$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft File: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft (raw, json) Hash identifier: qr9hzHXiwlVKzwq7NS/YlAtP2JUh3baQLW+1nPV6Ec8= Subject key identifier: 4A:9A:F4:D0:03:D9:C3:B9:A9:9F:D8:04:3F:C1:C7:51:B5:28:71:D9 Authority key identifier: 06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5 Certificate issuer: /CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5 Certificate serial: 1D11E3DBC884ECFBED0DB9B02B11B0F8F62A099C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft Manifest number: 0339 Signing time: Wed 29 Apr 2026 23:47:08 +0000 Manifest this update: Wed 29 Apr 2026 23:42:08 +0000 Manifest next update: Fri 01 May 2026 02:12:08 +0000 Files and hashes: 1: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl (hash: nMpxDwv0GoElTAdxU5SI832dJvTCgNTHlcmjxNvo4hk=) 2: 326131313a663263303a666663343a3a2f34382d3438203d3e20323136333733.roa (hash: iTb04aO1BMGaSLDC3asTwY2ZRYrbTl7Ocrr3rHizQyw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 02:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:11:e3:db:c8:84:ec:fb:ed:0d:b9:b0:2b:11:b0:f8:f6:2a:09:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5 Validity Not Before: Apr 29 23:42:08 2026 GMT Not After : May 1 02:12:08 2026 GMT Subject: CN=4A9AF4D003D9C3B9A99FD8043FC1C751B52871D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:37:b0:c8:56:93:8b:29:da:03:e0:67:4d:1e: 77:5b:16:66:fb:d8:bb:09:92:23:3d:4f:8b:2e:75: 6d:b2:6e:69:b9:22:fa:29:fc:b0:04:89:95:dc:bf: be:bc:70:d9:55:c0:a7:ad:dc:6e:ba:e2:a6:6a:df: fb:8b:58:27:30:1e:da:f5:5a:25:cc:c4:ef:88:61: 54:d5:c1:7b:59:67:0d:e1:0b:a0:f5:17:af:0f:df: c7:17:30:a3:04:2c:46:6c:32:30:bf:84:4e:f0:be: 67:bf:89:75:d7:0f:95:9a:46:b5:bb:f6:14:d8:28: 56:94:af:27:61:82:d7:68:fa:07:90:56:cf:5c:f6: 38:e1:0e:89:2f:1b:20:f2:5e:91:e8:d6:97:40:31: e1:f3:48:96:f3:27:66:cb:c0:9c:31:1b:8f:5f:02: 4d:c2:00:0c:80:69:5b:f1:e6:7e:46:f6:a2:dc:b9: 1f:5d:14:47:0a:ea:a3:59:7d:c9:2d:67:f7:d8:78: e3:06:48:90:0d:d0:d4:4b:5f:1e:61:ea:2a:40:d3: 0b:63:00:1f:4d:47:09:41:dd:9e:12:f8:64:44:da: e1:04:69:5f:7c:24:14:78:6b:e2:89:db:96:f3:9e: 25:3e:9e:b2:f5:2e:49:a3:02:f1:de:0b:c0:9f:7e: 04:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9A:F4:D0:03:D9:C3:B9:A9:9F:D8:04:3F:C1:C7:51:B5:28:71:D9 X509v3 Authority Key Identifier: keyid:06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8a:0f:ee:f1:4a:36:ab:3d:3a:7b:c6:2a:b4:1c:56:65:93: 11:1a:99:2e:01:2f:ab:1b:e0:a0:58:08:51:1b:d2:8d:27:41: 