$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: bHhRo8rcVCurZk5gc7q/i5imEroDnyJSQgrbACjkNqA= Subject key identifier: 8D:AC:3B:21:DC:84:71:D5:91:02:78:5C:DB:57:B1:06:84:9A:B4:26 Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 08F53B05304B6D4A84CEB79C809EFCA468F8AF8B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 03DD Signing time: Thu 17 Sep 2026 16:02:53 +0000 Manifest this update: Thu 17 Sep 2026 15:57:53 +0000 Manifest next update: Fri 18 Sep 2026 19:28:53 +0000 Files and hashes: 1: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: dc7aFvZsFxdINUzmo03viwCzNgQ2HUK3QhleWk4YGzY=) 2: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: mGICFwpePDC//7H7pNzqqtaxos1cs8gBg5nTz4FiekQ=) 3: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: zOrqh7JBh5cabv1FMnsx9I8Yzb7D7hhQa+EqQ/fUGQU=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 14:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f5:3b:05:30:4b:6d:4a:84:ce:b7:9c:80:9e:fc:a4:68:f8:af:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Sep 17 15:57:53 2026 GMT Not After : Sep 18 19:28:53 2026 GMT Subject: CN=8DAC3B21DC8471D59102785CDB57B106849AB426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:30:fd:98:69:ea:4b:71:d6:f4:f5:f5:8b:ba: f8:8d:87:25:db:22:63:f9:9d:75:4d:20:6d:48:86: 19:b5:3c:bb:47:ee:0e:54:a9:1b:06:d6:09:aa:be: 0a:b2:4d:49:54:8a:29:2a:e7:cb:59:be:3f:2b:92: 05:c0:27:ad:c5:cd:e4:88:35:b9:49:47:6c:48:20: 61:48:5a:af:2d:32:21:5d:73:5a:5f:b3:4c:22:e2: 00:d3:26:6f:3b:22:7c:cd:07:64:6e:69:ff:8a:f3: 5b:23:fc:a4:2e:08:83:98:80:21:a9:6e:61:f3:97: e5:de:26:5c:db:32:d5:4f:93:98:57:b6:f3:90:c8: 20:f6:e5:b1:f9:8a:be:cf:c4:8f:23:c9:4f:48:c2: 3d:ca:5a:33:20:0b:2e:e2:32:47:80:ff:5b:17:38: 89:8c:d6:4b:7e:7a:88:ca:a3:6e:4b:c7:15:08:d6: b6:32:4a:e7:7c:72:a4:41:00:4a:78:bf:9c:d1:42: 65:b0:cf:37:ea:30:30:f8:68:08:0e:46:cf:4b:3d: 85:ed:b6:b8:de:7b:8f:b2:14:1f:e8:31:cd:39:d0: 74:86:cf:3d:63:c8:eb:c9:84:44:c1:1e:af:05:7e: 9f:28:cc:e4:31:d5:38:5a:b4:32:ad:77:2c:0a:ba: 1c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AC:3B:21:DC:84:71:D5:91:02:78:5C:DB:57:B1:06:84:9A:B4:26 X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:63:09:15:4f:76:55:b0:1c:1c:1b:c8:c8:12:ff:56:29:1c: 60:10:f0:b1:ab:66:9f:6a:9a:5d:2f:a4:03:6d:2a:13:28:bc: ea:b8:e9:10:65:8b:59:bc:b5:1f:1c:0c:77:3b:64:33:33:df: 68:c2:10:ff:84:84:b7:50:80:ff:1c:9b:7d:8e:9a:fc:03:92: 34:52:54:a9:76:3e:ad:82:2f:af:3d:85:e2:fb:dc:42:28:89: 89:a1:e1:2f:57:b1:96:7b:98:4e:57:8d:e1:c3:fd:4f:b3:ce: 19:f0:a5:b7:27:df:9b:ff:ab:59:0a:76:0a:13:d3:d5:e4:0c: 97:b2:dd:4d:b7:af:58:63:84:38:3d:8f:b7:47:9e:d1:06:ea: 3e:b9:77:10:dd:4d:46:da:24:74:05:ef:97:74:38:91:bc:10: d7:6a:a0:7f:1f:f6:42:b9:bd:f9:0e:14:42:6e:81:7a:da:ee: 02:71:6e:8d:7a:19:ad:4a:94:21:be:33:bf:ea:36:47:94:6d: 7e:52:ff:4a:8f:26:87:84:37:4c:16:a9:1f:7c:07:d9:a6:83: 2e:f6:56:3b:85:b6:ec:f6:62:db:79:9c:03:6c:15:a7:49:fc: a2:34:fb:07:4e:4b:17:8e:02:1e:18:b6:6e:22:c1:61:5d:54: a5:20:4e:0f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUCPU7BTBLbUqEzrecgJ78pGj4r4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNjA5MTcxNTU3NTNaFw0yNjA5MTgxOTI4NTNaMDMxMTAvBgNV BAMTKDhEQUMzQjIxREM4NDcxRDU5MTAyNzg1Q0RCNTdCMTA2ODQ5QUI0MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8MP2YaepLcdb09fWLuviNhyXb ImP5nXVNIG1Ihhm1PLtH7g5UqRsG1gmqvgqyTUlUiikq58tZvj8rkgXAJ63FzeSI NblJR2xIIGFIWq8tMiFdc1pfs0wi4gDTJm87InzNB2Ruaf+K81sj/KQuCIOYgCGp bmHzl+XeJlzbMtVPk5hXtvOQyCD25bH5ir7PxI8jyU9Iwj3KWjMgCy7iMkeA/1sX OImM1kt+eojKo25LxxUI1rYySud8cqRBAEp4v5zRQmWwzzfqMDD4aAgORs9LPYXt trjee4+yFB/oMc050HSGzz1jyOvJhETBHq8Ffp8ozOQx1ThatDKtdywKuhyFAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUjaw7IdyEcdWRAnhc21exBoSatCYwHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADtjCRVPdlWwHBwbyMgS /1YpHGAQ8LGrZp9qml0vpANtKhMovOq46RBli1m8tR8cDHc7ZDMz32jCEP+EhLdQ gP8cm32OmvwDkjRSVKl2Pq2CL689heL73EIoiYmh4S9XsZZ7mE5XjeHD/U+zzhnw pbcn35v/q1kKdgoT09XkDJey3U23r1hjhDg9j7dHntEG6j65dxDdTUbaJHQF75d0 OJG8ENdqoH8f9kK5vfkOFEJugXra7gJxbo16Ga1KlCG+M7/qNkeUbX5S/0qPJoeE N0wWqR98B9mmgy72VjuFtuz2Ytt5nANsFadJ/KI0+wdOSxeOAh4Ytm4iwWFdVKUg Tg8= -----END CERTIFICATE-----Generated at Thu Sep 17 23:03:42 2026 by rpki-client