$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft File: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft (raw, json) Hash identifier: zjeqczlWTERk9gnYlb2hVpjlzDjEPIGmBNV0/jyPTj4= Subject key identifier: 02:CA:5C:71:D6:3C:EC:E7:E4:BE:69:79:58:BF:6F:AE:3C:7F:6E:83 Authority key identifier: 5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0 Certificate issuer: /CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0 Certificate serial: 0F04DFF6287670205E6B05CF1D859E1F85E272D4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft Manifest number: 0304 Signing time: Wed 25 Mar 2026 17:28:00 +0000 Manifest this update: Wed 25 Mar 2026 17:22:58 +0000 Manifest next update: Thu 26 Mar 2026 20:24:58 +0000 Files and hashes: 1: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl (hash: UdwHbecPzxIbjqncaoEZQdHc7U+AoxzscX9Ryzx1UzY=) 2: 326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa (hash: Fb1/PRkI0lrTKbp777DJ9P81eGra7/CB0uA9Vm+bs1w=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 20:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:04:df:f6:28:76:70:20:5e:6b:05:cf:1d:85:9e:1f:85:e2:72:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0 Validity Not Before: Mar 25 17:22:58 2026 GMT Not After : Mar 26 20:24:58 2026 GMT Subject: CN=02CA5C71D63CECE7E4BE697958BF6FAE3C7F6E83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:2b:57:23:3d:46:f4:e0:0e:87:6a:59:06: 98:96:83:df:d8:dd:b9:ad:bc:ec:ad:e9:21:6a:d7: 9a:f1:e3:70:9a:33:89:43:db:71:7e:57:35:bc:5e: ee:21:5c:6b:b0:55:df:e1:ca:f2:6e:7a:55:83:95: 87:ed:4e:6d:ed:9a:5f:43:f7:74:88:bf:eb:00:2e: 53:90:bc:dd:42:4c:b8:98:02:6a:a6:57:0a:4e:ec: ac:d4:96:2f:cc:c2:b6:c6:f2:62:30:75:4f:ef:ad: 9c:b0:a6:b5:3b:ba:73:7a:e6:9b:c2:75:b3:5d:67: 17:35:07:eb:5d:cb:69:58:c2:2e:8f:bc:c0:49:80: da:f4:01:b1:75:5a:52:a4:09:62:5d:49:81:58:0f: 06:52:06:45:35:e3:c1:62:55:b5:5a:1f:73:52:f1: 82:c6:e8:b3:d6:25:ca:91:41:2c:4d:a6:8d:ad:ea: 61:d5:8a:5b:e9:a6:65:56:6a:67:af:b6:67:1f:59: 94:a6:28:2e:02:41:9e:1e:bc:fc:8e:fb:2a:28:d4: dd:6b:de:ff:20:d7:2a:f2:73:36:0c:f5:14:f2:04: a0:f1:ae:30:d3:bb:91:46:46:ab:ad:82:b3:99:5f: 43:31:27:f2:98:5e:30:23:33:65:47:8d:98:85:7d: 2f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CA:5C:71:D6:3C:EC:E7:E4:BE:69:79:58:BF:6F:AE:3C:7F:6E:83 X509v3 Authority Key Identifier: keyid:5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:1d:5f:a5:04:4b:39:0e:04:8c:63:49:79:1f:81:08:44:c4: