$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: aaaI/WdCDwxKl1WalSnCIjQHUhmRCUaj8aSXY2AD2KU= Subject key identifier: D0:FE:C8:F8:DC:6C:87:1C:7E:E3:F3:D1:B6:C8:E3:9D:B8:C3:6B:45 Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 1842B101CB2547A4BE8D5A41AC1D8710D6CC63AC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: 0349 Signing time: Mon 15 Jun 2026 01:38:25 +0000 Manifest this update: Mon 15 Jun 2026 01:33:25 +0000 Manifest next update: Tue 16 Jun 2026 05:33:25 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: 5BOmj20nRH7yq2yGV+ZnTK1nzWUJlWLGm9jGQVIHPu0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Jun 2026 22:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:42:b1:01:cb:25:47:a4:be:8d:5a:41:ac:1d:87:10:d6:cc:63:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: Jun 15 01:33:25 2026 GMT Not After : Jun 16 05:33:25 2026 GMT Subject: CN=D0FEC8F8DC6C871C7EE3F3D1B6C8E39DB8C36B45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5e:51:db:11:52:8f:9d:2e:0f:a2:14:49:45: 6e:39:40:4c:b5:41:ed:1a:22:33:18:85:e4:26:40: 8c:09:78:dd:4a:11:e0:8f:5e:27:33:36:b2:4d:c7: 70:e0:84:6c:36:ab:40:4a:ae:6f:93:ad:03:92:67: cb:5f:ad:f5:32:fb:96:e2:2a:2d:f3:0c:6d:aa:f0: 0e:ea:a0:4a:83:b5:76:43:8f:e6:d2:43:b7:6e:ec: 41:0f:cd:fc:94:41:4d:5e:e5:48:ae:6f:2e:44:d3: a0:18:af:86:42:a6:55:73:7a:51:04:36:1d:18:02: ab:8f:80:8a:28:43:75:13:74:f6:1e:c4:15:b3:78: 5a:20:16:b6:f4:c2:e9:b6:29:ee:ab:04:6e:e2:1b: 03:be:0c:47:89:7d:7b:2d:9b:e4:a4:81:47:fc:10: cc:c7:05:af:20:7c:2d:a8:6f:9f:b7:00:4e:43:df: 24:02:89:2d:6f:b0:71:86:e9:a8:8e:f0:49:cc:3f: 86:a7:a5:b8:65:4d:45:02:c0:7d:3f:a8:08:03:6e: 2b:9d:9f:eb:7f:ea:08:e4:eb:94:9d:5c:02:f9:ba: 0a:ee:e6:03:0c:82:ac:1e:2e:46:a3:c8:46:22:d4: f2:ae:5b:22:be:0d:fb:01:7a:ae:0e:91:93:4c:d2: fb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FE:C8:F8:DC:6C:87:1C:7E:E3:F3:D1:B6:C8:E3:9D:B8:C3:6B:45 X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b6:b2:8a:32:a7:e6:96:fc:23:10:6c:00:c8:28:79:fc:21: 86:a0:36:aa:cf:19:a2:73:02:32:63:b7:f0:12:e2:d9:b3:d1: dd:fe:2f:b8:80:88:05:b3:e2:09:8e:a1:61:83:32:c9:96:a8: b9:66:49:eb:ee:65:2d:e0:4e:00:a1:03:60:36:e4:d3:e3:27: 07:30:9f:d6:de:3d:5c:b6:0c:0c:33:f8:bf:f4:ca:2d:6c:ff: c4:9f:a8:80:0d:d3:ec:8f:e5:56:3d:fa:96:f6:13:88:8a:5e: 1f:f4:26:89:1f:57:dc:b7:c5:34:06:1b:d5:69:93:b9:06:70: 26:e8:f0:0a:b8:e5:50:b4:b0:4d:64:a5:95:b0:b6:8d:0f:c0: d4:c7:6a:a8:0f:b6:5a:7d:81:86:59:91:9e:00:b2:34:e7:c1: 84:d7:7f:77:62:2c:2c:0d:22:bb:04:ff:bc:1b:ae:53:9f:a3: 0e:94:a1:72:a6:2f:a7:98:78:87:5f:cc:84:cd:44:30:6f:02: 8b:32:45:6b:20:f7:ea:51:84:9e:72:b7:93:38:ff:2c:5f:8a: a0:ca:46:a9:88:84:ff:71:36:38:fa:5c:de:d6:ae:0d:ae:5e: 1f:a6:5d:63:9a:cc:a8:a9:86:98:00:3d:95:2b:bf:a9:16:5b: 70:16:4c:0b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUGEKxAcslR6S+jVpBrB2HENbMY6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNjA2MTUwMTMzMjVaFw0yNjA2MTYwNTMzMjVaMDMxMTAvBgNV BAMTKEQwRkVDOEY4REM2Qzg3MUM3RUUzRjNEMUI2QzhFMzlEQjhDMzZCNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGXlHbEVKPnS4PohRJRW45QEy1 Qe0aIjMYheQmQIwJeN1KEeCPXiczNrJNx3DghGw2q0BKrm+TrQOSZ8tfrfUy+5bi Ki3zDG2q8A7qoEqDtXZDj+bSQ7du7EEPzfyUQU1e5Uiuby5E06AYr4ZCplVzelEE Nh0YAquPgIooQ3UTdPYexBWzeFogFrb0wum2Ke6rBG7iGwO+DEeJfXstm+SkgUf8 EMzHBa8gfC2ob5+3AE5D3yQCiS1vsHGG6aiO8EnMP4anpbhlTUUCwH0/qAgDbiud n+t/6gjk65SdXAL5ugru5gMMgqweLkajyEYi1PKuWyK+DfsBeq4OkZNM0vuxAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU0P7I+Nxshxx+4/PRtsjjnbjDa0UwHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFS2sooyp+aW/CMQbADI KHn8IYagNqrPGaJzAjJjt/AS4tmz0d3+L7iAiAWz4gmOoWGDMsmWqLlmSevuZS3g TgChA2A25NPjJwcwn9bePVy2DAwz+L/0yi1s/8SfqIAN0+yP5VY9+pb2E4iKXh/0 JokfV9y3xTQGG9Vpk7kGcCbo8Aq45VC0sE1kpZWwto0PwNTHaqgPtlp9gYZZkZ4A sjTnwYTXf3diLCwNIrsE/7wbrlOfow6UoXKmL6eYeIdfzITNRDBvAosyRWsg9+pR hJ5yt5M4/yxfiqDKRqmIhP9xNjj6XN7Wrg2uXh+mXWOazKiphpgAPZUrv6kWW3AW TAs= -----END CERTIFICATE-----Generated at Mon Jun 15 06:11:26 2026 by rpki-client