$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: Zh0mQ5LcwCtXSuOokb3JPREhHypKlpqoyVrfuyDl+RM= Subject key identifier: 85:C9:D4:67:6F:62:A0:79:5B:61:DE:33:E3:C9:76:EB:12:2A:CA:45 Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 7BBBA1DD20B96BBC852315808B6E4C2D4509D84A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: 02CD Signing time: Fri 13 Mar 2026 13:48:59 +0000 Manifest this update: Fri 13 Mar 2026 13:43:57 +0000 Manifest next update: Sat 14 Mar 2026 16:30:57 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: h1BingtEDc9RNkhfxhvp0u6RkwyK4dyCWjeqVRgGJrI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 12:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:bb:a1:dd:20:b9:6b:bc:85:23:15:80:8b:6e:4c:2d:45:09:d8:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: Mar 13 13:43:57 2026 GMT Not After : Mar 14 16:30:57 2026 GMT Subject: CN=85C9D4676F62A0795B61DE33E3C976EB122ACA45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:cc:76:7d:2a:c9:0f:cd:62:ef:01:3c:a2: 58:b7:8c:97:7a:bf:79:8d:d5:9e:af:c2:90:39:11: 76:3b:e8:5d:f8:7e:8a:aa:a7:22:9c:c1:21:44:f8: f8:61:ae:30:d9:59:bb:4d:ca:41:9e:fe:59:64:79: b5:37:1b:43:f7:d9:be:f8:44:cd:6e:f5:54:87:35: dd:c0:67:1d:a6:1b:d8:2e:45:32:2f:d9:c8:47:ff: d1:97:a7:45:5e:cc:88:7e:ce:4e:34:bc:d9:df:15: 7d:10:56:b4:5a:85:e1:c3:d2:d3:46:9a:40:60:f0: 4f:7d:4e:76:72:1c:ed:ed:3f:84:46:d0:8c:ac:be: ce:a3:f7:a3:b4:1f:b5:51:ff:4b:ee:b3:37:61:48: eb:7b:84:d2:b8:68:88:fa:6f:77:94:96:92:81:01: 25:4c:70:f1:33:aa:71:79:e9:ef:4a:64:7c:d9:6a: be:ed:e4:ad:7c:71:ee:13:6c:9b:5a:96:2c:81:09: 03:11:7d:80:f0:44:af:fc:0b:dc:50:d9:74:70:57: c9:e5:fe:d8:0c:f4:27:e1:b8:16:07:d1:07:0e:c6: a8:74:63:e3:ae:6c:87:c5:03:81:ac:e9:79:09:14: 41:18:d4:27:06:06:b8:34:f8:96:ea:7a:51:8f:3d: 1b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C9:D4:67:6F:62:A0:79:5B:61:DE:33:E3:C9:76:EB:12:2A:CA:45 X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:51:0e:4c:b6:87:0a:a8:98:05:2a:44:50:3c:44:d4:48:02: ee:f3:14:39:d1:6c:c7:36:90:d9:92:75:49:c2:66:69:22:63: 87:6e:b5:32:46:ab:40:c8:cf:8c:c3:68:a2:9b:d2:52:66:84: 36:c0:a5:85:36:08:94:4d:66:76:dc:12:3a:85:fa:ea:63:dd: 65:74:ef:a4:7c:44:77:c2:ea:ab:32:14:b3:fb:43:c1:ec:88: 99:61:26:06:06:7d:2d:9d:f6:43:79:25:26:8b:76:fa:11:ec: 77:24:f4:70:f1:49:30:0c:ff:ea:8d:b5:40:43:fc:a0:81:58: d3:c8:55:d7:e3:02:e2:2c:1e:14:50:40:93:d8:df:43:14:7d: a1:21:db:95:a7:66:67:57:86:e7:f1:d0:13:df:96:2d:12:3f: 39:d4:ed:db:45:9a:9c:83:55:01:86:bf:54:61:be:45:1d:49: cb:4d:02:ef:1e:53:3e:0a:e8:d3:04:94:bc:23:05:03:60:a4: 15:72:92:f6:8e:74:18:a0:4f:0a:db:27:34:fc:4c:80:cb:32: a6:34:c5:aa:e9:c0:1e:85:fe:d4:a8:99:52:ca:8e:2d:af:63: c6:90:d2:e8:a6:37:62:1b:b1:60:d7:c3:d2:ae:59:2f:57:a7: aa:69:6f:76 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUe7uh3SC5a7yFIxWAi25MLUUJ2EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNjAzMTMxMzQzNTdaFw0yNjAzMTQxNjMwNTdaMDMxMTAvBgNV BAMTKDg1QzlENDY3NkY2MkEwNzk1QjYxREUzM0UzQzk3NkVCMTIyQUNBNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pMx2fSrJD81i7wE8oli3jJd6 v3mN1Z6vwpA5EXY76F34foqqpyKcwSFE+PhhrjDZWbtNykGe/llkebU3G0P32b74 RM1u9VSHNd3AZx2mG9guRTIv2chH/9GXp0VezIh+zk40vNnfFX0QVrRaheHD0tNG mkBg8E99TnZyHO3tP4RG0Iysvs6j96O0H7VR/0vuszdhSOt7hNK4aIj6b3eUlpKB ASVMcPEzqnF56e9KZHzZar7t5K18ce4TbJtaliyBCQMRfYDwRK/8C9xQ2XRwV8nl /tgM9CfhuBYH0QcOxqh0Y+OubIfFA4Gs6XkJFEEY1CcGBrg0+JbqelGPPRtHAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUhcnUZ29ioHlbYd4z48l26xIqykUwHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGZRDky2hwqomAUqRFA8 RNRIAu7zFDnRbMc2kNmSdUnCZmkiY4dutTJGq0DIz4zDaKKb0lJmhDbApYU2CJRN ZnbcEjqF+upj3WV076R8RHfC6qsyFLP7Q8HsiJlhJgYGfS2d9kN5JSaLdvoR7Hck 9HDxSTAM/+qNtUBD/KCBWNPIVdfjAuIsHhRQQJPY30MUfaEh25WnZmdXhufx0BPf li0SPznU7dtFmpyDVQGGv1RhvkUdSctNAu8eUz4K6NMElLwjBQNgpBVykvaOdBig TwrbJzT8TIDLMqY0xarpwB6F/tSomVLKji2vY8aQ0uimN2IbsWDXw9KuWS9Xp6pp b3Y= -----END CERTIFICATE-----Generated at Sat Mar 14 05:40:21 2026 by rpki-client