93:f1:12:13:79:00:68:0a:93:24:34:c5:dc:00:34:c9:85:d4: d4:83:b2:d8:dc:62:26:e9:42:25:2e:bc:9b:0f:d3:dc:67:14: 35:52:b8:6e:e8:3d:cc:e0:22:99:7c:5c:5a:f9:3f:a8:7c:c6: 7d:18:7a:2a:a5:b5:b0:ff:98:db:8d:40:f0:f3:25:e2:43:a9: 65:86:b3:43:ae:64:e4:bd:1a:e5:4a:ab:45:86:cd:a7:94:04: d8:63:36:0c:71:d3:40:50:0b:dd:b4:ca:d9:ae:65:2e:29:10: b6:04:95:49:f2:30:8e:37:27:e1:76:43:2a:b5:ec:b5:30:34: 9e:0a:99:f7:5f:28:89:a6:8f:14:7b:2d:df:b5:e4:d5:8c:de: 46:43:92:20:1e:18:01:4d:cc:d9:91:2d:08:bf:62:c4:50:61: 6e:c5:2f:1d:9c:c3:56:8f:ba:75:00:15:42:fd:1e:cf:0c:a6: 98:70:21:c9:50:50:a5:e4:61:a1:55:99:8f:2a:eb:3c:3b:94: 28:bf:ad:1d:5d:96:06:a4:72:de:45:78:de:cc:98:4a:c3:32: 7a:8b:27:c0 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUHRHj28iE7PvtDbmwKxGw+PYqCZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3REJDNkJDRjBGOTU4MkRGNzgzNjYzODlBRUFGNTk2 NTU2NUVGNTAeFw0yNjA0MjkyMzQyMDhaFw0yNjA1MDEwMjEyMDhaMDMxMTAvBgNV BAMTKDRBOUFGNEQwMDNEOUMzQjlBOTlGRDgwNDNGQzFDNzUxQjUyODcxRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbN7DIVpOLKdoD4GdNHndbFmb7 2LsJkiM9T4sudW2ybmm5Ivop/LAEiZXcv768cNlVwKet3G664qZq3/uLWCcwHtr1 WiXMxO+IYVTVwXtZZw3hC6D1F68P38cXMKMELEZsMjC/hE7wvme/iXXXD5WaRrW7 9hTYKFaUrydhgtdo+geQVs9c9jjhDokvGyDyXpHo1pdAMeHzSJbzJ2bLwJwxG49f Ak3CAAyAaVvx5n5G9qLcuR9dFEcK6qNZfcktZ/fYeOMGSJAN0NRLXx5h6ipA0wtj AB9NRwlB3Z4S+GRE2uEEaV98JBR4a+KJ25bzniU+nrL1LkmjAvHeC8CffgRRAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUSpr00APZw7mpn9gEP8HHUbUocdkwHwYDVR0j BBgwFoAUBn28a88PlYLfeDZjia6vWWVWXvUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzAxNGI5MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzAv MDY3REJDNkJDRjBGOTU4MkRGNzgzNjYzODlBRUFGNTk2NTU2NUVGNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wNjdEQkM2QkNGMEY5NTgyREY3ODM2NjM4OUFFQUY1 OTY1NTY1RUY1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzAxNGI5 MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzAvMDY3REJDNkJDRjBGOTU4MkRG NzgzNjYzODlBRUFGNTk2NTU2NUVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAA6KD+7xSjarPTp7xiq0 HFZlkxEamS4BL6sb4KBYCFEb0o0nQZPxEhN5AGgKkyQ0xdwANMmF1NSDstjcYibp QiUuvJsP09xnFDVSuG7oPczgIpl8XFr5P6h8xn0YeiqltbD/mNuNQPDzJeJDqWWG s0OuZOS9GuVKq0WGzaeUBNhjNgxx00BQC920ytmuZS4pELYElUnyMI43J+F2Qyq1 7LUwNJ4KmfdfKImmjxR7Ld+15NWM3kZDkiAeGAFNzNmRLQi/YsRQYW7FLx2cw1aP unUAFUL9Hs8MpphwIclQUKXkYaFVmY8q6zw7lCi/rR1dlgakct5FeN7MmErDMnqL J8A= -----END CERTIFICATE-----Generated at Thu Apr 30 14:54:10 2026 by rpki-client