$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft File: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft (raw, json) Hash identifier: 7PtAYmHrOkNbZOsr9N0j9cANPB3bsCNwA6simGw6DQI= Subject key identifier: 39:60:22:C1:86:37:54:06:6E:53:CB:D3:14:68:DA:CC:0D:88:9E:9E Authority key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 Certificate issuer: /CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Certificate serial: 3935BFF9644F1D396EA2B065696C9253E0D1B958 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft Manifest number: 0334 Signing time: Thu 30 Apr 2026 04:02:53 +0000 Manifest this update: Thu 30 Apr 2026 03:57:53 +0000 Manifest next update: Fri 01 May 2026 07:47:53 +0000 Files and hashes: 1: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl (hash: Heq/XzbmSfSO6CHjlQHiPKdrUtjuToVN9sj23Yut4p0=) 2: 326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (hash: rxzc3BrYti6kxmXubVnEFiS+UC7vkumI3P6AvUB5lwM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 07:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:35:bf:f9:64:4f:1d:39:6e:a2:b0:65:69:6c:92:53:e0:d1:b9:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Validity Not Before: Apr 30 03:57:53 2026 GMT Not After : May 1 07:47:53 2026 GMT Subject: CN=396022C1863754066E53CBD31468DACC0D889E9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:bb:f3:3d:9d:0e:c8:e5:8c:74:dc:d8:6f: e9:09:67:4b:09:39:91:2d:9e:05:92:30:be:87:f8: 4c:e8:95:77:2b:70:62:2d:d7:4e:d7:29:fe:ef:d7: 74:66:e6:e3:23:ba:99:20:cb:3b:d5:5e:d7:c3:40: 68:28:a3:32:e1:e2:bb:bc:61:7a:a1:6f:e5:8e:4c: c9:06:89:b3:39:61:07:69:ff:c2:89:1d:ef:23:72: bc:f8:94:33:21:b7:80:ee:6d:10:9e:69:3c:e7:3d: 26:b8:55:ce:35:57:fd:52:86:aa:65:f9:5f:21:4e: f1:2b:2c:3d:2a:80:ed:4b:a8:4a:be:2e:56:d4:78: 6b:84:5c:8f:b7:60:13:30:13:08:f9:ac:00:5f:31: 04:60:fc:81:58:e8:e4:b9:df:60:72:86:99:71:ac: b0:c7:4f:6a:82:e2:14:a4:5c:6b:15:57:81:b7:26: 1d:fb:0e:58:66:f3:1b:e9:c7:a6:99:d1:e4:49:f0: ee:ed:08:cb:53:76:a3:e2:23:8a:bc:9e:35:12:0c: 60:64:f1:6a:c0:14:f9:b9:fc:4b:06:e3:ce:d6:48: 8d:cc:01:24:14:20:42:f9:2a:75:80:bf:9b:26:68: 7e:da:9b:7c:0d:04:e0:3b:aa:78:b7:cc:f6:c0:be: df:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:60:22:C1:86:37:54:06:6E:53:CB:D3:14:68:DA:CC:0D:88:9E:9E X509v3 Authority Key Identifier: keyid:1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:43:52:0c:87:a9:00:08:ea:5d:5e:e9:be:19:6a:f2:37:b4: 4b:8d:c8:fa:67:c1:2f:03:5d:7b:10:29:20:ca:45:39:66:e8: 2d:0a:3a:b1:41:4e:d1:59:e7:01:61:6b:33:e9:fb:63:6e:4c: c1:56:01:3f:29:42:ab:d7:c0:37:4f:60:4d:46:a8:df:b1:7a: b4:bd:e7:d8:a9:74:cd:e4:93:e8:69:96:53:18:8b:8d:53:f5: 46:e1:9b:22:52:ca:ee:6f:35:3d:3b:7c:50:58:b5:6a:9d:81: f3:e7:da:51:96:8d:29:2e:e4:b3:21:a2:54:1f:72:d1:f8:ba: e1:7e:7a:ef:37:54:22:d8:17:15:75:9d:5b:68:fa:df:40:74: d1:37:fa:2c:09:fc:a1:c2:23:14:0f:8d:6e:f4:cf:be:02:30: ce:7e:45:d5:74:8e:ef:d1:78:c6:d0:48:42:0c:3f:88:07:0d: ca:6a:3f:87:31:60:e3:2a:3e:a8:65:99:39:9b:ab:d7:82:35: 70:97:52:b0:be:86:c0:3e:b8:9f:ec:e8:ca:ec:b1:c0:03:d8: 4a:f2:43:dd:16:d7:7a:94:bd:75:31:11:ee:46:13:5b:e9:2a: 51:9a:50:04:d6:80:89:16:61:26:be:b5:43:16:2d:fa:ba:56: 3e:d0:32:35 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUOTW/+WRPHTluorBlaWySU+DRuVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJB NkI3RUY3MTAeFw0yNjA0MzAwMzU3NTNaFw0yNjA1MDEwNzQ3NTNaMDMxMTAvBgNV BAMTKDM5NjAyMkMxODYzNzU0MDY2RTUzQ0JEMzE0NjhEQUNDMEQ4ODlFOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9gLvzPZ0OyOWMdNzYb+kJZ0sJ OZEtngWSML6H+EzolXcrcGIt107XKf7v13Rm5uMjupkgyzvVXtfDQGgoozLh4ru8 YXqhb+WOTMkGibM5YQdp/8KJHe8jcrz4lDMht4DubRCeaTznPSa4Vc41V/1Shqpl +V8hTvErLD0qgO1LqEq+LlbUeGuEXI+3YBMwEwj5rABfMQRg/IFY6OS532Byhplx rLDHT2qC4hSkXGsVV4G3Jh37Dlhm8xvpx6aZ0eRJ8O7tCMtTdqPiI4q8njUSDGBk 8WrAFPm5/EsG487WSI3MASQUIEL5KnWAv5smaH7am3wNBOA7qni3zPbAvt/LAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUOWAiwYY3VAZuU8vTFGjazA2Inp4wHwYDVR0j BBgwFoAUGrsI1BpaaXQyDZeId2mhW6a373EwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2IzZGE1Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAv MUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQUJCMDhENDFBNUE2OTc0MzIwRDk3ODg3NzY5QTE1 QkE2QjdFRjcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2IzZGE1 Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAvMUFCQjA4RDQxQTVBNjk3NDMy MEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFpDUgyHqQAI6l1e6b4Z avI3tEuNyPpnwS8DXXsQKSDKRTlm6C0KOrFBTtFZ5wFhazPp+2NuTMFWAT8pQqvX wDdPYE1GqN+xerS959ipdM3kk+hpllMYi41T9UbhmyJSyu5vNT07fFBYtWqdgfPn 2lGWjSku5LMholQfctH4uuF+eu83VCLYFxV1nVto+t9AdNE3+iwJ/KHCIxQPjW70 z74CMM5+RdV0ju/ReMbQSEIMP4gHDcpqP4cxYOMqPqhlmTmbq9eCNXCXUrC+hsA+ uJ/s6MrsscAD2EryQ90W13qUvXUxEe5GE1vpKlGaUATWgIkWYSa+tUMWLfq6Vj7Q MjU= -----END CERTIFICATE-----Generated at Thu Apr 30 15:09:16 2026 by rpki-client