$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: iNO2lf9a+Wu/qPj844GDQeHt4AVU+paZ8ifw5pcBydg= Subject key identifier: 77:9C:74:0E:B0:CE:69:8F:DB:B5:1B:94:13:FB:EB:F7:36:22:1B:D1 Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 59622E7DDE54C866CFE713E06DC76FDCA9D6B229 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 02F6 Signing time: Sat 14 Mar 2026 03:10:34 +0000 Manifest this update: Sat 14 Mar 2026 03:05:32 +0000 Manifest next update: Sun 15 Mar 2026 06:51:32 +0000 Files and hashes: 1: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: vxaqD429klEPt03aXXniKGxzQoHI4Ar9F2T3pRAzV/Y=) 2: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: 4ql1hvZ5Z1a59Qk3FL22WH1hic/JFPdo+ETso1V8ZGc=) 3: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 3wo4yWYqUm70prj7oF5pGF3zOR0/7RB8Epa8stuidcg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 12:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:62:2e:7d:de:54:c8:66:cf:e7:13:e0:6d:c7:6f:dc:a9:d6:b2:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Mar 14 03:05:32 2026 GMT Not After : Mar 15 06:51:32 2026 GMT Subject: CN=779C740EB0CE698FDBB51B9413FBEBF736221BD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:24:8b:72:56:a9:65:01:dc:4e:72:8e:27:92: 05:2f:ce:d0:cd:49:e1:9d:18:96:44:e5:02:89:84: 20:d1:91:ad:a7:ce:2b:2f:a3:22:17:30:ef:3b:43: d7:fb:e7:f7:32:ea:9d:3d:23:82:41:52:95:b1:d0: 5c:be:9d:ef:5e:7e:0e:93:fb:01:f2:6f:2b:34:ea: d9:ad:9b:af:e1:93:1f:f2:7d:62:01:92:6b:42:6c: c7:42:28:2b:7c:fb:c9:86:96:39:40:4e:07:67:d7: 4b:f5:2f:e7:95:68:94:e0:f3:fb:2f:4e:1c:6c:8f: eb:02:4f:4f:a0:0d:4c:4b:10:6c:dd:b0:4f:06:84: 86:ac:89:62:46:97:7b:dd:9e:d7:f7:49:d5:9d:ac: 94:b9:f8:ae:fd:f3:00:bd:ac:d6:eb:2c:3a:96:00: a2:68:33:78:32:42:e1:e5:fe:a7:2d:df:c9:76:7f: de:e5:1a:1a:1e:22:2d:e5:96:9d:75:f5:eb:02:e3: 43:f0:31:13:f0:fc:ab:0f:7d:3e:9c:85:2c:46:06: c9:91:0f:af:b1:e6:58:04:74:e3:45:3e:1f:8c:c5: 50:96:cd:9f:02:e0:27:91:7e:5a:c9:43:1b:af:37: 14:53:e1:84:79:63:b9:64:ba:21:e3:ef:c2:35:7d: 51:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9C:74:0E:B0:CE:69:8F:DB:B5:1B:94:13:FB:EB:F7:36:22:1B:D1 X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:c3:ff:3f:9c:41:c2:ee:0a:05:57:50:0a:39:50:ab:a4:07: 3d:d5:df:29:62:72:92:a8:68:55:00:1e:fe:f4:07:df:df:05: 13:4e:0d:78:d7:1b:1b:8d:8b:8f:37:be:a9:37:b2:99:07:41: 47:70:82:97:e5:18:6d:55:bd:e2:ab:31:a1:ba:14:c5:86:bb: 94:da:38:76:6a:e5:ab:5a:10:5c:b0:14:31:39:67:81:31:7c: 14:f1:a4:76:3d:05:08:db:41:67:c6:d5:8e:03:78:99:32:08: 00:e5:11:c3:6d:f1:7a:dd:84:e6:7c:28:86:b1:44:3f:0e:ed: 22:4e:25:e6:c0:f0:d8:cb:36:4c:54:51:e7:89:b9:f6:f9:87: 3d:9e:64:17:27:1f:c4:bd:1b:f4:08:95:d8:2b:c3:0b:ee:c9: 02:65:a3:51:ae:f4:6c:dd:c9:ed:af:89:78:06:66:82:dc:88: 43:11:3d:ab:16:67:51:a5:8a:b9:96:74:67:e0:96:b3:5d:7a: 61:13:29:5d:95:96:7b:83:4b:93:86:28:b7:77:b7:58:49:aa: b8:a8:97:45:01:e4:df:52:32:ef:1d:d0:5c:8d:c7:a5:7b:fb: d0:6c:b3:1d:f6:03:f2:5c:1e:f1:2f:8f:8b:53:7f:fe:6a:0b: 49:35:4c:a7 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUWWIufd5UyGbP5xPgbcdv3KnWsikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNjAzMTQwMzA1MzJaFw0yNjAzMTUwNjUxMzJaMDMxMTAvBgNV BAMTKDc3OUM3NDBFQjBDRTY5OEZEQkI1MUI5NDEzRkJFQkY3MzYyMjFCRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJItyVqllAdxOco4nkgUvztDN SeGdGJZE5QKJhCDRka2nzisvoyIXMO87Q9f75/cy6p09I4JBUpWx0Fy+ne9efg6T +wHybys06tmtm6/hkx/yfWIBkmtCbMdCKCt8+8mGljlATgdn10v1L+eVaJTg8/sv Thxsj+sCT0+gDUxLEGzdsE8GhIasiWJGl3vdntf3SdWdrJS5+K798wC9rNbrLDqW AKJoM3gyQuHl/qct38l2f97lGhoeIi3llp119esC40PwMRPw/KsPfT6chSxGBsmR D6+x5lgEdONFPh+MxVCWzZ8C4CeRflrJQxuvNxRT4YR5Y7lkuiHj78I1fVFlAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUd5x0DrDOaY/btRuUE/vr9zYiG9EwHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABnD/z+cQcLuCgVXUAo5 UKukBz3V3ylicpKoaFUAHv70B9/fBRNODXjXGxuNi483vqk3spkHQUdwgpflGG1V veKrMaG6FMWGu5TaOHZq5ataEFywFDE5Z4ExfBTxpHY9BQjbQWfG1Y4DeJkyCADl EcNt8XrdhOZ8KIaxRD8O7SJOJebA8NjLNkxUUeeJufb5hz2eZBcnH8S9G/QIldgr wwvuyQJlo1Gu9Gzdye2viXgGZoLciEMRPasWZ1GlirmWdGfglrNdemETKV2VlnuD S5OGKLd3t1hJqriol0UB5N9SMu8d0FyNx6V7+9Bssx32A/JcHvEvj4tTf/5qC0k1 TKc= -----END CERTIFICATE-----Generated at Sat Mar 14 05:42:39 2026 by rpki-client