$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: d110QMXzG45EMBL+OpZgm7FfrYmZtafDO+UtZhmRlLw= Subject key identifier: 75:32:1D:EA:3C:13:3B:48:5A:20:A3:8B:04:9B:8C:02:1A:3E:32:87 Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 67DB26374116474234E0A8106E265F6E084C1C68 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 03A5 Signing time: Fri 24 Jul 2026 01:20:49 +0000 Manifest this update: Fri 24 Jul 2026 01:15:49 +0000 Manifest next update: Sat 25 Jul 2026 03:42:49 +0000 Files and hashes: 1: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: FJ3ijWgvzuq2Bm3ZrC5c944LxAxI6EzhDxPmx2SMF5I=) 2: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: mGICFwpePDC//7H7pNzqqtaxos1cs8gBg5nTz4FiekQ=) 3: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: dc7aFvZsFxdINUzmo03viwCzNgQ2HUK3QhleWk4YGzY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 03:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:db:26:37:41:16:47:42:34:e0:a8:10:6e:26:5f:6e:08:4c:1c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Jul 24 01:15:49 2026 GMT Not After : Jul 25 03:42:49 2026 GMT Subject: CN=75321DEA3C133B485A20A38B049B8C021A3E3287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:81:16:34:ae:a4:a2:43:c1:e5:67:59:23:db: 6c:eb:13:8e:af:4c:8c:f2:ec:04:0c:09:c4:06:c2: d1:3d:59:d9:d2:20:0b:cc:5f:70:da:9c:d0:ea:88: d4:cd:a4:c4:15:41:3c:e6:51:16:87:49:41:08:21: da:31:9e:fe:fa:cf:08:ee:92:f3:6a:12:71:4e:24: 92:c1:c4:cb:d7:f3:90:46:e0:09:82:f3:7a:bf:e8: a1:3b:98:70:09:21:ab:b0:d0:7d:d6:88:8a:58:5f: da:ed:48:c6:16:8b:41:0c:fe:94:2e:d3:bc:d0:29: ea:d0:41:12:79:fb:ba:28:b8:8d:79:df:30:8e:7b: d7:a8:55:92:e5:3a:13:73:ee:a8:09:e0:03:5d:88: 4e:5b:b0:0b:d2:64:78:b6:e9:3b:a6:20:6a:4d:e0: 3b:38:d7:16:da:44:9f:e0:04:14:12:ec:c2:3c:cc: d1:d4:06:b2:ee:e3:7b:7c:62:4b:e9:bc:37:07:2e: 2f:6e:37:68:71:4b:8c:e8:5c:da:20:a6:be:d8:30: 63:77:55:73:bd:71:46:eb:d5:d4:00:47:5e:a1:89: f2:6d:aa:78:b2:26:9b:4d:46:2c:31:a9:96:f2:91: ad:e2:f2:bc:da:95:1e:3b:c0:dd:b4:34:92:4f:d9: d3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:32:1D:EA:3C:13:3B:48:5A:20:A3:8B:04:9B:8C:02:1A:3E:32:87 X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:2f:47:1b:8c:62:10:5c:21:06:d2:fa:9b:92:4f:9e:b1:69: 97:41:81:76:5a:d9:75:cb:af:bc:a5:f8:58:57:3e:db:b4:6e: c3:61:a2:94:c5:fc:6f:14:6f:06:56:9f:6d:dd:26:10:93:69: 9a:29:77:cf:bf:af:8b:8a:07:d9:77:13:69:cd:8a:06:81:59: bf:f1:f3:2b:ad:58:9e:6d:70:70:78:ec:e1:34:48:31:9a:7f: f5:ef:29:9b:d1:9f:ea:cd:d0:17:79:a1:e2:c3:b1:ab:49:0c: 55:4f:72:4d:ce:37:37:be:56:78:be:eb:99:77:30:72:55:1a: a0:96:23:bf:51:f5:31:4a:f9:62:46:35:59:da:ca:5a:1f:b4: aa:93:2a:9f:53:be:5b:26:fb:22:7e:04:31:4b:8a:60:58:c6: 6b:b1:bf:3f:ac:de:f1:8d:65:1f:5e:c4:11:7d:96:af:56:b8: 69:96:c1:2b:f6:df:5a:ff:38:8c:43:0a:d2:31:d7:34:70:93: 61:9f:0e:b7:12:ce:a3:02:65:d1:d3:40:a4:ca:ad:b9:a0:cd: 2a:ac:49:0f:d0:1b:12:73:3e:3f:5c:11:41:16:40:bb:2e:22: 28:ab:44:3d:25:2c:df:46:ba:48:a2:94:da:90:a6:3f:28:c9: ac:85:37:35 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUZ9smN0EWR0I04KgQbiZfbghMHGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNjA3MjQwMTE1NDlaFw0yNjA3MjUwMzQyNDlaMDMxMTAvBgNV BAMTKDc1MzIxREVBM0MxMzNCNDg1QTIwQTM4QjA0OUI4QzAyMUEzRTMyODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVgRY0rqSiQ8HlZ1kj22zrE46v TIzy7AQMCcQGwtE9WdnSIAvMX3DanNDqiNTNpMQVQTzmURaHSUEIIdoxnv76zwju kvNqEnFOJJLBxMvX85BG4AmC83q/6KE7mHAJIauw0H3WiIpYX9rtSMYWi0EM/pQu 07zQKerQQRJ5+7oouI153zCOe9eoVZLlOhNz7qgJ4ANdiE5bsAvSZHi26TumIGpN 4Ds41xbaRJ/gBBQS7MI8zNHUBrLu43t8YkvpvDcHLi9uN2hxS4zoXNogpr7YMGN3 VXO9cUbr1dQAR16hifJtqniyJptNRiwxqZbyka3i8rzalR47wN20NJJP2dMNAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUdTId6jwTO0haIKOLBJuMAho+MocwHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADIvRxuMYhBcIQbS+puS T56xaZdBgXZa2XXLr7yl+FhXPtu0bsNhopTF/G8UbwZWn23dJhCTaZopd8+/r4uK B9l3E2nNigaBWb/x8yutWJ5tcHB47OE0SDGaf/XvKZvRn+rN0Bd5oeLDsatJDFVP ck3ONze+Vni+65l3MHJVGqCWI79R9TFK+WJGNVnayloftKqTKp9Tvlsm+yJ+BDFL imBYxmuxvz+s3vGNZR9exBF9lq9WuGmWwSv231r/OIxDCtIx1zRwk2GfDrcSzqMC ZdHTQKTKrbmgzSqsSQ/QGxJzPj9cEUEWQLsuIiirRD0lLN9GukiilNqQpj8oyayF NzU= -----END CERTIFICATE-----Generated at Fri Jul 24 20:28:31 2026 by rpki-client