$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft File: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft (raw, json) Hash identifier: KCakZyP+kvutkPH+ycBBuZFh65Is45f2siq7iAXJe08= Subject key identifier: 1F:46:6F:F4:D2:B1:31:51:D6:72:CA:35:34:6A:22:30:35:81:9E:B1 Authority key identifier: 10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42 Certificate issuer: /CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42 Certificate serial: 04569C0A9BA7C1FF34AE1B240B39D017D677688D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft Manifest number: 03EF Signing time: Thu 01 Oct 2026 11:04:21 +0000 Manifest this update: Thu 01 Oct 2026 10:59:21 +0000 Manifest next update: Fri 02 Oct 2026 12:23:21 +0000 Files and hashes: 1: 326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa (hash: S4AvxWBeW9N6hxjfs+wg8xJFVH4YZkZcqcYTTWaj6x8=) 2: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl (hash: uw/nKj0lie0pIDzmr40r1r2gv0Gss6pg2Cz3eApkoSU=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Oct 2026 12:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:56:9c:0a:9b:a7:c1:ff:34:ae:1b:24:0b:39:d0:17:d6:77:68:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42 Validity Not Before: Oct 1 10:59:21 2026 GMT Not After : Oct 2 12:23:21 2026 GMT Subject: CN=1F466FF4D2B13151D672CA35346A223035819EB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:be:95:8b:5c:39:c0:01:b9:6f:dd:17:17:6d: dc:be:0e:b4:45:1d:6e:b4:fe:a6:66:f1:51:9e:5b: 0e:7e:87:03:2b:29:fd:8c:e1:f4:ef:44:8a:0c:1f: b4:f4:e6:cd:fc:1d:77:97:3e:78:7f:aa:c1:ac:43: 8c:db:67:e0:2b:d4:95:73:fa:00:b8:5a:06:23:2e: 3c:3e:97:25:67:a9:60:ed:d5:6e:ef:10:81:6d:b7: e9:3b:4f:df:22:5b:73:30:f6:40:b3:61:a1:20:dd: f9:c3:72:2a:43:48:7f:20:94:e9:48:a7:3f:8d:bb: a0:2a:ba:78:f8:2a:58:77:1d:32:2f:a8:6e:9f:81: 7d:80:b2:a4:ed:a0:11:2b:63:9a:0c:37:4b:cf:a0: 2a:aa:f8:05:31:99:99:89:ff:25:3d:fc:e2:c7:cb: 61:cb:6f:69:f0:c8:e8:8a:3e:33:83:d3:51:92:fe: 79:0e:57:ea:66:17:cf:c0:c4:18:88:69:ad:0d:e6: 13:94:72:d6:3c:9e:74:3d:38:72:45:37:ea:e2:7e: 38:a0:53:77:d4:ea:8b:64:14:4d:b5:47:bc:97:d7: 19:d2:81:8e:8d:5c:48:dd:1d:2e:55:f7:ef:fe:72: 6a:3e:4c:88:60:7d:3e:d5:c7:b9:b8:e0:d2:4c:ea: 43:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:46:6F:F4:D2:B1:31:51:D6:72:CA:35:34:6A:22:30:35:81:9E:B1 X509v3 Authority Key Identifier: keyid:10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:25:9f:2d:a0:41:2f:aa:7c:2c:8f:db:91:5c:f8:e7:ef:e5: 62:1e:0e:8f:0c:65:9c:ec:d8:58:6e:30:6e:7e:e2:3c:c5:84: 