$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json) Hash identifier: wZzSIi1Ugoz8fpsWGJeKxEH85fTzf/o+H5JML9eEt0A= Subject key identifier: 52:EE:7C:C0:9C:D0:A2:49:8A:D2:72:7F:DF:83:54:A3:49:E6:4B:0C Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Certificate serial: 07D9C3BDC901BC46493B38283D246867E3B17313 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft Manifest number: 0244 Signing time: Sun 14 Jun 2026 13:21:14 +0000 Manifest this update: Sun 14 Jun 2026 13:16:14 +0000 Manifest next update: Mon 15 Jun 2026 17:11:14 +0000 Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: MA5O0ZXjiFHCPdtxIurpJnbSitsA9y6UqpLhioB55NI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Jun 2026 17:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d9:c3:bd:c9:01:bc:46:49:3b:38:28:3d:24:68:67:e3:b1:73:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Validity Not Before: Jun 14 13:16:14 2026 GMT Not After : Jun 15 17:11:14 2026 GMT Subject: CN=52EE7CC09CD0A2498AD2727FDF8354A349E64B0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:de:c9:af:d3:cc:8b:f7:52:a9:3e:f2:fb:4f: 1f:a4:4a:cd:4c:c2:c2:a4:79:8e:84:82:14:5d:74: d8:01:fa:a0:84:e6:44:24:62:26:1d:aa:30:3a:92: 77:cc:fc:ea:72:a2:aa:3b:fb:cf:f7:0d:4c:44:3b: ec:9f:17:9c:62:5f:ae:9b:b9:14:e2:0f:60:24:a3: 8f:c4:ec:d1:bd:e6:69:04:3c:29:2e:57:c5:b4:7c: 6e:28:53:ad:c7:f2:f6:9c:21:24:03:a8:f7:ef:0a: 7e:08:f2:f3:a0:fe:5e:77:19:c4:13:a3:a5:2c:7a: 4f:7b:20:61:0f:b8:a9:59:df:89:d4:82:3a:b9:e1: d8:a9:58:3e:2b:3f:c6:ad:14:68:9a:be:ef:b6:fc: fd:14:b5:d3:b4:40:48:25:e8:14:13:f1:56:6a:9c: 84:b4:ff:ae:33:01:05:cf:ec:10:6e:21:e5:64:ba: 2e:af:b2:37:dd:86:e5:c3:8d:cd:7b:08:7d:51:cf: 85:3b:0b:8d:85:4b:c8:ad:8d:f7:03:0d:f4:c8:70: 30:95:7f:e3:17:9f:7c:71:56:b2:a8:3b:e5:73:d7: 95:0c:19:7f:95:64:ed:ec:ad:82:c0:57:94:da:9a: 48:93:fb:3a:c1:ec:fb:13:03:20:b5:24:42:a4:d0: 1f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EE:7C:C0:9C:D0:A2:49:8A:D2:72:7F:DF:83:54:A3:49:E6:4B:0C X509v3 Authority Key Identifier: keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:f9:f0:0d:a0:b5:9e:c4:c0:42:eb:2f:03:a0:54:c6:fe:48: 46:85:91:76:79:88:2d:00:fd:a6:bb:23:d3:04:65:93:84:8b: 4e:52:90:6c:4a:6d:70:61:de:05:e5:73:a0:bc:ec:21:d5:fd: f1:44:00:46:fd:18:3b:8f:5b:2d:a6:c9:a4:01:a9:41:a5:e8: 7d:5a:ba:0e:09:fd:94:57:6e:03:91:2f:86:55:81:b4:ea:4c: e9:30:5a:64:d4:79:f6:f5:95:9d:da:af:21:e4:03:9c:8e:e2: 26:ff:b8:03:8d:eb:e1:ac:1b:e1:db:f0:f4:a4:cf:5a:f9:6a: 7c:36:c5:eb:44:dd:fe:2d:d9:dc:9d:5c:ec:41:56:35:4d:9e: b1:10:7a:47:5c:cd:b6:f9:87:8c:31:00:bc:c7:80:21:4a:83: 36:c6:79:57:0b:1c:8e:1b:76:3b:2f:20:5c:9c:64:be:f9:bb: 4a:33:ba:d1:a1:40:ce:c8:17:b0:be:18:f5:ee:07:c6:f1:66: 69:86:be:2d:97:d6:e4:f3:e5:15:12:86:d9:94:31:96:a7:ef: 57:c9:b3:78:76:7e:69:74:e5:d6:23:48:23:2a:ce:2a:2e:d0: f8:9e:de:41:6f:3a:dd:7d:a2:c3:8d:eb:82:21:b8:6a:53:9b: 77:04:97:ee -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUB9nDvckBvEZJOzgoPSRoZ+OxcxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz REREMDgwRDAeFw0yNjA2MTQxMzE2MTRaFw0yNjA2MTUxNzExMTRaMDMxMTAvBgNV BAMTKDUyRUU3Q0MwOUNEMEEyNDk4QUQyNzI3RkRGODM1NEEzNDlFNjRCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ3smv08yL91KpPvL7Tx+kSs1M wsKkeY6EghRddNgB+qCE5kQkYiYdqjA6knfM/Opyoqo7+8/3DUxEO+yfF5xiX66b uRTiD2Ako4/E7NG95mkEPCkuV8W0fG4oU63H8vacISQDqPfvCn4I8vOg/l53GcQT o6Usek97IGEPuKlZ34nUgjq54dipWD4rP8atFGiavu+2/P0UtdO0QEgl6BQT8VZq nIS0/64zAQXP7BBuIeVkui6vsjfdhuXDjc17CH1Rz4U7C42FS8itjfcDDfTIcDCV f+MXn3xxVrKoO+Vz15UMGX+VZO3srYLAV5TamkiT+zrB7PsTAyC1JEKk0B8dAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUUu58wJzQokmK0nJ/34NUo0nmSwwwHwYDVR0j BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACf58A2gtZ7EwELrLwOg VMb+SEaFkXZ5iC0A/aa7I9MEZZOEi05SkGxKbXBh3gXlc6C87CHV/fFEAEb9GDuP Wy2myaQBqUGl6H1aug4J/ZRXbgORL4ZVgbTqTOkwWmTUefb1lZ3aryHkA5yO4ib/ uAON6+GsG+Hb8PSkz1r5anw2xetE3f4t2dydXOxBVjVNnrEQekdczbb5h4wxALzH gCFKgzbGeVcLHI4bdjsvIFycZL75u0ozutGhQM7IF7C+GPXuB8bxZmmGvi2X1uTz 5RUShtmUMZan71fJs3h2fml05dYjSCMqziou0Pie3kFvOt19osON64IhuGpTm3cE l+4= -----END CERTIFICATE-----Generated at Mon Jun 15 06:07:34 2026 by rpki-client