$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft File: 9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft (raw, json) Hash identifier: wB5K58r3G37dLh8IMHxQr2lKszu2d5knkASrjLG6zlg= Subject key identifier: 7C:20:CA:13:B6:EB:E5:4F:31:2A:E0:BE:47:5B:C5:2D:C7:A8:24:64 Authority key identifier: 9C:DF:06:7D:D0:8A:88:DE:7C:64:53:3C:E5:EF:0A:1C:41:47:30:81 Certificate issuer: /CN=9CDF067DD08A88DE7C64533CE5EF0A1C41473081 Certificate serial: 2C0D506B92BFB59009642BED083A7D84B9C548F8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft Manifest number: AB Signing time: Thu 17 Sep 2026 13:17:06 +0000 Manifest this update: Thu 17 Sep 2026 13:12:05 +0000 Manifest next update: Fri 18 Sep 2026 13:23:05 +0000 Files and hashes: 1: 9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl (hash: Yhe1Xp19r6vDKnzn6TAh4HtIEnr5hW58fERlbNuUSXw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 13:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:0d:50:6b:92:bf:b5:90:09:64:2b:ed:08:3a:7d:84:b9:c5:48:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDF067DD08A88DE7C64533CE5EF0A1C41473081 Validity Not Before: Sep 17 13:12:05 2026 GMT Not After : Sep 18 13:23:05 2026 GMT Subject: CN=7C20CA13B6EBE54F312AE0BE475BC52DC7A82464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:97:6a:b9:7a:e9:d3:fd:be:37:99:be:49:da: 4f:37:72:6a:e0:57:08:dc:45:09:eb:ad:26:12:9e: ef:36:9b:3e:58:73:66:f1:b1:2d:9a:db:c5:cc:54: 33:07:a4:0b:98:08:db:8c:8d:3e:ec:5d:e6:a1:68: b0:9d:0a:dc:66:69:24:fc:53:fb:0f:2c:6d:ae:65: 3b:21:ba:56:61:64:eb:ca:b4:79:6d:23:ce:97:e8: f3:96:76:4e:ba:af:de:49:be:bc:bd:98:3d:41:0a: ab:4d:2c:47:98:10:b8:a1:1a:ff:12:85:6a:f0:7d: 63:17:2e:c7:55:02:db:56:9e:f1:db:06:52:94:50: 26:47:8e:d8:d1:7b:55:d7:44:80:db:16:01:a0:ae: 4e:b3:cb:c4:39:7e:c3:00:d1:dd:61:15:ba:1c:23: aa:a8:9d:be:f9:ed:a7:f2:0c:d6:c5:1f:4a:d2:9c: 47:9b:10:32:f6:8a:61:40:82:ea:e0:68:50:11:ba: 1a:4e:e7:8d:a1:a6:d8:c7:d1:65:5b:9f:79:37:b9: ed:72:cf:a1:32:5c:fe:bf:c1:73:63:0d:0c:0e:55: c9:1b:c1:95:7f:49:90:73:4e:3c:22:16:b8:90:f1: 89:ba:f2:ee:2f:74:85:54:8b:a7:bc:40:3e:22:7d: 69:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:20:CA:13:B6:EB:E5:4F:31:2A:E0:BE:47:5B:C5:2D:C7:A8:24:64 X509v3 Authority Key Identifier: keyid:9C:DF:06:7D:D0:8A:88:DE:7C:64:53:3C:E5:EF:0A:1C:41:47:30:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:da:c0:da:47:4b:05:17:a6:51:4a:a3:1d:ce:6f:bf:52:79: 2b:ea:ea:11:da:89:9c:80:9f:11:39:2e:35:a2:4f:2b:13:6b: d2:88:18:65:54:78:fb:e7:4c:a1:b3:c7:06:59:de:f7:65:83: 33:27:fc:c6:84:64:29:9c:61:15:d7:6b:bf:f5:67:af:c8:38: bf:8d:d4:14:69:50:20:62:79:ec:e7:e0:3e:ad:a5:0c:df:6a: 7a:e4:cf:9b:51:c2:09:34:56:d4:b2:80:56:ff:8b:6e:f7:8a: 60:7b:8c:8e:b0:9d:64:63:6c:c9:0c:ad:68:86:58:53:b6:0b: c5:fd:51:3b:b8:ba:41:cc:6a:a0:2b:e6:06:ad:86:58:19:01: f0:64:46:54:e9:ad:71:97:a4:a5:45:9c:59:ba:cc:1c:dc:82: d8:a7:9f:bc:a9:a3:1f:a0:f9:00:f7:6a:2c:e0:4b:d7:44:a3: ca:db:2d:d7:60:28:f6:a7:bc:0e:2d:21:f8:01:19:68:f1:75: d7:76:ea:ea:cf:76:32:2b:b9:1f:67:c7:5e:4c:bc:9a:89:da: 53:d9:08:60:81:7a:0b:4a:2c:36:71:e1:69:b8:c2:d9:37:a6: 3e:7a:01:83:0d:10:6d:95:d6:9f:57:47:a5:30:ad:89:d2:db: 40:80:1d:55 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIULA1Qa5K/tZAJZCvtCDp9hLnFSPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERjA2N0REMDhBODhERTdDNjQ1MzNDRTVFRjBBMUM0 MTQ3MzA4MTAeFw0yNjA5MTcxMzEyMDVaFw0yNjA5MTgxMzIzMDVaMDMxMTAvBgNV BAMTKDdDMjBDQTEzQjZFQkU1NEYzMTJBRTBCRTQ3NUJDNTJEQzdBODI0NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXl2q5eunT/b43mb5J2k83cmrg VwjcRQnrrSYSnu82mz5Yc2bxsS2a28XMVDMHpAuYCNuMjT7sXeahaLCdCtxmaST8 U/sPLG2uZTshulZhZOvKtHltI86X6POWdk66r95Jvry9mD1BCqtNLEeYELihGv8S hWrwfWMXLsdVAttWnvHbBlKUUCZHjtjRe1XXRIDbFgGgrk6zy8Q5fsMA0d1hFboc I6qonb757afyDNbFH0rSnEebEDL2imFAgurgaFARuhpO542hptjH0WVbn3k3ue1y z6EyXP6/wXNjDQwOVckbwZV/SZBzTjwiFriQ8Ym68u4vdIVUi6e8QD4ifWlvAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUfCDKE7br5U8xKuC+R1vFLceoJGQwHwYDVR0j BBgwFoAUnN8GfdCKiN58ZFM85e8KHEFHMIEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzVjNTUyMmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzIv OUNERjA2N0REMDhBODhERTdDNjQ1MzNDRTVFRjBBMUM0MTQ3MzA4MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85Q0RGMDY3REQwOEE4OERFN0M2NDUzM0NFNUVGMEEx QzQxNDczMDgxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzVjNTUy MmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzIvOUNERjA2N0REMDhBODhERTdD NjQ1MzNDRTVFRjBBMUM0MTQ3MzA4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJfawNpHSwUXplFKox3O b79SeSvq6hHaiZyAnxE5LjWiTysTa9KIGGVUePvnTKGzxwZZ3vdlgzMn/MaEZCmc YRXXa7/1Z6/IOL+N1BRpUCBieezn4D6tpQzfanrkz5tRwgk0VtSygFb/i273imB7 jI6wnWRjbMkMrWiGWFO2C8X9UTu4ukHMaqAr5gathlgZAfBkRlTprXGXpKVFnFm6 zBzcgtinn7ypox+g+QD3aizgS9dEo8rbLddgKPanvA4tIfgBGWjxddd26urPdjIr uR9nx15MvJqJ2lPZCGCBegtKLDZx4Wm4wtk3pj56AYMNEG2V1p9XR6UwrYnS20CA HVU= -----END CERTIFICATE-----Generated at Thu Sep 17 23:51:04 2026 by rpki-client