$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft File: C2724A29EF989A4340933B8130B402DD4627A501.mft (raw, json) Hash identifier: ZlONezt3ooJQvzKFdy/C8s8jvZCzAdTMJgZI+yaLPiI= Subject key identifier: 57:B4:67:3E:F9:58:B2:73:4B:AF:D1:3C:A4:8D:F0:8B:AB:13:F2:4D Authority key identifier: C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01 Certificate issuer: /CN=C2724A29EF989A4340933B8130B402DD4627A501 Certificate serial: 22D1B20C6A78D39510C7E8C1504E414ED63C285A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft Manifest number: 0301 Signing time: Thu 26 Mar 2026 15:23:41 +0000 Manifest this update: Thu 26 Mar 2026 15:18:39 +0000 Manifest next update: Fri 27 Mar 2026 19:12:39 +0000 Files and hashes: 1: C2724A29EF989A4340933B8130B402DD4627A501.crl (hash: ja8wGIZT/vJ2aLHfWgZiIEPb8GYi32q5S5H17Ev6fvI=) 2: 326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa (hash: hqgaxXhgaM7AiSsPcNwqghRTi61TSIKXFax/zJU7ecI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 08:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d1:b2:0c:6a:78:d3:95:10:c7:e8:c1:50:4e:41:4e:d6:3c:28:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2724A29EF989A4340933B8130B402DD4627A501 Validity Not Before: Mar 26 15:18:39 2026 GMT Not After : Mar 27 19:12:39 2026 GMT Subject: CN=57B4673EF958B2734BAFD13CA48DF08BAB13F24D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7a:35:3d:8b:9c:37:b3:52:3d:9b:e1:9d:cd: 01:d2:26:82:ff:52:36:e9:27:30:84:5b:88:eb:1a: b7:f9:1d:05:5b:5f:53:2d:32:58:c5:83:d0:79:f9: ba:45:75:18:54:f7:a1:f8:ff:c9:b7:64:bb:e0:98: 4f:a2:45:f3:f5:a3:85:d9:ed:e6:41:ad:47:e0:54: e5:27:d1:4e:ba:14:33:e6:82:62:4e:8b:06:9e:ba: 65:90:90:d0:af:ec:4c:09:4b:f7:b4:fd:19:b2:7a: eb:4b:94:84:71:01:73:1c:da:84:49:4c:8f:42:48: c5:fd:5f:37:45:d8:82:c2:e2:48:f3:d3:b7:22:f3: e7:1b:85:23:db:fe:66:22:55:2c:72:f8:b4:d1:58: b1:52:b1:22:e7:d3:72:54:06:ad:4e:d2:10:c0:69: d1:e9:cb:a3:91:90:7d:1e:3d:c1:50:01:8b:ec:d1: 76:20:dc:9c:b4:c9:c9:27:7a:94:25:2b:66:0c:d2: 14:f7:1e:da:eb:c0:8b:f2:f6:4c:c1:24:f1:82:b8: 96:92:38:c8:ad:3d:70:9a:22:dd:c2:f9:3e:e9:b5: b3:31:f4:d9:25:1e:68:9c:0e:e4:48:dc:97:ca:82: 10:ef:33:a5:4c:0d:93:5b:cc:61:37:be:4c:27:bc: a3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B4:67:3E:F9:58:B2:73:4B:AF:D1:3C:A4:8D:F0:8B:AB:13:F2:4D X509v3 Authority Key Identifier: keyid:C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f2:fc:07:28:2f:0b:4a:d5:7f:0d:e2:96:56:33:34:3a:0e: