$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft File: 9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft (raw, json) Hash identifier: UNYaMO7IBfuddhgtCAg0tFprMHB1VrDuPYld9iScAv0= Subject key identifier: A1:E7:F7:13:F2:44:58:91:5D:F5:5E:84:6E:4D:9E:6A:C8:0B:05:79 Authority key identifier: 9C:DF:06:7D:D0:8A:88:DE:7C:64:53:3C:E5:EF:0A:1C:41:47:30:81 Certificate issuer: /CN=9CDF067DD08A88DE7C64533CE5EF0A1C41473081 Certificate serial: 7B935E3FADDDA2205D0A57E8A3E77FD9F22EC592 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft Manifest number: 40 Signing time: Mon 15 Jun 2026 00:28:05 +0000 Manifest this update: Mon 15 Jun 2026 00:23:05 +0000 Manifest next update: Tue 16 Jun 2026 01:39:05 +0000 Files and hashes: 1: 9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl (hash: leyVgTAcIqAdU1aj/N2boQQtZmJY3YvSkhZ2fvUI+UU=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Jun 2026 22:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:93:5e:3f:ad:dd:a2:20:5d:0a:57:e8:a3:e7:7f:d9:f2:2e:c5:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDF067DD08A88DE7C64533CE5EF0A1C41473081 Validity Not Before: Jun 15 00:23:05 2026 GMT Not After : Jun 16 01:39:05 2026 GMT Subject: CN=A1E7F713F24458915DF55E846E4D9E6AC80B0579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:16:3d:59:5e:e8:2c:14:76:40:9c:84:cc:15: 8c:9c:32:13:18:24:f4:9f:0e:02:72:19:6f:ee:b1: f3:d2:4c:51:cb:b5:ae:db:00:d1:45:0a:46:79:3b: 2a:cb:cb:6b:c2:18:e5:1a:c1:46:7f:a1:0d:e6:9b: 0e:bb:9f:9a:2b:70:a0:8b:67:26:bd:9a:fb:e8:8a: 4a:12:79:62:cd:14:35:d4:b5:86:cf:79:b6:87:db: ac:eb:37:d1:2d:58:08:bb:d3:6f:a4:2f:1d:73:6c: 0b:7a:14:02:8e:d2:87:0f:4c:cb:ef:db:98:b6:b2: cf:8c:c1:21:7f:44:dc:88:a6:76:d6:ae:df:65:f1: 74:8a:80:15:0e:58:ef:ef:2d:59:17:25:a4:37:90: d1:46:5d:63:20:97:0d:4e:4e:56:5c:a7:43:6c:5a: f0:e2:4e:7e:6e:38:05:94:e3:69:ab:08:e8:0d:e6: 39:9d:06:43:42:87:25:8e:ad:46:1f:a1:47:7f:43: c6:ad:89:df:38:31:48:af:b8:3a:53:45:a1:14:e0: 81:75:24:28:bd:64:e9:94:00:a9:3f:d7:58:95:ee: ba:5e:af:cf:c9:3f:fa:79:b6:80:a2:a9:f9:84:43: 4e:fd:b0:db:c5:f2:12:4d:2e:b7:8e:e1:d4:4e:2e: 75:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E7:F7:13:F2:44:58:91:5D:F5:5E:84:6E:4D:9E:6A:C8:0B:05:79 X509v3 Authority Key Identifier: keyid:9C:DF:06:7D:D0:8A:88:DE:7C:64:53:3C:E5:EF:0A:1C:41:47:30:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:6a:c3:61:02:7d:74:c6:5e:9d:23:61:1d:b2:48:9b:7c:c9: 65:66:aa:74:89:83:88:61:3a:96:c7:ec:09:94:86:63:ea:45: