$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json) Hash identifier: HyZYv90w35uQgnMYa9XVam6m/3GrtccvFOFzw2d11DI= Subject key identifier: 53:30:58:1B:02:E9:DA:CF:E2:CD:24:3F:EE:2E:2F:3B:50:2A:1B:B5 Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Certificate serial: 78CA9E2288E60421B51F49D01C19A7D8BA4FFC6B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft Manifest number: 01DB Signing time: Thu 26 Mar 2026 02:11:55 +0000 Manifest this update: Thu 26 Mar 2026 02:06:53 +0000 Manifest next update: Fri 27 Mar 2026 04:20:53 +0000 Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: wLL9BPv3qnYnHalLHF6Ojx8DiaPUuV2rWdPlHmUSj/I=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ca:9e:22:88:e6:04:21:b5:1f:49:d0:1c:19:a7:d8:ba:4f:fc:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Validity Not Before: Mar 26 02:06:53 2026 GMT Not After : Mar 27 04:20:53 2026 GMT Subject: CN=5330581B02E9DACFE2CD243FEE2E2F3B502A1BB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:7d:36:8e:08:a5:59:41:27:a2:b6:c6:e6: f0:94:e2:31:00:c0:d6:8b:a2:17:3c:67:51:a7:dc: a7:bf:b2:ca:e1:3e:46:13:d1:71:e7:e3:57:48:5c: 6e:e5:ff:b5:24:26:b1:70:73:f0:3a:7a:40:61:66: 2d:8e:a9:7a:03:fd:a3:85:30:3b:17:5d:20:05:d8: 0d:a6:a4:34:f8:20:e7:b5:0d:5f:60:20:1b:76:12: 05:98:bc:6c:c7:0a:0b:13:ee:68:a5:75:e4:47:91: 19:88:e8:b1:86:29:7b:a9:69:a4:2b:99:0a:98:b1: 12:59:2c:7c:40:03:aa:ea:27:80:7b:67:49:62:11: 25:f4:1b:64:bb:43:97:a2:87:a9:c3:bb:bd:d1:b9: 8b:ec:c7:06:8c:96:25:ae:15:84:eb:71:2b:9c:b8: b2:2d:83:8b:5c:cd:fe:d2:5b:be:16:1c:af:e6:ea: 86:32:0e:67:60:e7:60:60:e9:96:89:35:b1:f0:45: f3:4e:a3:79:70:3b:19:8f:ae:3a:c8:9c:4b:c4:10: 8e:f3:e0:c3:d3:8c:62:fa:db:2d:61:f5:fa:79:c3: cc:40:e2:1b:f2:d2:bd:af:11:17:26:cb:3d:24:75: 37:e1:47:4b:05:de:3d:d0:75:fb:7e:05:46:8d:d8: 34:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:30:58:1B:02:E9:DA:CF:E2:CD:24:3F:EE:2E:2F:3B:50:2A:1B:B5 X509v3 Authority Key Identifier: keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:42:05:98:82:28:e3:9b:9a:31:35:5a:23:fd:94:60:de:46: cc:58:28:b8:da:65:19:d7:5d:44:de:c7:ca:87:e5:06:59:6b: 31:80:3e:a2:a1:10:c5:e8:1f:4e:b8:99:9b:5c:c0:01:a5:2b: e6:53:b1:d9:5f:ba:fc:b8:7d:77:c6:70:75:da:48:18:d4:ad: 5c:70:3e:d8:53:ea:cb:b8:61:ec:2b:4c:78:d3:8a:38:ab:47: 0f:84:ec:fd:e7:e5:36:7b:f7:8b:46:4a:57:f2:b7:b2:e1:fd: aa:dd:ab:aa:c2:d1:e0:11:13:f6:8d:d2:1e:4d:a0:60:cd:2e: b6:9c:3e:32:ff:58:ee:21:24:82:de:0e:05:ad:56:ab:d9:6e: 5e:90:8d:2b:84:25:b0:42:39:8b:0f:2a:d9:c9:3f:f4:6b:26: c1:26:90:38:91:87:3c:fa:eb:85:56:23:83:a3:13:fc:c3:75: e8:5a:8b:b6:85:ba:91:6c:49:a2:7b:8d:81:7c:2c:78:7b:f1: 1d:de:7a:8a:57:b9:48:e6:9a:c4:bb:3a:d3:ee:68:88:ed:28: 14:47:72:ea:20:28:a7:2b:83:5c:62:ea:af:a6:90:09:59:f7: fe:81:ae:d6:d5:2b:c5:b8:d3:03:05:e5:21:31:02:44:7c:59: 70:0d:16:7f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUeMqeIojmBCG1H0nQHBmn2LpP/GswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz REREMDgwRDAeFw0yNjAzMjYwMjA2NTNaFw0yNjAzMjcwNDIwNTNaMDMxMTAvBgNV BAMTKDUzMzA1ODFCMDJFOURBQ0ZFMkNEMjQzRkVFMkUyRjNCNTAyQTFCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvaH02jgilWUEnorbG5vCU4jEA wNaLohc8Z1Gn3Ke/ssrhPkYT0XHn41dIXG7l/7UkJrFwc/A6ekBhZi2OqXoD/aOF MDsXXSAF2A2mpDT4IOe1DV9gIBt2EgWYvGzHCgsT7mildeRHkRmI6LGGKXupaaQr mQqYsRJZLHxAA6rqJ4B7Z0liESX0G2S7Q5eih6nDu73RuYvsxwaMliWuFYTrcSuc uLItg4tczf7SW74WHK/m6oYyDmdg52Bg6ZaJNbHwRfNOo3lwOxmPrjrInEvEEI7z 4MPTjGL62y1h9fp5w8xA4hvy0r2vERcmyz0kdTfhR0sF3j3Qdft+BUaN2DR9AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUUzBYGwLp2s/izSQ/7i4vO1AqG7UwHwYDVR0j BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIhCBZiCKOObmjE1WiP9 lGDeRsxYKLjaZRnXXUTex8qH5QZZazGAPqKhEMXoH064mZtcwAGlK+ZTsdlfuvy4 fXfGcHXaSBjUrVxwPthT6su4YewrTHjTijirRw+E7P3n5TZ794tGSlfyt7Lh/ard q6rC0eARE/aN0h5NoGDNLracPjL/WO4hJILeDgWtVqvZbl6QjSuEJbBCOYsPKtnJ P/RrJsEmkDiRhzz664VWI4OjE/zDdehai7aFupFsSaJ7jYF8LHh78R3eeopXuUjm msS7OtPuaIjtKBRHcuogKKcrg1xi6q+mkAlZ9/6BrtbVK8W40wMF5SExAkR8WXAN Fn8= -----END CERTIFICATE-----Generated at Thu Mar 26 11:38:23 2026 by rpki-client