$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: A/bePhXFWnjnQhVRtQemp09NLaGmL57sNT50F1H15a4= Subject key identifier: 66:CF:74:D7:1A:2B:95:6D:62:96:B0:30:53:C6:2D:7D:E9:95:02:D9 Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 610D339C922F976A740C8AE8A437CFB990F1F26B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 0345 Signing time: Wed 13 May 2026 02:28:37 +0000 Manifest this update: Wed 13 May 2026 02:23:37 +0000 Manifest next update: Thu 14 May 2026 04:02:37 +0000 Files and hashes: 1: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: mGICFwpePDC//7H7pNzqqtaxos1cs8gBg5nTz4FiekQ=) 2: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: 4LZ3AQ6Sv+smi1d0vU+LKmW14s76EqMK931fPN7kOg0=) 3: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: dc7aFvZsFxdINUzmo03viwCzNgQ2HUK3QhleWk4YGzY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 00:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:0d:33:9c:92:2f:97:6a:74:0c:8a:e8:a4:37:cf:b9:90:f1:f2:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: May 13 02:23:37 2026 GMT Not After : May 14 04:02:37 2026 GMT Subject: CN=66CF74D71A2B956D6296B03053C62D7DE99502D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e0:40:62:18:19:5d:4c:5a:67:14:93:0c:2f: f3:53:0e:f7:00:e1:2c:e0:a2:0c:cd:7a:5f:2e:f6: 17:d3:fe:7e:79:22:7b:79:cf:c2:ce:80:ec:81:1d: 46:b1:72:58:89:60:f7:1f:f4:62:b2:74:4e:f5:05: 13:fc:55:dd:cb:79:29:44:68:ac:da:f0:4f:8e:7b: f6:4c:5b:ab:25:36:53:6b:a3:c1:d2:7d:9b:44:d8: 82:59:ca:72:b3:40:66:1a:eb:24:bf:5b:9d:5d:50: 89:1a:0f:4d:7b:10:66:71:b5:a0:a5:19:8c:d8:ab: f9:b1:1b:f2:3e:bf:78:29:6b:28:91:a8:6d:c5:94: 11:43:0b:fe:f7:55:3a:b2:e4:00:bf:af:de:3f:83: 97:9f:de:e2:5a:de:1a:96:0a:fd:d9:ec:89:89:7f: af:5b:3a:b7:c4:14:19:ad:8f:1f:64:3e:8b:c5:1f: 25:e8:1c:70:bc:3e:64:7a:7c:13:8e:86:0f:61:2a: a3:7e:99:af:c4:13:1f:0a:c1:d5:be:7e:6b:24:1a: ba:88:33:a2:ab:66:5d:1f:3b:30:f8:63:4f:2d:4e: 27:f8:69:63:c6:10:18:b4:c3:7f:21:30:0e:a8:0f: c8:bb:5b:ff:05:2a:b8:f6:20:a2:56:0d:5e:81:70: d5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CF:74:D7:1A:2B:95:6D:62:96:B0:30:53:C6:2D:7D:E9:95:02:D9 X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:1e:51:d2:64:1e:1d:2b:45:3d:37:de:4e:aa:3d:9e:69:c0: 9d:76:0e:79:d0:f9:8f:ff:12:72:cd:3c:79:b1:0f:a0:01:2a: dc:7c:23:0c:79:55:a2:9b:7f:5b:9c:34:66:8a:05:32:ae:54: 3f:f8:c0:b9:16:b3:19:48:3a:db:e3:0b:15:61:b9:fa:f7:0c: fb:9d:bc:a1:dc:53:35:10:6d:54:48:f4:fb:cc:de:ee:a7:37: e6:09:69:d8:1e:40:ab:8f:39:d4:ea:94:df:ba:77:21:3b:d5: 21:f5:dc:da:65:97:0f:28:0e:4a:5a:a1:74:98:ca:8f:53:06: 12:c1:c7:21:b5:73:45:3a:37:21:f2:d4:da:23:96:3f:b4:df: 1f:91:bd:be:6f:f6:68:4a:c1:3b:54:b5:f8:6c:88:28:80:47: c7:81:62:0b:57:e5:8c:ee:0c:f9:93:b0:89:2e:a2:00:20:2b: 4a:f6:83:7b:40:f6:06:54:c5:92:66:23:65:b1:4f:04:b2:50: 8f:bc:d6:1c:29:eb:6c:01:10:58:b5:e5:26:25:8c:5f:52:6a: f8:96:ae:f3:6d:45:cf:5e:1a:5d:89:25:34:d8:40:4f:e2:c8: 78:91:57:5d:af:43:97:e9:ce:67:c0:15:21:0e:e4:ac:fd:bf: b2:c4:0b:fe -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUYQ0znJIvl2p0DIropDfPuZDx8mswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNjA1MTMwMjIzMzdaFw0yNjA1MTQwNDAyMzdaMDMxMTAvBgNV BAMTKDY2Q0Y3NEQ3MUEyQjk1NkQ2Mjk2QjAzMDUzQzYyRDdERTk5NTAyRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC84EBiGBldTFpnFJMML/NTDvcA 4SzgogzNel8u9hfT/n55Int5z8LOgOyBHUaxcliJYPcf9GKydE71BRP8Vd3LeSlE aKza8E+Oe/ZMW6slNlNro8HSfZtE2IJZynKzQGYa6yS/W51dUIkaD017EGZxtaCl GYzYq/mxG/I+v3gpayiRqG3FlBFDC/73VTqy5AC/r94/g5ef3uJa3hqWCv3Z7ImJ f69bOrfEFBmtjx9kPovFHyXoHHC8PmR6fBOOhg9hKqN+ma/EEx8KwdW+fmskGrqI M6KrZl0fOzD4Y08tTif4aWPGEBi0w38hMA6oD8i7W/8FKrj2IKJWDV6BcNWlAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUZs901xorlW1ilrAwU8YtfemVAtkwHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAgeUdJkHh0rRT033k6q PZ5pwJ12DnnQ+Y//EnLNPHmxD6ABKtx8Iwx5VaKbf1ucNGaKBTKuVD/4wLkWsxlI OtvjCxVhufr3DPudvKHcUzUQbVRI9PvM3u6nN+YJadgeQKuPOdTqlN+6dyE71SH1 3Npllw8oDkpaoXSYyo9TBhLBxyG1c0U6NyHy1Nojlj+03x+Rvb5v9mhKwTtUtfhs iCiAR8eBYgtX5YzuDPmTsIkuogAgK0r2g3tA9gZUxZJmI2WxTwSyUI+81hwp62wB EFi15SYljF9SaviWrvNtRc9eGl2JJTTYQE/iyHiRV12vQ5fpzmfAFSEO5Kz9v7LE C/4= -----END CERTIFICATE-----Generated at Wed May 13 16:24:27 2026 by rpki-client