$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft File: B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json) Hash identifier: D+x3ddNEA4cOxoMSWRRTv3gzzT8vS38VmuSmiRKKLCE= Subject key identifier: F8:C1:7E:AB:B6:57:BE:22:0D:AF:66:41:62:FC:E4:C8:AB:C2:43:93 Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 Certificate issuer: /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Certificate serial: 6EFC5A8E14E137B9EB971F5BAFD1C12B4851806A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft Manifest number: 0335 Signing time: Thu 30 Apr 2026 00:52:22 +0000 Manifest this update: Thu 30 Apr 2026 00:47:22 +0000 Manifest next update: Fri 01 May 2026 02:28:22 +0000 Files and hashes: 1: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: nMLfH1nYsI5mPwv+N0MEzTUVq1YFB35SCmO/3EjXxsg=) 2: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: tOaIT6qTvs/T2L2c3rEpmXq3gx7f0jW4s/J1R0UAbuM=) 3: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: JJw20FGjuHFJtnvEUeAVGvixAa+BmL7kA2oFNzRN9MM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 02:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:fc:5a:8e:14:e1:37:b9:eb:97:1f:5b:af:d1:c1:2b:48:51:80:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Validity Not Before: Apr 30 00:47:22 2026 GMT Not After : May 1 02:28:22 2026 GMT Subject: CN=F8C17EABB657BE220DAF664162FCE4C8ABC24393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c4:3e:5b:e8:66:35:95:8f:f9:33:3a:15:16: 93:71:d2:d4:4c:10:47:a0:a5:ae:55:94:bc:44:f4: 59:58:f2:4a:09:dc:57:bb:d1:8a:20:6c:60:c3:c1: 54:d3:ab:bc:e4:33:22:6a:19:83:f2:01:83:32:bc: a0:51:17:bb:87:2f:5a:71:10:f8:8f:ce:3f:b3:a8: 64:98:a3:e2:6d:f7:6c:4c:7b:55:42:ef:e9:0f:41: 10:a6:73:44:63:be:ea:b1:df:94:c9:21:eb:52:10: 95:cb:15:41:eb:fa:35:a7:a8:11:57:42:7a:fc:24: 51:aa:56:8b:a7:db:93:81:f3:3c:dc:24:1a:1f:3c: 86:93:11:9c:4e:14:95:67:5e:8a:25:40:91:5a:a4: 2e:aa:9c:99:3f:6c:69:b0:b4:33:a6:69:72:41:15: 01:e8:1d:f7:99:89:f9:c1:fb:39:56:f8:db:c8:69: 93:f7:b9:fd:a9:93:4b:00:6f:f3:96:63:ba:31:69: a2:9a:46:78:f0:a7:75:98:97:1e:b5:9a:43:06:c9: 88:73:a5:ab:b3:a6:37:59:6f:d5:cd:2f:59:7b:65: 3e:bf:58:b6:62:c0:6c:5e:28:01:fc:21:06:9c:d2: c5:23:bd:f5:58:40:3c:8e:0e:3d:bb:0b:62:5e:07: 65:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C1:7E:AB:B6:57:BE:22:0D:AF:66:41:62:FC:E4:C8:AB:C2:43:93 X509v3 Authority Key Identifier: keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:2c:dd:2f:34:51:f1:df:7b:a3:64:48:1d:f7:ff:12:33:6e: 13:66:2b:9b:05:1e:19:67:d0:83:8d:cd:c8:f0:85:b4:03:c4: 39:a8:8c:91:5b:01:45:a7:0f:b8:09:5c:bc:1f:b7:e9:ee:f5: 81:01:65:95:22:dd:c5:aa:99:43:62:25:78:db:be:3e:92:38: 1d:3c:16:2a:34:58:50:53:b8:ed:c9:43:1c:e8:d3:78:5e:07: 97:7a:45:c4:9f:3d:8c:79:8f:cf:aa:aa:e7:c1:6c:9f:15:ab: 95:db:39:4b:81:17:fc:07:ef:29:e5:cb:41:32:20:6b:05:ad: 73:73:82:44:58:fc:61:7a:57:dd:04:2a:f0:c6:f0:9f:b2:d1: f0:c6:7f:55:71:1d:1f:99:68:3f:27:34:08:7f:0f:37:c7:7b: 22:ca:02:67:59:3d:9c:0f:7b:cf:b3:e6:f1:2c:98:82:ed:7a: 25:71:8e:19:c5:04:57:73:ec:e9:4b:51:f7:83:dc:73:09:7a: c9:6d:34:c8:a2:9b:e5:de:5f:b3:55:4b:23:8b:6e:28:78:b9: 16:79:4a:2e:24:9f:83:b1:49:60:7f:65:7d:6f:4f:b8:ad:5d: d8:ef:48:96:b4:96:b4:c8:b6:99:fa:fc:20:6f:a0:fc:ef:bc: 3d:0d:e5:9d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUbvxajhThN7nrlx9br9HBK0hRgGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG MjFFMDUxODAeFw0yNjA0MzAwMDQ3MjJaFw0yNjA1MDEwMjI4MjJaMDMxMTAvBgNV BAMTKEY4QzE3RUFCQjY1N0JFMjIwREFGNjY0MTYyRkNFNEM4QUJDMjQzOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSxD5b6GY1lY/5MzoVFpNx0tRM EEegpa5VlLxE9FlY8koJ3Fe70YogbGDDwVTTq7zkMyJqGYPyAYMyvKBRF7uHL1px EPiPzj+zqGSYo+Jt92xMe1VC7+kPQRCmc0Rjvuqx35TJIetSEJXLFUHr+jWnqBFX Qnr8JFGqVoun25OB8zzcJBofPIaTEZxOFJVnXoolQJFapC6qnJk/bGmwtDOmaXJB FQHoHfeZifnB+zlW+NvIaZP3uf2pk0sAb/OWY7oxaaKaRnjwp3WYlx61mkMGyYhz pauzpjdZb9XNL1l7ZT6/WLZiwGxeKAH8IQac0sUjvfVYQDyODj27C2JeB2WlAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU+MF+q7ZXviINr2ZBYvzkyKvCQ5MwHwYDVR0j BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD OEYyMUUwNTE4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzBhNDYz N2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAvQjg4QTk0RENBMDlFM0E2NTND MDZGNDc4NDM0REM3QzhGMjFFMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK8s3S80UfHfe6NkSB33 /xIzbhNmK5sFHhln0IONzcjwhbQDxDmojJFbAUWnD7gJXLwft+nu9YEBZZUi3cWq mUNiJXjbvj6SOB08Fio0WFBTuO3JQxzo03heB5d6RcSfPYx5j8+qqufBbJ8Vq5Xb OUuBF/wH7ynly0EyIGsFrXNzgkRY/GF6V90EKvDG8J+y0fDGf1VxHR+ZaD8nNAh/ DzfHeyLKAmdZPZwPe8+z5vEsmILteiVxjhnFBFdz7OlLUfeD3HMJesltNMiim+Xe X7NVSyOLbih4uRZ5Si4kn4OxSWB/ZX1vT7itXdjvSJa0lrTItpn6/CBvoPzvvD0N 5Z0= -----END CERTIFICATE-----Generated at Thu Apr 30 15:09:48 2026 by rpki-client