$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json) Hash identifier: oMphHh4ghHhg38P/1lDt+1gw5Y5MYCsFTqCB/mTiJuQ= Subject key identifier: AD:F9:0A:EF:3B:E0:6C:63:9A:33:24:49:89:3F:B5:B4:82:57:93:44 Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Certificate serial: 2B5476526668C367A9EF8D4E12CA5211EE58223F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft Manifest number: 0209 Signing time: Thu 30 Apr 2026 09:58:46 +0000 Manifest this update: Thu 30 Apr 2026 09:53:46 +0000 Manifest next update: Fri 01 May 2026 11:23:46 +0000 Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: dR9XE7rgp6TczC1rOeioNK9txUIHw7H2YXjJdl1toXY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 11:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:54:76:52:66:68:c3:67:a9:ef:8d:4e:12:ca:52:11:ee:58:22:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Validity Not Before: Apr 30 09:53:46 2026 GMT Not After : May 1 11:23:46 2026 GMT Subject: CN=ADF90AEF3BE06C639A332449893FB5B482579344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:94:5f:cc:62:56:b2:9e:f0:0f:a7:c1:f2:bc: 4c:ed:9c:94:77:84:3c:20:52:29:cd:1d:b2:59:8a: b2:60:c8:62:cc:20:34:6e:18:cc:8d:71:ba:a6:59: 5f:d0:11:dd:f8:11:fd:d6:57:30:c6:5c:44:d5:6c: dd:33:dd:30:79:0f:85:1c:be:f1:ca:49:c6:85:9a: 61:bc:ba:5b:79:c1:d7:b8:a6:92:26:a2:dc:e6:40: d8:93:c8:fb:ab:69:03:0a:c7:ba:e6:e2:6b:cf:07: 9d:f4:88:43:7d:25:f2:38:d3:be:b9:9e:b8:51:01: d2:12:57:8d:6c:05:78:9e:8a:0a:4c:5d:d0:58:01: ee:32:34:8b:44:2d:cc:be:ec:dd:d3:13:a4:5e:51: d2:d7:88:c8:d6:e7:1b:0d:57:24:ad:97:cb:35:b6: 60:37:fb:a3:6d:3f:a2:20:2d:25:59:13:2f:43:c1: 0c:d8:f7:01:40:50:46:f1:85:8b:cd:c6:37:50:d7: b0:f3:1f:89:5b:12:96:f5:3f:ee:cd:55:50:b6:e1: d5:d2:22:a5:2a:81:d0:13:3e:db:63:e7:e4:f4:49: 43:00:ca:e1:64:e1:49:26:67:4c:97:60:8e:8b:bc: 85:76:f6:49:62:b4:31:c0:d2:78:a6:93:73:75:45: d6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F9:0A:EF:3B:E0:6C:63:9A:33:24:49:89:3F:B5:B4:82:57:93:44 X509v3 Authority Key Identifier: keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:99:6e:ff:83:b7:13:57:ae:cb:96:b9:bf:25:f3:0f:68:bd: fe:0e:c5:f7:4c:a9:b9:2b:c7:26:0f:33:39:d7:8f:cc:19:5a: 09:47:9e:b8:b3:f0:ef:8d:39:e1:1c:95:8a:4f:66:0c:c3:f7: 6c:ca:fd:22:42:fe:f6:ff:48:77:70:13:c1:28:a9:1a:b6:d1: e6:36:24:f5:c6:1f:43:5c:9a:1d:d3:f3:38:6c:5e:36:f1:54: 97:4e:d0:4c:49:c1:34:90:79:2c:f4:37:9b:05:4d:10:26:7b: 62:05:f7:13:48:83:a7:49:af:c5:fb:aa:94:22:e8:b0:4d:81: 19:a2:ce:06:dc:de:87:a4:87:fc:eb:fd:25:7c:32:56:db:b1: af:f0:e2:cc:0b:b6:e0:4b:bc:fe:40:0b:a0:62:0f:0f:53:9d: c7:b4:61:7a:fd:f2:0d:40:d7:66:4d:ed:21:f9:e5:0f:91:06: 3e:19:02:23:87:4c:0b:da:29:c9:28:c7:88:79:f5:7d:ef:63: 36:ca:b9:b0:b5:b2:fe:67:b6:71:43:64:07:2a:0f:83:7f:8f: 87:65:84:fa:ff:81:9d:89:2c:a8:9b:c9:a5:14:81:11:88:c0: 64:0b:41:08:83:bf:56:bc:2d:cc:34:7b:b7:12:32:8f:09:29: 32:95:d2:e5 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUK1R2UmZow2ep741OEspSEe5YIj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz REREMDgwRDAeFw0yNjA0MzAwOTUzNDZaFw0yNjA1MDExMTIzNDZaMDMxMTAvBgNV BAMTKEFERjkwQUVGM0JFMDZDNjM5QTMzMjQ0OTg5M0ZCNUI0ODI1NzkzNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnlF/MYlaynvAPp8HyvEztnJR3 hDwgUinNHbJZirJgyGLMIDRuGMyNcbqmWV/QEd34Ef3WVzDGXETVbN0z3TB5D4Uc vvHKScaFmmG8ult5wde4ppImotzmQNiTyPuraQMKx7rm4mvPB530iEN9JfI40765 nrhRAdISV41sBXieigpMXdBYAe4yNItELcy+7N3TE6ReUdLXiMjW5xsNVyStl8s1 tmA3+6NtP6IgLSVZEy9DwQzY9wFAUEbxhYvNxjdQ17DzH4lbEpb1P+7NVVC24dXS IqUqgdATPttj5+T0SUMAyuFk4UkmZ0yXYI6LvIV29klitDHA0nimk3N1RdbtAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUrfkK7zvgbGOaMyRJiT+1tIJXk0QwHwYDVR0j BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADiZbv+DtxNXrsuWub8l 8w9ovf4OxfdMqbkrxyYPMznXj8wZWglHnriz8O+NOeEclYpPZgzD92zK/SJC/vb/ SHdwE8EoqRq20eY2JPXGH0Ncmh3T8zhsXjbxVJdO0ExJwTSQeSz0N5sFTRAme2IF 9xNIg6dJr8X7qpQi6LBNgRmizgbc3oekh/zr/SV8Mlbbsa/w4swLtuBLvP5AC6Bi Dw9Tnce0YXr98g1A12ZN7SH55Q+RBj4ZAiOHTAvaKckox4h59X3vYzbKubC1sv5n tnFDZAcqD4N/j4dlhPr/gZ2JLKibyaUUgRGIwGQLQQiDv1a8Lcw0e7cSMo8JKTKV 0uU= -----END CERTIFICATE-----Generated at Thu Apr 30 14:54:32 2026 by rpki-client