$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json) Hash identifier: XcScqF1X33QFJmRFQqCTY10DXgUGEki89J0Cdj+zKhQ= Subject key identifier: A3:D1:DE:FC:80:78:31:B0:D3:85:4E:05:26:65:71:9C:D8:A9:1B:32 Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Certificate serial: 0939B15CC1520560DADCB2F0B767F89F70C4C525 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft Manifest number: 0212 Signing time: Thu 26 Feb 2026 05:47:54 +0000 Manifest this update: Thu 26 Feb 2026 05:42:52 +0000 Manifest next update: Fri 27 Feb 2026 07:43:52 +0000 Files and hashes: 1: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: ITQrZBYZdTcJL1U2y1C3x4NdQpm/Dma5sbUQ/U1RjIw=) 2: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: V7a7LRqWRSavnh0Ifl2d/PovkOzhE52bZJXDIw2uFaM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Feb 2026 07:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:39:b1:5c:c1:52:05:60:da:dc:b2:f0:b7:67:f8:9f:70:c4:c5:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Validity Not Before: Feb 26 05:42:52 2026 GMT Not After : Feb 27 07:43:52 2026 GMT Subject: CN=A3D1DEFC807831B0D3854E052665719CD8A91B32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:37:70:e5:cb:b4:4a:85:8c:3d:13:42:7e: 1b:d5:93:e5:10:36:a8:61:db:bf:82:95:8f:fd:ea: 89:97:17:4b:96:ce:88:5e:70:60:6c:9f:a7:30:31: 5e:48:1a:9f:92:a6:88:9e:92:58:c4:d6:4d:e7:b0: 32:78:6d:26:52:9c:fa:1a:48:f3:8f:93:b8:49:f1: 45:10:e0:01:8c:74:11:c7:9a:fa:39:3a:be:c6:ff: 39:33:a3:e4:ba:88:f4:07:7c:37:52:4a:d1:a1:cd: f1:57:4b:47:f2:78:2c:76:5e:02:37:b6:41:dc:7a: 74:40:5c:25:8f:22:0a:87:a2:4f:a5:80:a8:8c:20: e6:05:56:22:fa:51:94:0e:bf:a6:1c:9e:48:70:00: b7:e2:97:ef:f9:97:5d:ee:86:ff:ed:a4:1c:e3:8a: f9:0d:41:71:33:56:5f:93:a1:0f:85:36:d6:28:b3: 0a:4d:08:9d:f6:ae:51:4a:72:ab:fc:fc:08:d1:71: 6c:f4:3e:26:92:6e:40:b9:fe:f2:e1:39:37:32:c6: b2:89:94:7a:5b:5e:d1:b0:1e:13:32:62:72:6e:74: 48:d7:41:f7:b3:3a:3a:89:7e:1b:9a:89:db:fd:90: 62:26:da:af:d5:c4:d8:92:70:df:11:e6:35:c4:63: 54:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D1:DE:FC:80:78:31:B0:D3:85:4E:05:26:65:71:9C:D8:A9:1B:32 X509v3 Authority Key Identifier: keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:84:7a:a5:e5:5f:9a:f5:35:d0:da:99:74:b3:a0:ac:b1:28: 58:80:c2:b0:7f:69:d9:21:2b:7d:ec:37:76:19:84:10:3d:e4: a5:57:ec:ee:09:e9:7d:72:ae:e3:b9:72:0d:3f:28:68:11:ad: be:b4:29:91:51:41:8c:ed:07:f2:ed:c7:d8:0c:ed:7a:1d:1b: c1:a2:67:65:44:72:61:de:a1:21:db:22:4a:72:a1:75:17:f5: 08:c5:41:1d:4a:86:bd:56:b0:c6:da:b5:a8:0a:56:47:82:8e: d6:db:67:c9:67:c5:92:69:47:11:be:cf:4a:b8:eb:68:6c:40: bb:47:47:0e:00:fe:10:2d:e8:55:47:ee:96:81:79:0f:7e:a6: ff:1f:a9:32:54:0f:3b:78:bc:bd:83:c8:1f:98:1e:bc:fa:a3: fa:0e:de:dd:1e:44:c8:4c:ce:8a:c3:71:9a:8d:27:92:95:5b: 7e:2c:87:6d:e7:c1:ce:8a:a9:fb:75:3a:05:00:0f:9e:20:9e: 08:4c:32:88:72:3b:f2:4f:59:07:be:87:33:cb:64:70:ea:8b: 82:1f:70:eb:b2:49:3a:b9:9e:76:77:35:6d:81:f6:11:3b:0f: 8c:bd:b9:52:d7:b6:de:d4:47:61:d0:ba:0b:ee:15:43:60:e6: 79:57:04:4c -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUCTmxXMFSBWDa3LLwt2f4n3DExSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdE NTQ3ODZEMzAeFw0yNjAyMjYwNTQyNTJaFw0yNjAyMjcwNzQzNTJaMDMxMTAvBgNV BAMTKEEzRDFERUZDODA3ODMxQjBEMzg1NEUwNTI2NjU3MTlDRDhBOTFCMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/fjdw5cu0SoWMPRNCfhvVk+UQ Nqhh27+ClY/96omXF0uWzohecGBsn6cwMV5IGp+SpoiekljE1k3nsDJ4bSZSnPoa SPOPk7hJ8UUQ4AGMdBHHmvo5Or7G/zkzo+S6iPQHfDdSStGhzfFXS0fyeCx2XgI3 tkHcenRAXCWPIgqHok+lgKiMIOYFViL6UZQOv6YcnkhwALfil+/5l13uhv/tpBzj ivkNQXEzVl+ToQ+FNtYoswpNCJ32rlFKcqv8/AjRcWz0PiaSbkC5/vLhOTcyxrKJ lHpbXtGwHhMyYnJudEjXQfezOjqJfhuaidv9kGIm2q/VxNiScN8R5jXEY1TLAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUo9He/IB4MbDThU4FJmVxnNipGzIwHwYDVR0j BBgwFoAUbZS517fBinpJen6fXi4il9VHhtMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzFlYmZkNTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAv NkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82RDk0QjlEN0I3QzE4QTdBNDk3QTdFOUY1RTJFMjI5 N0Q1NDc4NkQzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzFlYmZk NTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAvNkQ5NEI5RDdCN0MxOEE3QTQ5 N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAOEeqXlX5r1NdDamXSz oKyxKFiAwrB/adkhK33sN3YZhBA95KVX7O4J6X1yruO5cg0/KGgRrb60KZFRQYzt B/Ltx9gM7XodG8GiZ2VEcmHeoSHbIkpyoXUX9QjFQR1Khr1WsMbatagKVkeCjtbb Z8lnxZJpRxG+z0q462hsQLtHRw4A/hAt6FVH7paBeQ9+pv8fqTJUDzt4vL2DyB+Y Hrz6o/oO3t0eRMhMzorDcZqNJ5KVW34sh23nwc6Kqft1OgUAD54gnghMMohyO/JP WQe+hzPLZHDqi4IfcOuySTq5nnZ3NW2B9hE7D4y9uVLXtt7UR2HQugvuFUNg5nlX BEw= -----END CERTIFICATE-----Generated at Thu Feb 26 10:38:36 2026 by rpki-client