$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft File: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft (raw, json) Hash identifier: T0EunWCxpESjqpWLPFfGWZ3DlON1h+eWhh08TXhOfks= Subject key identifier: 1E:4A:00:41:40:53:FD:11:88:03:E7:98:1A:0D:2C:D0:67:D5:03:CC Authority key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 Certificate issuer: /CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Certificate serial: 5F233EAE19F3AB490E9D599B2483916D063C1EF1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft Manifest number: 03DD Signing time: Thu 17 Sep 2026 15:47:47 +0000 Manifest this update: Thu 17 Sep 2026 15:42:47 +0000 Manifest next update: Fri 18 Sep 2026 18:31:47 +0000 Files and hashes: 1: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl (hash: IASS3DdyztBSt8eNxgyzkt42OBW1mADl2pLunOpcCdw=) 2: 326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (hash: xLQAJrSJm1fgs6FwcnWz9b5L+eTkpEnw3AYpTuci0+w=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 14:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:23:3e:ae:19:f3:ab:49:0e:9d:59:9b:24:83:91:6d:06:3c:1e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Validity Not Before: Sep 17 15:42:47 2026 GMT Not After : Sep 18 18:31:47 2026 GMT Subject: CN=1E4A00414053FD118803E7981A0D2CD067D503CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f0:b0:72:da:ae:45:89:e5:e4:56:2f:8f:ab: f4:ab:01:70:b4:83:f4:68:5e:26:9f:16:65:87:0b: d3:56:1e:3f:49:74:9b:8f:8f:ae:bf:72:01:19:2f: 58:2a:b2:d5:bf:1a:55:83:a9:34:fc:79:ec:fa:d2: 5b:2b:77:84:8d:b6:b2:ca:35:b0:22:5b:4c:5d:43: 4d:13:f8:10:3e:35:14:4f:45:f2:40:12:5f:a8:ba: fc:08:8c:be:16:61:98:d1:9a:2a:3e:b2:6e:2d:ef: e0:49:8b:c6:3c:88:da:63:83:7e:b1:32:9d:cd:bd: 1a:47:07:ad:17:49:2d:7d:64:73:92:c5:23:4c:84: a5:16:71:66:4b:0d:8a:d5:b5:70:82:55:9c:13:f4: 5f:94:64:75:67:1c:ef:97:e6:d7:5b:63:05:eb:e4: f5:68:5e:22:f5:b8:c4:bf:93:5d:c9:2e:00:e3:8a: cf:ba:80:be:5e:97:9f:d6:c3:d9:bb:64:bc:95:ab: 2d:df:f3:bd:8d:1d:e6:78:9b:97:66:6c:c8:0a:4a: 67:4e:ab:d4:e9:43:de:51:5e:5e:fa:5d:1f:92:78: f8:cb:a3:b1:d6:c2:e0:a7:49:e9:45:d9:cf:e5:32: 9e:78:bd:bd:56:1e:32:58:fb:15:cf:77:ee:48:be: d3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4A:00:41:40:53:FD:11:88:03:E7:98:1A:0D:2C:D0:67:D5:03:CC X509v3 Authority Key Identifier: keyid:1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:11:90:f3:5d:26:4c:5c:1f:4d:b7:d0:7f:8f:fa:33:f6:ba: 4c:a5:7d:a2:47:01:39:b5:16:25:32:f0:96:25:d0:1b:3c:a7: 5a:71:ac:8a:91:db:55:aa:14:21:92:f6:00:5f:d6:4f:32:28: ec:8a:38:13:d7:13:0a:23:e0:7c:5a:b5:a9:be:f9:ed:53:1f: 1e:a2:df:b8:4b:46:94:cb:a5:76:33:77:0c:0e:13:e1:2b:a4: 90:cb:3b:f5:67:a8:c0:1a:b4:87:28:f3:88:ba:d4:70:5d:f9: 52:4d:21:a6:8e:2a:2d:ac:5b:cb:4a:48:f0:6e:b2:0d:cf:51: 94:c6:4c:54:45:3f:35:83:d6:b0:84:df:2c:a0:9f:d0:52:ee: 20:23:e2:b6:e3:9a:47:62:b4:ee:eb:14:a9:d2:b9:4d:85:d0: 65:31:15:6f:00:55:84:f9:1f:6a:9b:fe:ad:d7:36:12:22:4c: a1:c2:a6:ba:e2:b0:ec:fb:7d:92:60:7d:07:ac:64:f4:d6:e2: 09:a5:95:be:86:38:2b:71:84:f2:5d:b7:ff:fc:5a:c7:b9:bd: 9b:db:34:67:29:fe:d5:70:bf:09:06:61:f5:30:00:76:df:b1: 45:d8:e8:11:c7:72:36:13:5a:47:55:ce:18:94:84:8f:8c:11: 5c:bf:7a:1d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUXyM+rhnzq0kOnVmbJIORbQY8HvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJB NkI3RUY3MTAeFw0yNjA5MTcxNTQyNDdaFw0yNjA5MTgxODMxNDdaMDMxMTAvBgNV BAMTKDFFNEEwMDQxNDA1M0ZEMTE4ODAzRTc5ODFBMEQyQ0QwNjdENTAzQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU8LBy2q5FieXkVi+Pq/SrAXC0 g/RoXiafFmWHC9NWHj9JdJuPj66/cgEZL1gqstW/GlWDqTT8eez60lsrd4SNtrLK NbAiW0xdQ00T+BA+NRRPRfJAEl+ouvwIjL4WYZjRmio+sm4t7+BJi8Y8iNpjg36x Mp3NvRpHB60XSS19ZHOSxSNMhKUWcWZLDYrVtXCCVZwT9F+UZHVnHO+X5tdbYwXr 5PVoXiL1uMS/k13JLgDjis+6gL5el5/Ww9m7ZLyVqy3f872NHeZ4m5dmbMgKSmdO q9TpQ95RXl76XR+SePjLo7HWwuCnSelF2c/lMp54vb1WHjJY+xXPd+5IvtOZAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUHkoAQUBT/RGIA+eYGg0s0GfVA8wwHwYDVR0j BBgwFoAUGrsI1BpaaXQyDZeId2mhW6a373EwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2IzZGE1Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAv MUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQUJCMDhENDFBNUE2OTc0MzIwRDk3ODg3NzY5QTE1 QkE2QjdFRjcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2IzZGE1 Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAvMUFCQjA4RDQxQTVBNjk3NDMy MEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANoRkPNdJkxcH0230H+P +jP2ukylfaJHATm1FiUy8JYl0Bs8p1pxrIqR21WqFCGS9gBf1k8yKOyKOBPXEwoj 4Hxatam++e1THx6i37hLRpTLpXYzdwwOE+ErpJDLO/VnqMAatIco84i61HBd+VJN IaaOKi2sW8tKSPBusg3PUZTGTFRFPzWD1rCE3yygn9BS7iAj4rbjmkditO7rFKnS uU2F0GUxFW8AVYT5H2qb/q3XNhIiTKHCprrisOz7fZJgfQesZPTW4gmllb6GOCtx hPJdt//8Wse5vZvbNGcp/tVwvwkGYfUwAHbfsUXY6BHHcjYTWkdVzhiUhI+MEVy/ eh0= -----END CERTIFICATE-----Generated at Thu Sep 17 23:44:36 2026 by rpki-client