b6:81:dd:90:f7:12:61:d1:79:42:3b:1b:6e:86:71:c5:6e:ca: 80:8e:61:46:e1:5a:71:2a:67:d7:6a:08:7b:a2:c2:51:53:f4: 30:69:ed:dd:87:0f:64:0c:05:f7:62:32:94:6f:e3:d5:c5:87: 2e:c6:77:a1:d1:b6:fc:3b:1e:53:eb:ee:a0:83:89:47:66:05: 6d:df:d8:57:48:62:b8:cf:22:5f:9c:4f:6c:91:6e:7f:27:98: 02:1d:05:c3:b1:6b:79:4a:de:9d:45:0d:49:fd:80:ed:2b:99: 31:c8:6b:a3:33:fd:b0:3a:b9:64:f0:08:e3:3b:3e:05:2e:06: d7:b4:04:d1:ee:88:80:0f:b5:20:73:25:a5:18:ac:42:39:b6: 40:65:85:77:3b:88:4b:d3:c5:f3:6b:72:a5:4b:c2:44:0f:91: 19:08:bd:c5:66:2a:61:6c:0f:5e:7b:ec:ff:cc:8a:42:e4:61: 80:35:53:fc:de:28:d4:b2:db:b5:00:12:03:c8:de:9b:11:54: a2:e0:0e:68:74:a4:87:72:4f:74:d2:b5:75:76:da:b1:f4:3b: ac:ba:91:29:1a:f2:16:e5:f2:4c:f6:2f:05:a0:f7:11:07:c9: 81:18:e0:8d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUDwTf9ih2cCBeawXPHYWeH4XictQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCRTJGNjA5OTk2NDc2QUFGRTE0NkJDNUE3MjQyOUIw QjIwNUZDMDAeFw0yNjAzMjUxNzIyNThaFw0yNjAzMjYyMDI0NThaMDMxMTAvBgNV BAMTKDAyQ0E1QzcxRDYzQ0VDRTdFNEJFNjk3OTU4QkY2RkFFM0M3RjZFODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEytXIz1G9OAOh2pZBpiWg9/Y 3bmtvOyt6SFq15rx43CaM4lD23F+VzW8Xu4hXGuwVd/hyvJuelWDlYftTm3tml9D 93SIv+sALlOQvN1CTLiYAmqmVwpO7KzUli/MwrbG8mIwdU/vrZywprU7unN65pvC dbNdZxc1B+tdy2lYwi6PvMBJgNr0AbF1WlKkCWJdSYFYDwZSBkU148FiVbVaH3NS 8YLG6LPWJcqRQSxNpo2t6mHVilvppmVWamevtmcfWZSmKC4CQZ4evPyO+yoo1N1r 3v8g1yryczYM9RTyBKDxrjDTu5FGRqutgrOZX0MxJ/KYXjAjM2VHjZiFfS/RAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUAspccdY87Ofkvml5WL9vrjx/boMwHwYDVR0j BBgwFoAUWr4vYJmWR2qv4Ua8WnJCmwsgX8AwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY0ODMyNjExYmEwNjRkNmI4ZjljMmI3YzczZmJkODRiLzAv NUFCRTJGNjA5OTk2NDc2QUFGRTE0NkJDNUE3MjQyOUIwQjIwNUZDMC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy81QUJFMkY2MDk5OTY0NzZBQUZFMTQ2QkM1QTcyNDI5 QjBCMjA1RkMwLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY0ODMy NjExYmEwNjRkNmI4ZjljMmI3YzczZmJkODRiLzAvNUFCRTJGNjA5OTk2NDc2QUFG RTE0NkJDNUE3MjQyOUIwQjIwNUZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACcdX6UESzkOBIxjSXkf gQhExLaB3ZD3EmHReUI7G26GccVuyoCOYUbhWnEqZ9dqCHuiwlFT9DBp7d2HD2QM BfdiMpRv49XFhy7Gd6HRtvw7HlPr7qCDiUdmBW3f2FdIYrjPIl+cT2yRbn8nmAId BcOxa3lK3p1FDUn9gO0rmTHIa6Mz/bA6uWTwCOM7PgUuBte0BNHuiIAPtSBzJaUY rEI5tkBlhXc7iEvTxfNrcqVLwkQPkRkIvcVmKmFsD1577P/MikLkYYA1U/zeKNSy 27UAEgPI3psRVKLgDmh0pIdyT3TStXV22rH0O6y6kSka8hbl8kz2LwWg9xEHyYEY 4I0= -----END CERTIFICATE-----Generated at Thu Mar 26 12:47:35 2026 by rpki-client