$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft File: C2724A29EF989A4340933B8130B402DD4627A501.mft (raw, json) Hash identifier: aTMzt1dDbKg/8YBA0i+KKRxS/+X6GQwobwmE097zMGE= Subject key identifier: 3A:8C:29:50:D2:84:97:F2:2E:18:C7:CB:26:2B:46:42:AA:9E:6C:1C Authority key identifier: C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01 Certificate issuer: /CN=C2724A29EF989A4340933B8130B402DD4627A501 Certificate serial: 6EF76100162AECA4693BF374CE65E5C50B746FC3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft Manifest number: 03D6 Signing time: Thu 17 Sep 2026 15:07:35 +0000 Manifest this update: Thu 17 Sep 2026 15:02:35 +0000 Manifest next update: Fri 18 Sep 2026 17:55:35 +0000 Files and hashes: 1: 326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa (hash: Iu5zEupNr3d2HM/VgOsiZY0jlgghbGowPktIjWL0DAU=) 2: C2724A29EF989A4340933B8130B402DD4627A501.crl (hash: Snd9EMBAV2xJ9CR1k4kgaaXy8RpkiyDIXYC/wc4QJxk=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 14:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:f7:61:00:16:2a:ec:a4:69:3b:f3:74:ce:65:e5:c5:0b:74:6f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2724A29EF989A4340933B8130B402DD4627A501 Validity Not Before: Sep 17 15:02:35 2026 GMT Not After : Sep 18 17:55:35 2026 GMT Subject: CN=3A8C2950D28497F22E18C7CB262B4642AA9E6C1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:83:21:90:02:f3:c7:7a:d3:a6:da:d0:42:1f: 34:a1:30:f7:74:12:63:0c:5e:83:ed:86:44:8a:11: 2a:ab:13:8a:90:a2:1b:29:df:c6:a1:eb:7a:33:2e: a3:a0:69:9d:a3:e6:85:ba:e7:9e:23:9b:cb:a5:21: 10:76:dd:1d:1f:c8:29:50:4a:4d:d7:8d:7f:3f:15: a3:f9:c3:0e:06:f8:ae:76:40:ad:29:ac:80:5a:0f: 92:69:69:3b:9f:52:99:41:9a:89:f7:72:5c:6c:68: 51:f3:7b:c0:58:5f:10:dc:b3:1f:af:03:fa:77:ee: 04:99:61:d5:05:af:ee:b4:cc:33:5b:31:14:bf:30: 86:2c:26:23:97:1c:62:34:cb:31:55:b7:a2:9a:19: 6f:84:e6:b7:e9:1b:76:f1:43:10:2f:f7:5e:75:3b: 8c:e4:6c:93:f2:29:ee:10:7e:d7:fa:c5:39:fd:3b: 0f:b6:35:bc:7b:42:6b:6d:fd:56:b9:a4:17:dd:14: 96:63:20:36:ae:e6:8f:ba:d9:71:94:c5:f4:f0:a4: e3:b1:47:db:15:6b:79:b9:08:90:e8:ef:06:24:3f: 93:9e:d9:78:fc:1c:ae:b2:6c:17:04:74:a9:68:01: b0:7f:99:ff:04:ac:ff:f1:6f:88:76:b9:95:4b:a2: f6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8C:29:50:D2:84:97:F2:2E:18:C7:CB:26:2B:46:42:AA:9E:6C:1C X509v3 Authority Key Identifier: keyid:C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:9d:cb:c6:ca:f6:b0:eb:88:10:01:fe:fa:58:06:53:a1:d3: 