$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json) Hash identifier: m9fGtsJOZO0IF2gg3FdtCJ7yfsvBzlp2gUuj6mX7v1I= Subject key identifier: E5:CB:C8:D2:AD:8F:FA:82:AE:88:8E:97:27:80:A8:A2:C3:34:29:41 Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Certificate serial: 26E983F8E43B1B64D6C4103518D999884280A6DB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft Manifest number: 021A Signing time: Wed 13 May 2026 05:49:35 +0000 Manifest this update: Wed 13 May 2026 05:44:35 +0000 Manifest next update: Thu 14 May 2026 07:29:35 +0000 Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: P66cu01/ZqJ4bPJc6fsNgK71lVx2+ccJhPwWx39VWQk=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e9:83:f8:e4:3b:1b:64:d6:c4:10:35:18:d9:99:88:42:80:a6:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Validity Not Before: May 13 05:44:35 2026 GMT Not After : May 14 07:29:35 2026 GMT Subject: CN=E5CBC8D2AD8FFA82AE888E972780A8A2C3342941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c8:ea:43:9a:5f:63:11:ec:39:5c:86:11:2a: 8f:10:19:82:ca:23:1c:64:04:1d:7e:6a:25:71:85: 93:a7:75:84:2c:d0:25:bc:8d:0e:bd:bd:7c:f0:81: a2:c6:a5:4e:41:00:9c:3e:53:cc:f2:24:7e:2f:17: 29:ba:6c:cf:90:9d:9a:ad:7c:e1:1b:67:fe:be:8b: 86:87:9a:bb:17:df:33:4c:e9:39:ad:7b:aa:ad:a9: 80:85:42:81:59:c9:81:4d:48:04:48:81:1d:2d:2e: bc:a6:1f:38:44:f0:36:4a:9d:ca:48:c9:46:ba:19: 40:c6:05:d2:81:4a:8e:e7:ba:bd:1a:ff:f4:4e:c8: 9e:35:e7:99:de:2b:93:cd:58:1a:b3:d9:1e:e9:57: 46:80:fd:18:0d:63:12:5b:d9:be:89:a4:17:d7:e6: f6:71:90:7a:f9:9c:a4:56:40:ac:8e:40:cf:ea:04: 2a:4c:e7:13:29:be:9d:3d:d0:d4:15:fe:e2:0a:b0: a0:06:82:51:85:c2:02:bc:41:5e:98:0e:e6:ec:20: 82:a1:4b:c4:ab:7e:38:c3:81:e2:d4:02:c1:67:9a: 71:f5:79:10:83:e6:7b:9f:8e:75:16:4e:8c:bc:cd: e8:be:78:66:ad:fa:77:54:b0:d7:50:58:f5:c3:11: b5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CB:C8:D2:AD:8F:FA:82:AE:88:8E:97:27:80:A8:A2:C3:34:29:41 X509v3 Authority Key Identifier: keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:30:2a:9a:75:2e:c0:1e:74:e6:86:5d:63:54:98:5d:62:2f: 05:33:10:0f:6b:fc:58:cc:16:b3:c5:1c:29:88:14:1f:55:be: ff:59:64:be:09:e2:d3:e3:bb:56:5e:21:8d:6f:4f:95:83:09: 36:f1:89:9b:18:80:40:2d:e0:0d:d4:2e:4a:24:ff:93:90:33: c6:3f:df:82:7c:b8:33:ed:c7:e5:00:cc:3d:88:21:5d:1b:ed: a1:88:da:28:23:aa:58:02:c2:52:ab:1a:7c:5f:b0:16:ab:df: 5b:73:f7:b8:dd:99:70:68:c2:95:2a:1a:8c:ce:a3:05:f5:3f: ca:3a:ce:5d:e9:1f:5c:af:83:ac:09:28:c9:f8:af:68:93:6b: 26:67:a0:73:f0:c1:ea:25:1a:3f:90:98:05:16:e4:62:0c:fa: 10:34:05:71:94:ba:69:60:2b:13:61:72:a5:5a:15:c9:37:31: 0c:c5:28:26:aa:c6:10:60:88:8b:2b:cb:e6:e7:a7:17:76:c7: 51:0e:79:a7:37:b2:eb:15:78:be:34:38:ce:fe:6a:cd:70:66: d3:e1:dd:a2:4e:c4:22:51:29:50:b5:3b:73:d1:50:d7:00:87: d9:29:f8:f5:95:4c:07:36:ec:40:46:a7:56:1a:74:1f:56:3d: fc:5a:26:b7 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUJumD+OQ7G2TWxBA1GNmZiEKAptswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz REREMDgwRDAeFw0yNjA1MTMwNTQ0MzVaFw0yNjA1MTQwNzI5MzVaMDMxMTAvBgNV BAMTKEU1Q0JDOEQyQUQ4RkZBODJBRTg4OEU5NzI3ODBBOEEyQzMzNDI5NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCayOpDml9jEew5XIYRKo8QGYLK IxxkBB1+aiVxhZOndYQs0CW8jQ69vXzwgaLGpU5BAJw+U8zyJH4vFym6bM+QnZqt fOEbZ/6+i4aHmrsX3zNM6Tmte6qtqYCFQoFZyYFNSARIgR0tLrymHzhE8DZKncpI yUa6GUDGBdKBSo7nur0a//ROyJ4155neK5PNWBqz2R7pV0aA/RgNYxJb2b6JpBfX 5vZxkHr5nKRWQKyOQM/qBCpM5xMpvp090NQV/uIKsKAGglGFwgK8QV6YDubsIIKh S8SrfjjDgeLUAsFnmnH1eRCD5nufjnUWToy8zei+eGat+ndUsNdQWPXDEbX9AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU5cvI0q2P+oKuiI6XJ4CoosM0KUEwHwYDVR0j BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGgwKpp1LsAedOaGXWNU mF1iLwUzEA9r/FjMFrPFHCmIFB9Vvv9ZZL4J4tPju1ZeIY1vT5WDCTbxiZsYgEAt 4A3ULkok/5OQM8Y/34J8uDPtx+UAzD2IIV0b7aGI2igjqlgCwlKrGnxfsBar31tz 97jdmXBowpUqGozOowX1P8o6zl3pH1yvg6wJKMn4r2iTayZnoHPwweolGj+QmAUW 5GIM+hA0BXGUumlgKxNhcqVaFck3MQzFKCaqxhBgiIsry+bnpxd2x1EOeac3susV eL40OM7+as1wZtPh3aJOxCJRKVC1O3PRUNcAh9kp+PWVTAc27EBGp1YadB9WPfxa Jrc= -----END CERTIFICATE-----Generated at Wed May 13 08:31:49 2026 by rpki-client