$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft File: B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json) Hash identifier: 0nGBirIQjasW7713SsY2dq3BM4C0f6pEPCTt8ZTeKCA= Subject key identifier: B9:C5:36:ED:B1:67:20:64:BD:53:AC:14:36:5A:8B:79:AF:22:30:A6 Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77 Certificate issuer: /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777 Certificate serial: 397463583546BE9E2026594D51C22ED83B0975DC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft Manifest number: 03E1 Signing time: Thu 17 Sep 2026 16:12:57 +0000 Manifest this update: Thu 17 Sep 2026 16:07:57 +0000 Manifest next update: Fri 18 Sep 2026 17:37:57 +0000 Files and hashes: 1: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: elgEW1aflrNdCdgrDrZhMXXhu4mKyg1SqJu+vklMHhY=) 2: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: KBxbmvEMyWDuo4noX/9EH+BHSuxDOBzSZE18ndLhoeI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 14:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:74:63:58:35:46:be:9e:20:26:59:4d:51:c2:2e:d8:3b:09:75:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777 Validity Not Before: Sep 17 16:07:57 2026 GMT Not After : Sep 18 17:37:57 2026 GMT Subject: CN=B9C536EDB1672064BD53AC14365A8B79AF2230A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bd:9e:bb:e7:4e:2f:3a:9a:c8:e8:ab:48:0c: 56:07:33:b1:f7:6d:cb:46:c8:4a:f1:00:1d:f6:20: 93:3e:94:2f:33:18:4e:30:bb:04:82:88:06:87:3b: 4e:5a:ad:d8:3a:d1:4a:9c:4f:a6:fa:e3:f3:cd:55: 58:d7:f3:32:5e:c5:a4:dd:6d:1e:35:f8:eb:95:a0: 6e:e1:9f:58:1c:46:15:76:c0:89:c8:19:42:a4:70: 47:79:b2:79:a3:0d:cf:8f:cb:a8:50:ae:2d:f0:52: ef:d1:19:f3:1b:90:99:f2:59:39:e2:64:a1:86:71: c6:5b:79:f1:d9:67:3b:dc:9b:cf:45:10:c7:0e:7d: ce:65:50:23:25:88:c8:f5:10:87:77:1c:ab:c5:2b: 9b:b2:39:60:5a:f6:13:95:d5:ca:07:fd:63:76:8b: af:51:73:27:be:a4:72:b9:3e:f9:a5:df:5f:db:33: 1d:aa:20:74:d9:05:ed:e9:19:e8:dc:d9:54:33:aa: 9e:09:44:60:99:43:ff:4e:5b:74:b8:67:2e:fc:ef: d4:60:26:04:05:c5:8a:05:fc:a6:fa:80:e1:f2:ef: c4:93:f0:4b:b1:8e:b7:f9:65:1d:a9:9f:95:9e:3a: 43:d9:b0:2c:b1:be:92:29:c4:99:50:37:80:f7:0b: e1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C5:36:ED:B1:67:20:64:BD:53:AC:14:36:5A:8B:79:AF:22:30:A6 X509v3 Authority Key Identifier: keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a1:b2:92:b5:83:60:e0:29:c5:ee:4b:2a:6d:ea:b2:5d:b8: 81:b6:c4:c7:96:42:48:e2:89:96:a5:ef:c4:00:19:62:42:d3: 92:b2:a5:2b:0c:91:d1:b2:18:57:e8:1b:83:06:ec:60:45:5d: b4:e5:84:83:2e:a2:f4:5b:1c:5f:15:84:aa:4a:68:90:1a:e7: 49:21:6c:4f:74:af:91:4c:b6:76:0a:66:16:4e:3a:f1:b6:ff: 30:2c:4f:56:69:ef:01:21:32:79:3f:65:ab:8c:d4:8f:b1:27: 7a:ca:c6:f9:5c:4e:7e:dc:40:35:b1:2f:82:64:84:a1:68:73: a3:cd:87:50:6d:de:ba:0c:5d:c0:82:0b:f0:07:ee:18:36:5f: a4:27:94:cf:8b:1e:fb:3f:70:2a:a8:64:b1:4a:96:43:d4:18: 94:22:15:c8:53:1f:a4:a2:57:28:54:51:e9:ba:7c:b2:8e:a8: 97:d3:f2:a7:77:65:2a:29:64:cb:c5:55:f1:5d:06:47:e4:35: bc:f1:14:ce:6a:08:fe:3c:07:0d:74:7f:b2:88:96:b9:ec:7c: 95:45:0c:74:31:b5:e9:8b:41:18:08:7a:6d:37:d2:25:35:bb: 5b:20:38:94:bd:fa:42:af:34:1b:8f:77:ba:d8:7e:b3:bd:69: 4f:e0:0c:be -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUOXRjWDVGvp4gJllNUcIu2DsJddwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RE RUEwODc3NzAeFw0yNjA5MTcxNjA3NTdaFw0yNjA5MTgxNzM3NTdaMDMxMTAvBgNV BAMTKEI5QzUzNkVEQjE2NzIwNjRCRDUzQUMxNDM2NUE4Qjc5QUYyMjMwQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHvZ67504vOprI6KtIDFYHM7H3 bctGyErxAB32IJM+lC8zGE4wuwSCiAaHO05ardg60UqcT6b64/PNVVjX8zJexaTd bR41+OuVoG7hn1gcRhV2wInIGUKkcEd5snmjDc+Py6hQri3wUu/RGfMbkJnyWTni ZKGGccZbefHZZzvcm89FEMcOfc5lUCMliMj1EId3HKvFK5uyOWBa9hOV1coH/WN2 i69Rcye+pHK5Pvml31/bMx2qIHTZBe3pGejc2VQzqp4JRGCZQ/9OW3S4Zy7879Rg JgQFxYoF/Kb6gOHy78ST8Euxjrf5ZR2pn5WeOkPZsCyxvpIpxJlQN4D3C+HfAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUucU27bFnIGS9U6wUNlqLea8iMKYwHwYDVR0j BBgwFoAUuCIqhFwM3Fno02muI+EWzd6gh3cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzA5ODBlMjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAv QjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODIyMkE4NDVDMENEQzU5RThEMzY5QUUyM0UxMTZD RERFQTA4Nzc3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzA5ODBl MjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAvQjgyMjJBODQ1QzBDREM1OUU4 RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB6hspK1g2DgKcXuSypt 6rJduIG2xMeWQkjiiZal78QAGWJC05KypSsMkdGyGFfoG4MG7GBFXbTlhIMuovRb HF8VhKpKaJAa50khbE90r5FMtnYKZhZOOvG2/zAsT1Zp7wEhMnk/ZauM1I+xJ3rK xvlcTn7cQDWxL4JkhKFoc6PNh1Bt3roMXcCCC/AH7hg2X6QnlM+LHvs/cCqoZLFK lkPUGJQiFchTH6SiVyhUUem6fLKOqJfT8qd3ZSopZMvFVfFdBkfkNbzxFM5qCP48 Bw10f7KIlrnsfJVFDHQxtemLQRgIem030iU1u1sgOJS9+kKvNBuPd7rYfrO9aU/g DL4= -----END CERTIFICATE-----Generated at Thu Sep 17 23:58:11 2026 by rpki-client