d4:18:65:61:23:23:84:39:e1:07:e7:e3:d7:3e:10:49:db:bd: d8:9d:30:27:c5:66:91:85:b8:87:af:f5:3e:1c:34:67:ea:46: 49:1c:6a:64:65:49:09:e7:6c:d8:2e:00:49:83:53:9c:e1:dd: ba:b0:6d:e3:50:07:8f:be:f4:71:cc:a2:ee:44:b1:79:e3:b2: ee:f9:5c:37:00:dc:3b:d6:79:a9:08:3e:78:96:3a:b7:34:99: fd:ff:32:78:1f:1b:ba:85:73:1b:7e:01:ea:97:0e:24:14:33: aa:a7:5d:e1:b7:e4:e5:44:bc:e3:97:b4:0c:0c:b7:d1:42:75: ac:b0:4c:df:fb:2e:4e:f3:1a:e8:6c:fb:85:72:a2:9f:11:d7: 55:c2:bb:3a:06:a9:50:cb:1e:46:b4:6f:e8:10:a1:03:3f:1a: 18:b6:cf:34:30:59:e2:24:6a:b6:28:3d:ab:bf:ed:16:5d:5a: 2c:03:77:0f:66:c3:b0:62:28:da:9c:cc:0d:bc:d1:eb:bc:0c: 94:eb:ec:eb:18:23:dc:87:90:39:53:04:66:ce:b5:3c:d7:22: 6e:7b:e3:13:f8:bb:3f:fc:4c:59:42:20:1c:77:78:b2:de:f8: f7:70:e7:0d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUItGyDGp405UQx+jBUE5BTtY8KFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI3MjRBMjlFRjk4OUE0MzQwOTMzQjgxMzBCNDAyREQ0 NjI3QTUwMTAeFw0yNjAzMjYxNTE4MzlaFw0yNjAzMjcxOTEyMzlaMDMxMTAvBgNV BAMTKDU3QjQ2NzNFRjk1OEIyNzM0QkFGRDEzQ0E0OERGMDhCQUIxM0YyNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXejU9i5w3s1I9m+GdzQHSJoL/ UjbpJzCEW4jrGrf5HQVbX1MtMljFg9B5+bpFdRhU96H4/8m3ZLvgmE+iRfP1o4XZ 7eZBrUfgVOUn0U66FDPmgmJOiwaeumWQkNCv7EwJS/e0/RmyeutLlIRxAXMc2oRJ TI9CSMX9XzdF2ILC4kjz07ci8+cbhSPb/mYiVSxy+LTRWLFSsSLn03JUBq1O0hDA adHpy6ORkH0ePcFQAYvs0XYg3Jy0ycknepQlK2YM0hT3HtrrwIvy9kzBJPGCuJaS OMitPXCaIt3C+T7ptbMx9NklHmicDuRI3JfKghDvM6VMDZNbzGE3vkwnvKMZAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUV7RnPvlYsnNLr9E8pI3wi6sT8k0wHwYDVR0j BBgwFoAUwnJKKe+YmkNAkzuBMLQC3UYnpQEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzhiODNlNjMxMjc5ZjRjNjlhNTNmYWIyNTBiYmU2OWRiLzAv QzI3MjRBMjlFRjk4OUE0MzQwOTMzQjgxMzBCNDAyREQ0NjI3QTUwMS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9DMjcyNEEyOUVGOTg5QTQzNDA5MzNCODEzMEI0MDJE RDQ2MjdBNTAxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzhiODNl NjMxMjc5ZjRjNjlhNTNmYWIyNTBiYmU2OWRiLzAvQzI3MjRBMjlFRjk4OUE0MzQw OTMzQjgxMzBCNDAyREQ0NjI3QTUwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADjy/AcoLwtK1X8N4pZW MzQ6DtQYZWEjI4Q54Qfn49c+EEnbvdidMCfFZpGFuIev9T4cNGfqRkkcamRlSQnn bNguAEmDU5zh3bqwbeNQB4++9HHMou5EsXnjsu75XDcA3DvWeakIPniWOrc0mf3/ MngfG7qFcxt+AeqXDiQUM6qnXeG35OVEvOOXtAwMt9FCdaywTN/7Lk7zGuhs+4Vy op8R11XCuzoGqVDLHka0b+gQoQM/Ghi2zzQwWeIkarYoPau/7RZdWiwDdw9mw7Bi KNqczA280eu8DJTr7OsYI9yHkDlTBGbOtTzXIm574xP4uz/8TFlCIBx3eLLe+Pdw 5w0= -----END CERTIFICATE-----Generated at Thu Mar 26 22:35:00 2026 by rpki-client