$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: fdvUNPltgE4lS8wXHGMWKv003s4kODPGScRA/LGNUDM= Subject key identifier: 33:0F:3E:3A:08:A2:A0:A2:53:2A:CC:16:CB:5E:72:B2:04:AF:F8:BA Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 186C70B04D86655AAD5C9C260ED9E2295661F7C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: 030C Signing time: Thu 30 Apr 2026 10:53:57 +0000 Manifest this update: Thu 30 Apr 2026 10:48:57 +0000 Manifest next update: Fri 01 May 2026 12:00:57 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: 3a8jqRmDwEb7Tzy8DUD1R382avi3Y/wxUZ5/QAKx4fI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:6c:70:b0:4d:86:65:5a:ad:5c:9c:26:0e:d9:e2:29:56:61:f7:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: Apr 30 10:48:57 2026 GMT Not After : May 1 12:00:57 2026 GMT Subject: CN=330F3E3A08A2A0A2532ACC16CB5E72B204AFF8BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c1:ec:c2:17:19:1e:ea:36:3e:be:21:c7:ec: 1c:ab:48:66:1d:00:2e:8d:71:98:40:89:f6:17:6b: 36:77:51:f6:5a:10:9e:83:34:6d:9d:e1:58:41:20: 6b:4c:5f:4f:03:5a:93:fe:42:84:52:9c:c3:5c:31: 48:2a:54:7f:84:ea:a9:7f:97:fe:74:20:cf:08:93: 3a:44:1a:9e:f9:b3:ab:a0:4a:03:60:b5:8f:16:69: 55:b7:28:50:af:c0:0f:d3:6b:25:c0:bd:ec:8c:46: ba:a5:ba:22:ea:c8:fd:5e:31:d4:f3:f2:0e:34:78: e9:a9:8b:95:c7:9d:fb:31:00:d8:95:5a:c0:03:a7: 8d:e0:5e:4a:3f:06:89:a1:0a:c7:b3:2d:bd:6f:9e: b7:de:d9:58:38:3f:c7:ca:14:8f:e8:80:58:5c:77: 59:55:d1:61:56:ff:33:e1:74:fe:01:1e:08:0b:59: 83:09:50:aa:01:cf:3e:9e:da:31:6b:f7:3a:11:93: 9f:12:a1:6c:86:23:0e:3a:61:e8:b3:70:61:49:dc: b3:bb:7a:70:f0:97:01:71:3a:fa:48:23:d0:34:79: 22:9c:88:6b:47:75:02:56:b7:68:cc:77:cf:cf:22: 05:bb:d0:bf:0d:34:9d:50:8d:29:3c:f9:97:e8:44: 47:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0F:3E:3A:08:A2:A0:A2:53:2A:CC:16:CB:5E:72:B2:04:AF:F8:BA X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:96:61:7d:21:9a:be:57:37:51:f6:ee:a0:07:17:23:4f:ed: 00:1a:9b:ae:cf:90:56:6e:fb:50:19:66:a4:50:04:9f:b7:f6: 2d:ca:ac:f2:56:5a:ff:bf:2d:07:1e:11:54:00:31:b6:df:2a: 5b:7e:84:b3:24:1f:48:b1:14:60:5e:f0:3b:58:d0:5c:04:03: f6:9d:71:36:52:e1:aa:25:39:8f:51:86:54:1b:38:d3:c5:45: 16:c7:91:9e:8c:d3:fa:9b:e8:2e:50:a9:cc:63:cb:97:ce:60: ae:51:c9:5d:4a:09:e7:3a:cb:7c:f2:98:14:10:ca:f5:1a:4c: 8e:c9:e8:20:1b:c2:10:ad:1b:73:80:ad:99:d7:23:f4:b8:cf: 20:36:85:9e:73:96:f2:ab:b5:bf:22:5d:02:11:ce:2c:ca:6c: 49:7b:74:10:6d:8f:48:8d:e1:57:83:a1:8b:72:62:a0:8e:72: 35:8c:4f:b0:53:af:54:75:8a:46:32:eb:1c:c0:60:0f:97:1a: be:59:11:fe:3d:3f:0c:77:42:21:07:71:8d:a9:00:ff:65:33: 72:3f:13:d4:22:2a:3a:78:5f:e6:80:17:d3:bf:72:48:bf:a9: 13:d1:08:78:41:9e:63:83:f7:9b:eb:17:bb:a9:e1:50:31:e4: 37:5b:c4:90 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUGGxwsE2GZVqtXJwmDtniKVZh98UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNjA0MzAxMDQ4NTdaFw0yNjA1MDExMjAwNTdaMDMxMTAvBgNV BAMTKDMzMEYzRTNBMDhBMkEwQTI1MzJBQ0MxNkNCNUU3MkIyMDRBRkY4QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtwezCFxke6jY+viHH7ByrSGYd AC6NcZhAifYXazZ3UfZaEJ6DNG2d4VhBIGtMX08DWpP+QoRSnMNcMUgqVH+E6ql/ l/50IM8IkzpEGp75s6ugSgNgtY8WaVW3KFCvwA/TayXAveyMRrqluiLqyP1eMdTz 8g40eOmpi5XHnfsxANiVWsADp43gXko/BomhCsezLb1vnrfe2Vg4P8fKFI/ogFhc d1lV0WFW/zPhdP4BHggLWYMJUKoBzz6e2jFr9zoRk58SoWyGIw46YeizcGFJ3LO7 enDwlwFxOvpII9A0eSKciGtHdQJWt2jMd8/PIgW70L8NNJ1QjSk8+ZfoREfPAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUMw8+OgiioKJTKswWy15ysgSv+LowHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAE2WYX0hmr5XN1H27qAH FyNP7QAam67PkFZu+1AZZqRQBJ+39i3KrPJWWv+/LQceEVQAMbbfKlt+hLMkH0ix FGBe8DtY0FwEA/adcTZS4aolOY9RhlQbONPFRRbHkZ6M0/qb6C5Qqcxjy5fOYK5R yV1KCec6y3zymBQQyvUaTI7J6CAbwhCtG3OArZnXI/S4zyA2hZ5zlvKrtb8iXQIR zizKbEl7dBBtj0iN4VeDoYtyYqCOcjWMT7BTr1R1ikYy6xzAYA+XGr5ZEf49Pwx3 QiEHcY2pAP9lM3I/E9QiKjp4X+aAF9O/cki/qRPRCHhBnmOD95vrF7up4VAx5Ddb xJA= -----END CERTIFICATE-----Generated at Thu Apr 30 14:54:09 2026 by rpki-client