$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft File: 1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json) Hash identifier: pp1WUEyqQOGDT1j0shERgI4z0RLwZNJkB489zWPF1Kc= Subject key identifier: 71:86:15:60:8D:9C:09:45:4A:6C:C4:F7:70:DF:27:85:89:39:4B:D5 Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F Certificate issuer: /CN=1D570B984E9C5E382B0A879AA21F6518621F059F Certificate serial: 177D88784EE656A9D45AEA31B9260FC020227AA5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft Manifest number: 03A6 Signing time: Fri 24 Jul 2026 02:11:05 +0000 Manifest this update: Fri 24 Jul 2026 02:06:05 +0000 Manifest next update: Sat 25 Jul 2026 04:35:05 +0000 Files and hashes: 1: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: tLThUwSwrPfCypAsdBnMMAhmoYAyEUY8DuOIJQne5ZA=) 2: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: jkWLiHI7bbMydtsy39VDhf+pM0JneNn13bvIAgwjqHA=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 04:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:7d:88:78:4e:e6:56:a9:d4:5a:ea:31:b9:26:0f:c0:20:22:7a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F Validity Not Before: Jul 24 02:06:05 2026 GMT Not After : Jul 25 04:35:05 2026 GMT Subject: CN=718615608D9C09454A6CC4F770DF278589394BD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:80:72:cd:88:19:a7:2f:eb:1f:42:c9:74:70: 23:1c:4a:4e:8b:b5:1f:7a:ba:f9:d4:9d:4a:18:c3: 19:df:d5:b5:23:f8:b7:67:c6:7c:91:b5:ab:de:73: 3f:ff:79:ff:3b:58:06:80:a4:90:1c:38:a2:cc:fc: 08:40:ff:61:ab:c5:a4:80:4c:05:62:06:8f:18:ae: 09:be:45:13:95:1a:b1:57:34:76:39:fd:86:5b:e9: a5:18:cd:c6:e1:46:d9:41:47:ed:2e:55:5a:5d:48: 1f:0d:6a:9f:01:a6:33:a3:13:d2:ba:08:87:ef:fa: 26:73:00:1a:7b:a9:cc:cc:cd:e9:d8:f4:da:26:10: 79:48:5a:29:bb:0e:dd:e9:ba:5a:99:d5:e9:f6:8e: 0d:76:ca:d1:67:8b:4d:ea:94:78:84:dd:5c:39:e8: 0d:9b:ca:b4:58:15:e4:9d:fd:26:ec:6b:b7:3e:fe: 2e:18:95:ab:3e:76:43:e3:f6:36:a4:71:be:23:a9: 51:2c:f3:32:50:ab:fd:82:15:34:58:c3:96:67:30: 22:b1:5c:d1:2c:b8:3c:4a:cd:3d:c0:33:a4:6e:c4: 77:c8:02:37:99:e3:75:36:53:29:3d:33:bd:f8:11: 27:0c:b7:e6:9c:8b:f1:3a:ce:d3:af:3c:1d:f8:77: ce:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:86:15:60:8D:9C:09:45:4A:6C:C4:F7:70:DF:27:85:89:39:4B:D5 X509v3 Authority Key Identifier: keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:7a:31:54:f4:ac:65:0b:20:79:82:24:61:e1:93:f2:0b:0a: 14:9c:91:98:b9:37:69:c0:80:8a:bb:96:ef:8d:a2:9e:f1:c9: c3:6f:c8:18:c8:67:7e:ef:49:26:bb:e6:b1:7f:2b:aa:75:6c: cf:11:2e:52:e3:88:4e:21:1f:62:5b:78:66:4d:d9:da:9a:b8: fe:05:f2:2c:ed:8d:47:af:53:e8:b0:3e:44:0f:03:f5:c3:87: 80:53:a5:2d:5f:42:a4:d8:28:b4:06:08:7b:44:84:9f:96:a7: 83:19:fb:7c:34:f6:7d:ce:3c:d9:f4:3f:38:b0:3d:4e:96:c6: c8:27:32:39:9e:0f:46:4f:be:9c:32:f2:f1:4f:27:84:b0:32: 24:0d:06:d2:58:79:44:03:55:a7:a3:f7:08:32:ba:73:2a:92: 64:d4:9a:7f:31:52:28:0f:10:b3:1e:a2:61:06:08:d4:25:15: 3e:ed:5c:a9:2a:1d:10:df:5e:35:9e:ce:91:53:9a:0b:5b:d4: c2:d1:ac:81:91:12:26:51:86:52:17:ae:43:26:2b:f5:fe:be: ac:b7:0a:8f:20:a2:19:21:b8:33:7b:02:dd:ca:c3:97:f8:03: 13:f2:d3:a0:8b:2f:c1:4f:06:e7:07:4f:f1:77:20:2b:b3:88: dd:93:15:aa -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUF32IeE7mVqnUWuoxuSYPwCAieqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2 MjFGMDU5RjAeFw0yNjA3MjQwMjA2MDVaFw0yNjA3MjUwNDM1MDVaMDMxMTAvBgNV BAMTKDcxODYxNTYwOEQ5QzA5NDU0QTZDQzRGNzcwREYyNzg1ODkzOTRCRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHgHLNiBmnL+sfQsl0cCMcSk6L tR96uvnUnUoYwxnf1bUj+LdnxnyRtavecz//ef87WAaApJAcOKLM/AhA/2GrxaSA TAViBo8Yrgm+RROVGrFXNHY5/YZb6aUYzcbhRtlBR+0uVVpdSB8Nap8BpjOjE9K6 CIfv+iZzABp7qczMzenY9NomEHlIWim7Dt3pulqZ1en2jg12ytFni03qlHiE3Vw5 6A2byrRYFeSd/Sbsa7c+/i4Ylas+dkPj9jakcb4jqVEs8zJQq/2CFTRYw5ZnMCKx XNEsuDxKzT3AM6RuxHfIAjeZ43U2Uyk9M734EScMt+aci/E6ztOvPB34d87BAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUcYYVYI2cCUVKbMT3cN8nhYk5S9UwHwYDVR0j BBgwFoAUHVcLmE6cXjgrCoeaoh9lGGIfBZ8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAv MUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRDU3MEI5ODRFOUM1RTM4MkIwQTg3OUFBMjFGNjUx ODYyMUYwNTlGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzRkNWMz MDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAvMUQ1NzBCOTg0RTlDNUUzODJC MEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJB6MVT0rGULIHmCJGHh k/ILChSckZi5N2nAgIq7lu+Nop7xycNvyBjIZ37vSSa75rF/K6p1bM8RLlLjiE4h H2JbeGZN2dqauP4F8iztjUevU+iwPkQPA/XDh4BTpS1fQqTYKLQGCHtEhJ+Wp4MZ +3w09n3OPNn0PziwPU6WxsgnMjmeD0ZPvpwy8vFPJ4SwMiQNBtJYeUQDVaej9wgy unMqkmTUmn8xUigPELMeomEGCNQlFT7tXKkqHRDfXjWezpFTmgtb1MLRrIGREiZR hlIXrkMmK/X+vqy3Co8gohkhuDN7At3Kw5f4AxPy06CLL8FPBucHT/F3ICuziN2T Fao= -----END CERTIFICATE-----Generated at Fri Jul 24 10:22:42 2026 by rpki-client