7d:75:10:5e:c1:e9:ff:42:77:db:c2:20:c5:ae:de:29:df:ad: 05:c1:f4:f8:50:b7:82:68:01:61:24:78:c9:c6:f0:eb:2c:b5: 22:8b:f7:c5:3c:82:2e:02:98:06:86:4f:d0:a5:fd:0d:e4:a6: b0:20:17:91:f5:37:a5:f6:81:a9:f2:f7:f0:e3:6b:14:a1:54: 7a:72:c6:4f:10:0c:2e:c5:e2:7e:db:f3:c4:18:f4:5a:d3:81: a3:bf:63:cc:fa:f4:21:85:b4:b8:43:ad:a6:28:ea:6a:04:1d: 26:74:75:a1:48:42:94:cb:7b:11:d7:2f:ae:4a:bc:43:6a:d1: 54:fe:b7:18:3d:53:4a:0e:2e:b7:33:8f:bd:ca:09:83:45:f1: 3a:2e:1e:36:df:64:af:e0:2f:05:82:18:d7:23:81:86:53:8c: 07:c5:b8:dc:d1:83:d7:2b:fe:69:39:5e:a7:68:a3:b8:99:fa: 6e:f5:05:b1:44:2c:76:a9:4c:55:e5:f2:c9:9e:2e:b5:8a:20: f1:64:ac:3d:a6:f5:4e:96:fb:86:51:73:a1:4d:cc:a6:b8:d6: 06:9c:bd:65:28:f9:dd:7d:ed:fc:23:6f:f6:32:c5:fe:14:be: 3f:fd:e6:50 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUbvdhABYq7KRpO/N0zmXlxQt0b8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI3MjRBMjlFRjk4OUE0MzQwOTMzQjgxMzBCNDAyREQ0 NjI3QTUwMTAeFw0yNjA5MTcxNTAyMzVaFw0yNjA5MTgxNzU1MzVaMDMxMTAvBgNV BAMTKDNBOEMyOTUwRDI4NDk3RjIyRTE4QzdDQjI2MkI0NjQyQUE5RTZDMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYgyGQAvPHetOm2tBCHzShMPd0 EmMMXoPthkSKESqrE4qQohsp38ah63ozLqOgaZ2j5oW6554jm8ulIRB23R0fyClQ Sk3XjX8/FaP5ww4G+K52QK0prIBaD5JpaTufUplBmon3clxsaFHze8BYXxDcsx+v A/p37gSZYdUFr+60zDNbMRS/MIYsJiOXHGI0yzFVt6KaGW+E5rfpG3bxQxAv9151 O4zkbJPyKe4Qftf6xTn9Ow+2Nbx7Qmtt/Va5pBfdFJZjIDau5o+62XGUxfTwpOOx R9sVa3m5CJDo7wYkP5Oe2Xj8HK6ybBcEdKloAbB/mf8ErP/xb4h2uZVLova1AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUOowpUNKEl/IuGMfLJitGQqqebBwwHwYDVR0j BBgwFoAUwnJKKe+YmkNAkzuBMLQC3UYnpQEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzhiODNlNjMxMjc5ZjRjNjlhNTNmYWIyNTBiYmU2OWRiLzAv QzI3MjRBMjlFRjk4OUE0MzQwOTMzQjgxMzBCNDAyREQ0NjI3QTUwMS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9DMjcyNEEyOUVGOTg5QTQzNDA5MzNCODEzMEI0MDJE RDQ2MjdBNTAxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzhiODNl NjMxMjc5ZjRjNjlhNTNmYWIyNTBiYmU2OWRiLzAvQzI3MjRBMjlFRjk4OUE0MzQw OTMzQjgxMzBCNDAyREQ0NjI3QTUwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKSdy8bK9rDriBAB/vpY BlOh0311EF7B6f9Cd9vCIMWu3infrQXB9PhQt4JoAWEkeMnG8OsstSKL98U8gi4C mAaGT9Cl/Q3kprAgF5H1N6X2gany9/DjaxShVHpyxk8QDC7F4n7b88QY9FrTgaO/ Y8z69CGFtLhDraYo6moEHSZ0daFIQpTLexHXL65KvENq0VT+txg9U0oOLrczj73K CYNF8TouHjbfZK/gLwWCGNcjgYZTjAfFuNzRg9cr/mk5Xqdoo7iZ+m71BbFELHap TFXl8smeLrWKIPFkrD2m9U6W+4ZRc6FNzKa41gacvWUo+d197fwjb/Yyxf4Uvj/9 5lA= -----END CERTIFICATE-----Generated at Thu Sep 17 22:48:24 2026 by rpki-client