$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft File: C2724A29EF989A4340933B8130B402DD4627A501.mft (raw, json) Hash identifier: isWHpa5VGoNgmdgdsQ93jBmkD/G6aF7o0qtqehvytrI= Subject key identifier: D1:CE:F6:DC:77:95:7B:07:2A:09:80:B7:F3:A7:5A:10:82:D3:F1:9B Authority key identifier: C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01 Certificate issuer: /CN=C2724A29EF989A4340933B8130B402DD4627A501 Certificate serial: 30715D9219B3BE3F71BEF9F19DAD46DCE162C457 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft Manifest number: 032D Signing time: Wed 29 Apr 2026 23:27:06 +0000 Manifest this update: Wed 29 Apr 2026 23:22:06 +0000 Manifest next update: Fri 01 May 2026 01:33:06 +0000 Files and hashes: 1: 326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa (hash: hqgaxXhgaM7AiSsPcNwqghRTi61TSIKXFax/zJU7ecI=) 2: C2724A29EF989A4340933B8130B402DD4627A501.crl (hash: rhEVUMhaYOQJ5Nxo06Y5/fu9UWyjrv5KrPmUNiPAOcA=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 01:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:71:5d:92:19:b3:be:3f:71:be:f9:f1:9d:ad:46:dc:e1:62:c4:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2724A29EF989A4340933B8130B402DD4627A501 Validity Not Before: Apr 29 23:22:06 2026 GMT Not After : May 1 01:33:06 2026 GMT Subject: CN=D1CEF6DC77957B072A0980B7F3A75A1082D3F19B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:14:2e:bc:51:f4:0b:53:5e:f1:90:35:86:9d: fa:5a:c7:28:10:c3:d9:1b:d4:1d:28:5d:a3:28:d5: 36:eb:27:c5:20:c2:b2:55:33:1f:b0:6e:e1:2f:12: f9:fb:f3:be:46:ad:8f:d6:df:7f:88:4e:13:49:0a: ed:1b:0c:50:cb:1b:ef:56:c5:ee:28:df:f6:e3:13: ce:8c:09:6b:85:2e:dd:e3:76:f8:e1:b9:9e:e2:99: 6c:cb:07:7a:e3:e2:5c:9b:d3:4f:e1:d4:85:34:fa: dd:e5:98:b1:59:fb:78:0a:ad:50:b6:fa:a4:19:a2: 03:4f:10:c1:b5:13:8a:f4:4b:b8:73:7b:25:62:63: 6f:5c:f5:ec:99:32:5f:fd:25:2a:2b:44:2b:8b:d8: 3c:c9:41:49:21:cd:7d:79:b1:a0:7d:19:1e:b5:dd: 21:aa:8c:c3:b8:75:66:48:93:d1:72:a0:a0:19:1c: c3:8d:e1:a9:53:47:e4:39:84:47:d5:8f:72:02:56: f3:8a:d2:8c:30:55:97:05:9d:f8:b1:19:bd:f2:df: 74:6c:b5:f5:4e:84:bd:73:d0:62:22:65:59:37:b5: 2e:b3:07:39:9e:07:e1:55:01:98:a5:b1:e6:18:cd: 27:41:06:89:00:ce:02:49:c4:00:b1:59:fa:89:6d: 0b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CE:F6:DC:77:95:7B:07:2A:09:80:B7:F3:A7:5A:10:82:D3:F1:9B X509v3 Authority Key Identifier: keyid:C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:28:00:bc:15:9f:86:05:aa:6b:55:4c:0e:8e:08:19:bf:92: