$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft File: CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft (raw, json) Hash identifier: 8CNa4fBs+i7RBKC6RZOlVC1//RNtIFMH4c7XyHsU2Ao= Subject key identifier: AE:CD:27:F8:B1:29:9E:F3:A4:26:E5:CC:B8:87:D0:8B:47:D5:79:02 Authority key identifier: CD:6B:F4:AF:A2:41:23:0E:C5:83:BD:DA:39:7E:FD:CA:63:28:44:14 Certificate issuer: /CN=CD6BF4AFA241230EC583BDDA397EFDCA63284414 Certificate serial: 5A93E007F767C62B0C7DFA57C982800C02BE86B4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft Manifest number: 58 Signing time: Fri 24 Jul 2026 09:39:48 +0000 Manifest this update: Fri 24 Jul 2026 09:34:48 +0000 Manifest next update: Sat 25 Jul 2026 10:43:48 +0000 Files and hashes: 1: CD6BF4AFA241230EC583BDDA397EFDCA63284414.crl (hash: jZv8bSJZ/hdZUPiUPVjmwtBlcPO6ac2tRFkR1iZfqfs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:93:e0:07:f7:67:c6:2b:0c:7d:fa:57:c9:82:80:0c:02:be:86:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD6BF4AFA241230EC583BDDA397EFDCA63284414 Validity Not Before: Jul 24 09:34:48 2026 GMT Not After : Jul 25 10:43:48 2026 GMT Subject: CN=AECD27F8B1299EF3A426E5CCB887D08B47D57902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7c:68:77:44:5b:e5:37:f2:af:54:2b:e7:e6: e0:fe:34:90:de:4f:5d:0c:fe:17:b2:93:85:0e:1c: a3:f8:71:3f:3c:ff:34:0a:2a:5c:7b:31:5a:b9:cd: d9:d8:a5:59:f2:8a:a3:7e:97:be:28:dd:88:17:5b: 2f:b9:74:5f:b4:52:ea:67:63:06:61:89:d0:b1:8e: 04:bd:67:b6:eb:f0:1e:1f:7f:98:d5:df:81:01:4f: 23:d5:b9:3b:47:26:a8:8e:5f:83:f1:d5:c1:64:d6: 51:cd:c1:9a:9d:30:56:48:d6:f9:1d:fc:8f:12:68: ee:13:45:ab:a7:bd:05:28:b1:03:8b:39:a9:e8:5f: ee:49:da:66:66:09:c7:d4:4a:a3:b7:3b:83:11:22: bf:2d:94:53:fe:5c:94:30:dc:b6:a6:55:3e:1c:e5: e5:77:00:a3:1b:d8:7a:51:17:bf:5f:dd:7d:46:36: aa:fc:e3:34:cf:5b:3d:57:23:66:09:d1:4a:ce:29: d1:ac:5f:8a:fa:e5:39:d6:8a:3c:f5:fb:25:e0:93: 86:58:31:68:8d:5b:1c:87:82:cb:87:bd:ce:3e:d0: e0:39:07:d9:82:fb:6f:87:fc:a4:a0:ea:63:a0:50: 70:dc:07:64:b1:54:39:61:2e:f8:96:21:17:41:7e: 4b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CD:27:F8:B1:29:9E:F3:A4:26:E5:CC:B8:87:D0:8B:47:D5:79:02 X509v3 Authority Key Identifier: keyid:CD:6B:F4:AF:A2:41:23:0E:C5:83:BD:DA:39:7E:FD:CA:63:28:44:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a8:30:00:63:00:d9:b0:53:e6:ab:be:e7:ff:ca:88:b7:2f: 66:a7:03:9b:fc:54:33:1b:76:bb:80:94:93:b0:2f:5d:cf:48: 