 02:43:41 2026 GMT Not After : May 14 04:54:41 2026 GMT Subject: CN=00395F494BFA90A7F4BA27B9BD85D17C609A7722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:6d:ed:b1:e6:52:d5:85:72:5f:97:24:68: 6d:68:cc:09:3d:d0:ca:55:0b:43:05:e2:4e:b2:1a: 33:53:c0:de:6b:66:e7:50:0c:36:d7:37:42:91:c7: 84:09:3a:1f:06:11:47:2d:2d:d1:fa:c5:e4:fa:e7: 7a:2a:d6:03:61:2f:c5:de:7e:d9:b1:f2:1b:b7:a7: f3:cb:47:2f:2e:86:01:0e:d0:b3:a4:15:c2:71:18: f7:29:ed:f7:ac:97:51:7a:04:bc:2a:8f:5c:55:2b: a2:75:41:f3:69:06:61:b3:64:43:31:7c:bd:0e:88: d5:5b:0b:cc:19:73:7d:43:3e:bf:8f:78:b4:71:8f: 9f:87:a5:66:be:c8:19:49:29:30:19:d8:e1:73:cf: eb:cf:c8:ca:a7:44:0b:8a:31:ce:c8:8a:ae:da:f8: b4:d0:32:27:29:d6:4f:33:ea:0f:e6:7b:71:80:22: 60:58:39:e4:e8:c4:cf:fb:33:23:98:b1:d2:9a:cd: 23:c1:d9:32:68:69:d7:7b:f6:88:a8:e7:83:19:36: 44:04:af:c3:cc:9e:7d:a7:44:b0:4b:a8:c9:f3:0a: ec:41:17:08:96:80:82:0c:c0:97:41:4b:02:eb:1b: a5:ea:db:a8:e2:01:44:22:6b:47:ab:90:3f:d9:fc: b9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:39:5F:49:4B:FA:90:A7:F4:BA:27:B9:BD:85:D1:7C:60:9A:77:22 X509v3 Authority Key Identifier: keyid:BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:59:90:b0:e1:54:78:ee:2e:f4:93:ef:ba:1f:38:82:dd:7e: 32:70:94:a7:f1:b0:65:1e:3b:22:60:a5:b5:9e:c3:e2:3c:c2: f2:b3:6d:82:70:88:ce:69:90:e0:dd:53:22:d3:f1:f4:61:f7: de:6e:4f:5f:88:72:09:4f:5f:c5:d1:6c:b7:52:af:8a:63:76: 17:e6:7b:98:d4:a9:d4:62:76:52:15:a1:71:03:bd:03:d4:f8: 92:3f:2f:65:05:fb:d4:2f:eb:b1:58:4a:0e:9f:97:dc:c3:ca: 4b:e9:a7:49:de:a2:6c:73:56:45:da:eb:56:c1:db:cd:ed:fd: 40:86:78:cc:f3:86:72:b4:5d:5a:fd:fc:f4:1e:cb:0b:3e:c4: 19:23:7a:f1:de:20:0a:85:bd:75:e4:7a:86:01:9b:23:40:24: 6e:a9:b7:01:92:42:c8:96:1f:15:99:7c:91:64:96:59:77:db: dd:85:25:53:5b:ce:15:bc:3b:3f:53:93:03:22:c5:e8:0f:f0: 21:f2:96:83:21:3e:54:07:1f:45:31:7a:00:30:6c:b9:f4:6a: 0f:aa:5a:29:ff:d9:3e:ba:31:56:d4:8b:59:5d:96:0c:62:f0: ae:28:a4:73:36:0a:38:4b:32:3b:77:d1:8f:c6:d5:08:53:79: e5:02:13:6c -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUCJOAJ2zxmqEsBQkDKF3vt7xP50AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdE NzM3QjExNTAeFw0yNjA1MTMwMjQzNDFaFw0yNjA1MTQwNDU0NDFaMDMxMTAvBgNV BAMTKDAwMzk1RjQ5NEJGQTkwQTdGNEJBMjdCOUJEODVEMTdDNjA5QTc3MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxrG3tseZS1YVyX5ckaG1ozAk9 0MpVC0MF4k6yGjNTwN5rZudQDDbXN0KRx4QJOh8GEUctLdH6xeT653oq1gNhL8Xe ftmx8hu3p/PLRy8uhgEO0LOkFcJxGPcp7fesl1F6BLwqj1xVK6J1QfNpBmGzZEMx fL0OiNVbC8wZc31DPr+PeLRxj5+HpWa+yBlJKTAZ2OFzz+vPyMqnRAuKMc7Iiq7a +LTQMicp1k8z6g/me3GAImBYOeToxM/7MyOYsdKazSPB2TJoadd79oio54MZNkQE r8PMnn2nRLBLqMnzCuxBFwiWgIIMwJdBSwLrG6Xq26jiAUQia0erkD/Z/LlTAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUADlfSUv6kKf0uie5vYXRfGCadyIwHwYDVR0j BBgwFoAUu+0U6Xk5Bewepc4QqgPEl9c3sRUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNhOTdmNzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAv QkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdENzM3QjExNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CQkVEMTRFOTc5MzkwNUVDMUVBNUNFMTBBQTAzQzQ5 N0Q3MzdCMTE1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNhOTdm NzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAvQkJFRDE0RTk3OTM5MDVFQzFF QTVDRTEwQUEwM0M0OTdENzM3QjExNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALFZkLDhVHjuLvST77of OILdfjJwlKfxsGUeOyJgpbWew+I8wvKzbYJwiM5pkODdUyLT8fRh995uT1+IcglP X8XRbLdSr4pjdhfme5jUqdRidlIVoXEDvQPU+JI/L2UF+9Qv67FYSg6fl9zDykvp p0neomxzVkXa61bB283t/UCGeMzzhnK0XVr9/PQeyws+xBkjevHeIAqFvXXkeoYB myNAJG6ptwGSQsiWHxWZfJFklll3292FJVNbzhW8Oz9TkwMixegP8CHyloMhPlQH H0UxegAwbLn0ag+qWin/2T66MVbUi1ldlgxi8K4opHM2CjhLMjt30Y/G1QhTeeUC E2w= -----END CERTIFICATE-----Generated at Wed May 13 15:13:43 2026 by rpki-client