e3:c9:bb:57:a7:be:a8:29:18:70:23:90:fe:ae:6c:04:fd:79: d2:80:dd:fe:4e:ab:cc:ef:c7:15:88:30:e1:96:a6:fa:4c:94: 00:f0:69:a7:96:06:15:ea:72:c7:b9:ca:54:1d:b9:71:93:83: b5:1a:48:1a:8c:92:a9:7c:42:e6:f5:7f:8b:f1:84:b3:fc:c2: ba:98:b7:2b:d4:5b:c1:35:80:4c:5a:66:b7:fc:d1:b4:cc:e4: 0c:81:e6:73:ea:2f:10:55:d8:26:2c:61:f6:cc:d0:28:4f:fc: 20:66:02:8e:3b:9e:c6:b3:9a:5b:b1:81:39:5c:98:98:73:6d: 50:18:43:77:ef:ba:51:07:b0:92:05:67:56:49:df:67:bc:e1: d0:4a:bb:4f:22:db:4a:0d:e3:9f:8e:ed:a2:f1:8d:56:55:f6: 14:e6:f0:1c:92:90:af:46:fe:21:13:01:f6:e3:a0:6c:45:3f: 69:51:f3:5e:df:3e:df:b8:97:8b:98:a2:dc:e9:2e:5f:42:39: c5:d2:45:c2:f2:0f:0f:f9:1a:34:3b:16:27:23:da:21:bd:36: 1c:bf:31:2f:38:af:7b:8f:3b:c6:e1:fb:93:a7:64:d3:52:35: c5:88:a9:bf -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUMHFdkhmzvj9xvvnxna1G3OFixFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI3MjRBMjlFRjk4OUE0MzQwOTMzQjgxMzBCNDAyREQ0 NjI3QTUwMTAeFw0yNjA0MjkyMzIyMDZaFw0yNjA1MDEwMTMzMDZaMDMxMTAvBgNV BAMTKEQxQ0VGNkRDNzc5NTdCMDcyQTA5ODBCN0YzQTc1QTEwODJEM0YxOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHFC68UfQLU17xkDWGnfpaxygQ w9kb1B0oXaMo1TbrJ8UgwrJVMx+wbuEvEvn7875GrY/W33+IThNJCu0bDFDLG+9W xe4o3/bjE86MCWuFLt3jdvjhuZ7imWzLB3rj4lyb00/h1IU0+t3lmLFZ+3gKrVC2 +qQZogNPEMG1E4r0S7hzeyViY29c9eyZMl/9JSorRCuL2DzJQUkhzX15saB9GR61 3SGqjMO4dWZIk9FyoKAZHMON4alTR+Q5hEfVj3ICVvOK0owwVZcFnfixGb3y33Rs tfVOhL1z0GIiZVk3tS6zBzmeB+FVAZilseYYzSdBBokAzgJJxACxWfqJbQs/AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU0c723HeVewcqCYC386daEILT8ZswHwYDVR0j BBgwFoAUwnJKKe+YmkNAkzuBMLQC3UYnpQEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzhiODNlNjMxMjc5ZjRjNjlhNTNmYWIyNTBiYmU2OWRiLzAv QzI3MjRBMjlFRjk4OUE0MzQwOTMzQjgxMzBCNDAyREQ0NjI3QTUwMS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9DMjcyNEEyOUVGOTg5QTQzNDA5MzNCODEzMEI0MDJE RDQ2MjdBNTAxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzhiODNl NjMxMjc5ZjRjNjlhNTNmYWIyNTBiYmU2OWRiLzAvQzI3MjRBMjlFRjk4OUE0MzQw OTMzQjgxMzBCNDAyREQ0NjI3QTUwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHgoALwVn4YFqmtVTA6O CBm/kuPJu1envqgpGHAjkP6ubAT9edKA3f5Oq8zvxxWIMOGWpvpMlADwaaeWBhXq cse5ylQduXGTg7UaSBqMkql8Qub1f4vxhLP8wrqYtyvUW8E1gExaZrf80bTM5AyB 5nPqLxBV2CYsYfbM0ChP/CBmAo47nsazmluxgTlcmJhzbVAYQ3fvulEHsJIFZ1ZJ 32e84dBKu08i20oN45+O7aLxjVZV9hTm8BySkK9G/iETAfbjoGxFP2lR817fPt+4 l4uYotzpLl9COcXSRcLyDw/5GjQ7Ficj2iG9Nhy/MS84r3uPO8bh+5OnZNNSNcWI qb8= -----END CERTIFICATE-----Generated at Thu Apr 30 14:54:22 2026 by rpki-client