ec:8f:22:c5:a8:27:10:91:c2:bd:48:37:2e:f5:0c:31:89:6c: 68:f2:04:61:04:76:8f:28:a4:90:be:2a:d2:b8:7d:43:26:95: 1e:64:a3:91:8e:21:9a:74:05:1b:cb:3b:87:14:f3:d1:10:24: 7f:c6:11:cd:a4:e3:c5:60:58:0e:9d:68:c0:7d:04:0f:28:a2: fc:56:85:01:be:c8:15:06:fd:36:53:8a:50:ff:8d:3a:94:81: e0:00:46:34:8c:37:4e:7c:da:5d:43:b5:14:b9:84:59:52:f6: 91:4b:b3:a6:a0:5c:44:be:98:1a:2d:e8:dd:31:d6:69:11:17: 4f:c7:b6:b3:a7:97:58:a2:20:5b:b6:10:ea:e1:40:76:96:25: 08:7b:aa:4a:ca:9d:73:17:68:1d:70:10:9d:11:37:49:57:cc: d9:31:37:1e:bc:b1:f2:5d:87:59:02:35:c8:f6:73:ab:68:10: 4e:84:24:2b:07:cd:4e:1e:71:bd:06:86:64:36:6e:0a:5d:d0: 3e:12:84:02:17:0a:14:bf:fc:e3:73:89:35:50:2a:8e:b8:5f: 31:6a:8e:75 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUe5NeP63doiBdClfoo+d/2fIuxZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERjA2N0REMDhBODhERTdDNjQ1MzNDRTVFRjBBMUM0 MTQ3MzA4MTAeFw0yNjA2MTUwMDIzMDVaFw0yNjA2MTYwMTM5MDVaMDMxMTAvBgNV BAMTKEExRTdGNzEzRjI0NDU4OTE1REY1NUU4NDZFNEQ5RTZBQzgwQjA1NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgFj1ZXugsFHZAnITMFYycMhMY JPSfDgJyGW/usfPSTFHLta7bANFFCkZ5OyrLy2vCGOUawUZ/oQ3mmw67n5orcKCL Zya9mvvoikoSeWLNFDXUtYbPebaH26zrN9EtWAi702+kLx1zbAt6FAKO0ocPTMvv 25i2ss+MwSF/RNyIpnbWrt9l8XSKgBUOWO/vLVkXJaQ3kNFGXWMglw1OTlZcp0Ns WvDiTn5uOAWU42mrCOgN5jmdBkNChyWOrUYfoUd/Q8atid84MUivuDpTRaEU4IF1 JCi9ZOmUAKk/11iV7rper8/JP/p5toCiqfmEQ079sNvF8hJNLreO4dROLnWNAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUoef3E/JEWJFd9V6Ebk2easgLBXkwHwYDVR0j BBgwFoAUnN8GfdCKiN58ZFM85e8KHEFHMIEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzVjNTUyMmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzIv OUNERjA2N0REMDhBODhERTdDNjQ1MzNDRTVFRjBBMUM0MTQ3MzA4MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85Q0RGMDY3REQwOEE4OERFN0M2NDUzM0NFNUVGMEEx QzQxNDczMDgxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzVjNTUy MmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzIvOUNERjA2N0REMDhBODhERTdD NjQ1MzNDRTVFRjBBMUM0MTQ3MzA4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMRqw2ECfXTGXp0jYR2y SJt8yWVmqnSJg4hhOpbH7AmUhmPqReyPIsWoJxCRwr1INy71DDGJbGjyBGEEdo8o pJC+KtK4fUMmlR5ko5GOIZp0BRvLO4cU89EQJH/GEc2k48VgWA6daMB9BA8oovxW hQG+yBUG/TZTilD/jTqUgeAARjSMN0582l1DtRS5hFlS9pFLs6agXES+mBot6N0x 1mkRF0/HtrOnl1iiIFu2EOrhQHaWJQh7qkrKnXMXaB1wEJ0RN0lXzNkxNx68sfJd h1kCNcj2c6toEE6EJCsHzU4ecb0GhmQ2bgpd0D4ShAIXChS//ONziTVQKo64XzFq jnU= -----END CERTIFICATE-----Generated at Mon Jun 15 06:26:22 2026 by rpki-client