
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
File: B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json)
Hash identifier: NzoIcHGuf7yQOrdTVcDwF+rYT4CvIwFILBoz00gMiVE=
Subject key identifier: 71:DF:6F:0A:05:08:0C:3F:E4:FE:F7:D7:99:49:BD:70:2E:80:1F:CE
Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
Certificate issuer: /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Certificate serial: 05A57570FF7652001F6FDFCF40D5F71341662C4B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
Manifest number: 0336
Signing time: Thu 30 Apr 2026 04:52:55 +0000
Manifest this update: Thu 30 Apr 2026 04:47:55 +0000
Manifest next update: Fri 01 May 2026 07:20:55 +0000
Files and hashes: 1: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: MlubGqxKcu9/AdY4j4/cMK0ZlCKeMWkqNbhfRk1N6mE=)
2: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: ipFG+RwxRpG2fGOySLjk8IfBpneAkHae/nBmafrkPLY=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:a5:75:70:ff:76:52:00:1f:6f:df:cf:40:d5:f7:13:41:66:2c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Validity
Not Before: Apr 30 04:47:55 2026 GMT
Not After : May 1 07:20:55 2026 GMT
Subject: CN=71DF6F0A05080C3FE4FEF7D79949BD702E801FCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:62:dd:28:47:76:7e:7f:d2:b2:94:04:28:
30:06:88:8a:0c:c1:57:27:a1:88:68:a9:8f:c3:df:
73:a3:fa:72:b0:c0:61:27:27:26:c3:a0:ff:9d:3a:
6a:5a:95:3d:86:7a:7a:f2:40:5f:b3:f2:ee:62:19:
60:de:df:c6:d9:bc:d0:fa:25:10:6c:28:11:1e:f8:
cb:46:52:ca:ae:93:c6:89:7e:f9:22:62:e2:98:aa:
42:77:f2:bd:5b:1a:9b:40:99:b1:9f:fb:54:62:b8:
6f:e6:02:92:06:3f:88:d7:e6:85:da:f2:dc:4a:58:
08:7f:7e:51:97:27:91:c4:e5:b2:d0:e1:73:ba:57:
db:7e:eb:48:38:ef:16:e1:01:31:6a:eb:5c:17:8f:
1d:ff:43:fe:ef:73:23:cd:24:6c:a8:96:71:a9:3b:
67:e7:90:a1:76:f7:b0:91:ef:b9:ed:c1:fa:f6:15:
9b:70:90:a6:da:79:61:51:cd:4e:86:53:e2:dd:5d:
b1:aa:45:75:c4:13:97:a2:0b:19:ed:ff:76:5a:dc:
f8:04:be:44:1c:26:e7:84:17:ab:03:56:6d:c2:d7:
62:20:3d:3e:9d:af:d7:ee:2c:0f:2e:cf:1b:cd:02:
bd:23:41:4f:b7:0d:d4:66:20:7f:1c:be:34:84:57:
25:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DF:6F:0A:05:08:0C:3F:E4:FE:F7:D7:99:49:BD:70:2E:80:1F:CE
X509v3 Authority Key Identifier:
keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:99:86:99:d3:70:3c:35:fa:e9:ba:0a:48:1a:c5:19:57:83:
84:73:32:79:07:ee:09:ca:d6:37:a1:ac:14:d1:e6:15:1f:83:
ed:85:b7:7b:9f:36:b1:1a:4b:4b:cd:92:fa:82:ed:55:c9:6a:
47:5c:79:11:f5:58:b7:1d:bf:38:2f:7d:46:c8:b2:65:44:11:
98:4a:66:96:7b:51:64:b7:3a:3e:ac:aa:18:c5:58:aa:9d:b0:
1b:6b:76:37:22:a2:b4:cb:d0:d1:e0:1b:5f:f0:aa:84:fc:34:
83:4f:fe:37:86:b5:f0:db:27:05:5c:74:27:f2:bd:ed:ac:4c:
6f:5d:b0:da:47:5e:8a:d1:b0:1c:1c:df:e9:88:83:cb:f4:33:
d5:78:0d:d1:5b:54:38:1c:9b:de:e4:30:7c:87:80:5a:04:f9:
c6:6b:56:d1:79:73:93:1d:fb:34:c0:9f:32:a6:1e:f4:59:6b:
8f:75:60:29:34:56:6b:4e:ad:d9:5e:46:f1:17:02:63:f8:d2:
70:09:f9:28:c1:36:24:92:8a:4d:33:c7:e6:4a:8e:97:60:9f:
ba:a5:b7:84:b0:60:69:a9:ca:74:af:ce:45:db:94:ed:f8:e0:
77:85:97:60:55:43:02:6a:3f:30:f9:c0:87:45:6d:c1:3c:8f:
00:36:d8:62
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUBaV1cP92UgAfb9/PQNX3E0FmLEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RE
RUEwODc3NzAeFw0yNjA0MzAwNDQ3NTVaFw0yNjA1MDEwNzIwNTVaMDMxMTAvBgNV
BAMTKDcxREY2RjBBMDUwODBDM0ZFNEZFRjdENzk5NDlCRDcwMkU4MDFGQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1pmLdKEd2fn/SspQEKDAGiIoM
wVcnoYhoqY/D33Oj+nKwwGEnJybDoP+dOmpalT2GenryQF+z8u5iGWDe38bZvND6
JRBsKBEe+MtGUsquk8aJfvkiYuKYqkJ38r1bGptAmbGf+1RiuG/mApIGP4jX5oXa
8txKWAh/flGXJ5HE5bLQ4XO6V9t+60g47xbhATFq61wXjx3/Q/7vcyPNJGyolnGp
O2fnkKF297CR77ntwfr2FZtwkKbaeWFRzU6GU+LdXbGqRXXEE5eiCxnt/3Za3PgE
vkQcJueEF6sDVm3C12IgPT6dr9fuLA8uzxvNAr0jQU+3DdRmIH8cvjSEVyWlAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUcd9vCgUIDD/k/vfXmUm9cC6AH84wHwYDVR0j
BBgwFoAUuCIqhFwM3Fno02muI+EWzd6gh3cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzA5ODBlMjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAv
QjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy9CODIyMkE4NDVDMENEQzU5RThEMzY5QUUyM0UxMTZD
RERFQTA4Nzc3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzA5ODBl
MjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAvQjgyMjJBODQ1QzBDREM1OUU4
RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHyZhpnTcDw1+um6Ckga
xRlXg4RzMnkH7gnK1jehrBTR5hUfg+2Ft3ufNrEaS0vNkvqC7VXJakdceRH1WLcd
vzgvfUbIsmVEEZhKZpZ7UWS3Oj6sqhjFWKqdsBtrdjciorTL0NHgG1/wqoT8NINP
/jeGtfDbJwVcdCfyve2sTG9dsNpHXorRsBwc3+mIg8v0M9V4DdFbVDgcm97kMHyH
gFoE+cZrVtF5c5Md+zTAnzKmHvRZa491YCk0VmtOrdleRvEXAmP40nAJ+SjBNiSS
ik0zx+ZKjpdgn7qlt4SwYGmpynSvzkXblO344HeFl2BVQwJqPzD5wIdFbcE8jwA2
2GI=
-----END CERTIFICATE-----
Generated at Thu Apr 30 14:54:21 2026 by rpki-client