$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft File: 9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft (raw, json) Hash identifier: j4N9fmFK/hsxjd1RsUhufPSVHlaxjNyaJv4IyUnpmig= Subject key identifier: E0:B5:18:BD:62:30:32:5F:8D:E2:62:26:23:87:EE:77:21:97:80:46 Authority key identifier: 9C:DF:06:7D:D0:8A:88:DE:7C:64:53:3C:E5:EF:0A:1C:41:47:30:81 Certificate issuer: /CN=9CDF067DD08A88DE7C64533CE5EF0A1C41473081 Certificate serial: 696B326DC946D9A5D2C0821E0BD6C8E5D17963CE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft Manifest number: C7 Signing time: Thu 08 Oct 2026 16:18:28 +0000 Manifest this update: Thu 08 Oct 2026 16:13:27 +0000 Manifest next update: Fri 09 Oct 2026 18:23:27 +0000 Files and hashes: 1: 9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl (hash: Tv52nq8mBEFJcFDGC8y3kv34G6v0D4Rd98opFNfyfSI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 18:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:6b:32:6d:c9:46:d9:a5:d2:c0:82:1e:0b:d6:c8:e5:d1:79:63:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDF067DD08A88DE7C64533CE5EF0A1C41473081 Validity Not Before: Oct 8 16:13:27 2026 GMT Not After : Oct 9 18:23:27 2026 GMT Subject: CN=E0B518BD6230325F8DE262262387EE7721978046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e1:0d:07:40:c4:43:72:eb:6c:3b:20:8a:49: 55:b8:ca:f1:58:80:32:d4:e9:49:ad:dc:c4:bc:87: 36:c3:10:40:7d:7b:f4:bc:4b:ea:0f:01:6a:29:bf: 4d:41:8f:b4:ba:fa:20:50:7c:63:49:99:42:2d:9b: f6:b8:47:0f:f7:c1:b4:aa:a4:cb:9e:dd:4f:67:ce: 6d:94:ce:97:07:87:54:2d:d7:1e:67:87:b5:6b:1f: 2c:7b:d4:c9:a8:4d:20:51:10:10:bf:3f:c6:64:a2: f3:4f:69:9b:67:51:91:01:23:22:a6:92:23:1e:71: 78:81:c7:d7:55:82:ca:bb:fb:36:72:19:05:67:b0: 56:d2:13:2a:0a:46:92:63:20:0c:51:0b:30:3b:f4: 66:db:af:7b:41:b5:69:a6:26:7c:68:e5:14:5e:a4: 7b:76:49:c6:86:06:ef:3f:d0:1c:69:53:1e:5e:4b: ad:e8:e9:e6:7c:32:b1:cb:20:16:92:c5:ae:33:0b: d9:4d:cb:b4:f8:e9:e8:3a:ca:a5:53:b4:4e:68:7e: dd:0d:04:cc:7e:f7:1c:28:33:35:ce:c4:85:6f:34: e7:db:29:0b:e9:61:70:bf:ce:5e:9f:7e:22:90:c8: 7d:95:a7:b6:99:f9:2b:10:a0:ae:8b:93:15:0d:5c: 35:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B5:18:BD:62:30:32:5F:8D:E2:62:26:23:87:EE:77:21:97:80:46 X509v3 Authority Key Identifier: keyid:9C:DF:06:7D:D0:8A:88:DE:7C:64:53:3C:E5:EF:0A:1C:41:47:30:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:48:04:1f:d0:17:34:9d:6e:08:cc:d2:5c:df:02:6f:61:5e: 0a:36:9d:b1:f9:5e:1e:84:7d:82:ba:10:f1:6c:eb:fb:7b:c7: 