$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft File: F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft (raw, json) Hash identifier: 1eHFVissIW8WUUZNma+QrriOfbF7SHqTYOxBY76TWOk= Subject key identifier: B8:C7:6B:53:FB:10:11:13:B0:8A:6D:8F:F4:3E:C5:87:18:CF:2A:6D Authority key identifier: F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 Certificate issuer: /CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Certificate serial: 5D0AFA7E1809EB454705157D5921F0816AF2223F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft Manifest number: 0306 Signing time: Thu 26 Mar 2026 14:33:02 +0000 Manifest this update: Thu 26 Mar 2026 14:28:00 +0000 Manifest next update: Fri 27 Mar 2026 15:10:00 +0000 Files and hashes: 1: F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl (hash: sU85e7EihNfctppUBEKbHYuA+Gq/5GJWJf53u2/SC+s=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 08:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:0a:fa:7e:18:09:eb:45:47:05:15:7d:59:21:f0:81:6a:f2:22:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Validity Not Before: Mar 26 14:28:00 2026 GMT Not After : Mar 27 15:10:00 2026 GMT Subject: CN=B8C76B53FB101113B08A6D8FF43EC58718CF2A6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b0:ac:99:68:74:bb:a1:2b:c3:9d:b1:96:8f: 52:b0:0b:2e:07:a9:bf:a2:21:89:4c:26:f9:c8:d3: ba:1c:9f:50:b9:25:0e:43:a8:1e:e6:ac:7c:af:e0: 54:94:c2:f5:04:08:ad:71:e3:18:f1:d0:99:c0:92: 51:c6:39:0d:d0:90:e2:48:63:5f:0c:2f:e7:65:11: e6:e5:af:02:2f:ab:75:15:92:7b:0b:3f:56:f8:81: a4:82:60:95:99:75:a1:91:4f:a2:52:7a:b6:ea:c9: 87:d3:55:38:8f:7e:ee:4a:50:3b:05:17:7a:6b:28: 89:b2:f9:29:c5:14:ce:f6:6c:72:8b:87:f9:03:9e: 77:aa:b8:aa:f3:44:98:52:3f:da:b8:19:23:51:fe: 27:42:55:53:0b:ba:b0:f5:d5:28:90:0d:df:7e:2a: d6:51:af:51:ba:ec:46:9c:c4:c6:59:f0:74:1f:0f: 0d:ae:f6:7a:e2:5b:39:c5:8a:8a:f0:2d:cb:bf:b0: 7f:27:6f:5e:61:b7:bf:4f:d7:1c:28:fd:dc:0c:24: e5:3d:46:6d:9d:9e:33:33:f0:e2:98:35:47:eb:a7: 7f:05:68:7e:2d:02:56:24:d4:98:1b:55:ab:a5:39: 10:e2:b0:1e:b0:b5:79:27:28:76:88:aa:14:c2:df: 43:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C7:6B:53:FB:10:11:13:B0:8A:6D:8F:F4:3E:C5:87:18:CF:2A:6D X509v3 Authority Key Identifier: keyid:F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c7:f8:f0:f4:b2:67:50:f9:8e:cb:d9:ab:31:23:1a:a6:41: 05:9c:8f:a7:97:bb:74:6b:be:2a:fe:28:5f:d3:66:74:fd:d1: 34:a5:02:30:d6:f9:57:3a:5e:4f:0c:2d:f5:b0:b7:d4:9e:5b: 0e:59:36:85:5e:c8:f5:15:0d:ad:56:45:4b:f4:b2:f3:c1:09: 2e:7b:b8:51:1b:f0:a0:c2:32:bc:65:33:fe:b6:36:08:4a:5a: 49:57:ea:fb:4f:d7:8a:f5:eb:78:eb:42:41:8c:32:e7:1e:d1: 37:5f:62:70:70:7e:43:e2:02:0b:98:e1:0e:40:d7:4e:e1:76: da:27:17:67:a0:9b:9c:dd:30:9a:51:fa:a8:a6:bb:16:8f:50: 77:26:b3:79:f0:92:29:1f:71:47:20:9e:98:80:87:3e:a1:a0: de:71:04:8d:a0:7c:48:82:35:05:a7:be:75:91:58:04:1b:c6: fb:b3:ba:ed:bd:e8:9f:bd:a0:e1:14:cf:88:10:51:dc:ed:77: 1f:02:60:39:47:d9:9c:50:88:83:dd:17:fb:01:f0:c3:76:bc: 0b:f3:33:0c:e8:3b:57:b1:81:ac:c1:51:78:2c:03:8b:e5:3d: 86:4b:5e:98:9c:3a:89:3c:4d:8f:32:af:68:d1:c8:ab:16:51: 0d:6e:16:da -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUXQr6fhgJ60VHBRV9WSHwgWryIj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2 OTg2RDdDNjAeFw0yNjAzMjYxNDI4MDBaFw0yNjAzMjcxNTEwMDBaMDMxMTAvBgNV BAMTKEI4Qzc2QjUzRkIxMDExMTNCMDhBNkQ4RkY0M0VDNTg3MThDRjJBNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6sKyZaHS7oSvDnbGWj1KwCy4H qb+iIYlMJvnI07ocn1C5JQ5DqB7mrHyv4FSUwvUECK1x4xjx0JnAklHGOQ3QkOJI Y18ML+dlEeblrwIvq3UVknsLP1b4gaSCYJWZdaGRT6JSerbqyYfTVTiPfu5KUDsF F3prKImy+SnFFM72bHKLh/kDnnequKrzRJhSP9q4GSNR/idCVVMLurD11SiQDd9+ KtZRr1G67EacxMZZ8HQfDw2u9nriWznFiorwLcu/sH8nb15ht79P1xwo/dwMJOU9 Rm2dnjMz8OKYNUfrp38FaH4tAlYk1JgbVaulORDisB6wtXknKHaIqhTC30M1AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUuMdrU/sQEROwim2P9D7FhxjPKm0wHwYDVR0j BBgwFoAU95TfoAnqkLTLuzQN5MJVRGmG18YwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2RlNTMzMzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAv Rjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GNzk0REZBMDA5RUE5MEI0Q0JCQjM0MERFNEMyNTU0 NDY5ODZEN0M2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2RlNTMz Mzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAvRjc5NERGQTAwOUVBOTBCNENC QkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG3H+PD0smdQ+Y7L2asx IxqmQQWcj6eXu3Rrvir+KF/TZnT90TSlAjDW+Vc6Xk8MLfWwt9SeWw5ZNoVeyPUV Da1WRUv0svPBCS57uFEb8KDCMrxlM/62NghKWklX6vtP14r163jrQkGMMuce0Tdf YnBwfkPiAguY4Q5A107hdtonF2egm5zdMJpR+qimuxaPUHcms3nwkikfcUcgnpiA hz6hoN5xBI2gfEiCNQWnvnWRWAQbxvuzuu296J+9oOEUz4gQUdztdx8CYDlH2ZxQ iIPdF/sB8MN2vAvzMwzoO1exgazBUXgsA4vlPYZLXpicOok8TY8yr2jRyKsWUQ1u Fto= -----END CERTIFICATE-----Generated at Thu Mar 26 22:15:17 2026 by rpki-client