$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: nEp7WhiTw93LEXNVl2GKr1e9aDxDIeNchcpyzlEqWwA= Subject key identifier: F8:9B:61:71:15:9E:DB:A7:BD:38:B4:62:80:9F:78:9F:2C:5C:BB:6B Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 144ACC88DA92B76BF04E871421865BF7F663BEA4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: 02DE Signing time: Thu 26 Mar 2026 10:25:56 +0000 Manifest this update: Thu 26 Mar 2026 10:20:53 +0000 Manifest next update: Fri 27 Mar 2026 12:14:53 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: /c3G5lV37wcKsWHTBQrbESu0Os5tfH4YToQmbax6Zrs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:4a:cc:88:da:92:b7:6b:f0:4e:87:14:21:86:5b:f7:f6:63:be:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: Mar 26 10:20:53 2026 GMT Not After : Mar 27 12:14:53 2026 GMT Subject: CN=F89B6171159EDBA7BD38B462809F789F2C5CBB6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3f:d3:10:a2:86:22:36:51:18:d7:3a:db:db: 00:91:3e:dd:b7:c5:c0:f6:ce:7d:4e:8b:2b:11:37: a7:3d:b0:44:f3:2a:66:4e:c4:3c:8a:16:49:1f:53: 08:93:6e:b0:dc:50:cc:70:40:cf:da:f6:3e:f6:8d: 33:95:2c:47:0f:68:0a:2a:f4:d7:08:58:89:c2:b8: da:fe:8a:12:a9:0a:e4:da:02:54:c3:df:15:42:02: 11:ce:c7:5f:d1:3b:60:51:7c:33:d3:54:f4:50:dc: 74:5d:93:e8:79:83:40:70:a6:74:5f:19:f4:80:3d: 1f:b8:97:f5:fd:50:a5:0e:34:3c:bc:3b:36:b7:a1: a5:c8:69:db:94:e3:f3:2c:dd:e0:44:18:83:4b:29: 90:4e:e6:32:8f:2c:b7:d6:cd:cc:80:8f:04:c9:3b: 3a:0b:b7:4b:ec:d2:3a:63:c1:9a:ff:58:78:0f:41: 3d:86:30:7e:bc:bf:40:19:c2:fe:03:bd:34:9b:be: 0a:f2:ce:97:e8:2d:b4:32:b7:d3:c5:82:f3:1f:ab: 8b:b2:7f:a8:bd:7c:28:91:81:fb:19:f5:57:1a:82: bf:c0:aa:c3:a4:21:9b:2f:f6:a3:a7:99:43:51:92: 9a:8e:3f:7e:09:61:5f:c6:fc:b5:cd:ee:0d:8e:ac: be:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9B:61:71:15:9E:DB:A7:BD:38:B4:62:80:9F:78:9F:2C:5C:BB:6B X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ea:36:d5:31:a1:77:63:65:e7:72:c9:b1:f5:36:b2:7f:7d: 7d:04:0d:c7:b3:cb:c4:45:51:25:e7:da:e0:f8:2b:63:4d:7d: cf:b2:bd:6f:1b:0f:9f:f4:82:f4:cf:67:30:ec:a3:bf:39:d7: 53:35:49:9e:9b:ce:7c:72:eb:c4:52:c7:cf:21:89:10:42:fd: e2:d6:d3:b8:5c:01:55:3b:85:07:d1:9b:51:f4:d8:c7:80:7e: f2:27:4d:3c:22:3e:70:24:8c:e8:86:f0:84:81:d5:3d:7c:3f: 48:0c:11:1a:f3:7a:d8:e5:14:80:90:52:5b:83:b8:e2:b2:86: 60:95:f2:26:ec:e7:76:2e:d5:7a:f9:4a:18:0b:a7:7c:dc:89: 76:28:e8:82:1d:ad:11:9c:0e:25:30:d5:96:4d:71:81:36:c0: a5:8e:25:91:28:ca:be:5c:b7:0d:11:95:a7:11:bd:72:0f:40: 18:1f:a9:ba:a6:33:29:b1:b5:88:5b:b4:1e:6d:d5:6f:d6:75: 36:c3:7d:ca:0a:48:06:cb:b7:3f:8e:aa:0c:fb:e1:0e:59:0d: 9f:cf:41:b5:cc:24:b7:50:ee:35:6e:bd:1b:cb:ad:26:6d:80: 56:8f:7b:99:53:b2:81:e3:bd:ff:a6:20:9e:25:56:9f:79:7f: db:03:6d:2e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUFErMiNqSt2vwTocUIYZb9/ZjvqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNjAzMjYxMDIwNTNaFw0yNjAzMjcxMjE0NTNaMDMxMTAvBgNV BAMTKEY4OUI2MTcxMTU5RURCQTdCRDM4QjQ2MjgwOUY3ODlGMkM1Q0JCNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyP9MQooYiNlEY1zrb2wCRPt23 xcD2zn1OiysRN6c9sETzKmZOxDyKFkkfUwiTbrDcUMxwQM/a9j72jTOVLEcPaAoq 9NcIWInCuNr+ihKpCuTaAlTD3xVCAhHOx1/RO2BRfDPTVPRQ3HRdk+h5g0BwpnRf GfSAPR+4l/X9UKUONDy8Oza3oaXIaduU4/Ms3eBEGINLKZBO5jKPLLfWzcyAjwTJ OzoLt0vs0jpjwZr/WHgPQT2GMH68v0AZwv4DvTSbvgryzpfoLbQyt9PFgvMfq4uy f6i9fCiRgfsZ9Vcagr/AqsOkIZsv9qOnmUNRkpqOP34JYV/G/LXN7g2OrL7nAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU+JthcRWe26e9OLRigJ94nyxcu2swHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAC3qNtUxoXdjZedyybH1 NrJ/fX0EDcezy8RFUSXn2uD4K2NNfc+yvW8bD5/0gvTPZzDso78511M1SZ6bznxy 68RSx88hiRBC/eLW07hcAVU7hQfRm1H02MeAfvInTTwiPnAkjOiG8ISB1T18P0gM ERrzetjlFICQUluDuOKyhmCV8ibs53Yu1Xr5ShgLp3zciXYo6IIdrRGcDiUw1ZZN cYE2wKWOJZEoyr5ctw0RlacRvXIPQBgfqbqmMymxtYhbtB5t1W/WdTbDfcoKSAbL tz+Oqgz74Q5ZDZ/PQbXMJLdQ7jVuvRvLrSZtgFaPe5lTsoHjvf+mIJ4lVp95f9sD bS4= -----END CERTIFICATE-----Generated at Thu Mar 26 12:28:56 2026 by rpki-client