$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft File: CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft (raw, json) Hash identifier: fi3rdwdlELVvE6ZJ/Rm7rOW1x+88oFl0NoXTvlZ9tY8= Subject key identifier: 0E:94:90:11:FF:22:B3:76:32:37:51:5F:F5:C6:C2:6C:CC:F5:72:9D Authority key identifier: CD:6B:F4:AF:A2:41:23:0E:C5:83:BD:DA:39:7E:FD:CA:63:28:44:14 Certificate issuer: /CN=CD6BF4AFA241230EC583BDDA397EFDCA63284414 Certificate serial: 20A08E188CB19CFB9F3B0D5EA2D52132706E0F67 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft Manifest number: 5F Signing time: Wed 29 Jul 2026 16:09:37 +0000 Manifest this update: Wed 29 Jul 2026 16:04:37 +0000 Manifest next update: Thu 30 Jul 2026 20:07:37 +0000 Files and hashes: 1: CD6BF4AFA241230EC583BDDA397EFDCA63284414.crl (hash: gvlJchznO6ywug3iBWO0XQQO7D7SlE0OU+JIz9CyoFo=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Jul 2026 20:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a0:8e:18:8c:b1:9c:fb:9f:3b:0d:5e:a2:d5:21:32:70:6e:0f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD6BF4AFA241230EC583BDDA397EFDCA63284414 Validity Not Before: Jul 29 16:04:37 2026 GMT Not After : Jul 30 20:07:37 2026 GMT Subject: CN=0E949011FF22B3763237515FF5C6C26CCCF5729D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7a:95:a4:07:17:be:0b:3f:4d:f5:eb:8a:c6: 4f:ab:32:04:e4:65:b0:d9:ba:3a:ee:81:e4:b7:5e: ed:25:db:75:51:97:ec:7f:d4:79:af:62:be:04:87: 0b:ff:41:78:6a:3a:f7:cb:c9:ac:24:56:4f:56:e1: c8:ac:7f:e5:b4:86:30:c8:31:26:0b:c3:d6:70:84: 6d:f3:e3:fb:57:31:dd:71:e5:ad:5b:9a:3c:89:b7: b0:0c:4d:53:76:ad:67:ca:21:14:0e:c4:8f:a9:66: a1:c8:28:70:66:e9:b1:2c:bb:c5:e4:3f:c2:99:3c: fa:55:66:43:aa:28:46:ac:95:74:d1:21:6e:28:70: 47:8e:5d:5c:bc:05:a2:70:f7:e1:de:e1:fa:69:e3: e3:6d:98:fe:2a:81:39:fa:98:38:65:ef:7a:a7:37: 72:61:41:a7:6f:5b:8e:82:b5:ee:90:98:19:9f:6d: f6:b0:56:a4:fd:07:0e:86:dc:f3:97:7a:a3:1d:39: da:6f:c4:45:50:27:7d:8a:a8:bc:cf:77:34:26:ea: ec:d1:0f:f3:fe:c7:12:66:51:91:c0:c5:88:e2:a0: 9b:36:19:34:1f:72:23:34:79:95:5d:42:e8:71:de: 4b:78:09:ad:22:1b:58:95:e8:5d:f4:67:cf:52:79: 56:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:94:90:11:FF:22:B3:76:32:37:51:5F:F5:C6:C2:6C:CC:F5:72:9D X509v3 Authority Key Identifier: keyid:CD:6B:F4:AF:A2:41:23:0E:C5:83:BD:DA:39:7E:FD:CA:63:28:44:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:2c:ce:7b:78:dd:57:fa:d3:9e:23:33:f1:35:87:05:8b:1f: 5c:f7:80:dd:c8:92:1b:64:07:4b:51:c5:14:d7:cc:42:4a:98: 