$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json) Hash identifier: IBIAUIcKU4D0YNrJiqpWS+O6UMEbPjRo4pFslEdwxok= Subject key identifier: AA:76:8A:43:58:E2:CE:D6:45:8F:BE:FB:B9:D0:76:91:CE:06:2E:D4 Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Certificate serial: 3656895B7FE7F8E05BE734C350BB08D83FEB88EB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft Manifest number: 01CB Signing time: Fri 13 Mar 2026 23:59:02 +0000 Manifest this update: Fri 13 Mar 2026 23:54:00 +0000 Manifest next update: Sun 15 Mar 2026 02:43:00 +0000 Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: crchSSRRKje62KL1/0yoTvf9s/ZwB0MIqb1lcFmrzTw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 12:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:56:89:5b:7f:e7:f8:e0:5b:e7:34:c3:50:bb:08:d8:3f:eb:88:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Validity Not Before: Mar 13 23:54:00 2026 GMT Not After : Mar 15 02:43:00 2026 GMT Subject: CN=AA768A4358E2CED6458FBEFBB9D07691CE062ED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:50:01:4c:7e:0f:b5:0e:8e:07:ca:ec:cc:0c: da:42:72:9a:b0:04:73:26:62:a2:a8:f9:81:bc:70: 29:a9:bc:92:2c:aa:73:8a:50:0e:03:48:cd:40:e3: 35:31:85:46:b7:7c:73:46:ed:64:d1:b9:42:c4:77: 8c:ed:46:99:60:23:63:ae:41:47:4c:f2:4b:5b:1b: 98:99:f5:b0:20:30:7b:76:64:3d:a7:e2:ef:55:54: 18:ef:1b:bd:55:bf:3b:7a:e1:80:f3:a1:d8:b1:2b: 75:f1:0f:19:ef:95:2f:a9:59:a0:17:f2:c5:ea:29: 3e:92:58:db:e1:1d:4e:2b:0c:dd:59:1d:6b:8c:fc: cd:07:61:c8:45:f9:04:9c:c1:17:3b:fa:fc:aa:af: 80:ae:8f:86:f9:4e:2b:08:fc:d7:1c:88:6a:26:a7: 6f:07:0e:8e:b6:c8:18:5c:70:e1:90:b9:61:fe:e7: d6:89:d6:f6:8b:7b:ba:6b:36:16:11:f5:ff:22:ac: e1:25:98:91:26:45:f1:86:90:5c:a9:0f:ed:fd:6d: bf:0a:13:9f:f9:c6:c6:2d:76:1d:d0:9b:af:eb:f5: 63:54:ec:f4:4a:42:86:e0:a7:a5:96:26:f0:1c:89: 57:2b:71:d5:b8:f3:e8:de:95:fd:36:9f:f7:89:28: 1f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:76:8A:43:58:E2:CE:D6:45:8F:BE:FB:B9:D0:76:91:CE:06:2E:D4 X509v3 Authority Key Identifier: keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:c2:df:62:ef:62:3b:41:30:0f:88:31:7b:c3:c0:c5:a3:20: 58:5d:8a:83:44:0b:65:f7:e9:a7:7b:b5:06:a9:a7:10:f6:dc: 17:e2:2a:19:6b:88:1d:69:ca:fd:54:12:0c:d1:b5:e8:1d:47: fe:46:d4:30:2e:d8:2e:7c:64:d2:a4:05:69:21:54:4e:71:13: a4:46:d8:d1:53:14:ad:64:d1:51:3f:d7:d9:bd:cf:5b:b8:eb: 45:ee:c8:b4:6c:12:91:ed:97:0e:24:8e:45:e8:ce:57:e7:8e: ca:bb:93:06:bf:55:83:1b:69:fd:7a:b4:68:d2:e2:c7:32:99: 82:ed:c0:ff:2c:64:60:23:9b:87:e1:98:c4:8d:a1:39:e5:aa: 8a:b1:7c:21:27:be:ac:3e:2b:4b:b9:58:f7:26:d1:bd:7c:dd: e9:1f:7b:32:5b:f5:9a:ca:58:e0:ea:ff:da:9c:6a:48:37:53: a4:3c:87:c7:3b:47:39:73:a9:4e:29:79:ce:dd:02:fd:d0:27: f5:61:c3:19:00:96:2d:66:5b:0b:0f:2f:2f:35:b6:65:15:a9: fb:b0:db:a9:b1:66:85:bb:27:ad:0b:db:26:77:9c:0e:a6:dc: 47:f0:19:a9:4b:b5:b8:96:2e:05:ef:df:06:cd:33:c2:4c:08: 62:c0:46:19 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUNlaJW3/n+OBb5zTDULsI2D/riOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz REREMDgwRDAeFw0yNjAzMTMyMzU0MDBaFw0yNjAzMTUwMjQzMDBaMDMxMTAvBgNV BAMTKEFBNzY4QTQzNThFMkNFRDY0NThGQkVGQkI5RDA3NjkxQ0UwNjJFRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeUAFMfg+1Do4HyuzMDNpCcpqw BHMmYqKo+YG8cCmpvJIsqnOKUA4DSM1A4zUxhUa3fHNG7WTRuULEd4ztRplgI2Ou QUdM8ktbG5iZ9bAgMHt2ZD2n4u9VVBjvG71Vvzt64YDzodixK3XxDxnvlS+pWaAX 8sXqKT6SWNvhHU4rDN1ZHWuM/M0HYchF+QScwRc7+vyqr4Cuj4b5TisI/NcciGom p28HDo62yBhccOGQuWH+59aJ1vaLe7prNhYR9f8irOElmJEmRfGGkFypD+39bb8K E5/5xsYtdh3Qm6/r9WNU7PRKQobgp6WWJvAciVcrcdW48+jelf02n/eJKB+/AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUqnaKQ1jiztZFj777udB2kc4GLtQwHwYDVR0j BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHfC32LvYjtBMA+IMXvD wMWjIFhdioNEC2X36ad7tQappxD23BfiKhlriB1pyv1UEgzRtegdR/5G1DAu2C58 ZNKkBWkhVE5xE6RG2NFTFK1k0VE/19m9z1u460XuyLRsEpHtlw4kjkXozlfnjsq7 kwa/VYMbaf16tGjS4scymYLtwP8sZGAjm4fhmMSNoTnlqoqxfCEnvqw+K0u5WPcm 0b183ekfezJb9ZrKWODq/9qcakg3U6Q8h8c7RzlzqU4pec7dAv3QJ/VhwxkAli1m WwsPLy81tmUVqfuw26mxZoW7J60L2yZ3nA6m3EfwGalLtbiWLgXv3wbNM8JMCGLA Rhk= -----END CERTIFICATE-----Generated at Sat Mar 14 05:43:32 2026 by rpki-client