$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft File: 9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft (raw, json) Hash identifier: Y+AJF3wJZiize5moTADksWC8cua079d4GUHGboMYeoI= Subject key identifier: 77:2F:E7:51:60:3F:EA:51:69:A1:01:3B:8B:DC:51:EB:05:82:86:FD Authority key identifier: 9C:DF:06:7D:D0:8A:88:DE:7C:64:53:3C:E5:EF:0A:1C:41:47:30:81 Certificate issuer: /CN=9CDF067DD08A88DE7C64533CE5EF0A1C41473081 Certificate serial: 4B5BC8278CCA8DF115963E1F6614CBEF2997CFE2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft Manifest number: 14 Signing time: Tue 12 May 2026 17:44:27 +0000 Manifest this update: Tue 12 May 2026 17:39:27 +0000 Manifest next update: Wed 13 May 2026 19:51:27 +0000 Files and hashes: 1: 9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl (hash: zvKZSrnvOTAQkRHd7iULkRqMqrFXiswwvccbDkjTaDY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5b:c8:27:8c:ca:8d:f1:15:96:3e:1f:66:14:cb:ef:29:97:cf:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDF067DD08A88DE7C64533CE5EF0A1C41473081 Validity Not Before: May 12 17:39:27 2026 GMT Not After : May 13 19:51:27 2026 GMT Subject: CN=772FE751603FEA5169A1013B8BDC51EB058286FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2f:5e:c3:72:60:17:95:3f:65:e1:69:d6:c5: 72:a9:88:42:6a:cf:c4:57:b5:92:de:2f:6f:bc:4a: 86:b3:fb:bb:0c:b0:0a:08:19:c8:a8:aa:7e:ef:fa: 3c:c4:36:5b:1e:ba:d8:c6:52:12:b1:30:b1:4f:d9: 8a:af:2d:e2:c9:86:63:e8:57:2e:62:25:6c:8e:56: fd:39:61:a8:bf:07:60:48:0f:bb:7d:64:d6:3d:b1: 9a:23:b2:a7:4b:97:43:7e:f1:8e:e8:29:a6:4a:c3: b8:be:6e:0b:2e:1c:e8:b9:6e:a1:d8:7e:e6:9d:17: 12:34:89:d0:4a:e1:a0:89:52:06:2e:98:9e:43:21: 6c:29:69:28:03:25:48:95:f1:b0:ac:8e:15:bd:39: 2f:8e:70:ba:c9:e0:7c:ac:ff:5d:76:4b:a1:d1:15: 6a:ad:b6:25:3c:da:73:ea:5b:85:8f:a1:ed:93:82: 0b:ad:b5:1d:f5:48:ec:3b:d9:63:c7:87:76:17:46: 95:78:0b:6b:ab:9f:8c:1d:1f:96:a2:df:23:4f:13: f5:95:f8:01:ff:4e:22:a1:d9:c8:61:fe:9b:6c:a6: f4:17:79:bc:f5:95:44:44:9a:95:06:bd:af:dd:92: 85:8d:b5:65:3b:6e:0b:bc:66:2e:76:88:c1:e2:cd: 21:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2F:E7:51:60:3F:EA:51:69:A1:01:3B:8B:DC:51:EB:05:82:86:FD X509v3 Authority Key Identifier: keyid:9C:DF:06:7D:D0:8A:88:DE:7C:64:53:3C:E5:EF:0A:1C:41:47:30:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:5d:86:ce:af:5f:56:84:24:24:c1:89:02:ee:a5:0f:93:12: e5:56:b3:3b:fd:d1:54:48:6f:69:cc:a6:3d:87:43:a0:ed:57: e2:e7:9a:da:1a:f8:76:8f:7b:36:7c:7a:e3:bd:76:69:28:71: a9:40:3e:41:d0:eb:78:39:0f:b2:be:e9:0f:d5:16:3c:65:16: 58:ef:f3:65:10:33:33:f2:3a:82:12:d0:74:bf:2d:10:56:98: 30:59:f1:0e:13:08:48:4d:01:99:77:a2:84:41:8d:ff:44:a0: 7c:67:89:19:5f:63:7f:b2:35:11:1c:c4:fc:16:d8:26:a9:72: 71:f2:c7:2a:6b:f2:b3:f1:5a:b5:87:59:1b:b0:d3:b3:57:c6: 64:23:4d:75:ea:b2:a6:b7:7d:52:f8:1a:71:33:63:c0:30:41: ba:bb:f3:c7:4e:0f:39:be:48:12:70:b7:87:9c:81:93:90:e8: 11:e2:43:8e:6c:fa:21:b4:e5:76:15:96:79:10:21:0f:c9:a4: eb:71:96:45:76:68:d7:a5:6d:fd:80:67:8e:24:55:6b:07:bf: e5:37:8c:ba:27:20:7a:e8:de:1e:39:93:0f:fe:53:cc:bc:fb: de:cd:0d:25:81:13:99:97:c4:aa:24:6d:e4:cc:ba:b3:2f:af: ec:61:7f:9a -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUS1vIJ4zKjfEVlj4fZhTL7ymXz+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERjA2N0REMDhBODhERTdDNjQ1MzNDRTVFRjBBMUM0 MTQ3MzA4MTAeFw0yNjA1MTIxNzM5MjdaFw0yNjA1MTMxOTUxMjdaMDMxMTAvBgNV BAMTKDc3MkZFNzUxNjAzRkVBNTE2OUExMDEzQjhCREM1MUVCMDU4Mjg2RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJL17DcmAXlT9l4WnWxXKpiEJq z8RXtZLeL2+8Soaz+7sMsAoIGcioqn7v+jzENlseutjGUhKxMLFP2YqvLeLJhmPo Vy5iJWyOVv05Yai/B2BID7t9ZNY9sZojsqdLl0N+8Y7oKaZKw7i+bgsuHOi5bqHY fuadFxI0idBK4aCJUgYumJ5DIWwpaSgDJUiV8bCsjhW9OS+OcLrJ4Hys/112S6HR FWqttiU82nPqW4WPoe2TgguttR31SOw72WPHh3YXRpV4C2urn4wdH5ai3yNPE/WV +AH/TiKh2chh/ptspvQXebz1lUREmpUGva/dkoWNtWU7bgu8Zi52iMHizSE5AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUdy/nUWA/6lFpoQE7i9xR6wWChv0wHwYDVR0j BBgwFoAUnN8GfdCKiN58ZFM85e8KHEFHMIEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzVjNTUyMmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzIv OUNERjA2N0REMDhBODhERTdDNjQ1MzNDRTVFRjBBMUM0MTQ3MzA4MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85Q0RGMDY3REQwOEE4OERFN0M2NDUzM0NFNUVGMEEx QzQxNDczMDgxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzVjNTUy MmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzIvOUNERjA2N0REMDhBODhERTdD NjQ1MzNDRTVFRjBBMUM0MTQ3MzA4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADVdhs6vX1aEJCTBiQLu pQ+TEuVWszv90VRIb2nMpj2HQ6DtV+Lnmtoa+HaPezZ8euO9dmkocalAPkHQ63g5 D7K+6Q/VFjxlFljv82UQMzPyOoIS0HS/LRBWmDBZ8Q4TCEhNAZl3ooRBjf9EoHxn iRlfY3+yNREcxPwW2CapcnHyxypr8rPxWrWHWRuw07NXxmQjTXXqsqa3fVL4GnEz Y8AwQbq788dODzm+SBJwt4ecgZOQ6BHiQ45s+iG05XYVlnkQIQ/JpOtxlkV2aNel bf2AZ44kVWsHv+U3jLonIHro3h45kw/+U8y8+97NDSWBE5mXxKokbeTMurMvr+xh f5o= -----END CERTIFICATE-----Generated at Wed May 13 12:28:46 2026 by rpki-client