$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: 3pLc++WL2LVU2PMu+Lqa/yJ9gfNQEj2iQvANSM8jNsc= Subject key identifier: 19:D3:9C:66:27:7B:BA:7B:31:0A:89:01:74:5A:92:FB:F2:43:E2:30 Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 276EF716DCDDAB67150760D54283C33045F7E1AA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 0334 Signing time: Thu 30 Apr 2026 12:59:28 +0000 Manifest this update: Thu 30 Apr 2026 12:54:28 +0000 Manifest next update: Fri 01 May 2026 14:35:28 +0000 Files and hashes: 1: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: vxaqD429klEPt03aXXniKGxzQoHI4Ar9F2T3pRAzV/Y=) 2: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: S7FmR37Fry2bha9kUmln5VB1mam0ja7CK0nEG1H9EBo=) 3: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 3wo4yWYqUm70prj7oF5pGF3zOR0/7RB8Epa8stuidcg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:6e:f7:16:dc:dd:ab:67:15:07:60:d5:42:83:c3:30:45:f7:e1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Apr 30 12:54:28 2026 GMT Not After : May 1 14:35:28 2026 GMT Subject: CN=19D39C66277BBA7B310A8901745A92FBF243E230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:29:97:e4:ec:22:48:1f:a2:36:c3:f9:7f:55: a1:9f:56:f8:ae:a0:81:fe:4b:6a:70:53:90:bb:c6: d4:87:0b:cc:84:c5:16:92:ab:97:ec:44:9f:3f:9e: 78:e1:6e:33:2e:c3:a4:f0:11:d4:10:51:2e:39:39: 5c:3c:5b:13:b7:cf:ce:3e:4a:4f:21:df:09:5a:40: b2:cb:e9:0a:1f:3d:5d:82:fa:ff:8f:70:8b:ed:f7: 9a:d9:31:c1:d4:2a:07:46:dc:a8:61:9e:0c:3a:51: a3:da:f8:c0:b1:5b:bf:c3:e1:f8:94:72:1b:80:61: ba:01:16:c2:8b:43:f2:ed:ad:2b:25:35:b2:8e:67: a3:db:62:ad:07:18:c2:c7:53:c2:1c:05:d6:a8:ad: d4:1d:07:58:70:0d:ab:54:07:3a:d1:42:c7:9d:c6: d3:60:a6:8a:55:2e:e2:7f:82:d6:9a:51:a3:bf:16: 6a:f1:14:bc:b9:ee:84:36:d5:68:36:63:18:c3:c1: 8d:0c:0c:0b:0a:2b:1a:1f:3b:5e:4c:9d:6d:32:61: 73:e9:2f:20:d4:44:b0:7a:fa:be:1d:e5:32:94:8b: 86:33:6d:a1:db:b6:22:64:c7:5c:73:d0:54:4d:c0: ed:8e:2a:4f:7c:72:35:97:13:cc:fa:5d:9e:af:db: e2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D3:9C:66:27:7B:BA:7B:31:0A:89:01:74:5A:92:FB:F2:43:E2:30 X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c1:dd:6e:3c:3b:dd:c4:72:94:55:19:38:b8:14:06:c8:f1: 5a:3d:64:31:fa:2c:a5:99:8f:fc:35:18:59:98:50:73:61:dc: 47:ae:11:6c:4a:1e:39:65:25:ca:79:79:b2:af:13:87:a8:bc: 1b:eb:93:0a:ba:18:77:77:c9:37:be:39:bd:5c:28:a8:3d:d6: 4f:64:10:98:2c:f1:70:1d:66:c7:ef:6d:98:7d:4f:4d:79:1a: 70:22:40:58:3b:75:77:59:a7:c7:98:35:b8:29:ed:89:9f:73: 0d:e8:23:7d:30:79:60:5f:46:31:11:87:6b:af:5c:49:d0:c2: bb:d9:a0:e0:1b:0c:f5:68:0a:90:6d:ef:77:19:67:b5:16:cb: 00:cf:6f:d2:34:4c:90:d2:28:7f:82:91:ce:c2:9b:bc:81:2a: 23:db:5d:71:b1:01:7f:a4:52:2b:40:6d:3d:49:ae:9d:e0:f3: 9c:f9:0d:99:7e:8c:3f:15:99:bd:d8:d4:4f:60:db:81:83:8a: d9:0e:00:98:cc:db:46:32:3a:ce:fc:45:7d:4b:96:da:b9:e1: c5:93:84:d2:7e:79:1c:10:88:8c:ca:f6:58:46:6e:f3:cb:b3: 50:90:2b:40:c9:25:bb:ed:38:e7:2d:f8:d9:01:0b:e3:51:63: b9:18:d3:70 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUJ273Ftzdq2cVB2DVQoPDMEX34aowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNjA0MzAxMjU0MjhaFw0yNjA1MDExNDM1MjhaMDMxMTAvBgNV BAMTKDE5RDM5QzY2Mjc3QkJBN0IzMTBBODkwMTc0NUE5MkZCRjI0M0UyMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+KZfk7CJIH6I2w/l/VaGfVviu oIH+S2pwU5C7xtSHC8yExRaSq5fsRJ8/nnjhbjMuw6TwEdQQUS45OVw8WxO3z84+ Sk8h3wlaQLLL6QofPV2C+v+PcIvt95rZMcHUKgdG3Khhngw6UaPa+MCxW7/D4fiU chuAYboBFsKLQ/LtrSslNbKOZ6PbYq0HGMLHU8IcBdaordQdB1hwDatUBzrRQsed xtNgpopVLuJ/gtaaUaO/FmrxFLy57oQ21Wg2YxjDwY0MDAsKKxofO15MnW0yYXPp LyDURLB6+r4d5TKUi4YzbaHbtiJkx1xz0FRNwO2OKk98cjWXE8z6XZ6v2+K1AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUGdOcZid7unsxCokBdFqS+/JD4jAwHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAzB3W48O93EcpRVGTi4 FAbI8Vo9ZDH6LKWZj/w1GFmYUHNh3EeuEWxKHjllJcp5ebKvE4eovBvrkwq6GHd3 yTe+Ob1cKKg91k9kEJgs8XAdZsfvbZh9T015GnAiQFg7dXdZp8eYNbgp7Ymfcw3o I30weWBfRjERh2uvXEnQwrvZoOAbDPVoCpBt73cZZ7UWywDPb9I0TJDSKH+Ckc7C m7yBKiPbXXGxAX+kUitAbT1Jrp3g85z5DZl+jD8Vmb3Y1E9g24GDitkOAJjM20Yy Os78RX1Lltq54cWThNJ+eRwQiIzK9lhGbvPLs1CQK0DJJbvtOOct+NkBC+NRY7kY 03A= -----END CERTIFICATE-----Generated at Thu Apr 30 14:54:21 2026 by rpki-client