$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft File: BBED14E9793905EC1EA5CE10AA03C497D737B115.mft (raw, json) Hash identifier: Wgqz/bRzzRFegGJsvIZBvLUKDsSuB1H70utNcNYAlAU= Subject key identifier: 04:D8:AA:2E:2C:0E:B1:48:26:E8:F6:18:C9:B2:5B:49:D1:CD:DD:44 Authority key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 Certificate issuer: /CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Certificate serial: 7A0630240F301B37EC34120BD7DA3044547D26BA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft Manifest number: 03D3 Signing time: Thu 17 Sep 2026 15:47:47 +0000 Manifest this update: Thu 17 Sep 2026 15:42:47 +0000 Manifest next update: Fri 18 Sep 2026 16:49:47 +0000 Files and hashes: 1: BBED14E9793905EC1EA5CE10AA03C497D737B115.crl (hash: lRvUf5pPv0GYbTOrPA4V6xYuPQWI9x0bGqtqejyJ5qg=) 2: 326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (hash: iB1A9jIxialpDzdT5FG7czmb2AtziEr97OBcvfPBU88=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 14:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:06:30:24:0f:30:1b:37:ec:34:12:0b:d7:da:30:44:54:7d:26:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Validity Not Before: Sep 17 15:42:47 2026 GMT Not After : Sep 18 16:49:47 2026 GMT Subject: CN=04D8AA2E2C0EB14826E8F618C9B25B49D1CDDD44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:49:f1:2e:68:cc:0b:38:97:32:46:18:8e:90: 76:c5:6a:f8:20:49:2f:27:ab:e9:e6:23:c2:3c:82: 3a:ab:69:5e:f0:8b:8f:f4:6d:13:bd:cd:1f:4b:d2: ef:42:7b:30:14:1b:d5:09:0b:41:57:11:b5:2b:a6: c9:34:ad:c4:8d:25:3e:29:72:89:5c:fe:4a:10:d2: c9:2e:f7:f3:e6:7c:9e:41:aa:3c:7f:55:db:12:31: 4a:53:b0:b0:53:59:3e:1e:d1:42:5e:86:00:73:fe: a3:05:5a:34:33:f1:38:2c:e6:5b:32:cf:96:b8:c0: cf:4e:84:da:7c:73:f2:61:bf:ae:4f:65:7c:2d:1b: f9:bf:42:3c:34:9b:43:76:52:dc:82:a7:7e:1a:39: c1:d1:f5:cb:26:f7:05:a4:1b:ba:2f:3e:0d:93:ad: 2c:de:c8:fb:41:d8:73:4b:ae:0e:46:85:b4:43:c0: a7:55:4c:c0:0c:94:1e:37:9c:bd:1a:ba:4e:75:3f: 44:3b:8e:ed:77:5e:e2:3e:64:c6:83:0d:b3:fa:d7: f9:0b:6c:61:fc:d3:d9:2f:4e:b6:c8:1e:7a:3d:73: c2:b3:61:99:c4:2d:c7:6c:2b:45:57:ff:1d:69:f3: bf:1e:88:e2:95:59:a6:59:b6:d5:79:de:46:34:d6: c7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D8:AA:2E:2C:0E:B1:48:26:E8:F6:18:C9:B2:5B:49:D1:CD:DD:44 X509v3 Authority Key Identifier: keyid:BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2a:ae:ec:73:c9:13:3a:ad:fd:a5:59:8a:74:19:aa:7a:41: 21:95:e0:1c:9a:7f:a2:b0:f6:28:a7:b9:09:e3:9b:91:54:b4: d4:f3:d1:e2:a8:03:ca:4a:3a:2d:37:de:12:f4:15:e4:8d:36: fb:cb:71:01:ca:06:2a:ea:7c:6e:35:00:f6:c4:b6:53:0f:2d: 13:c5:38:d3:dc:05:0a:81:cb:42:e5:bc:5b:5a:68:f0:63:a0: 2d:93:56:0f:08:6c:5b:34:9d:3d:fa:28:92:9e:41:80:d1:d1: 13:0e:5a:39:53:05:f2:03:3f:de:9e:6d:11:95:fa:e2:90:97: 20:e3:40:bd:97:01:79:62:04:64:39:21:84:78:c1:b6:07:b0: 33:6d:65:b3:00:ce:ae:0e:ca:24:e9:31:3a:6a:53:5f:d7:d2: 84:7d:42:8b:73:d9:aa:da:8d:1a:03:ec:e2:e3:7c:a6:5b:d1: 21:5f:af:eb:f3:f1:8c:65:f9:58:dd:a4:6c:30:0a:1c:1d:b0: 7c:00:f3:5d:63:e4:08:b3:c0:18:36:8e:a6:65:87:52:10:8a: 67:54:83:0d:02:7d:88:c8:63:02:60:7b:4e:f2:1a:b6:94:a5: e3:40:65:83:64:9e:7d:14:96:0e:b0:0f:38:d5:cb:12:d7:94: 06:63:23:7e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUegYwJA8wGzfsNBIL19owRFR9JrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdE NzM3QjExNTAeFw0yNjA5MTcxNTQyNDdaFw0yNjA5MTgxNjQ5NDdaMDMxMTAvBgNV BAMTKDA0RDhBQTJFMkMwRUIxNDgyNkU4RjYxOEM5QjI1QjQ5RDFDRERENDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrSfEuaMwLOJcyRhiOkHbFavgg SS8nq+nmI8I8gjqraV7wi4/0bRO9zR9L0u9CezAUG9UJC0FXEbUrpsk0rcSNJT4p colc/koQ0sku9/PmfJ5Bqjx/VdsSMUpTsLBTWT4e0UJehgBz/qMFWjQz8Tgs5lsy z5a4wM9OhNp8c/Jhv65PZXwtG/m/Qjw0m0N2UtyCp34aOcHR9csm9wWkG7ovPg2T rSzeyPtB2HNLrg5GhbRDwKdVTMAMlB43nL0auk51P0Q7ju13XuI+ZMaDDbP61/kL bGH809kvTrbIHno9c8KzYZnELcdsK0VX/x1p878eiOKVWaZZttV53kY01selAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUBNiqLiwOsUgm6PYYybJbSdHN3UQwHwYDVR0j BBgwFoAUu+0U6Xk5Bewepc4QqgPEl9c3sRUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNhOTdmNzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAv QkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdENzM3QjExNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CQkVEMTRFOTc5MzkwNUVDMUVBNUNFMTBBQTAzQzQ5 N0Q3MzdCMTE1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNhOTdm NzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAvQkJFRDE0RTk3OTM5MDVFQzFF QTVDRTEwQUEwM0M0OTdENzM3QjExNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI8qruxzyRM6rf2lWYp0 Gap6QSGV4Byaf6Kw9iinuQnjm5FUtNTz0eKoA8pKOi033hL0FeSNNvvLcQHKBirq fG41APbEtlMPLRPFONPcBQqBy0LlvFtaaPBjoC2TVg8IbFs0nT36KJKeQYDR0RMO WjlTBfIDP96ebRGV+uKQlyDjQL2XAXliBGQ5IYR4wbYHsDNtZbMAzq4OyiTpMTpq U1/X0oR9Qotz2arajRoD7OLjfKZb0SFfr+vz8Yxl+VjdpGwwChwdsHwA811j5Aiz wBg2jqZlh1IQimdUgw0CfYjIYwJge07yGraUpeNAZYNknn0Ulg6wDzjVyxLXlAZj I34= -----END CERTIFICATE-----Generated at Thu Sep 17 23:03:01 2026 by rpki-client