3e:54:d7:c9:e7:c5:d4:11:de:53:70:8f:31:51:6e:86:ef:b9: f6:27:d9:8a:1d:69:5e:16:64:27:ab:10:89:ba:8c:5c:51:60: 7a:2e:a6:0f:82:d8:91:6d:a1:9f:4a:b8:7d:88:cb:9b:97:5e: 43:86:39:91:24:fa:bf:9b:7d:54:f6:a8:ee:6f:d8:c1:53:da: 95:8d:71:4a:43:de:00:70:e0:19:bb:e1:1e:38:28:c7:94:19: d7:a4:0b:f2:8e:70:53:6c:00:7e:2f:46:10:c1:ee:8e:78:76: 1e:65:a5:44:2a:18:91:3a:4a:fd:7c:04:5b:ba:e2:86:cc:3e: 69:47:2d:94:8d:db:d0:ea:e4:3b:6c:3a:11:7e:dc:87:98:a0: 64:1c:e0:93:76:e4:e9:83:f3:8f:82:46:47:2a:60:1b:0d:70: 2e:4b:7d:eb:46:70:83:b3:ca:33:eb:fe:1a:c8:55:ba:66:cd: 2a:9c:b8:59:08:aa:ab:b4:6c:07:48:10:26:36:69:46:53:53: ae:e9:af:cf:c6:ca:80:74:e9:0b:be:b6:b6:b6:5b:24:c3:0f: ee:d7:2e:4f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUBFacCpunwf80rhskCznQF9Z3aI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCNTEzMzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRD NkJBNkE0MjAeFw0yNjEwMDExMDU5MjFaFw0yNjEwMDIxMjIzMjFaMDMxMTAvBgNV BAMTKDFGNDY2RkY0RDJCMTMxNTFENjcyQ0EzNTM0NkEyMjMwMzU4MTlFQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzvpWLXDnAAblv3RcXbdy+DrRF HW60/qZm8VGeWw5+hwMrKf2M4fTvRIoMH7T05s38HXeXPnh/qsGsQ4zbZ+Ar1JVz +gC4WgYjLjw+lyVnqWDt1W7vEIFtt+k7T98iW3Mw9kCzYaEg3fnDcipDSH8glOlI pz+Nu6Aqunj4Klh3HTIvqG6fgX2AsqTtoBErY5oMN0vPoCqq+AUxmZmJ/yU9/OLH y2HLb2nwyOiKPjOD01GS/nkOV+pmF8/AxBiIaa0N5hOUctY8nnQ9OHJFN+rifjig U3fU6otkFE21R7yX1xnSgY6NXEjdHS5V9+/+cmo+TIhgfT7Vx7m44NJM6kMZAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUH0Zv9NKxMVHWcso1NGoiMDWBnrEwHwYDVR0j BBgwFoAUELUTOcW8znCcttahSSGq9Ma6akIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2VjYjM0YjA0NjkxZTQ5OTVhNjA2OTUyZTgzNmI0ZWNjLzAv MTBCNTEzMzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRDNkJBNkE0Mi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xMEI1MTMzOUM1QkNDRTcwOUNCNkQ2QTE0OTIxQUFG NEM2QkE2QTQyLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2VjYjM0 YjA0NjkxZTQ5OTVhNjA2OTUyZTgzNmI0ZWNjLzAvMTBCNTEzMzlDNUJDQ0U3MDlD QjZENkExNDkyMUFBRjRDNkJBNkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJclny2gQS+qfCyP25Fc +Ofv5WIeDo8MZZzs2FhuMG5+4jzFhD5U18nnxdQR3lNwjzFRbobvufYn2YodaV4W ZCerEIm6jFxRYHoupg+C2JFtoZ9KuH2Iy5uXXkOGOZEk+r+bfVT2qO5v2MFT2pWN cUpD3gBw4Bm74R44KMeUGdekC/KOcFNsAH4vRhDB7o54dh5lpUQqGJE6Sv18BFu6 4obMPmlHLZSN29Dq5DtsOhF+3IeYoGQc4JN25OmD84+CRkcqYBsNcC5LfetGcIOz yjPr/hrIVbpmzSqcuFkIqqu0bAdIECY2aUZTU67pr8/GyoB06Qu+tra2WyTDD+7X Lk8= -----END CERTIFICATE-----Generated at Thu Oct 1 20:59:54 2026 by rpki-client