$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: pPxCfOW176f0SxVPpjyORIdH5IM0S0FeA6Ga3QOw+0o= Subject key identifier: B5:59:73:59:C9:DD:25:20:11:AE:8C:9C:93:0A:E7:15:D2:B8:31:AC Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 6F755D0BD9731414A59EB3986E65E16B9DB5CC31 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: 03C9 Signing time: Fri 02 Oct 2026 11:09:29 +0000 Manifest this update: Fri 02 Oct 2026 11:04:29 +0000 Manifest next update: Sat 03 Oct 2026 11:12:29 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: DPC3dyNpeAHrjdz2Lnd5poFz3/7oNahNbVMWL32HBto=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Oct 2026 08:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:75:5d:0b:d9:73:14:14:a5:9e:b3:98:6e:65:e1:6b:9d:b5:cc:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: Oct 2 11:04:29 2026 GMT Not After : Oct 3 11:12:29 2026 GMT Subject: CN=B5597359C9DD252011AE8C9C930AE715D2B831AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:14:7a:24:e7:c5:76:09:ff:7e:cb:58:ae:2a: f0:ec:50:61:8f:96:78:d7:1c:59:65:18:d8:1a:a3: 46:60:c8:6c:bc:e0:82:2d:a3:55:96:53:16:9b:32: 43:36:b1:0e:89:cf:91:15:81:93:4c:d4:53:8f:78: d9:c0:e8:eb:d3:d4:ac:c3:a2:bd:cd:cb:23:12:c8: d1:3c:8c:b9:cb:2a:d4:bd:92:54:23:d4:e4:2d:ad: 26:db:ba:c6:af:07:e6:46:37:92:1f:86:b4:b5:17: a4:2a:92:1a:1b:3f:96:48:64:f6:f6:07:d9:a2:a4: 32:cd:b3:cb:fb:00:65:1e:22:cc:13:3d:24:55:37: ab:4a:a1:ab:5d:e0:fd:8c:b5:05:03:e2:7c:92:04: db:f7:c6:e4:c4:00:eb:be:d0:ba:7c:c7:90:c2:2b: 04:09:37:72:2d:cb:b7:d2:14:c6:88:17:2c:92:0d: c3:94:26:3a:dd:1e:bc:dc:59:3d:4c:a3:21:63:98: 78:28:03:64:4f:f0:26:3a:62:e5:21:93:1d:fc:44: f5:fd:7b:81:c9:cb:8d:0e:df:16:23:a6:6e:6a:dd: 48:ed:25:ff:a4:58:bd:a3:ad:de:8d:28:de:17:38: 96:b0:cc:4b:18:1c:9a:27:04:32:3f:10:d1:8b:fa: 9a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:59:73:59:C9:DD:25:20:11:AE:8C:9C:93:0A:E7:15:D2:B8:31:AC X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:26:33:2b:48:e9:65:d7:c1:4b:bc:36:8e:1d:36:f7:f0:6c: 87:1c:53:1a:53:e6:3f:ac:b2:c9:54:6f:3a:3f:17:8b:ec:6d: 98:bb:f4:c3:b6:28:48:be:da:47:60:f9:97:29:d6:ff:87:51: 59:35:5c:90:c0:41:71:4d:0b:23:6c:9e:0a:78:dc:9a:c7:7f: 4a:c1:8d:e8:fc:b8:40:25:19:d6:6b:40:58:4b:d0:f2:50:b6: bd:cd:71:0e:a3:05:86:37:23:e4:8c:d0:41:68:d4:9b:1c:f3: 96:42:3e:50:1a:df:79:2a:02:1f:34:80:90:fe:95:c0:3f:6b: 37:cc:85:91:f1:da:73:eb:a7:40:da:23:d8:8c:a5:40:aa:57: 21:51:42:39:e3:38:49:30:e3:37:34:b4:df:72:0e:69:49:62: 3f:68:ff:f8:a4:02:cd:91:42:8d:96:41:97:5f:f2:22:be:b0: 8e:7c:9a:b0:71:b9:66:c6:ba:49:ff:eb:bd:bd:01:86:ba:2c: 72:64:13:11:f7:30:92:dd:f0:cf:74:14:ed:b1:c1:23:cb:8a: 23:e7:1e:b0:af:fc:b3:f3:94:ea:e5:23:b7:47:fb:ac:49:d6: f0:a0:8d:37:ac:a5:a2:3e:b3:3c:6b:a5:7e:66:e8:6f:0b:2f: da:26:df:5c -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUb3VdC9lzFBSlnrOYbmXha521zDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNjEwMDIxMTA0MjlaFw0yNjEwMDMxMTEyMjlaMDMxMTAvBgNV BAMTKEI1NTk3MzU5QzlERDI1MjAxMUFFOEM5QzkzMEFFNzE1RDJCODMxQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3FHok58V2Cf9+y1iuKvDsUGGP lnjXHFllGNgao0ZgyGy84IIto1WWUxabMkM2sQ6Jz5EVgZNM1FOPeNnA6OvT1KzD or3NyyMSyNE8jLnLKtS9klQj1OQtrSbbusavB+ZGN5IfhrS1F6QqkhobP5ZIZPb2 B9mipDLNs8v7AGUeIswTPSRVN6tKoatd4P2MtQUD4nySBNv3xuTEAOu+0Lp8x5DC KwQJN3Ity7fSFMaIFyySDcOUJjrdHrzcWT1MoyFjmHgoA2RP8CY6YuUhkx38RPX9 e4HJy40O3xYjpm5q3UjtJf+kWL2jrd6NKN4XOJawzEsYHJonBDI/ENGL+pp5AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUtVlzWcndJSARroyckwrnFdK4MawwHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH0mMytI6WXXwUu8No4d NvfwbIccUxpT5j+ssslUbzo/F4vsbZi79MO2KEi+2kdg+Zcp1v+HUVk1XJDAQXFN CyNsngp43JrHf0rBjej8uEAlGdZrQFhL0PJQtr3NcQ6jBYY3I+SM0EFo1Jsc85ZC PlAa33kqAh80gJD+lcA/azfMhZHx2nPrp0DaI9iMpUCqVyFRQjnjOEkw4zc0tN9y DmlJYj9o//ikAs2RQo2WQZdf8iK+sI58mrBxuWbGukn/6729AYa6LHJkExH3MJLd 8M90FO2xwSPLiiPnHrCv/LPzlOrlI7dH+6xJ1vCgjTespaI+szxrpX5m6G8LL9om 31w= -----END CERTIFICATE-----Generated at Sat Oct 3 05:58:29 2026 by rpki-client