66:6a:2b:85:9f:da:0e:10:3b:9a:67:4f:f4:fe:d4:07:b0:df: 6a:c0:97:c6:ef:58:4d:9e:9f:be:d6:56:6d:9c:4b:b2:0b:70: 51:04:56:82:f7:66:ab:f1:aa:2c:8a:c8:ef:e3:23:1f:bb:d0: 7c:75:4b:01:8c:32:73:10:71:1d:a6:e4:f5:28:9e:1f:8a:2a: 3c:97:8b:cc:84:97:00:90:ae:2d:57:29:06:b5:49:8a:5e:5b: 28:f4:83:58:f3:b9:79:43:83:36:8a:49:10:fb:7e:ef:1e:62: b3:a1:eb:11:5e:1f:f2:d9:f4:72:24:49:68:89:30:b4:6d:12: 94:ae:10:cc:d9:0e:0a:d8:9d:63:e1:ca:96:75:bf:60:17:41: 4a:b2:de:bc:e1:74:6c:42:f6:d6:01:f6:8e:4b:39:33:50:da: f6:10:e5:b7:87:27:78:a3:f3:76:0d:b1:19:41:ae:56:e2:23: 89:76:6e:38:f1:04:72:db:b0:22:b7:3d:fc:0a:5d:e0:df:d5: c9:ce:d6:fa:60:1c:fa:9d:ab:2f:c8:76:fc:e0:f5:d0:ac:86: 47:8f:63:9f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUIKCOGIyxnPufOw1eotUhMnBuD2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2QkY0QUZBMjQxMjMwRUM1ODNCRERBMzk3RUZEQ0E2 MzI4NDQxNDAeFw0yNjA3MjkxNjA0MzdaFw0yNjA3MzAyMDA3MzdaMDMxMTAvBgNV BAMTKDBFOTQ5MDExRkYyMkIzNzYzMjM3NTE1RkY1QzZDMjZDQ0NGNTcyOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMepWkBxe+Cz9N9euKxk+rMgTk ZbDZujrugeS3Xu0l23VRl+x/1HmvYr4Ehwv/QXhqOvfLyawkVk9W4cisf+W0hjDI MSYLw9ZwhG3z4/tXMd1x5a1bmjyJt7AMTVN2rWfKIRQOxI+pZqHIKHBm6bEsu8Xk P8KZPPpVZkOqKEaslXTRIW4ocEeOXVy8BaJw9+He4fpp4+NtmP4qgTn6mDhl73qn N3JhQadvW46Cte6QmBmfbfawVqT9Bw6G3POXeqMdOdpvxEVQJ32KqLzPdzQm6uzR D/P+xxJmUZHAxYjioJs2GTQfciM0eZVdQuhx3kt4Ca0iG1iV6F30Z89SeVbhAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUDpSQEf8is3YyN1Ff9cbCbMz1cp0wHwYDVR0j BBgwFoAUzWv0r6JBIw7Fg73aOX79ymMoRBQwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzgyZDVmMzg0NDllOTQyYTlhOWFiMjgxODAwNTZhYmZjLzAv Q0Q2QkY0QUZBMjQxMjMwRUM1ODNCRERBMzk3RUZEQ0E2MzI4NDQxNC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9DRDZCRjRBRkEyNDEyMzBFQzU4M0JEREEzOTdFRkRD QTYzMjg0NDE0LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzgyZDVm Mzg0NDllOTQyYTlhOWFiMjgxODAwNTZhYmZjLzAvQ0Q2QkY0QUZBMjQxMjMwRUM1 ODNCRERBMzk3RUZEQ0E2MzI4NDQxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADUsznt43Vf6054jM/E1 hwWLH1z3gN3IkhtkB0tRxRTXzEJKmGZqK4Wf2g4QO5pnT/T+1Aew32rAl8bvWE2e n77WVm2cS7ILcFEEVoL3ZqvxqiyKyO/jIx+70Hx1SwGMMnMQcR2m5PUonh+KKjyX i8yElwCQri1XKQa1SYpeWyj0g1jzuXlDgzaKSRD7fu8eYrOh6xFeH/LZ9HIkSWiJ MLRtEpSuEMzZDgrYnWPhypZ1v2AXQUqy3rzhdGxC9tYB9o5LOTNQ2vYQ5beHJ3ij 83YNsRlBrlbiI4l2bjjxBHLbsCK3PfwKXeDf1cnO1vpgHPqdqy/Idvzg9dCshkeP Y58= -----END CERTIFICATE-----Generated at Thu Jul 30 07:05:13 2026 by rpki-client