$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft File: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft (raw, json) Hash identifier: xvZD7/A6hINRY/eOTO3S40KKh5ecX0f8ixCRqNGrP34= Subject key identifier: C2:C7:90:B0:C9:D1:16:1B:80:0B:E0:1B:F1:86:F8:12:CB:5E:0B:AD Authority key identifier: 5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0 Certificate issuer: /CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0 Certificate serial: 2BE1AF5EA43F32E84A55AD4F27CE8AB2898C60D7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft Manifest number: 03EC Signing time: Wed 30 Sep 2026 10:42:27 +0000 Manifest this update: Wed 30 Sep 2026 10:37:26 +0000 Manifest next update: Thu 01 Oct 2026 12:09:26 +0000 Files and hashes: 1: 326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa (hash: i7uZ6kuAMUDRGGjZBz0Vl5VpijCufoXuY1ufMZ+k83s=) 2: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl (hash: 0bTVDtU4P4bqX98h5wTePrG4zEGEBR1pqIvZ8h3TCsY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Oct 2026 12:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:e1:af:5e:a4:3f:32:e8:4a:55:ad:4f:27:ce:8a:b2:89:8c:60:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0 Validity Not Before: Sep 30 10:37:26 2026 GMT Not After : Oct 1 12:09:26 2026 GMT Subject: CN=C2C790B0C9D1161B800BE01BF186F812CB5E0BAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:f2:6c:6c:52:25:fc:6c:cc:78:68:1b:84: 3c:17:ab:24:08:a4:28:86:e8:30:5e:57:64:78:4e: 58:93:0b:bf:bb:94:0e:86:a5:65:c0:c0:0b:58:81: 28:59:83:c6:7f:3e:b8:a2:a0:8a:ad:88:46:0b:c9: cf:4e:37:ef:15:26:fe:d5:95:b0:60:5e:a8:45:a5: ea:71:57:b5:93:48:9a:35:76:6e:a9:cb:08:43:0d: 01:ee:c2:ae:3a:49:32:0d:b0:55:02:e2:bf:57:a2: 40:cc:26:0f:6e:79:4d:52:08:85:07:7e:17:56:35: 11:c7:64:79:a0:8b:21:28:a8:62:d0:58:3c:80:da: b2:6c:1f:6a:65:1d:27:a0:26:52:fa:01:3b:de:78: 00:b9:20:60:23:53:a9:c1:8a:13:3a:15:53:24:07: 1f:f7:34:62:8a:20:2d:bf:ea:c3:19:f1:07:92:4b: 34:68:e6:0d:bd:8a:b4:b2:52:80:b0:9d:71:ff:22: 46:be:4b:5c:ef:cf:4c:1c:50:5b:8e:4f:66:90:58: 5d:53:06:0a:83:08:26:fc:ed:73:cb:a9:4b:cf:f6: 65:4d:cc:c8:05:91:8c:e9:37:b3:38:dc:b6:af:ab: a2:3b:92:c6:e4:8e:19:d1:a9:b8:39:07:a2:9a:65: ee:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C7:90:B0:C9:D1:16:1B:80:0B:E0:1B:F1:86:F8:12:CB:5E:0B:AD X509v3 Authority Key Identifier: keyid:5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:3b:6d:0d:0e:7e:a2:e2:1f:b4:60:25:af:1d:d5:d6:03:e1: aa:af:e8:e6:79:4e:53:85:6a:2e:19:e5:dd:de:46:17:3c:11: 59:e6:80:0d:ae:bc:14:e1:5a:c9:5b:e8:8a:48:a1:24:cd:81: b5:c4:44:5e:35:31:ce:ee:7b:74:5c:9e:cf:51:b7:9e:ad:1f: 4a:ef:37:14:e2:f2:94:fe:eb:85:5b:9b:37:53:ad:1d:f3:ff: 6b:d9:1c:c0:0f:12:db:ef:b4:f2:b1:70:2e:e1:1e:06:eb:f2: 07:6b:32:95:3a:41:f9:af:8f:d9:e5:5f:4e:ac:20:31:34:56: 8a:d4:60:46:90:46:69:95:96:50:7a:ba:f5:a5:54:6f:1c:d9: 65:3b:2c:74:29:70:95:f9:4c:82:7a:5d:f3:96:4e:63:1f:2c: 62:40:ca:d4:86:1d:d2:aa:fc:b7:d0:1a:36:96:31:3f:85:fb: bf:34:b7:0a:f7:45:3d:44:e7:26:d3:c3:c7:2b:74:f8:3e:2b: ab:64:d2:38:1f:9a:6f:86:ec:4b:75:ee:b9:1f:87:11:c5:5f: 1e:b7:b2:32:b9:44:f6:da:b8:ac:59:24:30:7a:a5:c6:76:81: 34:de:8c:18:46:c4:db:80:6b:5d:f4:e1:d0:e9:36:0b:07:5c: 0d:6d:0f:3b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUK+GvXqQ/MuhKVa1PJ86KsomMYNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCRTJGNjA5OTk2NDc2QUFGRTE0NkJDNUE3MjQyOUIw QjIwNUZDMDAeFw0yNjA5MzAxMDM3MjZaFw0yNjEwMDExMjA5MjZaMDMxMTAvBgNV BAMTKEMyQzc5MEIwQzlEMTE2MUI4MDBCRTAxQkYxODZGODEyQ0I1RTBCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gvJsbFIl/GzMeGgbhDwXqyQI pCiG6DBeV2R4TliTC7+7lA6GpWXAwAtYgShZg8Z/PriioIqtiEYLyc9ON+8VJv7V lbBgXqhFpepxV7WTSJo1dm6pywhDDQHuwq46STINsFUC4r9XokDMJg9ueU1SCIUH fhdWNRHHZHmgiyEoqGLQWDyA2rJsH2plHSegJlL6ATveeAC5IGAjU6nBihM6FVMk Bx/3NGKKIC2/6sMZ8QeSSzRo5g29irSyUoCwnXH/Ika+S1zvz0wcUFuOT2aQWF1T BgqDCCb87XPLqUvP9mVNzMgFkYzpN7M43Lavq6I7ksbkjhnRqbg5B6KaZe5LAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUwseQsMnRFhuAC+Ab8Yb4EsteC60wHwYDVR0j BBgwFoAUWr4vYJmWR2qv4Ua8WnJCmwsgX8AwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY0ODMyNjExYmEwNjRkNmI4ZjljMmI3YzczZmJkODRiLzAv NUFCRTJGNjA5OTk2NDc2QUFGRTE0NkJDNUE3MjQyOUIwQjIwNUZDMC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy81QUJFMkY2MDk5OTY0NzZBQUZFMTQ2QkM1QTcyNDI5 QjBCMjA1RkMwLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY0ODMy NjExYmEwNjRkNmI4ZjljMmI3YzczZmJkODRiLzAvNUFCRTJGNjA5OTk2NDc2QUFG RTE0NkJDNUE3MjQyOUIwQjIwNUZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIE7bQ0OfqLiH7RgJa8d 1dYD4aqv6OZ5TlOFai4Z5d3eRhc8EVnmgA2uvBThWslb6IpIoSTNgbXERF41Mc7u e3Rcns9Rt56tH0rvNxTi8pT+64VbmzdTrR3z/2vZHMAPEtvvtPKxcC7hHgbr8gdr MpU6Qfmvj9nlX06sIDE0VorUYEaQRmmVllB6uvWlVG8c2WU7LHQpcJX5TIJ6XfOW TmMfLGJAytSGHdKq/LfQGjaWMT+F+780twr3RT1E5ybTw8crdPg+K6tk0jgfmm+G 7Et17rkfhxHFXx63sjK5RPbauKxZJDB6pcZ2gTTejBhGxNuAa1304dDpNgsHXA1t Dzs= -----END CERTIFICATE-----Generated at Thu Oct 1 02:22:12 2026 by rpki-client