$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json) Hash identifier: QDlkbR+XLyNDIa+sW+ie/MoFGBsMq5IAgNc58mGkKGE= Subject key identifier: 1E:12:96:03:D6:66:CA:9A:D0:E4:A6:90:10:28:9A:63:57:00:A8:54 Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Certificate serial: 3C90C9FA0DD79A670CF2784720BFB0D9A86FDFD1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft Manifest number: 02AF Signing time: Thu 17 Sep 2026 15:57:50 +0000 Manifest this update: Thu 17 Sep 2026 15:52:50 +0000 Manifest next update: Fri 18 Sep 2026 19:00:50 +0000 Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: /eKn/UYg/oOus6GhF6c9o/NoMVQn2Q5aDLvEj4AIg60=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 14:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:90:c9:fa:0d:d7:9a:67:0c:f2:78:47:20:bf:b0:d9:a8:6f:df:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Validity Not Before: Sep 17 15:52:50 2026 GMT Not After : Sep 18 19:00:50 2026 GMT Subject: CN=1E129603D666CA9AD0E4A69010289A635700A854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7c:2e:ee:02:d9:ca:60:c8:b3:13:e2:97:01: f6:d1:81:08:e9:1b:c8:15:32:75:bb:2a:61:3b:ed: d6:a6:88:c3:35:11:2b:cd:65:c5:d0:d4:3d:16:30: ec:6d:cf:99:66:35:4d:40:b9:b7:7d:69:ce:ad:5b: 61:21:4d:fc:ba:0a:90:bd:0c:52:60:8f:53:db:38: 3d:fe:82:a8:c2:9e:4f:13:f0:fe:78:65:1c:91:a9: e3:6f:6e:5f:40:2f:cf:34:5b:56:20:2a:f4:da:2d: 5e:60:13:42:8f:5a:16:9a:ca:8a:80:ae:e5:6a:a0: 9c:f7:45:84:22:8f:ef:a7:a4:26:a4:05:95:9d:d0: bd:3a:26:95:c2:46:1d:6d:9a:7c:ca:9a:2a:4c:0e: 25:b6:ad:7a:ca:18:37:fc:c8:53:f3:94:5d:b2:5f: 76:a7:86:84:91:44:71:92:a7:c2:98:0c:6c:a2:e9: e2:70:98:6d:6f:e6:dc:f3:a7:b5:40:56:aa:c3:27: 31:26:60:af:99:3b:89:dd:0b:96:0a:90:54:86:9b: 25:f5:bb:a9:f0:78:9a:ed:e9:44:0f:20:32:9a:c0: 30:65:69:8c:d8:e1:19:10:ca:b6:8f:19:53:d8:6b: ba:39:ae:9e:9e:e7:f0:9d:89:93:70:f2:05:72:0b: bf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:12:96:03:D6:66:CA:9A:D0:E4:A6:90:10:28:9A:63:57:00:A8:54 X509v3 Authority Key Identifier: keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c7:c8:0e:d6:c9:59:2b:98:97:3e:e5:8d:da:15:4a:ab:98: 54:de:92:39:0c:8a:b5:af:f6:0f:cd:05:c5:32:df:60:d9:b3: 9e:b9:f5:ca:6b:06:18:f1:d8:e3:76:3d:e0:e6:9f:a3:e4:e9: 85:9e:f8:14:a8:58:e0:2f:07:e1:30:c7:e5:58:23:ac:58:f1: 64:22:fc:25:fa:2f:57:e3:30:3a:9a:fb:0b:50:7e:4d:c7:ba: b5:27:88:68:90:a1:d2:3c:72:43:77:fc:eb:7d:62:e8:34:e2: f2:09:51:f1:47:b9:fc:e3:90:3e:29:c3:59:6e:55:b7:09:07: 1a:bf:bc:33:fe:ac:e1:a1:46:76:df:cf:bb:78:4f:e0:6d:25: 05:c0:0f:5b:17:51:58:67:8c:3c:d2:eb:08:35:9a:1f:1f:f1: 8e:f0:08:26:81:63:d8:ee:de:47:10:95:c1:dd:6d:80:55:ae: 39:eb:42:46:4e:72:e5:3f:47:a2:10:2e:27:57:a9:1f:9b:5d: d5:65:0c:30:16:df:2c:a3:f8:e7:39:93:71:32:b4:eb:50:12: 21:c1:31:83:5c:f0:09:22:0e:aa:2b:ff:04:c4:ff:f1:8a:5d: 25:27:00:3f:12:53:17:93:05:14:d5:e2:d2:8b:ad:dc:44:55: 80:04:d5:1b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUPJDJ+g3XmmcM8nhHIL+w2ahv39EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz REREMDgwRDAeFw0yNjA5MTcxNTUyNTBaFw0yNjA5MTgxOTAwNTBaMDMxMTAvBgNV BAMTKDFFMTI5NjAzRDY2NkNBOUFEMEU0QTY5MDEwMjg5QTYzNTcwMEE4NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDofC7uAtnKYMizE+KXAfbRgQjp G8gVMnW7KmE77damiMM1ESvNZcXQ1D0WMOxtz5lmNU1Aubd9ac6tW2EhTfy6CpC9 DFJgj1PbOD3+gqjCnk8T8P54ZRyRqeNvbl9AL880W1YgKvTaLV5gE0KPWhaayoqA ruVqoJz3RYQij++npCakBZWd0L06JpXCRh1tmnzKmipMDiW2rXrKGDf8yFPzlF2y X3anhoSRRHGSp8KYDGyi6eJwmG1v5tzzp7VAVqrDJzEmYK+ZO4ndC5YKkFSGmyX1 u6nweJrt6UQPIDKawDBlaYzY4RkQyraPGVPYa7o5rp6e5/CdiZNw8gVyC7/nAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUHhKWA9ZmyprQ5KaQECiaY1cAqFQwHwYDVR0j BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADPHyA7WyVkrmJc+5Y3a FUqrmFTekjkMirWv9g/NBcUy32DZs5659cprBhjx2ON2PeDmn6Pk6YWe+BSoWOAv B+Ewx+VYI6xY8WQi/CX6L1fjMDqa+wtQfk3HurUniGiQodI8ckN3/Ot9Yug04vIJ UfFHufzjkD4pw1luVbcJBxq/vDP+rOGhRnbfz7t4T+BtJQXAD1sXUVhnjDzS6wg1 mh8f8Y7wCCaBY9ju3kcQlcHdbYBVrjnrQkZOcuU/R6IQLidXqR+bXdVlDDAW3yyj +Oc5k3EytOtQEiHBMYNc8AkiDqor/wTE//GKXSUnAD8SUxeTBRTV4tKLrdxEVYAE 1Rs= -----END CERTIFICATE-----Generated at Thu Sep 17 23:40:37 2026 by rpki-client