$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft File: 9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft (raw, json) Hash identifier: /Mie6Vov4zFcrOKgl4xUW6nccyqWLoW4u40l4AdHu3c= Subject key identifier: DC:1A:DF:79:97:C3:D0:69:FA:3C:72:6E:75:61:98:96:98:66:CE:74 Authority key identifier: 9C:DF:06:7D:D0:8A:88:DE:7C:64:53:3C:E5:EF:0A:1C:41:47:30:81 Certificate issuer: /CN=9CDF067DD08A88DE7C64533CE5EF0A1C41473081 Certificate serial: 322DDE1EB8B9E141ED740B48AB961D328B04C344 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft Manifest number: 03 Signing time: Wed 29 Apr 2026 23:17:06 +0000 Manifest this update: Wed 29 Apr 2026 23:12:06 +0000 Manifest next update: Fri 01 May 2026 01:05:06 +0000 Files and hashes: 1: 9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl (hash: sNrk8VWu4qupqxl27OFXIUQNQkQImkGvPjZycYk3m2M=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 01:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:2d:de:1e:b8:b9:e1:41:ed:74:0b:48:ab:96:1d:32:8b:04:c3:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDF067DD08A88DE7C64533CE5EF0A1C41473081 Validity Not Before: Apr 29 23:12:06 2026 GMT Not After : May 1 01:05:06 2026 GMT Subject: CN=DC1ADF7997C3D069FA3C726E756198969866CE74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9e:9c:44:40:bf:33:ea:7f:db:37:32:15:b5: 9a:5e:11:6f:04:64:c3:2b:2d:da:bb:47:f9:cf:e1: da:4c:61:1d:9d:94:33:97:c6:35:63:60:7d:a1:a2: a0:da:40:30:65:cb:5a:60:50:ef:f1:68:3f:7a:90: 38:8d:8f:69:b4:a6:c9:76:a0:a7:84:94:c3:cd:b1: c7:a5:57:62:8c:d2:25:5e:0d:2a:21:51:2a:30:f8: fb:d3:ef:cc:c1:11:54:d4:05:73:cb:1a:ae:49:8e: 2f:c5:a3:95:f4:b2:44:f2:5d:18:66:d9:56:d1:4c: 26:be:29:77:f5:d9:19:49:8f:1a:2d:df:aa:45:11: 72:ed:97:a4:0f:68:3f:36:60:25:70:ca:7f:09:62: 0e:e4:02:8d:41:ec:a0:e7:b6:1d:9e:be:36:51:35: 55:39:af:06:05:86:4f:b1:09:cd:dc:4b:e5:ca:1b: 1f:0d:4d:e0:43:d6:67:00:75:d9:fd:c6:81:9e:0a: 05:7f:ef:c6:7a:61:f0:c7:38:d0:72:f4:e0:4a:09: 6a:b7:81:af:b1:38:e4:2b:80:ea:47:24:6b:85:0e: 8d:0a:3e:04:3a:3b:4b:47:8a:4c:9a:08:27:84:be: b8:21:8d:1b:f2:46:a3:40:14:ea:24:48:29:90:1d: e4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1A:DF:79:97:C3:D0:69:FA:3C:72:6E:75:61:98:96:98:66:CE:74 X509v3 Authority Key Identifier: keyid:9C:DF:06:7D:D0:8A:88:DE:7C:64:53:3C:E5:EF:0A:1C:41:47:30:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:27:f4:94:3e:2c:03:8a:f0:0a:ca:78:0f:be:b5:67:b2:f5: e0:45:65:72:89:6f:b0:bf:e4:f8:a0:4f:2c:89:a6:80:cc:a9: ec:b0:c2:e0:ca:62:8f:39:5a:80:40:87:87:ca:ca:c5:d3:5e: 70:d6:b6:0b:e6:c0:59:58:11:dc:b8:31:56:45:15:a4:98:85: 85:0c:da:79:ea:cf:c7:5c:1b:ac:a2:9a:ff:85:d5:3b:a3:87: dd:78:9b:bc:7a:4f:e0:15:b9:15:f1:a9:35:0e:ec:5d:d7:da: 59:de:52:c8:58:93:9e:ec:d4:89:6e:e1:66:73:12:16:69:52: 41:f4:fc:87:99:85:2e:b5:d1:ac:71:2d:42:69:72:66:12:2e: 1a:ef:d6:26:79:16:7d:91:30:2c:18:bb:0c:1c:75:71:7b:20: aa:08:4a:35:c1:4c:f0:22:78:96:63:4c:ed:bc:0a:18:5a:3a: 92:e6:cd:e1:3c:1e:26:e0:41:9b:2d:53:91:d8:c5:b3:35:fb: 76:1b:d1:60:d7:eb:38:fa:51:6e:80:15:b8:72:e0:a8:8c:5f: 51:ce:62:bc:a4:08:be:b9:16:95:32:52:71:7d:7b:b0:43:a1: 20:de:69:b3:00:c4:53:98:98:df:00:28:39:ee:07:e5:a8:a2: 4e:41:64:ad -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUMi3eHri54UHtdAtIq5YdMosEw0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERjA2N0REMDhBODhERTdDNjQ1MzNDRTVFRjBBMUM0 MTQ3MzA4MTAeFw0yNjA0MjkyMzEyMDZaFw0yNjA1MDEwMTA1MDZaMDMxMTAvBgNV BAMTKERDMUFERjc5OTdDM0QwNjlGQTNDNzI2RTc1NjE5ODk2OTg2NkNFNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnnpxEQL8z6n/bNzIVtZpeEW8E ZMMrLdq7R/nP4dpMYR2dlDOXxjVjYH2hoqDaQDBly1pgUO/xaD96kDiNj2m0psl2 oKeElMPNscelV2KM0iVeDSohUSow+PvT78zBEVTUBXPLGq5Jji/Fo5X0skTyXRhm 2VbRTCa+KXf12RlJjxot36pFEXLtl6QPaD82YCVwyn8JYg7kAo1B7KDnth2evjZR NVU5rwYFhk+xCc3cS+XKGx8NTeBD1mcAddn9xoGeCgV/78Z6YfDHONBy9OBKCWq3 ga+xOOQrgOpHJGuFDo0KPgQ6O0tHikyaCCeEvrghjRvyRqNAFOokSCmQHeRVAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU3BrfeZfD0Gn6PHJudWGYlphmznQwHwYDVR0j BBgwFoAUnN8GfdCKiN58ZFM85e8KHEFHMIEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzVjNTUyMmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzIv OUNERjA2N0REMDhBODhERTdDNjQ1MzNDRTVFRjBBMUM0MTQ3MzA4MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85Q0RGMDY3REQwOEE4OERFN0M2NDUzM0NFNUVGMEEx QzQxNDczMDgxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzVjNTUy MmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzIvOUNERjA2N0REMDhBODhERTdD NjQ1MzNDRTVFRjBBMUM0MTQ3MzA4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK8n9JQ+LAOK8ArKeA++ tWey9eBFZXKJb7C/5PigTyyJpoDMqeywwuDKYo85WoBAh4fKysXTXnDWtgvmwFlY Edy4MVZFFaSYhYUM2nnqz8dcG6yimv+F1Tujh914m7x6T+AVuRXxqTUO7F3X2lne UshYk57s1Ilu4WZzEhZpUkH0/IeZhS610axxLUJpcmYSLhrv1iZ5Fn2RMCwYuwwc dXF7IKoISjXBTPAieJZjTO28ChhaOpLmzeE8HibgQZstU5HYxbM1+3Yb0WDX6zj6 UW6AFbhy4KiMX1HOYrykCL65FpUyUnF9e7BDoSDeabMAxFOYmN8AKDnuB+Wook5B ZK0= -----END CERTIFICATE-----Generated at Thu Apr 30 14:49:16 2026 by rpki-client