$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: 67g1bjKZpwqPV9UaykgID9V3vbiG2HKZm4GbcJSFiYQ= Subject key identifier: 60:68:A1:01:14:7E:46:20:D2:6E:9C:21:CC:88:2E:69:75:49:20:10 Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 11F6DAC825CFE7F89226656F49EE7412FBF46B7E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 03FC Signing time: Sun 11 Oct 2026 04:31:06 +0000 Manifest this update: Sun 11 Oct 2026 04:26:05 +0000 Manifest next update: Mon 12 Oct 2026 06:09:05 +0000 Files and hashes: 1: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: wO18F8v/gMz7rJy4wIznJ3KdKrQKym9CvoLfmwDdRsk=) 2: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: mGICFwpePDC//7H7pNzqqtaxos1cs8gBg5nTz4FiekQ=) 3: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: dc7aFvZsFxdINUzmo03viwCzNgQ2HUK3QhleWk4YGzY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 06:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:f6:da:c8:25:cf:e7:f8:92:26:65:6f:49:ee:74:12:fb:f4:6b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Oct 11 04:26:05 2026 GMT Not After : Oct 12 06:09:05 2026 GMT Subject: CN=6068A101147E4620D26E9C21CC882E6975492010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:df:03:a2:56:81:8a:d5:1b:bd:41:ea:dd:e4: 37:79:09:8f:21:7e:c4:7b:f0:d4:a8:f8:c0:ec:a5: 27:f5:fe:5a:63:6f:30:33:d9:69:a2:58:08:4d:5c: e7:97:94:3d:40:b4:df:85:46:4d:fe:92:a0:0d:2a: 4b:4a:f7:bb:df:ae:0b:b1:18:94:8a:7f:e2:1f:1c: 93:fc:64:14:05:d8:71:94:91:eb:38:d1:77:6a:5b: a2:0b:b3:18:61:ca:bd:e8:57:28:d8:32:67:80:78: f8:6f:93:46:1e:fc:eb:13:4f:14:71:8d:18:05:ae: f9:bd:f9:cc:c5:8f:a7:34:58:5a:bb:f1:fb:57:db: d7:55:3f:f8:43:5b:3e:91:5b:ca:6f:1e:9c:05:80: 12:28:df:95:b2:2f:17:d7:b4:d1:66:e0:f1:2b:12: 06:83:fc:90:d1:e0:57:96:97:ef:c7:f5:b7:28:ad: ea:72:02:70:02:eb:e8:81:5f:b6:7c:9a:c8:35:b9: 8b:4a:de:c3:c3:f7:8f:e5:fd:cd:b6:2a:fe:a6:a8: ea:00:71:e6:07:26:46:34:ee:92:21:32:fa:f1:5c: 47:9a:4a:10:bf:0f:16:87:48:b5:2f:a7:14:28:ff: 59:71:70:b2:7c:d8:09:41:d7:21:06:22:81:8e:f8: c2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:68:A1:01:14:7E:46:20:D2:6E:9C:21:CC:88:2E:69:75:49:20:10 X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ab:2f:92:da:1c:8a:74:ad:af:48:c7:b6:1a:8f:6e:cc:38: 80:07:46:d7:6a:b9:51:4b:99:01:5f:e5:b0:36:ed:81:2d:ca: 04:28:c2:ce:ed:18:df:6f:d8:80:0d:2c:a9:0e:d3:2c:7a:16: 71:1b:62:3b:5d:82:cb:22:4d:4e:fb:68:12:f9:77:14:a7:95: cd:35:82:cb:8e:c6:07:83:46:59:85:27:3c:84:7b:94:97:40: 64:f0:71:08:ff:9f:97:3c:e3:5c:ec:ed:be:35:91:df:64:66: 0e:76:e2:6f:8e:08:bc:db:1b:51:3a:d0:e9:e6:1e:c9:f2:7a: e6:8f:d5:44:70:58:7c:48:de:fb:70:10:63:e3:65:b5:e7:b9: 73:88:f1:f3:ef:0a:cf:f6:8b:9f:19:ee:85:a4:36:d1:89:9e: d0:3f:e3:db:d6:e9:e1:b0:67:d1:41:ea:28:d8:31:be:d1:5e: 9e:a6:f7:61:7a:b7:64:aa:a9:47:cf:8b:08:e8:f1:93:2e:88: 6d:f6:67:ce:da:97:50:2b:b2:2f:fd:ac:62:6e:e9:fb:3a:2b: 14:6f:d9:00:e7:7e:b6:a1:95:99:58:95:8b:d8:2c:27:ba:4a: b8:0e:9f:a5:33:52:dc:99:5f:e5:fe:45:44:2b:76:5e:66:99: 54:82:e9:a8 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUEfbayCXP5/iSJmVvSe50Evv0a34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNjEwMTEwNDI2MDVaFw0yNjEwMTIwNjA5MDVaMDMxMTAvBgNV BAMTKDYwNjhBMTAxMTQ3RTQ2MjBEMjZFOUMyMUNDODgyRTY5NzU0OTIwMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF3wOiVoGK1Ru9Qerd5Dd5CY8h fsR78NSo+MDspSf1/lpjbzAz2WmiWAhNXOeXlD1AtN+FRk3+kqANKktK97vfrgux GJSKf+IfHJP8ZBQF2HGUkes40XdqW6ILsxhhyr3oVyjYMmeAePhvk0Ye/OsTTxRx jRgFrvm9+czFj6c0WFq78ftX29dVP/hDWz6RW8pvHpwFgBIo35WyLxfXtNFm4PEr EgaD/JDR4FeWl+/H9bcorepyAnAC6+iBX7Z8msg1uYtK3sPD94/l/c22Kv6mqOoA ceYHJkY07pIhMvrxXEeaShC/DxaHSLUvpxQo/1lxcLJ82AlB1yEGIoGO+MJnAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUYGihARR+RiDSbpwhzIguaXVJIBAwHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFOrL5LaHIp0ra9Ix7Ya j27MOIAHRtdquVFLmQFf5bA27YEtygQows7tGN9v2IANLKkO0yx6FnEbYjtdgssi TU77aBL5dxSnlc01gsuOxgeDRlmFJzyEe5SXQGTwcQj/n5c841zs7b41kd9kZg52 4m+OCLzbG1E60OnmHsnyeuaP1URwWHxI3vtwEGPjZbXnuXOI8fPvCs/2i58Z7oWk NtGJntA/49vW6eGwZ9FB6ijYMb7RXp6m92F6t2SqqUfPiwjo8ZMuiG32Z87al1Ar si/9rGJu6fs6KxRv2QDnfrahlZlYlYvYLCe6SrgOn6UzUtyZX+X+RUQrdl5mmVSC 6ag= -----END CERTIFICATE-----Generated at Sun Oct 11 21:11:20 2026 by rpki-client