$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft File: 1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json) Hash identifier: IwVu6DoWHJRH1HsD/zIafCqp88zFbuMOvbJERDxvvXY= Subject key identifier: B6:36:A8:FA:39:BC:E8:DF:B8:BC:BD:A9:E3:5E:C4:80:5D:C7:08:3A Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F Certificate issuer: /CN=1D570B984E9C5E382B0A879AA21F6518621F059F Certificate serial: 3C7247E9569D37F7FB734B9BC9FD36A51E4202F0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft Manifest number: 0335 Signing time: Thu 30 Apr 2026 12:39:25 +0000 Manifest this update: Thu 30 Apr 2026 12:34:25 +0000 Manifest next update: Fri 01 May 2026 15:29:25 +0000 Files and hashes: 1: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: WBLotmaJuu6KXdYIgLdNZsM1hySmQNXJmgvacG03Kck=) 2: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: SZhn4FgWqY4qggdiI6TrYJUIT99auk+OFjrgNv4awjA=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 12:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:72:47:e9:56:9d:37:f7:fb:73:4b:9b:c9:fd:36:a5:1e:42:02:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F Validity Not Before: Apr 30 12:34:25 2026 GMT Not After : May 1 15:29:25 2026 GMT Subject: CN=B636A8FA39BCE8DFB8BCBDA9E35EC4805DC7083A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:08:1f:e5:0a:5e:11:7e:4f:d8:04:12:65:08: ae:72:b9:51:cc:fd:02:96:7b:74:a4:5b:03:ec:85: 0c:db:e5:9f:6f:2a:8a:c2:26:93:b3:7e:f8:90:83: 2c:ae:d5:0a:fa:c8:6d:fd:22:38:20:40:a9:e2:c3: 10:a9:58:ff:58:b0:fa:11:92:87:ab:40:08:b7:71: 56:b7:0a:c5:5c:51:ff:43:a5:21:69:51:70:28:7d: 92:36:ff:3f:1e:a9:06:e4:ca:65:b8:8b:38:f0:ab: bb:88:1b:dd:22:a9:a6:e1:39:d3:5d:7e:b9:67:15: 7d:d9:20:39:47:03:0b:16:28:3a:00:76:36:32:1c: 5c:0e:f4:2f:34:cb:1a:5a:f5:d7:a0:92:d2:03:02: df:76:bf:41:09:a6:07:0b:5b:3c:12:3e:9a:18:6b: f9:17:f6:b1:e6:4c:46:ba:dd:9c:6c:e3:90:4d:44: 2d:4e:79:80:52:ce:87:f4:e5:95:3c:61:26:d6:2c: e4:f7:fb:9c:ce:21:cd:7c:75:ee:24:b6:29:1a:d6: 4f:ee:be:5a:89:f8:bc:28:8c:e5:d9:d1:6b:57:99: 91:8a:bd:4d:92:fc:a5:ab:b6:57:70:18:b5:95:14: 43:0c:52:ee:89:0a:f9:24:3b:71:ba:19:92:c7:b6: ee:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:36:A8:FA:39:BC:E8:DF:B8:BC:BD:A9:E3:5E:C4:80:5D:C7:08:3A X509v3 Authority Key Identifier: keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:43:19:21:fc:a8:4b:61:d8:24:60:6b:11:49:b1:a2:ae:a0: dd:a6:ea:14:b6:fc:29:12:cd:aa:05:68:ad:a0:5a:56:5a:09: 9d:58:94:58:fa:54:07:89:9e:1b:e3:8b:44:85:fd:fc:fd:e6: 07:48:47:c6:f9:13:eb:7b:65:d2:d6:4e:66:73:5f:cf:64:64: 05:95:38:c7:b6:80:6e:c0:e0:34:d3:65:18:26:d4:40:c6:9a: df:70:6d:35:22:dc:cc:d7:0d:0d:98:9b:d1:6b:ed:08:e8:de: ce:11:ff:50:57:c6:8e:15:fe:df:3a:90:8b:02:07:05:4a:50: af:31:ff:dd:0a:8f:82:51:95:bc:bc:95:fe:2f:a6:c9:71:e2: 33:22:e0:f7:59:50:73:82:08:ad:07:bf:b8:7b:58:89:b0:22: 7c:86:ad:ba:db:68:98:f4:47:57:78:08:b8:91:12:a2:ad:17: 5b:e3:47:71:6e:2c:4a:a8:dd:ae:60:01:2b:9d:09:a6:8e:25: d5:4c:14:21:76:ff:c7:13:c7:6a:e9:0d:12:1f:7c:16:ca:e0: 92:4f:46:f3:42:a7:c5:f4:0e:12:f0:23:6e:8d:f0:dd:87:5b: f6:bc:5f:49:5c:b5:29:b8:28:d4:82:ed:69:65:13:09:8e:ce: b3:f3:72:30 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUPHJH6VadN/f7c0ubyf02pR5CAvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2 MjFGMDU5RjAeFw0yNjA0MzAxMjM0MjVaFw0yNjA1MDExNTI5MjVaMDMxMTAvBgNV BAMTKEI2MzZBOEZBMzlCQ0U4REZCOEJDQkRBOUUzNUVDNDgwNURDNzA4M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGCB/lCl4Rfk/YBBJlCK5yuVHM /QKWe3SkWwPshQzb5Z9vKorCJpOzfviQgyyu1Qr6yG39IjggQKniwxCpWP9YsPoR koerQAi3cVa3CsVcUf9DpSFpUXAofZI2/z8eqQbkymW4izjwq7uIG90iqabhOdNd frlnFX3ZIDlHAwsWKDoAdjYyHFwO9C80yxpa9degktIDAt92v0EJpgcLWzwSPpoY a/kX9rHmTEa63Zxs45BNRC1OeYBSzof05ZU8YSbWLOT3+5zOIc18de4ktika1k/u vlqJ+LwojOXZ0WtXmZGKvU2S/KWrtldwGLWVFEMMUu6JCvkkO3G6GZLHtu55AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUtjao+jm86N+4vL2p417EgF3HCDowHwYDVR0j BBgwFoAUHVcLmE6cXjgrCoeaoh9lGGIfBZ8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAv MUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRDU3MEI5ODRFOUM1RTM4MkIwQTg3OUFBMjFGNjUx ODYyMUYwNTlGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzRkNWMz MDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAvMUQ1NzBCOTg0RTlDNUUzODJC MEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJlDGSH8qEth2CRgaxFJ saKuoN2m6hS2/CkSzaoFaK2gWlZaCZ1YlFj6VAeJnhvji0SF/fz95gdIR8b5E+t7 ZdLWTmZzX89kZAWVOMe2gG7A4DTTZRgm1EDGmt9wbTUi3MzXDQ2Ym9Fr7Qjo3s4R /1BXxo4V/t86kIsCBwVKUK8x/90Kj4JRlby8lf4vpslx4jMi4PdZUHOCCK0Hv7h7 WImwInyGrbrbaJj0R1d4CLiREqKtF1vjR3FuLEqo3a5gASudCaaOJdVMFCF2/8cT x2rpDRIffBbK4JJPRvNCp8X0DhLwI26N8N2HW/a8X0lctSm4KNSC7WllEwmOzrPz cjA= -----END CERTIFICATE-----Generated at Thu Apr 30 15:15:37 2026 by rpki-client