$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft File: 1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json) Hash identifier: TT4MgiLLh5Vn9k7OiTfUfY5XcjLuCMXkIVsAE7rz3KY= Subject key identifier: 51:5E:3F:19:96:D9:4B:36:96:A4:2D:5A:9B:9F:C1:E8:B2:07:86:1D Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F Certificate issuer: /CN=1D570B984E9C5E382B0A879AA21F6518621F059F Certificate serial: 20ABA19E6F2FC11C8EE88EAC44F794DB03ACC981 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft Manifest number: 02F7 Signing time: Sat 14 Mar 2026 02:08:05 +0000 Manifest this update: Sat 14 Mar 2026 02:03:03 +0000 Manifest next update: Sun 15 Mar 2026 04:25:03 +0000 Files and hashes: 1: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: gi3WSnu4uMK+6AbaA9Y2EoEuVRfX/xQT/Ktfeg1OXzQ=) 2: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: SZhn4FgWqY4qggdiI6TrYJUIT99auk+OFjrgNv4awjA=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 12:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ab:a1:9e:6f:2f:c1:1c:8e:e8:8e:ac:44:f7:94:db:03:ac:c9:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F Validity Not Before: Mar 14 02:03:03 2026 GMT Not After : Mar 15 04:25:03 2026 GMT Subject: CN=515E3F1996D94B3696A42D5A9B9FC1E8B207861D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:03:00:47:cd:fa:e2:66:35:2a:50:c6:6f:17: fe:82:dc:7e:d9:48:53:6a:1d:ba:d2:4b:02:fb:c6: 61:16:47:d2:4e:7f:c0:c6:72:10:df:64:d2:fa:0b: b0:82:d9:c3:2e:58:75:d5:26:df:58:70:a8:c7:0d: 8d:8b:d6:5d:6d:27:17:78:75:a8:bd:55:3a:d3:3b: 72:e6:8f:e4:bd:32:28:bf:ce:27:bd:48:dd:18:a9: 2f:1f:05:04:f9:fd:d2:ce:f7:78:d9:73:9b:12:04: ba:41:b3:65:88:d7:10:c9:08:6e:c2:bf:2d:46:93: fb:cd:f5:10:0d:0b:34:ab:95:47:8c:93:32:10:cf: cc:a8:d2:3e:f5:66:ef:da:ed:0a:0f:20:c3:e5:d1: c2:4b:61:d8:67:f3:8b:7f:53:6f:46:2e:58:29:37: 08:6d:8b:56:d6:68:32:4f:a9:71:83:6d:c9:55:41: 74:2e:45:49:ba:dc:a1:3e:d2:46:b8:d2:a5:d8:b2: 51:20:76:85:4e:1b:b0:08:2e:fb:eb:36:c0:2a:49: b3:e5:05:06:69:3f:58:ea:b3:1e:e8:18:2c:b1:77: d6:2b:a5:fa:39:f2:31:44:b0:4f:eb:3e:4c:b6:d3: 4f:4b:bd:b6:44:ff:9a:95:01:a8:0c:ac:33:28:e2: ad:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5E:3F:19:96:D9:4B:36:96:A4:2D:5A:9B:9F:C1:E8:B2:07:86:1D X509v3 Authority Key Identifier: keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:80:c8:5b:bd:d7:6a:32:14:78:c6:33:d9:2a:aa:90:87:79: c2:f7:a3:b2:7f:a0:30:46:08:f2:d2:bc:cb:5b:99:93:03:e7: 70:dc:25:b0:0e:e1:8a:c2:51:a4:d6:c1:f4:92:6b:e9:a8:56: 37:eb:da:56:96:e7:79:14:49:d4:64:72:81:ef:0d:e8:01:16: a1:7a:a9:f9:ea:d4:80:b4:58:cb:9e:ee:fa:76:83:85:2a:98: 22:4b:cb:4f:47:c8:3f:46:66:62:a4:3c:f0:2b:27:4f:c0:49: 4e:63:9d:84:00:44:60:f9:f2:99:50:08:91:10:36:71:a9:3f: 54:a7:35:84:f3:0c:ce:e0:fc:62:b1:ef:db:4d:0e:c0:26:38: c5:63:d0:34:d8:da:aa:49:86:2d:5f:69:59:3b:a0:ce:76:26: 11:7b:8f:64:c9:c3:fd:a7:13:b1:8a:fa:f0:ad:40:25:e3:21: d5:ff:4c:6f:75:cc:1b:2b:f3:d8:1b:1f:35:2c:61:d7:73:04: c5:e1:82:b0:58:22:ef:35:8e:67:64:ab:fd:07:36:d1:df:1d: 99:a2:f5:91:04:38:e0:a4:1d:cf:87:7a:40:1b:d9:bf:da:c3: be:74:8b:50:cd:56:4f:ad:90:cb:ed:03:6a:4f:10:eb:5a:03: 00:15:bb:01 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUIKuhnm8vwRyO6I6sRPeU2wOsyYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2 MjFGMDU5RjAeFw0yNjAzMTQwMjAzMDNaFw0yNjAzMTUwNDI1MDNaMDMxMTAvBgNV BAMTKDUxNUUzRjE5OTZEOTRCMzY5NkE0MkQ1QTlCOUZDMUU4QjIwNzg2MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpAwBHzfriZjUqUMZvF/6C3H7Z SFNqHbrSSwL7xmEWR9JOf8DGchDfZNL6C7CC2cMuWHXVJt9YcKjHDY2L1l1tJxd4 dai9VTrTO3Lmj+S9Mii/zie9SN0YqS8fBQT5/dLO93jZc5sSBLpBs2WI1xDJCG7C vy1Gk/vN9RANCzSrlUeMkzIQz8yo0j71Zu/a7QoPIMPl0cJLYdhn84t/U29GLlgp Nwhti1bWaDJPqXGDbclVQXQuRUm63KE+0ka40qXYslEgdoVOG7AILvvrNsAqSbPl BQZpP1jqsx7oGCyxd9Yrpfo58jFEsE/rPky2009LvbZE/5qVAagMrDMo4q0xAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUUV4/GZbZSzaWpC1am5/B6LIHhh0wHwYDVR0j BBgwFoAUHVcLmE6cXjgrCoeaoh9lGGIfBZ8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAv MUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRDU3MEI5ODRFOUM1RTM4MkIwQTg3OUFBMjFGNjUx ODYyMUYwNTlGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzRkNWMz MDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAvMUQ1NzBCOTg0RTlDNUUzODJC MEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHOAyFu912oyFHjGM9kq qpCHecL3o7J/oDBGCPLSvMtbmZMD53DcJbAO4YrCUaTWwfSSa+moVjfr2laW53kU SdRkcoHvDegBFqF6qfnq1IC0WMue7vp2g4UqmCJLy09HyD9GZmKkPPArJ0/ASU5j nYQARGD58plQCJEQNnGpP1SnNYTzDM7g/GKx79tNDsAmOMVj0DTY2qpJhi1faVk7 oM52JhF7j2TJw/2nE7GK+vCtQCXjIdX/TG91zBsr89gbHzUsYddzBMXhgrBYIu81 jmdkq/0HNtHfHZmi9ZEEOOCkHc+HekAb2b/aw750i1DNVk+tkMvtA2pPEOtaAwAV uwE= -----END CERTIFICATE-----Generated at Sat Mar 14 05:41:39 2026 by rpki-client