$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: wtanKAd+VlpTsbKftH14LSIroYAhLLIdqchLbNL7ZJY= Subject key identifier: 64:28:4D:CF:F7:8E:3F:77:C4:DF:63:40:37:37:3E:AF:EB:7E:08:2D Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 6E2BD64D1314373E8D6E301D3BF57613AF932C89 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 0306 Signing time: Thu 26 Mar 2026 08:50:02 +0000 Manifest this update: Thu 26 Mar 2026 08:44:59 +0000 Manifest next update: Fri 27 Mar 2026 11:00:59 +0000 Files and hashes: 1: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: vxaqD429klEPt03aXXniKGxzQoHI4Ar9F2T3pRAzV/Y=) 2: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 3wo4yWYqUm70prj7oF5pGF3zOR0/7RB8Epa8stuidcg=) 3: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: ogLYmQ6ZDLLyiga3F990TSwYfissNdedZ+wl4HOG4Sw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 08:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:2b:d6:4d:13:14:37:3e:8d:6e:30:1d:3b:f5:76:13:af:93:2c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Mar 26 08:44:59 2026 GMT Not After : Mar 27 11:00:59 2026 GMT Subject: CN=64284DCFF78E3F77C4DF634037373EAFEB7E082D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fa:6b:33:2e:a4:25:2a:6c:c5:2e:d8:9c:77: 47:1f:1e:e2:2a:65:69:19:11:de:5c:54:51:46:5e: 94:50:f8:2e:e3:c9:7a:29:4d:7a:90:62:3e:a3:fe: 1a:21:b0:ce:13:4a:f0:b1:68:d4:9d:b3:8e:79:c6: 21:99:69:10:a9:29:9d:2d:fc:bb:3d:5b:57:85:89: 89:36:75:9c:04:65:27:b4:bf:1e:71:33:4a:d7:81: 7b:90:76:5a:35:47:6a:ff:fb:be:ad:47:54:12:6e: 59:9f:fa:93:5b:a8:cb:2a:99:c0:d5:9f:3d:73:3f: 83:ba:aa:77:7b:c3:d8:35:a2:a0:95:cc:c7:04:bf: 2f:1f:b0:4c:3a:20:b4:ff:ac:8e:5a:95:ce:26:e2: 28:c3:13:9a:11:42:55:b8:60:35:65:c1:3c:bd:7a: 86:c1:ce:41:fc:d4:5f:65:9a:89:59:4e:db:25:8c: 86:0f:4f:d4:54:8d:4a:91:96:7d:af:91:24:9c:4d: 69:a9:40:69:19:7b:27:2a:58:ac:52:eb:0e:6c:be: c1:63:11:9e:31:08:d1:e9:a0:ef:ba:7f:d7:3c:94: f1:37:a9:d8:5a:b0:20:de:cc:85:f4:fc:f9:78:0d: a2:7a:6f:00:0e:7f:ec:7f:69:49:4d:68:3f:77:8a: a6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:28:4D:CF:F7:8E:3F:77:C4:DF:63:40:37:37:3E:AF:EB:7E:08:2D X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:81:10:ca:7b:df:05:35:fa:6b:95:d1:98:3e:b8:1c:77:d1: 54:13:d6:32:db:b1:8a:8c:47:59:7d:c3:30:33:26:4c:46:1c: 24:1b:76:5d:1c:c5:10:94:da:5c:44:8d:7a:d8:60:cb:d2:8b: 7f:6c:18:54:a1:bc:4f:a6:f1:0f:7a:e3:36:34:fc:28:72:0f: eb:9d:2d:7d:ff:e6:e7:e5:0d:6b:97:3e:05:7e:cd:59:0d:d7: 80:0b:39:eb:98:1f:33:93:56:9d:c6:28:f7:10:2a:bb:99:76: 4c:d1:de:d2:54:b3:f4:96:58:3b:81:5d:31:5c:bf:2c:cb:ee: c8:5a:cd:4d:6c:a7:be:c7:a4:e3:30:51:c0:b0:b6:e6:03:58: 58:43:06:14:42:8a:df:54:0f:24:98:55:63:b2:99:23:8e:09: f7:c1:65:c0:dc:64:84:00:1d:d5:da:26:f5:bc:be:c0:d1:4b: 03:83:c5:d4:77:9e:8e:18:3f:fa:d9:2f:d8:46:96:28:20:5e: e0:16:c6:11:fb:8e:8c:f8:24:44:59:95:8b:b0:09:0c:5e:01: f4:a1:09:40:ca:a8:23:6d:37:91:aa:d9:a3:28:e2:49:16:0f: d7:12:5f:79:46:ef:8e:3d:fe:ae:69:b3:93:7e:78:b0:d5:7f: 2f:d6:d0:51 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUbivWTRMUNz6NbjAdO/V2E6+TLIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNjAzMjYwODQ0NTlaFw0yNjAzMjcxMTAwNTlaMDMxMTAvBgNV BAMTKDY0Mjg0RENGRjc4RTNGNzdDNERGNjM0MDM3MzczRUFGRUI3RTA4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd+mszLqQlKmzFLticd0cfHuIq ZWkZEd5cVFFGXpRQ+C7jyXopTXqQYj6j/hohsM4TSvCxaNSds455xiGZaRCpKZ0t /Ls9W1eFiYk2dZwEZSe0vx5xM0rXgXuQdlo1R2r/+76tR1QSblmf+pNbqMsqmcDV nz1zP4O6qnd7w9g1oqCVzMcEvy8fsEw6ILT/rI5alc4m4ijDE5oRQlW4YDVlwTy9 eobBzkH81F9lmolZTtsljIYPT9RUjUqRln2vkSScTWmpQGkZeycqWKxS6w5svsFj EZ4xCNHpoO+6f9c8lPE3qdhasCDezIX0/Pl4DaJ6bwAOf+x/aUlNaD93iqa/AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUZChNz/eOP3fE32NANzc+r+t+CC0wHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAOBEMp73wU1+muV0Zg+ uBx30VQT1jLbsYqMR1l9wzAzJkxGHCQbdl0cxRCU2lxEjXrYYMvSi39sGFShvE+m 8Q964zY0/ChyD+udLX3/5uflDWuXPgV+zVkN14ALOeuYHzOTVp3GKPcQKruZdkzR 3tJUs/SWWDuBXTFcvyzL7shazU1sp77HpOMwUcCwtuYDWFhDBhRCit9UDySYVWOy mSOOCffBZcDcZIQAHdXaJvW8vsDRSwODxdR3no4YP/rZL9hGliggXuAWxhH7joz4 JERZlYuwCQxeAfShCUDKqCNtN5Gq2aMo4kkWD9cSX3lG7449/q5ps5N+eLDVfy/W 0FE= -----END CERTIFICATE-----Generated at Fri Mar 27 00:37:37 2026 by rpki-client