$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft File: 9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft (raw, json) Hash identifier: IGVY55fL+B1fThh5P2r9mYjkT+PAG701/0NFtMrYLCI= Subject key identifier: 89:08:FF:06:CA:C0:00:99:08:27:39:54:4D:E3:C4:FE:E9:B2:30:83 Authority key identifier: 9C:DF:06:7D:D0:8A:88:DE:7C:64:53:3C:E5:EF:0A:1C:41:47:30:81 Certificate issuer: /CN=9CDF067DD08A88DE7C64533CE5EF0A1C41473081 Certificate serial: 63A6DD6D08B26DCDD4C7CB4C238F623E5E5BB08E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft Manifest number: 73 Signing time: Fri 24 Jul 2026 03:01:20 +0000 Manifest this update: Fri 24 Jul 2026 02:56:20 +0000 Manifest next update: Sat 25 Jul 2026 03:57:20 +0000 Files and hashes: 1: 9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl (hash: CChXDtiTXCzd/hkuuGbpZAfmmS5CaqbWaVHKa5rx5zY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 03:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a6:dd:6d:08:b2:6d:cd:d4:c7:cb:4c:23:8f:62:3e:5e:5b:b0:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDF067DD08A88DE7C64533CE5EF0A1C41473081 Validity Not Before: Jul 24 02:56:20 2026 GMT Not After : Jul 25 03:57:20 2026 GMT Subject: CN=8908FF06CAC00099082739544DE3C4FEE9B23083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:24:3f:b4:07:f4:e2:fe:4f:4a:25:95:78:05: b8:cd:d2:47:dc:47:d0:2c:39:0b:9d:c1:3b:f9:10: 7e:26:cf:fe:4b:17:8e:51:ff:3f:b8:25:9d:30:89: 70:6e:19:2c:3e:ab:cc:4c:46:df:c7:56:4f:b2:eb: 2f:1b:26:af:04:31:43:71:f3:9b:be:10:1c:ab:16: f9:bf:02:fc:f4:b3:e3:1e:b2:a1:47:cf:f1:4a:39: 5e:d5:a3:b0:99:12:c3:77:7e:34:a8:e0:e3:99:a7: ca:fe:e1:6f:d5:3c:4f:14:a9:6a:78:55:3b:a6:c4: 82:fd:e9:85:e5:9e:35:d2:4f:06:08:fa:fb:d1:9c: 26:6b:93:a9:74:30:a2:7b:8c:8e:5f:b7:8d:80:9c: 7b:69:2f:09:15:2a:38:50:23:3e:03:c1:b1:5a:96: 3d:26:69:22:14:56:34:65:ab:d8:60:5b:cb:fa:25: 06:6a:50:d6:dc:45:71:18:a5:a8:d0:b6:4b:42:3e: 05:d3:0e:0b:d2:b9:41:93:97:0d:f9:6a:be:13:11: 6e:71:b8:4b:d2:a3:f8:53:41:12:dd:57:6a:a1:8c: f0:49:3c:b4:ed:fb:11:aa:bc:ab:3d:bc:9c:ca:ca: 03:6d:57:b5:07:f1:bf:d2:82:5d:90:c5:29:af:d4: bd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:08:FF:06:CA:C0:00:99:08:27:39:54:4D:E3:C4:FE:E9:B2:30:83 X509v3 Authority Key Identifier: keyid:9C:DF:06:7D:D0:8A:88:DE:7C:64:53:3C:E5:EF:0A:1C:41:47:30:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:27:47:5e:c6:46:6c:8e:ac:aa:5d:9f:7f:7a:68:4c:b7:bf: 53:d6:f2:63:cb:38:0a:ca:e6:c4:1f:64:ba:0d:80:62:72:3b: 