$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft File: C2724A29EF989A4340933B8130B402DD4627A501.mft (raw, json) Hash identifier: XN28ZG5Ey7fN6yX++iVjWPtgkzctDKRRiuNUoA3ZSJs= Subject key identifier: 8E:E8:5C:F2:C6:9B:E6:F0:E9:B4:DB:25:0E:97:B4:89:6F:34:30:76 Authority key identifier: C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01 Certificate issuer: /CN=C2724A29EF989A4340933B8130B402DD4627A501 Certificate serial: 3EABFFA47A1D238BBD9F506CE93354138C679B2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft Manifest number: 036A Signing time: Sun 14 Jun 2026 12:11:03 +0000 Manifest this update: Sun 14 Jun 2026 12:06:03 +0000 Manifest next update: Mon 15 Jun 2026 13:15:03 +0000 Files and hashes: 1: 326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa (hash: Iu5zEupNr3d2HM/VgOsiZY0jlgghbGowPktIjWL0DAU=) 2: C2724A29EF989A4340933B8130B402DD4627A501.crl (hash: dgG2sT7pAl9D2a+wUA8VH5rqoDslZYZC2oSBlCGfxRc=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Jun 2026 13:15:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ab:ff:a4:7a:1d:23:8b:bd:9f:50:6c:e9:33:54:13:8c:67:9b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2724A29EF989A4340933B8130B402DD4627A501 Validity Not Before: Jun 14 12:06:03 2026 GMT Not After : Jun 15 13:15:03 2026 GMT Subject: CN=8EE85CF2C69BE6F0E9B4DB250E97B4896F343076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:84:e6:a6:18:d0:16:35:f6:73:2f:3c:af:83: db:af:6a:ea:32:d1:4a:f1:32:7a:ba:e0:b8:04:28: 5b:5b:eb:88:6a:93:08:50:27:e0:e9:f7:a4:5e:10: eb:b2:ca:d0:db:7d:cd:1a:17:e3:6a:66:d0:e9:22: 8e:38:2a:21:2a:cf:ce:92:1e:42:04:62:13:3e:1f: 02:c2:a3:93:ae:15:e8:e7:dd:11:75:23:a4:0e:1d: 67:f6:c1:83:e4:94:f4:79:11:5e:4c:21:44:68:d5: 6f:95:63:bd:73:13:33:6c:b9:3f:09:7c:f3:a0:e9: d7:b9:c2:41:23:64:86:96:e1:66:30:9d:e4:e6:18: 6a:c0:c4:e6:ae:43:52:22:b2:f1:f6:10:5c:63:b6: 14:15:b4:10:5e:dd:88:29:28:93:18:05:30:d9:4d: 61:ee:f7:80:e7:3d:02:c5:88:2c:59:17:ef:36:41: 00:2e:27:6d:3f:83:1d:0a:03:ec:91:4e:a0:52:4f: 96:b3:2a:5f:ea:c3:09:43:e4:1a:68:29:af:0d:ff: 36:47:95:1f:32:9c:8b:b8:50:42:34:96:50:b5:0f: 8d:6a:77:5e:e6:d6:f6:5b:42:9e:39:c3:d6:33:39: 44:7e:30:cd:d4:80:14:69:40:2c:fb:2b:b4:a3:36: 41:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E8:5C:F2:C6:9B:E6:F0:E9:B4:DB:25:0E:97:B4:89:6F:34:30:76 X509v3 Authority Key Identifier: keyid:C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:bc:cc:15:d1:87:c6:da:a7:8b:15:47:b3:b6:cf:c3:c7:ee: fb:c2:92:f2:cd:9b:60:c7:df:4a:3f:da:fb:12:dd:b2:87:78: 9a:d0:db:06:b3:67:9f:04:20:9f:0a:3b:55:92:1f:a0:fd:bf: a1:f7:f6:02:44:39:6f:28:a3:d4:12:b9:76:cd:38:f1:ed:a0: 77:be:a9:f3:d5:ae:7a:1c:2b:e8:4d:1b:45:6d:ba:0f:13:43: fc:60:0b:b3:aa:3c:3e:83:40:41:72:6d:ef:8d:e6:8b:b5:2e: e0:69:7b:2c:8a:1b:95:f9:e5:3b:f5:8f:a8:d7:6c:a4:14:a5: 4c:1d:07:ef:78:ea:af:72:48:31:07:d0:ad:87:1d:83:94:6f: ee:a1:a8:5f:90:ce:59:f1:cb:45:de:e8:37:a5:05:44:42:02: 3a:b3:71:17:9b:0e:05:eb:2a:76:a9:71:4b:59:92:d5:59:d4: 56:12:37:38:c3:a8:ac:b5:79:dc:4f:4f:86:c5:be:d9:2f:35: 1d:05:ce:06:46:76:4e:8a:ac:58:1c:5d:1b:36:bd:14:a7:5d: 09:c6:c2:05:fa:d9:2f:a2:3e:ba:73:6d:07:fa:ff:05:0f:3f: ae:03:0a:ba:c0:85:53:f3:f7:bf:8c:9a:a1:6a:e2:3c:7a:8f: 29:65:a2:4a -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUPqv/pHodI4u9n1Bs6TNUE4xnmy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI3MjRBMjlFRjk4OUE0MzQwOTMzQjgxMzBCNDAyREQ0 NjI3QTUwMTAeFw0yNjA2MTQxMjA2MDNaFw0yNjA2MTUxMzE1MDNaMDMxMTAvBgNV BAMTKDhFRTg1Q0YyQzY5QkU2RjBFOUI0REIyNTBFOTdCNDg5NkYzNDMwNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDohOamGNAWNfZzLzyvg9uvauoy 0UrxMnq64LgEKFtb64hqkwhQJ+Dp96ReEOuyytDbfc0aF+NqZtDpIo44KiEqz86S HkIEYhM+HwLCo5OuFejn3RF1I6QOHWf2wYPklPR5EV5MIURo1W+VY71zEzNsuT8J fPOg6de5wkEjZIaW4WYwneTmGGrAxOauQ1IisvH2EFxjthQVtBBe3YgpKJMYBTDZ TWHu94DnPQLFiCxZF+82QQAuJ20/gx0KA+yRTqBST5azKl/qwwlD5BpoKa8N/zZH lR8ynIu4UEI0llC1D41qd17m1vZbQp45w9YzOUR+MM3UgBRpQCz7K7SjNkGnAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUjuhc8sab5vDptNslDpe0iW80MHYwHwYDVR0j BBgwFoAUwnJKKe+YmkNAkzuBMLQC3UYnpQEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzhiODNlNjMxMjc5ZjRjNjlhNTNmYWIyNTBiYmU2OWRiLzAv QzI3MjRBMjlFRjk4OUE0MzQwOTMzQjgxMzBCNDAyREQ0NjI3QTUwMS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9DMjcyNEEyOUVGOTg5QTQzNDA5MzNCODEzMEI0MDJE RDQ2MjdBNTAxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzhiODNl NjMxMjc5ZjRjNjlhNTNmYWIyNTBiYmU2OWRiLzAvQzI3MjRBMjlFRjk4OUE0MzQw OTMzQjgxMzBCNDAyREQ0NjI3QTUwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHG8zBXRh8bap4sVR7O2 z8PH7vvCkvLNm2DH30o/2vsS3bKHeJrQ2wazZ58EIJ8KO1WSH6D9v6H39gJEOW8o o9QSuXbNOPHtoHe+qfPVrnocK+hNG0Vtug8TQ/xgC7OqPD6DQEFybe+N5ou1LuBp eyyKG5X55Tv1j6jXbKQUpUwdB+946q9ySDEH0K2HHYOUb+6hqF+Qzlnxy0Xe6Del BURCAjqzcRebDgXrKnapcUtZktVZ1FYSNzjDqKy1edxPT4bFvtkvNR0FzgZGdk6K rFgcXRs2vRSnXQnGwgX62S+iPrpzbQf6/wUPP64DCrrAhVPz97+MmqFq4jx6jyll oko= -----END CERTIFICATE-----Generated at Mon Jun 15 03:49:23 2026 by rpki-client