$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: oqhm1PRF4oBBvT2ugrzUFflS9jVYhfsEBHWiotKiDXY= Subject key identifier: E6:07:ED:99:27:40:D3:18:8B:EF:A0:06:83:03:3B:B5:26:13:7E:B7 Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 05E22D7874BD641C29A0AE01F86C5DA9852DE82A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: 037E Signing time: Fri 24 Jul 2026 07:54:02 +0000 Manifest this update: Fri 24 Jul 2026 07:49:02 +0000 Manifest next update: Sat 25 Jul 2026 10:10:02 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: bJ99PyR4Xkh5jeF7IMZjGNgv/DOe4pDI6OLhXLLnrHs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e2:2d:78:74:bd:64:1c:29:a0:ae:01:f8:6c:5d:a9:85:2d:e8:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: Jul 24 07:49:02 2026 GMT Not After : Jul 25 10:10:02 2026 GMT Subject: CN=E607ED992740D3188BEFA00683033BB526137EB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:5d:5f:0b:02:5f:fb:8c:00:97:fd:17:b9: 25:c6:6c:50:d3:9f:a1:33:12:6d:c1:ba:f1:5d:a5: db:5e:bb:57:22:77:93:b0:85:56:0d:21:94:53:45: dc:9b:d0:dd:90:0a:27:26:96:3a:17:66:bd:61:95: ff:af:34:b2:75:91:47:ef:24:df:b6:33:97:f6:e3: a3:9c:cb:9f:ea:f8:b4:16:4d:50:f0:fc:7c:df:c0: e3:44:cd:4c:1c:50:fd:5e:0a:87:e0:78:6e:31:ab: 58:7c:26:aa:09:99:4c:4d:2b:a3:22:8b:70:6c:ec: 52:b8:7c:51:c4:1e:e3:70:92:58:73:37:7d:10:15: 95:9d:22:c3:d6:1b:cd:b1:2e:2e:e9:62:a0:f0:eb: 69:2d:21:a5:5f:54:84:c6:d9:ef:9e:f4:be:df:8e: b2:ee:2a:07:21:ce:bf:4a:5e:ee:ce:08:16:50:cc: de:f1:39:6d:b9:32:ff:a6:45:78:f7:f3:23:8a:32: fa:f7:6e:c0:e2:ac:bf:e9:ed:02:0b:ad:15:cf:8c: 64:62:b7:68:36:66:3c:0e:80:45:08:2c:bf:1c:6f: 4e:94:06:9a:fd:f3:fb:1a:13:9b:f9:c1:a4:03:f3: b5:51:8f:07:42:73:10:a1:d3:4f:20:6e:8a:e3:d0: 36:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:07:ED:99:27:40:D3:18:8B:EF:A0:06:83:03:3B:B5:26:13:7E:B7 X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:8b:92:bc:22:39:69:46:d3:54:86:aa:58:b4:19:d9:cb:9e: 37:d6:a7:03:54:d0:31:e8:38:5f:45:83:8c:65:18:da:0f:7e: 78:31:1f:c1:42:c7:9b:1d:ec:38:58:59:d6:2d:dd:6c:1e:a6: 02:56:e6:61:d9:24:03:f6:ff:4d:0c:5d:7c:fc:b5:a3:1e:46: 73:9c:68:91:dd:7f:3c:a8:d9:95:82:05:ca:21:06:c9:64:12: e2:97:57:10:11:ac:94:6f:52:32:1f:fe:1a:2e:b9:be:ca:1f: b8:27:ef:7e:0a:f1:a5:be:71:f5:a2:9a:ff:39:70:f1:45:88: 62:91:6f:7e:80:b1:20:4d:31:3c:f7:99:38:f6:b0:0e:cd:59: db:cd:bf:f3:f6:92:0b:5d:83:e0:7d:bb:fb:d2:67:cb:01:90: ab:02:76:ca:5c:89:bf:ba:e2:23:b4:8b:b4:4e:60:bd:25:c1: 07:26:0e:aa:f4:59:f0:e5:50:a0:08:06:b3:fd:a4:6a:14:ec: 35:fd:66:87:bf:ba:bc:2e:4e:24:29:9c:92:72:64:e8:54:0f: 74:f6:59:c6:b3:36:9c:23:23:e3:b4:ca:fb:ab:63:a1:96:f3: 11:fb:3f:f7:29:29:0e:8d:73:3d:66:cd:14:cb:0c:48:f9:5a: dc:d0:2b:d0 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUBeIteHS9ZBwpoK4B+GxdqYUt6CowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNjA3MjQwNzQ5MDJaFw0yNjA3MjUxMDEwMDJaMDMxMTAvBgNV BAMTKEU2MDdFRDk5Mjc0MEQzMTg4QkVGQTAwNjgzMDMzQkI1MjYxMzdFQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1dl1fCwJf+4wAl/0XuSXGbFDT n6EzEm3BuvFdpdteu1cid5OwhVYNIZRTRdyb0N2QCicmljoXZr1hlf+vNLJ1kUfv JN+2M5f246Ocy5/q+LQWTVDw/HzfwONEzUwcUP1eCofgeG4xq1h8JqoJmUxNK6Mi i3Bs7FK4fFHEHuNwklhzN30QFZWdIsPWG82xLi7pYqDw62ktIaVfVITG2e+e9L7f jrLuKgchzr9KXu7OCBZQzN7xOW25Mv+mRXj38yOKMvr3bsDirL/p7QILrRXPjGRi t2g2ZjwOgEUILL8cb06UBpr98/saE5v5waQD87VRjwdCcxCh008gborj0DZ1AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU5gftmSdA0xiL76AGgwM7tSYTfrcwHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGeLkrwiOWlG01SGqli0 GdnLnjfWpwNU0DHoOF9Fg4xlGNoPfngxH8FCx5sd7DhYWdYt3WwepgJW5mHZJAP2 /00MXXz8taMeRnOcaJHdfzyo2ZWCBcohBslkEuKXVxARrJRvUjIf/houub7KH7gn 734K8aW+cfWimv85cPFFiGKRb36AsSBNMTz3mTj2sA7NWdvNv/P2kgtdg+B9u/vS Z8sBkKsCdspcib+64iO0i7ROYL0lwQcmDqr0WfDlUKAIBrP9pGoU7DX9Zoe/urwu TiQpnJJyZOhUD3T2WcazNpwjI+O0yvurY6GW8xH7P/cpKQ6Ncz1mzRTLDEj5WtzQ K9A= -----END CERTIFICATE-----Generated at Fri Jul 24 15:08:19 2026 by rpki-client