$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft File: 1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json) Hash identifier: HNsoKGenzPqDcfkGvxWOufQMRKwMnZp/3HmGsqFhYoE= Subject key identifier: 99:AB:CC:44:05:EC:3E:DE:03:03:0D:48:14:B7:82:54:12:3F:96:5B Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F Certificate issuer: /CN=1D570B984E9C5E382B0A879AA21F6518621F059F Certificate serial: 78F0247BE053F3CE4F5D6EBEE472852D9E0C5487 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft Manifest number: 03DE Signing time: Thu 17 Sep 2026 14:12:20 +0000 Manifest this update: Thu 17 Sep 2026 14:07:20 +0000 Manifest next update: Fri 18 Sep 2026 16:10:20 +0000 Files and hashes: 1: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: 9BOzXS1Z1CH1m7qcmZ8R8oEaAUMyAWza8uUb4ERgTkY=) 2: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: tLThUwSwrPfCypAsdBnMMAhmoYAyEUY8DuOIJQne5ZA=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 14:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f0:24:7b:e0:53:f3:ce:4f:5d:6e:be:e4:72:85:2d:9e:0c:54:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F Validity Not Before: Sep 17 14:07:20 2026 GMT Not After : Sep 18 16:10:20 2026 GMT Subject: CN=99ABCC4405EC3EDE03030D4814B78254123F965B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e1:3d:d0:3a:7c:37:e8:0a:8a:ea:d0:c6:7e: c7:70:3a:ae:80:65:8a:55:38:ec:39:d5:d8:74:9d: df:cd:31:d7:e8:93:28:1d:1b:e9:a2:c5:9d:89:3b: 2f:96:64:e8:73:2a:6c:56:f8:de:b9:8d:c5:f9:a7: e8:b2:7d:09:54:71:88:47:cb:87:62:9f:d9:7e:19: ee:e8:c3:91:20:84:65:4f:5f:3d:cf:9b:12:bb:a2: 4f:c9:5a:24:c2:6a:c0:29:a3:b4:1d:1b:25:c1:1d: 47:c8:70:30:a1:0d:05:66:5e:50:48:4f:97:51:cc: dd:11:a6:65:9c:5b:a9:9b:99:c9:94:6e:fb:74:93: 0d:43:03:f3:d8:0c:1e:c4:cb:3c:8b:01:d2:5c:94: 2e:5b:19:f4:75:87:86:f0:8f:b8:76:55:19:c2:67: 57:ec:33:ae:44:a2:3b:ac:5d:d2:c5:4c:32:6c:a1: 78:d2:41:04:f7:c2:3b:1c:7c:e4:49:fd:de:6e:7f: 26:d8:93:b8:b3:14:22:4f:e5:7e:a8:fa:62:fc:af: 15:15:c8:1b:02:4b:72:9a:48:3e:e9:b0:5e:6c:8f: a1:df:ed:ca:6a:ff:8a:eb:d8:3f:a8:67:a6:4d:76: 8b:6f:9a:34:2f:8b:91:74:35:05:fa:b1:05:d8:c6: 49:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AB:CC:44:05:EC:3E:DE:03:03:0D:48:14:B7:82:54:12:3F:96:5B X509v3 Authority Key Identifier: keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:99:56:2c:fa:96:61:f6:ef:02:ce:c2:1c:c4:1c:18:3e:39: e9:1f:c3:2a:ca:4d:fa:8a:91:80:f0:b8:08:6d:8f:79:c9:48: b7:be:8d:e9:88:a0:0c:3f:3c:ac:db:c5:79:1c:2c:7c:6a:1e: 28:2a:ab:3c:05:cd:0b:67:fd:6a:b2:63:f7:ee:ba:a1:ee:97: b7:1d:55:f8:5e:b3:c4:2a:10:54:a4:de:1a:e5:be:2b:89:00: da:b6:43:1d:e8:0e:e5:c6:5e:56:1f:d7:4a:05:ad:ec:44:b8: be:21:e5:9c:06:38:e3:75:de:71:c7:e9:d8:29:86:25:2f:cb: f7:1c:11:c4:e0:f6:10:cb:7c:c8:df:45:1f:16:54:52:e7:70: 16:59:2a:3a:51:e9:c8:21:39:ac:ac:09:c0:6b:9d:22:73:25: 65:57:0d:87:28:bf:35:d6:b4:59:67:0d:39:ee:3b:19:1d:52: e7:cd:34:a0:23:c5:e5:49:bc:9a:9e:7d:dd:fc:d3:a5:63:40: 8e:74:69:c0:39:08:74:e7:6c:c7:13:43:fa:f1:2b:58:40:52: c2:f1:a9:31:a1:a5:3e:f0:3a:44:c6:4c:2d:ae:53:56:2a:26: 4c:f0:a2:9f:af:c2:73:48:17:6a:04:77:a4:30:5d:2b:46:b0: d6:1e:dd:eb -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUePAke+BT885PXW6+5HKFLZ4MVIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2 MjFGMDU5RjAeFw0yNjA5MTcxNDA3MjBaFw0yNjA5MTgxNjEwMjBaMDMxMTAvBgNV BAMTKDk5QUJDQzQ0MDVFQzNFREUwMzAzMEQ0ODE0Qjc4MjU0MTIzRjk2NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4T3QOnw36AqK6tDGfsdwOq6A ZYpVOOw51dh0nd/NMdfokygdG+mixZ2JOy+WZOhzKmxW+N65jcX5p+iyfQlUcYhH y4din9l+Ge7ow5EghGVPXz3PmxK7ok/JWiTCasApo7QdGyXBHUfIcDChDQVmXlBI T5dRzN0RpmWcW6mbmcmUbvt0kw1DA/PYDB7EyzyLAdJclC5bGfR1h4bwj7h2VRnC Z1fsM65EojusXdLFTDJsoXjSQQT3wjscfORJ/d5ufybYk7izFCJP5X6o+mL8rxUV yBsCS3KaSD7psF5sj6Hf7cpq/4rr2D+oZ6ZNdotvmjQvi5F0NQX6sQXYxknnAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUmavMRAXsPt4DAw1IFLeCVBI/llswHwYDVR0j BBgwFoAUHVcLmE6cXjgrCoeaoh9lGGIfBZ8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAv MUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRDU3MEI5ODRFOUM1RTM4MkIwQTg3OUFBMjFGNjUx ODYyMUYwNTlGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzRkNWMz MDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAvMUQ1NzBCOTg0RTlDNUUzODJC MEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEKZViz6lmH27wLOwhzE HBg+OekfwyrKTfqKkYDwuAhtj3nJSLe+jemIoAw/PKzbxXkcLHxqHigqqzwFzQtn /WqyY/fuuqHul7cdVfhes8QqEFSk3hrlviuJANq2Qx3oDuXGXlYf10oFrexEuL4h 5ZwGOON13nHH6dgphiUvy/ccEcTg9hDLfMjfRR8WVFLncBZZKjpR6cghOaysCcBr nSJzJWVXDYcovzXWtFlnDTnuOxkdUufNNKAjxeVJvJqefd3806VjQI50acA5CHTn bMcTQ/rxK1hAUsLxqTGhpT7wOkTGTC2uU1YqJkzwop+vwnNIF2oEd6QwXStGsNYe 3es= -----END CERTIFICATE-----Generated at Fri Sep 18 00:23:49 2026 by rpki-client