$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: h+QTw3y4xFDx1ezoC3J9vF0ASDgWBfTH3pyrIDqeOSI= Subject key identifier: 83:27:CF:3E:A0:2D:FF:C1:BD:4A:D9:F8:F0:BE:19:12:F2:DD:66:D4 Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 770EE7CD0B9C9AE4D2A159483B2D2F1EA214B27C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: 03B5 Signing time: Thu 17 Sep 2026 10:16:03 +0000 Manifest this update: Thu 17 Sep 2026 10:11:03 +0000 Manifest next update: Fri 18 Sep 2026 12:43:03 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: sl4YEyZCKnnxFek5kFEH9SLzS41ifwW2V7JyGH2Js+Q=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 12:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:0e:e7:cd:0b:9c:9a:e4:d2:a1:59:48:3b:2d:2f:1e:a2:14:b2:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: Sep 17 10:11:03 2026 GMT Not After : Sep 18 12:43:03 2026 GMT Subject: CN=8327CF3EA02DFFC1BD4AD9F8F0BE1912F2DD66D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e1:54:5b:4f:92:fc:85:af:fa:02:b3:ac:2f: 6f:08:ee:9d:be:33:22:43:ee:ca:3f:ad:4a:56:99: c1:4e:c6:15:80:87:de:3f:4f:7a:ab:76:04:94:ce: 3b:7d:4b:9b:42:80:7a:1b:ef:bf:a9:b6:f5:9c:22: cb:21:33:86:a4:af:e6:6d:69:39:83:c5:1a:49:9d: c2:b1:4c:2e:aa:de:1d:a9:c8:b7:87:ba:2f:00:e5: 76:81:e1:c9:49:77:10:9e:13:0e:a9:b1:bf:da:52: 2e:fa:8b:1f:77:21:e6:d1:2c:bd:50:fa:fd:53:c3: c3:a6:c3:bc:a2:d8:89:0f:a8:da:bd:f9:b5:ae:9d: a6:9a:37:45:a6:af:6d:1d:41:e4:c6:7e:e1:10:72: 5d:c3:cc:89:bc:fd:87:b5:69:53:11:5c:80:da:5e: 94:20:62:1d:e7:ab:8d:a5:40:e7:af:0e:94:fe:67: ae:8c:6f:6e:c2:8d:f4:a5:0f:7c:ba:ce:99:d5:96: d2:dd:2f:da:67:12:30:e1:28:b1:54:e9:cf:0d:d7: c6:73:17:1a:60:57:5b:9b:c4:99:3d:58:b8:e4:1b: 28:16:44:17:1b:66:71:f3:0f:c7:e7:c9:08:20:20: 31:6c:06:6a:56:a4:1f:b9:e8:2b:67:4c:cb:f7:98: b2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:27:CF:3E:A0:2D:FF:C1:BD:4A:D9:F8:F0:BE:19:12:F2:DD:66:D4 X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:19:92:b3:a3:38:fd:2d:ed:95:41:22:7c:15:de:bb:fe:80: 1d:40:1b:4e:1c:c8:db:0f:d8:6b:3d:fc:e3:b3:d8:6a:25:a0: 63:d8:a1:78:f8:9d:36:10:e2:0b:ba:7b:e3:e8:1c:58:84:e4: 64:52:c8:0d:15:f0:72:93:64:e9:e1:a9:48:84:22:c9:37:92: 86:38:89:76:3d:1f:e6:bc:8d:60:e6:66:1d:8d:80:fe:9e:c7: 93:53:a0:79:10:57:c1:0f:a3:96:15:bd:9c:a3:d7:e5:8d:15: 05:07:a7:97:84:b8:bb:a9:cc:d9:57:ae:28:2b:c6:2f:f4:57: de:a4:1b:72:6f:49:7c:55:7d:49:13:0d:81:7e:53:1e:f4:84: 30:2e:d6:8f:bd:06:cb:ee:dc:25:aa:10:69:43:82:ba:09:e6: 9c:a3:17:5b:52:b3:87:af:5f:d4:9f:9f:09:fb:b7:07:46:8d: 60:22:08:6d:87:ad:e6:ee:1a:26:ba:80:a9:89:c5:86:c1:b1: 57:34:78:29:a8:0a:65:81:ce:24:27:d6:28:3b:1e:77:19:71: 11:3e:e2:ed:19:03:2c:40:21:e8:41:f5:b1:51:4d:a6:09:6c: 70:42:53:5c:b7:c2:4e:f2:57:db:63:7e:9e:a7:ab:22:f0:db: 6f:35:55:fd -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUdw7nzQucmuTSoVlIOy0vHqIUsnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNjA5MTcxMDExMDNaFw0yNjA5MTgxMjQzMDNaMDMxMTAvBgNV BAMTKDgzMjdDRjNFQTAyREZGQzFCRDRBRDlGOEYwQkUxOTEyRjJERDY2RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24VRbT5L8ha/6ArOsL28I7p2+ MyJD7so/rUpWmcFOxhWAh94/T3qrdgSUzjt9S5tCgHob77+ptvWcIsshM4akr+Zt aTmDxRpJncKxTC6q3h2pyLeHui8A5XaB4clJdxCeEw6psb/aUi76ix93IebRLL1Q +v1Tw8Omw7yi2IkPqNq9+bWunaaaN0Wmr20dQeTGfuEQcl3DzIm8/Ye1aVMRXIDa XpQgYh3nq42lQOevDpT+Z66Mb27CjfSlD3y6zpnVltLdL9pnEjDhKLFU6c8N18Zz FxpgV1ubxJk9WLjkGygWRBcbZnHzD8fnyQggIDFsBmpWpB+56CtnTMv3mLL3AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUgyfPPqAt/8G9Stn48L4ZEvLdZtQwHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAM8ZkrOjOP0t7ZVBInwV 3rv+gB1AG04cyNsP2Gs9/OOz2GoloGPYoXj4nTYQ4gu6e+PoHFiE5GRSyA0V8HKT ZOnhqUiEIsk3koY4iXY9H+a8jWDmZh2NgP6ex5NToHkQV8EPo5YVvZyj1+WNFQUH p5eEuLupzNlXrigrxi/0V96kG3JvSXxVfUkTDYF+Ux70hDAu1o+9Bsvu3CWqEGlD groJ5pyjF1tSs4evX9Sfnwn7twdGjWAiCG2HrebuGia6gKmJxYbBsVc0eCmoCmWB ziQn1ig7HncZcRE+4u0ZAyxAIehB9bFRTaYJbHBCU1y3wk7yV9tjfp6nqyLw2281 Vf0= -----END CERTIFICATE-----Generated at Thu Sep 17 23:43:33 2026 by rpki-client