86:3d:ef:92:75:68:7b:26:b1:86:e7:45:87:12:15:21:96:f5: c2:b2:f6:2e:30:e8:46:56:96:7d:ee:0f:03:56:f7:49:a3:00: 66:94:7b:9f:43:ed:10:60:0c:96:12:0a:de:f1:16:50:1a:3b: 89:8c:e2:04:71:ca:59:d9:15:3e:8a:88:d6:0a:e3:1b:56:72: 07:d5:30:42:d0:f7:85:16:cb:c8:fa:36:74:9c:46:ec:c2:b8: f7:82:6c:4e:7d:11:02:7b:6c:33:92:a0:e8:5a:b9:4d:ea:5b: 62:1f:12:37:0d:20:fc:c7:8b:35:c4:a2:a1:42:8e:de:7b:83: 89:07:66:47:ca:f0:78:86:20:b3:45:a8:e9:72:f1:1d:20:8f: dc:84:ae:52:a4:2b:78:f1:a4:85:07:fe:6e:42:8f:c3:eb:fe: bd:ca:01:97:44:53:40:7f:e5:5b:bb:b4:fc:82:08:65:a9:f4: 77:64:0f:11:9e:05:b6:7e:87:f8:02:6e:e2:94:4a:90:a1:ea: e7:0d:0a:04:78:04:0e:58:54:f8:d8:71:27:34:c0:c9:3a:9b: 0f:e7:a2:14 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUY6bdbQiybc3Ux8tMI49iPl5bsI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERjA2N0REMDhBODhERTdDNjQ1MzNDRTVFRjBBMUM0 MTQ3MzA4MTAeFw0yNjA3MjQwMjU2MjBaFw0yNjA3MjUwMzU3MjBaMDMxMTAvBgNV BAMTKDg5MDhGRjA2Q0FDMDAwOTkwODI3Mzk1NDRERTNDNEZFRTlCMjMwODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSJD+0B/Ti/k9KJZV4BbjN0kfc R9AsOQudwTv5EH4mz/5LF45R/z+4JZ0wiXBuGSw+q8xMRt/HVk+y6y8bJq8EMUNx 85u+EByrFvm/Avz0s+MesqFHz/FKOV7Vo7CZEsN3fjSo4OOZp8r+4W/VPE8UqWp4 VTumxIL96YXlnjXSTwYI+vvRnCZrk6l0MKJ7jI5ft42AnHtpLwkVKjhQIz4DwbFa lj0maSIUVjRlq9hgW8v6JQZqUNbcRXEYpajQtktCPgXTDgvSuUGTlw35ar4TEW5x uEvSo/hTQRLdV2qhjPBJPLTt+xGqvKs9vJzKygNtV7UH8b/Sgl2QxSmv1L0NAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUiQj/BsrAAJkIJzlUTePE/umyMIMwHwYDVR0j BBgwFoAUnN8GfdCKiN58ZFM85e8KHEFHMIEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzVjNTUyMmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzIv OUNERjA2N0REMDhBODhERTdDNjQ1MzNDRTVFRjBBMUM0MTQ3MzA4MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85Q0RGMDY3REQwOEE4OERFN0M2NDUzM0NFNUVGMEEx QzQxNDczMDgxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzVjNTUy MmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzIvOUNERjA2N0REMDhBODhERTdD NjQ1MzNDRTVFRjBBMUM0MTQ3MzA4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALInR17GRmyOrKpdn396 aEy3v1PW8mPLOArK5sQfZLoNgGJyO4Y975J1aHsmsYbnRYcSFSGW9cKy9i4w6EZW ln3uDwNW90mjAGaUe59D7RBgDJYSCt7xFlAaO4mM4gRxylnZFT6KiNYK4xtWcgfV MELQ94UWy8j6NnScRuzCuPeCbE59EQJ7bDOSoOhauU3qW2IfEjcNIPzHizXEoqFC jt57g4kHZkfK8HiGILNFqOly8R0gj9yErlKkK3jxpIUH/m5Cj8Pr/r3KAZdEU0B/ 5Vu7tPyCCGWp9HdkDxGeBbZ+h/gCbuKUSpCh6ucNCgR4BA5YVPjYcSc0wMk6mw/n ohQ= -----END CERTIFICATE-----Generated at Fri Jul 24 14:47:50 2026 by rpki-client