$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json) Hash identifier: fUWrsIR0ygEL/CqP8cTcJ9Kgl+TCYAADeigGeZgFBVc= Subject key identifier: DD:87:C3:A3:E9:F8:21:AA:96:36:95:10:C0:E5:08:33:FB:73:A5:81 Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Certificate serial: 7AE4A3CA86FA4E2E79E9E619F29A2E71AF7249FE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft Manifest number: 0278 Signing time: Fri 24 Jul 2026 03:21:26 +0000 Manifest this update: Fri 24 Jul 2026 03:16:26 +0000 Manifest next update: Sat 25 Jul 2026 05:05:26 +0000 Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: JZbiG9eTH7qpqTUz2UF3H8rFQs/ziScRqbBG3HHB1Jc=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e4:a3:ca:86:fa:4e:2e:79:e9:e6:19:f2:9a:2e:71:af:72:49:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Validity Not Before: Jul 24 03:16:26 2026 GMT Not After : Jul 25 05:05:26 2026 GMT Subject: CN=DD87C3A3E9F821AA96369510C0E50833FB73A581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:92:c1:35:ab:eb:45:68:dc:b3:3b:fb:8d:42: 50:bb:31:e4:ee:06:d5:61:82:f2:db:ec:c6:cd:87: 60:e1:a1:f9:e9:ea:39:7e:b6:b5:d4:cb:46:2a:8a: 42:56:6f:ef:d1:d4:41:8f:5a:0f:31:0f:04:c2:00: be:26:93:1d:99:57:74:30:da:b8:64:1f:e2:3c:55: e0:07:33:02:8e:44:d7:56:25:83:2c:76:4a:f3:06: 4c:79:8b:26:7f:46:fc:cb:4e:44:e2:ff:d2:0a:ad: 6c:fb:53:2d:f7:e5:b8:42:6c:05:60:ca:16:10:0a: 0b:c0:cb:a5:b9:aa:5f:ff:5a:f5:fe:fe:4e:b1:6d: 25:dc:d5:c9:cc:32:71:66:21:26:5c:96:6c:d3:5b: 7e:62:1d:a2:6d:be:f1:50:20:9b:5a:7d:f7:e9:f3: 78:3d:93:5c:ab:5d:90:20:44:d1:8d:28:57:ae:6a: 77:47:db:c3:7b:3b:9d:74:33:67:64:14:d2:57:97: 59:02:91:f3:d7:1c:09:6a:26:34:c3:79:1f:15:4c: 32:1f:fe:3d:4a:ee:b5:88:d6:1b:27:38:0e:34:1f: 86:d3:60:b2:db:ae:3e:1a:ab:e3:3e:0e:7a:03:ed: e9:25:4b:74:84:37:fc:b0:6d:8e:74:78:07:43:2c: 44:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:87:C3:A3:E9:F8:21:AA:96:36:95:10:C0:E5:08:33:FB:73:A5:81 X509v3 Authority Key Identifier: keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:4d:66:06:65:9e:cd:75:35:7b:99:62:04:03:78:f4:2b:10: 1a:6b:9c:15:41:49:31:07:e9:7e:88:25:f4:28:c0:de:b1:4c: 58:a9:ee:7e:81:26:9e:93:d7:a8:16:c7:80:2c:4d:cf:9f:31: 5a:fb:f8:2a:73:57:ba:5a:70:8c:8a:2d:b9:82:5c:4e:7f:b2: a1:42:b2:20:c8:d2:ea:80:8c:28:9f:3c:00:53:b0:f7:68:e5: 4c:31:a6:a0:3f:db:71:6f:1b:28:53:8d:51:8f:2e:d1:c6:66: 53:79:14:93:99:cc:af:4e:76:7e:06:5c:2b:93:97:f0:01:e9: ec:b0:bd:e7:69:65:0e:10:0e:29:0d:fc:b3:93:a7:2f:84:f6: 32:bf:be:e0:3a:6b:38:c7:58:c4:6e:4c:7e:73:3b:c2:35:05: cd:07:5e:69:d1:82:39:55:ab:13:a4:6c:ff:5d:ed:53:73:04: 8d:d5:37:46:5c:ed:78:4f:13:12:26:b2:9a:c4:67:d0:6d:e3: 7b:cc:44:5f:c0:86:b7:2f:86:77:ef:bd:41:52:9c:53:53:f9: fe:01:97:ed:08:01:e3:73:19:bc:15:6f:c9:89:ae:2b:b8:56: 0f:48:4c:0d:54:55:28:55:b7:40:3d:64:1a:3e:71:2a:00:b3: d2:a8:dd:88 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUeuSjyob6Ti556eYZ8pouca9ySf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz REREMDgwRDAeFw0yNjA3MjQwMzE2MjZaFw0yNjA3MjUwNTA1MjZaMDMxMTAvBgNV BAMTKEREODdDM0EzRTlGODIxQUE5NjM2OTUxMEMwRTUwODMzRkI3M0E1ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuksE1q+tFaNyzO/uNQlC7MeTu BtVhgvLb7MbNh2Dhofnp6jl+trXUy0YqikJWb+/R1EGPWg8xDwTCAL4mkx2ZV3Qw 2rhkH+I8VeAHMwKORNdWJYMsdkrzBkx5iyZ/RvzLTkTi/9IKrWz7Uy335bhCbAVg yhYQCgvAy6W5ql//WvX+/k6xbSXc1cnMMnFmISZclmzTW35iHaJtvvFQIJtafffp 83g9k1yrXZAgRNGNKFeuandH28N7O510M2dkFNJXl1kCkfPXHAlqJjTDeR8VTDIf /j1K7rWI1hsnOA40H4bTYLLbrj4aq+M+DnoD7eklS3SEN/ywbY50eAdDLER/AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU3YfDo+n4IaqWNpUQwOUIM/tzpYEwHwYDVR0j BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHdNZgZlns11NXuZYgQD ePQrEBprnBVBSTEH6X6IJfQowN6xTFip7n6BJp6T16gWx4AsTc+fMVr7+CpzV7pa cIyKLbmCXE5/sqFCsiDI0uqAjCifPABTsPdo5UwxpqA/23FvGyhTjVGPLtHGZlN5 FJOZzK9Odn4GXCuTl/AB6eywvedpZQ4QDikN/LOTpy+E9jK/vuA6azjHWMRuTH5z O8I1Bc0HXmnRgjlVqxOkbP9d7VNzBI3VN0Zc7XhPExImsprEZ9Bt43vMRF/Ahrcv hnfvvUFSnFNT+f4Bl+0IAeNzGbwVb8mJriu4Vg9ITA1UVShVt0A9ZBo+cSoAs9Ko 3Yg= -----END CERTIFICATE-----Generated at Fri Jul 24 07:12:59 2026 by rpki-client