$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft File: BBED14E9793905EC1EA5CE10AA03C497D737B115.mft (raw, json) Hash identifier: 46gsjPkCIJ17LOTw3N4r7HKZnuTUAxu+OlHS6u5EWZs= Subject key identifier: DD:7A:C3:F3:79:5D:08:B2:38:21:B9:C1:EC:DC:99:FC:52:18:6F:8D Authority key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 Certificate issuer: /CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Certificate serial: 53A9C4382490A81F58A5231EA09EC402344BF1F4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft Manifest number: 039C Signing time: Fri 24 Jul 2026 02:31:13 +0000 Manifest this update: Fri 24 Jul 2026 02:26:13 +0000 Manifest next update: Sat 25 Jul 2026 05:25:13 +0000 Files and hashes: 1: 326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (hash: iB1A9jIxialpDzdT5FG7czmb2AtziEr97OBcvfPBU88=) 2: BBED14E9793905EC1EA5CE10AA03C497D737B115.crl (hash: +4tgj+YGlLxg93MDU+qAej89mx1TSzCJM2UC+ij8Fgk=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 05:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a9:c4:38:24:90:a8:1f:58:a5:23:1e:a0:9e:c4:02:34:4b:f1:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Validity Not Before: Jul 24 02:26:13 2026 GMT Not After : Jul 25 05:25:13 2026 GMT Subject: CN=DD7AC3F3795D08B23821B9C1ECDC99FC52186F8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:93:8c:80:79:44:2c:e4:cb:75:ed:b5:77:d1: 6f:3a:17:b0:45:75:e3:18:4c:f6:63:26:70:26:9c: ac:b0:03:cc:a6:31:6c:fb:59:7c:85:df:bc:b6:a7: 67:14:d8:e8:7a:40:d2:71:30:12:ec:5e:bf:9e:2d: df:19:9b:4c:89:ea:c6:a0:1b:ac:f5:18:7c:5f:00: d7:dc:94:e4:c6:b0:5b:18:40:91:8c:29:ad:cf:16: ae:b3:62:c8:f5:60:61:8a:46:74:c9:bf:f2:a0:96: 12:35:65:62:fb:e9:e0:f3:20:e8:55:a1:37:c0:c5: cf:d7:97:1d:ea:0d:f5:a6:6b:a8:7c:31:a2:32:59: cd:18:e7:00:15:05:10:6b:68:48:5b:b2:b1:cc:f9: 33:c8:18:57:cb:32:66:4d:ae:b0:c3:a7:0f:d6:ab: 8c:6e:de:b7:a6:b8:a2:01:5a:f3:7b:ae:47:e3:4d: 98:74:66:ec:5b:e4:a5:5c:47:4a:9e:c4:7a:3f:1f: 86:b6:97:ad:eb:53:03:1a:24:a9:ae:c7:c6:e9:66: b6:07:54:70:96:38:7c:84:c3:74:82:6c:74:c4:ef: b4:97:dd:8a:cc:3b:d4:96:eb:67:24:86:5c:b1:02: fe:9d:14:5f:0e:1e:bb:57:75:de:ad:68:5f:85:9b: e6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7A:C3:F3:79:5D:08:B2:38:21:B9:C1:EC:DC:99:FC:52:18:6F:8D X509v3 Authority Key Identifier: keyid:BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:48:e1:cb:64:59:f4:b4:ce:30:3a:1b:bb:e7:97:f2:f5:d3: 44:8a:c5:b2:d9:fd:ad:b6:e2:30:4a:98:51:36:ac:73:1c:00: 65:76:ee:7e:8d:7f:15:aa:37:33:bd:f6:2d:58:3d:25:6b:fd: c3:c9:26:a8:f5:88:79:fa:66:5a:69:82:85:22:fe:30:88:8c: 21:33:c7:49:bf:af:30:ae:73:df:ac:07:b9:7b:24:2a:3c:05: 16:b9:e7:3e:32:49:04:75:5a:39:c1:b9:b2:a7:ab:1f:22:32: 5b:71:54:ec:a0:3a:dc:a6:a7:3e:73:75:b5:e0:75:15:45:c4: e5:a1:0d:f3:09:0b:f7:d7:49:29:b8:86:44:e9:96:d1:27:16: 9f:03:88:fc:b6:69:aa:ba:b3:f9:9a:5f:b3:dc:c0:73:5b:40: d0:2e:ea:57:47:20:f4:3e:59:e3:97:c8:1b:70:e3:49:30:74: d5:eb:10:74:27:c2:05:0c:36:b8:26:09:7b:b0:dc:91:09:15: f4:0c:bd:ff:81:19:31:79:13:b9:96:4e:b2:05:66:c7:e1:f8: 3e:8a:1b:1e:4a:4d:16:27:98:59:91:97:c8:e3:0d:7b:02:23: 72:e6:61:e5:8f:6f:f1:4c:5a:51:9a:65:91:e7:27:1f:f1:d3: 38:4a:3a:73 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUU6nEOCSQqB9YpSMeoJ7EAjRL8fQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdE NzM3QjExNTAeFw0yNjA3MjQwMjI2MTNaFw0yNjA3MjUwNTI1MTNaMDMxMTAvBgNV BAMTKEREN0FDM0YzNzk1RDA4QjIzODIxQjlDMUVDREM5OUZDNTIxODZGOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8k4yAeUQs5Mt17bV30W86F7BF deMYTPZjJnAmnKywA8ymMWz7WXyF37y2p2cU2Oh6QNJxMBLsXr+eLd8Zm0yJ6sag G6z1GHxfANfclOTGsFsYQJGMKa3PFq6zYsj1YGGKRnTJv/KglhI1ZWL76eDzIOhV oTfAxc/Xlx3qDfWma6h8MaIyWc0Y5wAVBRBraEhbsrHM+TPIGFfLMmZNrrDDpw/W q4xu3remuKIBWvN7rkfjTZh0Zuxb5KVcR0qexHo/H4a2l63rUwMaJKmux8bpZrYH VHCWOHyEw3SCbHTE77SX3YrMO9SW62ckhlyxAv6dFF8OHrtXdd6taF+Fm+ZvAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU3XrD83ldCLI4IbnB7NyZ/FIYb40wHwYDVR0j BBgwFoAUu+0U6Xk5Bewepc4QqgPEl9c3sRUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNhOTdmNzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAv QkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdENzM3QjExNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CQkVEMTRFOTc5MzkwNUVDMUVBNUNFMTBBQTAzQzQ5 N0Q3MzdCMTE1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNhOTdm NzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAvQkJFRDE0RTk3OTM5MDVFQzFF QTVDRTEwQUEwM0M0OTdENzM3QjExNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJ5I4ctkWfS0zjA6G7vn l/L100SKxbLZ/a224jBKmFE2rHMcAGV27n6NfxWqNzO99i1YPSVr/cPJJqj1iHn6 ZlppgoUi/jCIjCEzx0m/rzCuc9+sB7l7JCo8BRa55z4ySQR1WjnBubKnqx8iMltx VOygOtympz5zdbXgdRVFxOWhDfMJC/fXSSm4hkTpltEnFp8DiPy2aaq6s/maX7Pc wHNbQNAu6ldHIPQ+WeOXyBtw40kwdNXrEHQnwgUMNrgmCXuw3JEJFfQMvf+BGTF5 E7mWTrIFZsfh+D6KGx5KTRYnmFmRl8jjDXsCI3LmYeWPb/FMWlGaZZHnJx/x0zhK OnM= -----END CERTIFICATE-----Generated at Fri Jul 24 15:21:20 2026 by rpki-client