$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: AHAsu+9oYhH3GbfH2wNe0oxNlmWMqyoBjU0C6LYvAw8= Subject key identifier: 3A:B5:F4:41:C6:7F:AD:D3:DB:67:6D:C2:8F:87:CC:6E:BF:64:DD:31 Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 72EDB5BCC5C5D63FF63155C8EC90B16CEC76B8CB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: 031D Signing time: Tue 12 May 2026 23:12:17 +0000 Manifest this update: Tue 12 May 2026 23:07:17 +0000 Manifest next update: Wed 13 May 2026 23:29:17 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: j0cQ45rvdvPNWEHdHmaU8k9qOWGcr9fGoka9WxbuCa8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ed:b5:bc:c5:c5:d6:3f:f6:31:55:c8:ec:90:b1:6c:ec:76:b8:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: May 12 23:07:17 2026 GMT Not After : May 13 23:29:17 2026 GMT Subject: CN=3AB5F441C67FADD3DB676DC28F87CC6EBF64DD31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f9:d4:f9:98:dd:10:f4:d9:ed:c6:b8:eb:0f: 1d:c4:fc:6c:00:8d:32:1e:e4:bd:a7:5b:4c:98:5d: 3d:e3:ab:0b:04:85:96:7e:c8:a4:cb:40:fb:b5:0a: f8:46:95:e2:53:42:0a:84:de:56:16:4e:e3:16:e7: cc:25:1c:b6:3e:cf:b9:61:d5:3a:32:20:ab:e1:5d: 42:b3:f0:d8:01:f4:d5:06:7f:a3:40:f5:ac:2f:00: 1f:83:c5:e1:dc:ee:ce:db:5b:b6:c8:e6:1d:68:f3: f1:a2:d1:c8:39:8c:5c:2f:e6:c8:3d:b6:78:10:64: c6:36:a3:85:3a:be:ed:94:20:b1:44:9b:82:31:e3: d3:fd:6f:36:d4:ab:b9:f9:7a:db:6c:8a:7f:5c:4c: d7:b5:38:9f:b3:78:30:1e:32:b4:48:8a:0e:56:50: c1:7a:28:70:e9:8e:d8:39:f4:7c:68:38:e6:f3:07: 73:36:15:5c:6a:a3:f1:97:7c:49:1a:ef:b7:56:37: 52:20:ec:19:8d:d6:74:b1:12:ea:e7:72:6a:60:32: d1:17:6a:c3:2c:f2:2f:d8:68:0d:a6:2e:77:7e:84: 7a:9f:a8:77:84:f5:24:7a:60:be:c2:0d:56:91:85: 9e:31:11:50:c2:e6:74:98:b8:9c:5a:c8:39:dc:60: 49:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B5:F4:41:C6:7F:AD:D3:DB:67:6D:C2:8F:87:CC:6E:BF:64:DD:31 X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:71:71:d1:b2:33:f1:cf:2d:71:ed:ca:8f:95:14:b4:80:9d: bd:26:97:27:d5:f9:60:0d:59:98:77:e2:19:7e:d9:f6:e5:59: e3:58:9d:ef:0d:db:c8:29:dd:65:eb:f1:ad:8b:1f:02:1f:f3: a2:53:64:e4:a7:5b:ad:f2:37:25:a1:81:ea:43:50:a3:2e:99: 8b:f9:42:81:49:fb:47:88:6a:a3:fd:09:ec:98:85:c2:d8:e0: e7:f6:fe:11:84:87:99:d0:3f:02:13:78:4e:61:48:04:62:af: db:88:39:1c:6a:0c:73:65:98:1b:8b:d8:e4:79:ea:07:c8:61: 5f:61:bf:93:ab:bc:84:69:16:ce:5d:e8:99:3b:47:e0:01:96: 54:dc:b2:88:36:23:11:b1:d7:f3:13:8a:60:7b:db:30:a7:ba: 29:78:bf:6e:fd:0d:51:8a:2b:dc:8a:1e:62:fd:f8:9d:1b:9f: 0b:83:fc:3c:cd:e9:47:a1:9f:d5:05:a3:94:4e:ee:90:58:5d: 1b:0a:e3:b5:aa:02:c2:66:3b:b5:07:b6:83:f2:82:86:e0:f8: 5c:40:c7:2c:93:16:6c:17:13:9e:7e:dd:c4:98:f1:86:7a:7b: 89:5b:01:7d:e1:47:53:18:b9:ca:94:8a:dd:85:b6:e3:6c:c3: b7:0c:5d:d7 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUcu21vMXF1j/2MVXI7JCxbOx2uMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNjA1MTIyMzA3MTdaFw0yNjA1MTMyMzI5MTdaMDMxMTAvBgNV BAMTKDNBQjVGNDQxQzY3RkFERDNEQjY3NkRDMjhGODdDQzZFQkY2NEREMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP+dT5mN0Q9NntxrjrDx3E/GwA jTIe5L2nW0yYXT3jqwsEhZZ+yKTLQPu1CvhGleJTQgqE3lYWTuMW58wlHLY+z7lh 1ToyIKvhXUKz8NgB9NUGf6NA9awvAB+DxeHc7s7bW7bI5h1o8/Gi0cg5jFwv5sg9 tngQZMY2o4U6vu2UILFEm4Ix49P9bzbUq7n5ettsin9cTNe1OJ+zeDAeMrRIig5W UMF6KHDpjtg59HxoOObzB3M2FVxqo/GXfEka77dWN1Ig7BmN1nSxEurncmpgMtEX asMs8i/YaA2mLnd+hHqfqHeE9SR6YL7CDVaRhZ4xEVDC5nSYuJxayDncYEmdAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUOrX0QcZ/rdPbZ23Cj4fMbr9k3TEwHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAC9xcdGyM/HPLXHtyo+V FLSAnb0mlyfV+WANWZh34hl+2fblWeNYne8N28gp3WXr8a2LHwIf86JTZOSnW63y NyWhgepDUKMumYv5QoFJ+0eIaqP9CeyYhcLY4Of2/hGEh5nQPwITeE5hSARir9uI ORxqDHNlmBuL2OR56gfIYV9hv5OrvIRpFs5d6Jk7R+ABllTcsog2IxGx1/MTimB7 2zCnuil4v279DVGKK9yKHmL9+J0bnwuD/DzN6Uehn9UFo5RO7pBYXRsK47WqAsJm O7UHtoPygobg+FxAxyyTFmwXE55+3cSY8YZ6e4lbAX3hR1MYucqUit2FtuNsw7cM Xdc= -----END CERTIFICATE-----Generated at Wed May 13 08:19:12 2026 by rpki-client