2d:db:f2:26:fe:52:b2:97:1d:d6:f6:8c:5f:30:49:f8:31:52: d2:ca:77:d1:e3:34:ff:f0:35:c2:1a:5b:03:82:5e:3d:8e:03: 37:59:79:0e:46:f0:6e:e0:e2:c7:cb:3f:ae:c3:61:db:5b:cf: 63:d2:75:d0:c0:f2:96:e0:04:9f:d9:07:98:4b:c6:68:21:38: b2:b8:e8:d1:41:cf:5e:43:0c:92:ad:2b:8a:0f:95:cf:ed:c7: 72:37:f2:89:18:d2:2c:f5:ba:6a:0b:90:4b:fa:31:fe:14:37: 2b:cf:16:51:f9:7a:25:5c:52:2c:03:ab:63:f3:1c:95:fd:28: 35:ed:a4:bb:c9:13:9c:ba:4a:c7:de:16:c2:f0:2c:d9:44:e4: 23:8e:df:2f:95:1b:a7:78:6c:ed:61:8a:aa:c3:f9:fc:d8:ab: 6a:ed:aa:08:c1:b3:c8:18:91:8a:11:1d:ba:92:1f:af:c0:4c: 2a:31:9a:d5:9d:65:2e:aa:c4:1c:7f:00:db:22:ca:2f:cf:24: 04:2f:04:15:b6:c9:99:04:50:12:f3:92:e1:e0:0c:ec:34:40: d9:92:29:31 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUWpPgB/dnxisMffpXyYKADAK+hrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2QkY0QUZBMjQxMjMwRUM1ODNCRERBMzk3RUZEQ0E2 MzI4NDQxNDAeFw0yNjA3MjQwOTM0NDhaFw0yNjA3MjUxMDQzNDhaMDMxMTAvBgNV BAMTKEFFQ0QyN0Y4QjEyOTlFRjNBNDI2RTVDQ0I4ODdEMDhCNDdENTc5MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDofGh3RFvlN/KvVCvn5uD+NJDe T10M/heyk4UOHKP4cT88/zQKKlx7MVq5zdnYpVnyiqN+l74o3YgXWy+5dF+0Uupn YwZhidCxjgS9Z7br8B4ff5jV34EBTyPVuTtHJqiOX4Px1cFk1lHNwZqdMFZI1vkd /I8SaO4TRaunvQUosQOLOanoX+5J2mZmCcfUSqO3O4MRIr8tlFP+XJQw3LamVT4c 5eV3AKMb2HpRF79f3X1GNqr84zTPWz1XI2YJ0UrOKdGsX4r65TnWijz1+yXgk4ZY MWiNWxyHgsuHvc4+0OA5B9mC+2+H/KSg6mOgUHDcB2SxVDlhLviWIRdBfktXAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUrs0n+LEpnvOkJuXMuIfQi0fVeQIwHwYDVR0j BBgwFoAUzWv0r6JBIw7Fg73aOX79ymMoRBQwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzgyZDVmMzg0NDllOTQyYTlhOWFiMjgxODAwNTZhYmZjLzAv Q0Q2QkY0QUZBMjQxMjMwRUM1ODNCRERBMzk3RUZEQ0E2MzI4NDQxNC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9DRDZCRjRBRkEyNDEyMzBFQzU4M0JEREEzOTdFRkRD QTYzMjg0NDE0LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzgyZDVm Mzg0NDllOTQyYTlhOWFiMjgxODAwNTZhYmZjLzAvQ0Q2QkY0QUZBMjQxMjMwRUM1 ODNCRERBMzk3RUZEQ0E2MzI4NDQxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGCoMABjANmwU+arvuf/ yoi3L2anA5v8VDMbdruAlJOwL13PSC3b8ib+UrKXHdb2jF8wSfgxUtLKd9HjNP/w NcIaWwOCXj2OAzdZeQ5G8G7g4sfLP67DYdtbz2PSddDA8pbgBJ/ZB5hLxmghOLK4 6NFBz15DDJKtK4oPlc/tx3I38okY0iz1umoLkEv6Mf4UNyvPFlH5eiVcUiwDq2Pz HJX9KDXtpLvJE5y6SsfeFsLwLNlE5COO3y+VG6d4bO1hiqrD+fzYq2rtqgjBs8gY kYoRHbqSH6/ATCoxmtWdZS6qxBx/ANsiyi/PJAQvBBW2yZkEUBLzkuHgDOw0QNmS KTE= -----END CERTIFICATE-----Generated at Fri Jul 24 13:45:23 2026 by rpki-client