7a:48:a7:95:9d:b2:cd:bf:46:84:88:e4:79:21:66:d8:8d:f3: 56:78:cc:43:9f:e9:6b:18:8f:7b:fc:96:c8:7f:67:14:f0:85: 17:bb:fa:f5:00:e4:d8:9e:f9:1d:8f:a8:0c:77:07:4d:54:b1: 21:65:a3:28:ae:63:ec:25:47:57:22:64:9c:37:a1:e2:2f:82: 15:e1:d5:d4:68:ff:04:a2:51:5b:f0:8a:d0:fb:a5:95:45:f7: 76:ae:c1:bf:48:9c:59:81:92:22:6f:7b:76:32:3a:64:8d:bf: 17:cd:b5:4b:da:40:c2:0c:3a:68:69:eb:c5:d3:a5:7a:cb:51: d6:21:4e:21:63:a8:56:19:74:54:d5:dd:85:78:bd:02:25:0e: d2:93:bb:c6:dd:df:43:e4:e6:e5:7c:45:8b:3f:5c:a6:80:fd: 1e:ac:f1:0b:a8:26:0a:6d:10:23:ee:c8:25:86:f1:05:2a:2e: 8f:d5:60:cb:8d:5b:92:92:8e:8f:47:f0:19:df:ef:b8:0d:36: 79:de:21:d3:2e:26:9f:19:3d:77:c2:d5:bb:8b:66:76:fd:5c: 2e:60:e1:4b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUaWsybclG2aXSwIIeC9bI5dF5Y84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERjA2N0REMDhBODhERTdDNjQ1MzNDRTVFRjBBMUM0 MTQ3MzA4MTAeFw0yNjEwMDgxNjEzMjdaFw0yNjEwMDkxODIzMjdaMDMxMTAvBgNV BAMTKEUwQjUxOEJENjIzMDMyNUY4REUyNjIyNjIzODdFRTc3MjE5NzgwNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo4Q0HQMRDcutsOyCKSVW4yvFY gDLU6Umt3MS8hzbDEEB9e/S8S+oPAWopv01Bj7S6+iBQfGNJmUItm/a4Rw/3wbSq pMue3U9nzm2UzpcHh1Qt1x5nh7VrHyx71MmoTSBREBC/P8ZkovNPaZtnUZEBIyKm kiMecXiBx9dVgsq7+zZyGQVnsFbSEyoKRpJjIAxRCzA79Gbbr3tBtWmmJnxo5RRe pHt2ScaGBu8/0BxpUx5eS63o6eZ8MrHLIBaSxa4zC9lNy7T46eg6yqVTtE5oft0N BMx+9xwoMzXOxIVvNOfbKQvpYXC/zl6ffiKQyH2Vp7aZ+SsQoK6LkxUNXDWNAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU4LUYvWIwMl+N4mImI4fudyGXgEYwHwYDVR0j BBgwFoAUnN8GfdCKiN58ZFM85e8KHEFHMIEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzVjNTUyMmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzIv OUNERjA2N0REMDhBODhERTdDNjQ1MzNDRTVFRjBBMUM0MTQ3MzA4MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85Q0RGMDY3REQwOEE4OERFN0M2NDUzM0NFNUVGMEEx QzQxNDczMDgxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzVjNTUy MmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzIvOUNERjA2N0REMDhBODhERTdD NjQ1MzNDRTVFRjBBMUM0MTQ3MzA4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIBIBB/QFzSdbgjM0lzf Am9hXgo2nbH5Xh6EfYK6EPFs6/t7x3pIp5Wdss2/RoSI5HkhZtiN81Z4zEOf6WsY j3v8lsh/ZxTwhRe7+vUA5Nie+R2PqAx3B01UsSFloyiuY+wlR1ciZJw3oeIvghXh 1dRo/wSiUVvwitD7pZVF93auwb9InFmBkiJve3YyOmSNvxfNtUvaQMIMOmhp68XT pXrLUdYhTiFjqFYZdFTV3YV4vQIlDtKTu8bd30Pk5uV8RYs/XKaA/R6s8QuoJgpt ECPuyCWG8QUqLo/VYMuNW5KSjo9H8Bnf77gNNnneIdMuJp8ZPXfC1buLZnb9XC5g 4Us= -----END CERTIFICATE-----Generated at Fri Oct 9 09:21:58 2026 by rpki-client