$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft File: 1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json) Hash identifier: pjZgl0pQVqoaQG2x8ocraonLh6/Gu8nI/Wmhg9Xc0l0= Subject key identifier: F6:BD:46:08:07:98:9C:F5:26:85:0B:B5:FF:2C:FA:70:2D:4F:25:EF Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F Certificate issuer: /CN=1D570B984E9C5E382B0A879AA21F6518621F059F Certificate serial: 3B2F2A7B2E2955DB9B97B953A9BB523083828427 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft Manifest number: 0308 Signing time: Thu 26 Mar 2026 17:16:44 +0000 Manifest this update: Thu 26 Mar 2026 17:11:42 +0000 Manifest next update: Fri 27 Mar 2026 21:13:42 +0000 Files and hashes: 1: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: SZhn4FgWqY4qggdiI6TrYJUIT99auk+OFjrgNv4awjA=) 2: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: MhNa5eGHu7ernvLT7Jt9cIniQTHVhvvlzquL1j3UQ7g=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 20:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:2f:2a:7b:2e:29:55:db:9b:97:b9:53:a9:bb:52:30:83:82:84:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F Validity Not Before: Mar 26 17:11:42 2026 GMT Not After : Mar 27 21:13:42 2026 GMT Subject: CN=F6BD460807989CF526850BB5FF2CFA702D4F25EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b5:7a:1b:41:2f:0b:9d:e3:cd:b5:aa:ca:b0: ba:81:7e:50:32:2a:b5:eb:bc:16:f5:7e:cf:d8:4e: 74:8b:09:4c:c4:3b:3c:d7:a4:41:eb:46:81:79:bb: 57:2d:01:e2:00:6b:eb:39:e1:cc:be:4f:95:54:4a: 36:b9:85:90:97:fd:9f:99:42:80:4c:2d:51:b8:54: 6c:92:0c:34:e2:e0:8a:83:90:fc:49:05:f7:fd:35: e5:8c:97:94:4f:66:dc:6c:56:0b:d1:04:cf:12:cc: f1:f7:f7:ed:d2:5f:a2:73:c3:db:bf:8e:60:f3:cd: 4b:58:b9:c5:72:e7:a3:a4:15:b1:64:b6:00:12:75: 45:9c:b8:e1:92:73:24:13:c7:24:15:98:18:6a:63: 18:06:5d:38:9d:a4:bf:24:68:1e:6e:16:bd:a2:6b: 2f:c1:54:ad:78:ab:ea:a4:98:77:24:02:2c:ca:ee: d0:cc:32:58:d9:65:07:3c:12:a3:b6:24:85:be:ec: e6:74:d3:47:e0:de:36:e9:50:c7:19:9c:41:e7:a2: 78:ac:69:36:e6:41:db:e2:e9:75:a8:ee:eb:ab:50: 51:13:2a:b6:dd:99:f8:d5:c3:60:f6:e5:8a:34:69: f0:0c:c7:3f:30:86:88:a7:10:23:8a:4a:b6:a0:5c: 1f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BD:46:08:07:98:9C:F5:26:85:0B:B5:FF:2C:FA:70:2D:4F:25:EF X509v3 Authority Key Identifier: keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:30:1b:2e:c7:14:b4:e2:5d:6a:b7:69:b2:40:1e:00:d1:57: 72:d3:ff:42:43:e9:22:4b:a5:54:e6:cc:4d:95:7e:0e:ca:a2: b2:f5:4a:a9:08:03:f6:da:97:91:c8:ce:7c:fa:e3:e2:cf:d6: 18:c1:df:06:ba:e4:00:80:1a:7f:49:56:cb:10:e6:7c:3a:03: 9f:07:f1:34:51:b5:20:93:3b:46:14:c5:4f:bd:10:88:9b:49: c5:c5:d9:9a:79:8b:1a:56:37:7b:fe:9f:4c:53:fe:a1:c3:b2: c8:7d:d0:ce:b5:e1:65:24:02:67:aa:ae:98:19:7f:16:49:e5: 89:6f:65:2f:c8:b1:11:e4:fa:60:29:05:16:ec:ca:ef:22:18: 28:42:57:16:ce:13:71:46:10:5b:5f:95:8e:c5:8a:fa:a5:89: 38:b7:4c:37:a9:8d:7c:9c:76:08:4b:2a:60:7b:6f:5d:04:7e: 5a:b8:9c:ee:4a:8c:c1:2d:6a:00:02:53:0f:42:b2:22:1a:b1: b8:06:b8:a3:73:38:46:63:ad:93:0b:f8:6d:5b:78:e6:df:51: 7d:e9:52:0a:1c:45:76:cf:bc:e0:dc:ef:b6:22:55:96:52:0b: f3:ef:49:99:8c:6a:12:7e:31:d5:12:7f:72:7d:b1:ec:77:08: 9b:33:c0:09 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUOy8qey4pVdubl7lTqbtSMIOChCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2 MjFGMDU5RjAeFw0yNjAzMjYxNzExNDJaFw0yNjAzMjcyMTEzNDJaMDMxMTAvBgNV BAMTKEY2QkQ0NjA4MDc5ODlDRjUyNjg1MEJCNUZGMkNGQTcwMkQ0RjI1RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWtXobQS8LnePNtarKsLqBflAy KrXrvBb1fs/YTnSLCUzEOzzXpEHrRoF5u1ctAeIAa+s54cy+T5VUSja5hZCX/Z+Z QoBMLVG4VGySDDTi4IqDkPxJBff9NeWMl5RPZtxsVgvRBM8SzPH39+3SX6Jzw9u/ jmDzzUtYucVy56OkFbFktgASdUWcuOGScyQTxyQVmBhqYxgGXTidpL8kaB5uFr2i ay/BVK14q+qkmHckAizK7tDMMljZZQc8EqO2JIW+7OZ000fg3jbpUMcZnEHnonis aTbmQdvi6XWo7uurUFETKrbdmfjVw2D25Yo0afAMxz8whoinECOKSragXB9dAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU9r1GCAeYnPUmhQu1/yz6cC1PJe8wHwYDVR0j BBgwFoAUHVcLmE6cXjgrCoeaoh9lGGIfBZ8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAv MUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRDU3MEI5ODRFOUM1RTM4MkIwQTg3OUFBMjFGNjUx ODYyMUYwNTlGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzRkNWMz MDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAvMUQ1NzBCOTg0RTlDNUUzODJC MEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKYwGy7HFLTiXWq3abJA HgDRV3LT/0JD6SJLpVTmzE2Vfg7KorL1SqkIA/bal5HIznz64+LP1hjB3wa65ACA Gn9JVssQ5nw6A58H8TRRtSCTO0YUxU+9EIibScXF2Zp5ixpWN3v+n0xT/qHDssh9 0M614WUkAmeqrpgZfxZJ5YlvZS/IsRHk+mApBRbsyu8iGChCVxbOE3FGEFtflY7F ivqliTi3TDepjXycdghLKmB7b10Eflq4nO5KjMEtagACUw9CsiIasbgGuKNzOEZj rZML+G1beObfUX3pUgocRXbPvODc77YiVZZSC/PvSZmMahJ+MdUSf3J9sex3CJsz wAk= -----END CERTIFICATE-----Generated at Fri Mar 27 05:21:24 2026 by rpki-client