$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft File: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft (raw, json) Hash identifier: FsUf68Nr4yp5sUYPyoYhJ7CiS1WJmkUmey+6gXhEpEA= Subject key identifier: 1A:DB:AD:22:DD:74:D6:8D:98:2E:51:DB:87:79:C4:D1:2C:06:B5:93 Authority key identifier: 5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0 Certificate issuer: /CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0 Certificate serial: 7C081623B4BBE0446E72548079918ABC7EA40BAE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft Manifest number: 0332 Signing time: Thu 30 Apr 2026 03:07:44 +0000 Manifest this update: Thu 30 Apr 2026 03:02:44 +0000 Manifest next update: Fri 01 May 2026 06:43:44 +0000 Files and hashes: 1: 326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa (hash: Fb1/PRkI0lrTKbp777DJ9P81eGra7/CB0uA9Vm+bs1w=) 2: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl (hash: X8EBzpDKUlGlU9KDUmlFuPOYgqhC3ekpih4SCvErugQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 06:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:08:16:23:b4:bb:e0:44:6e:72:54:80:79:91:8a:bc:7e:a4:0b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0 Validity Not Before: Apr 30 03:02:44 2026 GMT Not After : May 1 06:43:44 2026 GMT Subject: CN=1ADBAD22DD74D68D982E51DB8779C4D12C06B593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:06:12:85:02:76:ae:16:bc:0b:24:11:c6: 1b:21:48:37:b0:28:ca:69:30:74:70:ec:ac:a5:5f: c1:01:d8:bc:36:f5:2f:c9:0a:d5:e3:1a:d1:c1:d1: 87:27:45:53:77:cc:c2:30:79:43:c1:6e:d2:a3:af: 3d:fb:c0:e3:17:eb:8b:1e:79:02:bd:f4:49:09:2c: 59:e0:c0:aa:71:83:26:94:b2:ca:b7:b5:8a:54:31: 11:45:1b:8d:11:ee:cd:24:ad:13:d4:cb:88:b6:63: ad:31:89:82:20:51:82:b5:33:96:12:b2:c8:86:3f: fd:97:48:ea:96:0a:41:e0:ab:ed:f3:7d:17:3d:3c: dc:f3:3c:61:31:41:91:c5:c7:fc:ce:ae:d5:ed:6c: 66:97:93:da:5f:ee:94:9f:4b:0f:72:de:0e:dc:54: e9:71:44:9e:86:b5:03:f0:05:72:ad:64:cf:d0:4d: 27:d6:30:dc:64:13:e8:6d:17:6e:f6:47:de:d0:32: fb:c9:20:96:32:30:25:54:88:97:77:eb:51:69:41: d8:4d:e3:da:0e:80:f4:d1:56:ce:34:c8:77:10:8c: e8:cb:05:ed:98:3c:3d:f1:ef:66:be:eb:1f:2c:60: 2b:c8:24:f7:e7:2b:ae:41:5b:c5:0d:a9:09:43:3c: 0f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DB:AD:22:DD:74:D6:8D:98:2E:51:DB:87:79:C4:D1:2C:06:B5:93 X509v3 Authority Key Identifier: keyid:5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:e3:9e:dd:11:96:c0:94:e6:81:68:a4:20:cb:c6:a8:2b:49: fb:ab:ef:02:26:78:dc:73:2d:35:d4:95:fb:19:e6:00:ae:45: 52:58:d1:d3:63:f0:3a:d8:ec:71:d2:9b:4d:32:77:49:39:06: 76:79:4e:48:96:ca:68:5a:7d:ae:9a:88:55:30:29:f1:af:57: 72:2a:f6:98:7d:15:75:4c:d6:72:50:af:55:b1:0a:ca:0a:b2: f6:2f:89:e6:04:7c:02:aa:35:08:37:e9:57:7b:4c:24:b9:12: 39:7f:a8:d9:49:b3:66:ce:03:d6:fe:86:55:f5:8a:41:e3:67: bf:ad:4b:15:87:3e:7f:a4:f8:e3:b9:e9:a5:f0:f5:46:f8:ed: b8:7a:5e:dd:a5:7d:48:f2:d1:aa:63:b1:6d:9d:54:21:3e:41: 9e:0c:60:c8:2d:48:d3:16:3c:fe:87:69:8b:15:ab:83:a6:c4: 95:dd:71:1f:1b:1a:a1:2c:c3:14:57:08:4c:3e:78:54:63:da: 00:d9:35:bb:94:67:0c:3b:15:cc:13:05:8e:5b:c7:c4:15:10: e4:2f:c9:f4:ec:66:b5:71:4b:52:fe:91:b9:9a:c3:d8:ca:7c: 90:36:60:20:ae:ab:b5:e6:8e:1f:00:25:0e:af:f9:50:09:db: 4f:d9:5a:d8 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUfAgWI7S74ERuclSAeZGKvH6kC64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCRTJGNjA5OTk2NDc2QUFGRTE0NkJDNUE3MjQyOUIw QjIwNUZDMDAeFw0yNjA0MzAwMzAyNDRaFw0yNjA1MDEwNjQzNDRaMDMxMTAvBgNV BAMTKDFBREJBRDIyREQ3NEQ2OEQ5ODJFNTFEQjg3NzlDNEQxMkMwNkI1OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpAYShQJ2rha8CyQRxhshSDew KMppMHRw7KylX8EB2Lw29S/JCtXjGtHB0YcnRVN3zMIweUPBbtKjrz37wOMX64se eQK99EkJLFngwKpxgyaUssq3tYpUMRFFG40R7s0krRPUy4i2Y60xiYIgUYK1M5YS ssiGP/2XSOqWCkHgq+3zfRc9PNzzPGExQZHFx/zOrtXtbGaXk9pf7pSfSw9y3g7c VOlxRJ6GtQPwBXKtZM/QTSfWMNxkE+htF272R97QMvvJIJYyMCVUiJd361FpQdhN 49oOgPTRVs40yHcQjOjLBe2YPD3x72a+6x8sYCvIJPfnK65BW8UNqQlDPA9pAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUGtutIt101o2YLlHbh3nE0SwGtZMwHwYDVR0j BBgwFoAUWr4vYJmWR2qv4Ua8WnJCmwsgX8AwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY0ODMyNjExYmEwNjRkNmI4ZjljMmI3YzczZmJkODRiLzAv NUFCRTJGNjA5OTk2NDc2QUFGRTE0NkJDNUE3MjQyOUIwQjIwNUZDMC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy81QUJFMkY2MDk5OTY0NzZBQUZFMTQ2QkM1QTcyNDI5 QjBCMjA1RkMwLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY0ODMy NjExYmEwNjRkNmI4ZjljMmI3YzczZmJkODRiLzAvNUFCRTJGNjA5OTk2NDc2QUFG RTE0NkJDNUE3MjQyOUIwQjIwNUZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADLjnt0RlsCU5oFopCDL xqgrSfur7wImeNxzLTXUlfsZ5gCuRVJY0dNj8DrY7HHSm00yd0k5BnZ5TkiWymha fa6aiFUwKfGvV3Iq9ph9FXVM1nJQr1WxCsoKsvYvieYEfAKqNQg36Vd7TCS5Ejl/ qNlJs2bOA9b+hlX1ikHjZ7+tSxWHPn+k+OO56aXw9Ub47bh6Xt2lfUjy0apjsW2d VCE+QZ4MYMgtSNMWPP6HaYsVq4OmxJXdcR8bGqEswxRXCEw+eFRj2gDZNbuUZww7 FcwTBY5bx8QVEOQvyfTsZrVxS1L+kbmaw9jKfJA2YCCuq7Xmjh8AJQ6v+VAJ20/Z Wtg= -----END CERTIFICATE-----Generated at Thu Apr 30 15:15:27 2026 by rpki-client