$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft File: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft (raw, json) Hash identifier: u82F/9M5TlzPraIAI1LjT8DnCDVhoqMLvr30XuLWv1A= Subject key identifier: DC:53:89:DD:68:00:D9:F0:32:28:70:39:FE:F0:C9:FD:37:59:92:42 Authority key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 Certificate issuer: /CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Certificate serial: 280679B953341BC28F44F9B52DD103F5B4D38F8F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft Manifest number: 0308 Signing time: Thu 26 Mar 2026 10:26:13 +0000 Manifest this update: Thu 26 Mar 2026 10:21:11 +0000 Manifest next update: Fri 27 Mar 2026 10:50:11 +0000 Files and hashes: 1: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl (hash: FEVzXb13l+DAcdhOyr4pv5zciehk/LHzwlgsDoCnj84=) 2: 326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (hash: rxzc3BrYti6kxmXubVnEFiS+UC7vkumI3P6AvUB5lwM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 08:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:06:79:b9:53:34:1b:c2:8f:44:f9:b5:2d:d1:03:f5:b4:d3:8f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Validity Not Before: Mar 26 10:21:11 2026 GMT Not After : Mar 27 10:50:11 2026 GMT Subject: CN=DC5389DD6800D9F032287039FEF0C9FD37599242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c3:1f:85:3d:0e:bc:fb:da:82:4e:c3:d2:62: 3d:b3:ee:d0:2f:91:0f:3d:52:77:a8:66:b1:b2:59: fe:42:30:ce:93:46:d0:9d:af:b6:43:34:8b:0e:c9: 38:81:c8:60:9f:c1:a1:00:65:59:a3:84:1c:29:d1: de:b8:ff:9d:11:7c:9d:80:05:d3:6a:53:42:5a:17: 6f:f8:d1:8a:b7:3d:07:c4:1d:e5:4c:d4:1b:fe:96: 96:f0:55:b5:25:c7:3f:da:13:f2:35:2b:77:22:7a: 34:8f:79:5c:8a:38:52:e6:ce:56:0e:95:f2:64:f8: 90:b5:17:2e:25:46:a2:8f:24:15:8e:fa:e1:05:05: 89:86:f8:96:55:93:2a:bd:01:53:73:1e:e9:bb:4f: b9:b5:a9:b2:50:18:ac:3f:28:e0:0f:bb:ba:79:ee: d6:e6:8a:e2:a5:fc:59:e8:74:38:44:2a:5b:8d:10: 71:ed:c2:1d:40:2b:dc:3e:c9:ad:d6:d8:49:6c:8a: 84:d9:a4:f9:a2:81:4e:f4:0f:c1:4d:d0:01:f6:5f: 5e:c5:f1:bf:b6:bf:b6:a9:84:82:f6:ae:f8:e6:ed: 5a:6a:6f:5d:9c:aa:25:0f:4e:b3:08:1a:0d:a7:fd: 22:23:49:79:ea:2b:14:b7:e0:c9:70:4f:77:1e:48: 03:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:53:89:DD:68:00:D9:F0:32:28:70:39:FE:F0:C9:FD:37:59:92:42 X509v3 Authority Key Identifier: keyid:1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:67:33:d6:a6:ba:c0:fe:f9:9a:83:fa:f9:e2:4a:0f:6c:50: 53:8e:e6:70:6a:6c:88:9f:9c:12:ad:9c:e0:4b:75:ad:02:92: 20:13:1c:2f:f9:07:73:79:38:13:cd:1f:37:28:a7:80:92:bf: a2:4a:1d:26:13:c3:e7:f3:11:8f:e4:43:3f:dc:74:9b:4d:d7: cc:b5:4b:aa:45:27:61:64:2c:4a:85:b2:a6:7d:27:fa:d9:57: 9e:3f:06:e8:9c:21:35:cf:2b:c2:43:83:50:d9:6e:22:85:00: ce:15:9b:3a:9a:eb:5e:c7:c5:ab:6e:37:3b:34:f4:cf:5a:48: d9:0b:94:47:09:6b:90:c5:c6:d5:7a:ac:03:25:cb:e1:b3:20: f2:f9:96:b2:c6:22:1c:7a:e4:54:e0:2a:04:04:1a:4e:8a:cb: 4d:29:69:b4:ac:32:77:8e:70:e4:8e:b4:1c:cd:73:9a:dd:84: b7:94:3a:1c:93:c0:77:8c:50:6f:78:8f:43:d5:40:d6:33:d4: b6:74:c6:3d:92:f8:b3:a0:91:2a:8c:d2:2c:d0:6d:a6:50:12: 31:56:6d:0a:1c:4e:22:d8:26:1b:1a:6b:7f:e0:88:b2:7c:7a: 22:c8:b8:2e:39:bc:e9:93:67:f2:aa:c3:54:c3:fb:59:07:0e: e6:d9:dc:80 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUKAZ5uVM0G8KPRPm1LdED9bTTj48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJB NkI3RUY3MTAeFw0yNjAzMjYxMDIxMTFaFw0yNjAzMjcxMDUwMTFaMDMxMTAvBgNV BAMTKERDNTM4OURENjgwMEQ5RjAzMjI4NzAzOUZFRjBDOUZEMzc1OTkyNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBwx+FPQ68+9qCTsPSYj2z7tAv kQ89UneoZrGyWf5CMM6TRtCdr7ZDNIsOyTiByGCfwaEAZVmjhBwp0d64/50RfJ2A BdNqU0JaF2/40Yq3PQfEHeVM1Bv+lpbwVbUlxz/aE/I1K3ciejSPeVyKOFLmzlYO lfJk+JC1Fy4lRqKPJBWO+uEFBYmG+JZVkyq9AVNzHum7T7m1qbJQGKw/KOAPu7p5 7tbmiuKl/FnodDhEKluNEHHtwh1AK9w+ya3W2ElsioTZpPmigU70D8FN0AH2X17F 8b+2v7aphIL2rvjm7Vpqb12cqiUPTrMIGg2n/SIjSXnqKxS34MlwT3ceSAMvAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU3FOJ3WgA2fAyKHA5/vDJ/TdZkkIwHwYDVR0j BBgwFoAUGrsI1BpaaXQyDZeId2mhW6a373EwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2IzZGE1Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAv MUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQUJCMDhENDFBNUE2OTc0MzIwRDk3ODg3NzY5QTE1 QkE2QjdFRjcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2IzZGE1 Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAvMUFCQjA4RDQxQTVBNjk3NDMy MEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKhnM9amusD++ZqD+vni Sg9sUFOO5nBqbIifnBKtnOBLda0CkiATHC/5B3N5OBPNHzcop4CSv6JKHSYTw+fz EY/kQz/cdJtN18y1S6pFJ2FkLEqFsqZ9J/rZV54/BuicITXPK8JDg1DZbiKFAM4V mzqa617HxatuNzs09M9aSNkLlEcJa5DFxtV6rAMly+GzIPL5lrLGIhx65FTgKgQE Gk6Ky00pabSsMneOcOSOtBzNc5rdhLeUOhyTwHeMUG94j0PVQNYz1LZ0xj2S+LOg kSqM0izQbaZQEjFWbQocTiLYJhsaa3/giLJ8eiLIuC45vOmTZ/Kqw1TD+1kHDubZ 3IA= -----END CERTIFICATE-----Generated at Thu Mar 26 21:10:55 2026 by rpki-client