
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
File: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft (raw, json)
Hash identifier: eWGuqlNFGqVUAX2y5ZaLALtE12LVEBUo3k3hWMX+PHQ=
Subject key identifier: 9A:99:F1:9B:B4:D0:7E:BD:32:2B:CC:3F:C0:FD:6C:74:25:B8:4F:B5
Authority key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71
Certificate issuer: /CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71
Certificate serial: 0AE60C1970020FF209396BFD5662DE1A73BA7380
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
Manifest number: 03A5
Signing time: Fri 24 Jul 2026 03:31:31 +0000
Manifest this update: Fri 24 Jul 2026 03:26:31 +0000
Manifest next update: Sat 25 Jul 2026 03:56:31 +0000
Files and hashes: 1: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl (hash: Sf0yz6ykxDylmOCp+ySwhx6Gud1suku4CwgW6o1RMCE=)
2: 326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (hash: xLQAJrSJm1fgs6FwcnWz9b5L+eTkpEnw3AYpTuci0+w=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:56:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:e6:0c:19:70:02:0f:f2:09:39:6b:fd:56:62:de:1a:73:ba:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71
Validity
Not Before: Jul 24 03:26:31 2026 GMT
Not After : Jul 25 03:56:31 2026 GMT
Subject: CN=9A99F19BB4D07EBD322BCC3FC0FD6C7425B84FB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:75:83:61:97:84:96:34:17:ca:b6:85:50:
b3:c3:02:20:ea:aa:7e:4a:fc:3e:30:9f:c1:3d:48:
01:42:54:65:8e:79:99:c7:a2:de:54:a3:24:1b:ac:
48:fe:00:f5:c1:80:12:61:39:00:a7:77:c9:ae:36:
6a:70:60:ca:7c:74:62:c5:e6:74:a0:66:d9:4e:1b:
75:88:52:c4:f4:9a:6a:9e:11:7c:08:16:fe:bb:88:
d1:66:06:09:0b:63:a5:63:89:b4:6c:5a:bf:c6:75:
29:05:57:32:3a:e9:1d:e4:fc:53:10:cf:7d:14:c3:
85:51:29:69:7a:57:0e:19:cc:25:a0:25:c4:50:bc:
4e:d8:12:eb:d6:fe:b8:47:3e:f8:5b:bc:a2:1d:9a:
52:c3:66:79:78:22:cf:7b:2a:b1:dd:22:94:93:5e:
96:18:56:74:ca:78:33:30:ad:60:c9:4f:a5:30:4f:
7d:df:38:1f:dd:cd:da:73:05:5f:f9:f8:b1:72:c0:
03:58:df:82:61:c6:e1:40:5c:14:9d:22:b0:79:c4:
37:c8:9d:8b:71:60:05:8f:b5:70:73:65:bd:28:cb:
98:05:69:89:15:8b:8e:fe:0b:f2:bf:30:50:66:b1:
53:ac:52:e6:a3:ee:eb:ad:bd:23:fd:76:30:4d:4e:
8f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:99:F1:9B:B4:D0:7E:BD:32:2B:CC:3F:C0:FD:6C:74:25:B8:4F:B5
X509v3 Authority Key Identifier:
keyid:1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:28:37:21:e4:5d:b9:22:0f:35:e6:da:5a:89:b9:32:60:b9:
e5:f0:db:02:0d:0c:e2:6e:56:6b:5b:23:97:1b:8b:20:8e:be:
80:73:ff:71:86:78:4e:2f:0f:a2:a6:eb:61:2f:c1:bd:9b:8f:
5b:82:73:12:93:ef:92:13:6f:84:01:2c:ec:20:fe:f1:7e:73:
5a:57:b8:81:94:cc:82:e0:f4:0a:eb:e2:b9:08:d0:94:3a:9a:
16:c9:c4:63:de:44:b8:4e:5c:a4:78:7c:91:3d:cd:f0:73:7b:
fc:15:53:fd:00:bc:31:86:69:dd:89:b5:18:d1:72:15:00:0e:
f5:99:b4:18:47:ac:c5:83:20:99:54:03:1b:87:e4:f0:0e:77:
e6:a5:4a:76:5a:96:a3:e3:fd:87:72:a4:0b:3f:f3:1a:0c:48:
1c:ac:fb:28:e2:ed:0d:4a:98:0c:bb:3e:d3:4d:6a:b2:6f:cf:
42:86:5a:71:1a:75:8f:c0:66:90:38:34:9e:6d:59:7a:2d:f5:
10:50:b4:ff:d4:bb:f6:d6:c7:4b:8d:86:6e:87:5f:3a:83:e1:
1e:69:7a:ef:6b:cf:7a:eb:ff:e4:ff:53:d3:ae:19:5e:cb:f5:
b3:91:65:ac:25:46:98:cc:1e:4b:00:fc:ff:67:57:0e:72:a6:
ad:4d:6e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:14:08 2026 by rpki-client