$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft File: BBED14E9793905EC1EA5CE10AA03C497D737B115.mft (raw, json) Hash identifier: oAUTgn93rVGbiFAtzRdcdx9jMSYE/86nSHBTZvEa6lU= Subject key identifier: 0A:68:84:7E:81:29:95:44:FC:20:6D:F3:CA:40:1E:54:06:F6:8B:53 Authority key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 Certificate issuer: /CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Certificate serial: 0A7D690A651D2BC63E0F6B436A08A42D0B24F188 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft Manifest number: 032B Signing time: Thu 30 Apr 2026 09:08:34 +0000 Manifest this update: Thu 30 Apr 2026 09:03:34 +0000 Manifest next update: Fri 01 May 2026 12:22:34 +0000 Files and hashes: 1: 326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (hash: MpewGrhFOYc7jc70q6ubpOkEuQ0IJ7Wp+DrSPfwP1vQ=) 2: BBED14E9793905EC1EA5CE10AA03C497D737B115.crl (hash: pIufp9hwXdoq4kStx3dzKRx42eYbD6916E7RXIypzHI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:7d:69:0a:65:1d:2b:c6:3e:0f:6b:43:6a:08:a4:2d:0b:24:f1:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Validity Not Before: Apr 30 09:03:34 2026 GMT Not After : May 1 12:22:34 2026 GMT Subject: CN=0A68847E81299544FC206DF3CA401E5406F68B53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:58:4a:11:3a:78:89:87:1f:f7:d1:0c:9b:9e: 30:32:18:64:4b:65:46:2a:f2:4c:74:12:a5:54:17: ff:3a:70:6e:6c:9d:64:2d:b4:95:e7:41:89:ca:cf: 40:42:9b:19:84:f7:78:10:e2:66:71:06:03:d0:6e: ae:66:d3:9a:d1:f8:e4:1f:51:e9:b3:e8:38:e9:e6: 64:93:f0:b9:f7:d2:2c:31:ff:cb:5a:b0:2d:7f:54: 80:c7:fd:c2:ed:1c:04:59:a1:cb:25:78:0c:f4:0d: 92:57:a3:e1:c8:b3:26:f6:60:0a:e2:1e:28:b8:19: e8:d8:cd:13:a1:e7:ec:c0:14:10:4e:23:4f:25:07: 27:70:34:f5:30:5a:47:2a:f5:67:20:b9:58:c1:ef: c4:56:ae:47:f7:fa:cd:95:bd:4c:98:72:4b:fa:f4: 3e:01:a9:70:e6:26:aa:3e:ae:a7:88:7f:1b:21:90: 2e:8d:3c:9a:70:99:88:0c:be:2a:0d:21:8b:40:40: 78:61:2b:93:a3:dc:2b:44:56:b3:c9:b3:84:96:6c: f5:b7:f3:c9:3d:4e:38:37:d3:bb:c8:94:06:73:ca: 85:51:41:5c:c4:0a:2c:d0:31:b9:b1:4b:1a:2c:b3: 68:c7:33:12:e3:56:21:c5:f1:90:56:09:c0:f9:3b: 01:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:68:84:7E:81:29:95:44:FC:20:6D:F3:CA:40:1E:54:06:F6:8B:53 X509v3 Authority Key Identifier: keyid:BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:6a:84:d2:c7:33:ba:a7:64:1f:d9:49:34:79:b0:5c:ab:5d: 49:8a:ce:3f:cb:34:6d:99:be:db:3f:43:49:15:97:aa:c9:d5: d3:2d:47:ae:35:29:51:ac:eb:65:69:b2:a9:e8:60:fe:e0:07: 9e:1e:9c:7d:57:17:61:8c:d5:ca:7b:00:06:73:78:06:5f:8e: 38:f1:77:39:b6:e5:68:b3:86:9f:c5:cc:4e:df:6b:7a:b3:67: c1:12:41:69:8e:c2:44:f4:24:fc:3f:a8:09:6e:6f:d4:20:54: 8f:f0:1e:8d:f1:e5:c0:c8:f7:fb:23:42:97:1f:22:d8:4c:5f: ce:47:e2:c2:6c:39:88:42:d8:35:b7:08:c4:4e:37:26:cd:d8: 3d:e4:f9:05:7a:5f:9d:f5:cb:30:c2:9f:18:de:b0:b9:80:c3: 96:dc:1f:7e:c3:a3:0f:a0:7b:32:5c:d3:32:1b:74:79:dc:86: 40:f2:e5:2a:64:44:7d:0c:8a:74:4f:c4:01:aa:2f:95:f3:c6: 25:5a:0c:85:12:73:a4:3b:56:41:17:f7:5f:19:bd:04:16:06: eb:c4:0c:4a:82:0a:1e:03:e2:4c:78:b7:e0:04:e5:06:e5:4a: 2a:0c:e6:53:0b:12:ef:b7:28:d1:33:90:a2:b5:7f:11:e6:18: fb:d9:75:c1 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUCn1pCmUdK8Y+D2tDagikLQsk8YgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdE NzM3QjExNTAeFw0yNjA0MzAwOTAzMzRaFw0yNjA1MDExMjIyMzRaMDMxMTAvBgNV BAMTKDBBNjg4NDdFODEyOTk1NDRGQzIwNkRGM0NBNDAxRTU0MDZGNjhCNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpWEoROniJhx/30QybnjAyGGRL ZUYq8kx0EqVUF/86cG5snWQttJXnQYnKz0BCmxmE93gQ4mZxBgPQbq5m05rR+OQf Uemz6Djp5mST8Ln30iwx/8tasC1/VIDH/cLtHARZocsleAz0DZJXo+HIsyb2YAri Hii4GejYzROh5+zAFBBOI08lBydwNPUwWkcq9WcguVjB78RWrkf3+s2VvUyYckv6 9D4BqXDmJqo+rqeIfxshkC6NPJpwmYgMvioNIYtAQHhhK5Oj3CtEVrPJs4SWbPW3 88k9Tjg307vIlAZzyoVRQVzECizQMbmxSxoss2jHMxLjViHF8ZBWCcD5OwHVAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUCmiEfoEplUT8IG3zykAeVAb2i1MwHwYDVR0j BBgwFoAUu+0U6Xk5Bewepc4QqgPEl9c3sRUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNhOTdmNzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAv QkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdENzM3QjExNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CQkVEMTRFOTc5MzkwNUVDMUVBNUNFMTBBQTAzQzQ5 N0Q3MzdCMTE1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNhOTdm NzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAvQkJFRDE0RTk3OTM5MDVFQzFF QTVDRTEwQUEwM0M0OTdENzM3QjExNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH5qhNLHM7qnZB/ZSTR5 sFyrXUmKzj/LNG2Zvts/Q0kVl6rJ1dMtR641KVGs62VpsqnoYP7gB54enH1XF2GM 1cp7AAZzeAZfjjjxdzm25Wizhp/FzE7fa3qzZ8ESQWmOwkT0JPw/qAlub9QgVI/w Ho3x5cDI9/sjQpcfIthMX85H4sJsOYhC2DW3CMRONybN2D3k+QV6X531yzDCnxje sLmAw5bcH37Dow+gezJc0zIbdHnchkDy5SpkRH0MinRPxAGqL5XzxiVaDIUSc6Q7 VkEX918ZvQQWBuvEDEqCCh4D4kx4t+AE5QblSioM5lMLEu+3KNEzkKK1fxHmGPvZ dcE= -----END CERTIFICATE-----Generated at Thu Apr 30 14:54:22 2026 by rpki-client