$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft File: 44C4C913D58F5EF847996241E969B60A1E3F1389.mft (raw, json) Hash identifier: CNZBxcQBe7yA/Q4ffS4AGD6qiCct0UcxKtpJKWRsuT4= Subject key identifier: E1:94:F9:6E:90:AD:64:B4:6F:03:7B:0D:B1:ED:89:05:AF:FD:98:26 Authority key identifier: 44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89 Certificate issuer: /CN=44C4C913D58F5EF847996241E969B60A1E3F1389 Certificate serial: 50A89C08C974756C4A210FA8976010A8528FA391 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft Manifest number: 0338 Signing time: Wed 29 Apr 2026 19:16:31 +0000 Manifest this update: Wed 29 Apr 2026 19:11:31 +0000 Manifest next update: Thu 30 Apr 2026 22:51:31 +0000 Files and hashes: 1: 326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa (hash: ZFgFa3mIQWS+C3ZANFakUZVad7gh+grxNMovjG/43xs=) 2: 44C4C913D58F5EF847996241E969B60A1E3F1389.crl (hash: Mo2o5x6vdjO4RRRHhkpkaenWUqJYU13zP8rOzGHTcIA=) 3: E42882C5C372E03CCD5EA87BB1B6FFEF1FF1BFF5.cer (hash: ZgkUmwBAN+BgyVFg/7xrYnbw3kS/Mk8fXnbXdBLqa28=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Apr 2026 22:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a8:9c:08:c9:74:75:6c:4a:21:0f:a8:97:60:10:a8:52:8f:a3:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44C4C913D58F5EF847996241E969B60A1E3F1389 Validity Not Before: Apr 29 19:11:31 2026 GMT Not After : Apr 30 22:51:31 2026 GMT Subject: CN=E194F96E90AD64B46F037B0DB1ED8905AFFD9826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:d6:3b:af:fc:77:b3:0d:40:ac:d9:a2:90: f4:86:0d:80:6c:6b:ad:20:fc:a9:28:a9:6a:83:f4: e6:94:5e:55:f7:02:0b:ba:40:97:81:83:f7:85:f9: bc:2b:42:93:53:e3:a1:a7:26:bf:43:16:dc:33:ab: 0b:07:d1:7f:82:91:45:ed:01:76:ec:2b:1b:4b:c3: 6b:cd:7e:ed:1b:38:a7:0f:9e:ce:d9:1e:a3:08:30: 86:6e:9b:1e:bc:41:26:6b:a3:1e:66:15:41:d9:5d: 6e:76:08:13:94:37:d0:11:2f:53:b2:89:e7:20:32: 85:03:d2:c9:5c:d0:67:a1:f7:ee:40:c2:cf:63:23: cd:ed:88:fc:fd:a7:cc:96:1f:77:3e:93:bb:a0:17: 97:49:1f:1d:18:8f:e4:7f:78:9e:b6:ec:b1:80:37: fd:74:08:02:be:7e:ae:56:b5:c5:8d:e6:b6:42:a5: 17:b5:83:d3:d4:ba:12:09:8f:7a:03:b6:6d:0a:02: 70:44:43:e6:82:d2:ff:49:84:c3:7b:40:66:3a:e9: 5a:a2:2d:a7:34:03:12:f6:25:5e:87:55:71:a6:c5: 7e:91:d6:86:d1:94:5e:e4:51:b7:67:78:a3:23:df: 95:82:1e:06:ac:6a:15:77:dc:27:7e:76:0e:a7:61: c6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:94:F9:6E:90:AD:64:B4:6F:03:7B:0D:B1:ED:89:05:AF:FD:98:26 X509v3 Authority Key Identifier: keyid:44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:04:33:a1:3e:f5:9f:c8:a4:ed:06:c8:72:6f:db:5e:a2:2a: e8:eb:a1:10:3e:9a:12:e5:02:43:9d:ea:b5:39:07:db:b8:96: e3:08:60:c8:54:94:80:73:b4:5a:3c:6a:aa:01:6e:3f:53:a9: 51:92:a5:08:a2:16:37:35:59:78:c3:f1:de:f8:29:51:9d:06: cd:46:36:3d:6c:09:83:88:2f:2b:7d:50:c4:67:17:21:d1:9a: 93:71:cb:d7:c8:c6:7e:22:d6:2f:d5:cc:d8:e2:91:2c:17:bd: ba:06:d4:e3:0c:28:eb:db:fb:b3:d6:d3:12:b3:0f:d4:35:d2: 50:f6:7f:23:09:59:30:ce:d8:2b:3c:51:fc:69:ec:e7:7c:da: 30:d8:41:e9:e8:55:0f:e2:6a:31:69:b1:cb:d1:0d:d1:e1:c9: 1d:e4:e9:60:cb:34:a1:00:d7:05:67:87:d6:0e:f1:b6:70:fd: ea:4b:ba:b9:c6:ff:04:4f:37:27:75:dd:77:23:5a:35:34:99: 66:34:8f:7e:4d:ec:d2:e1:76:67:b9:17:a9:6d:02:94:47:22: 93:0a:4b:3c:75:23:a8:80:31:48:be:ef:79:c6:76:b4:d1:85: 99:98:25:8a:6f:99:2d:e4:88:3c:22:3a:f2:5d:1f:61:09:5e: 9c:79:38:13 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUUKicCMl0dWxKIQ+ol2AQqFKPo5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEEx RTNGMTM4OTAeFw0yNjA0MjkxOTExMzFaFw0yNjA0MzAyMjUxMzFaMDMxMTAvBgNV BAMTKEUxOTRGOTZFOTBBRDY0QjQ2RjAzN0IwREIxRUQ4OTA1QUZGRDk4MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBB9Y7r/x3sw1ArNmikPSGDYBs a60g/KkoqWqD9OaUXlX3Agu6QJeBg/eF+bwrQpNT46GnJr9DFtwzqwsH0X+CkUXt AXbsKxtLw2vNfu0bOKcPns7ZHqMIMIZumx68QSZrox5mFUHZXW52CBOUN9ARL1Oy iecgMoUD0slc0Geh9+5Aws9jI83tiPz9p8yWH3c+k7ugF5dJHx0Yj+R/eJ627LGA N/10CAK+fq5WtcWN5rZCpRe1g9PUuhIJj3oDtm0KAnBEQ+aC0v9JhMN7QGY66Vqi Lac0AxL2JV6HVXGmxX6R1obRlF7kUbdneKMj35WCHgasahV33Cd+dg6nYcYnAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU4ZT5bpCtZLRvA3sNse2JBa/9mCYwHwYDVR0j BBgwFoAURMTJE9WPXvhHmWJB6Wm2Ch4/E4kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2QwZjJkYjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAv NDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80NEM0QzkxM0Q1OEY1RUY4NDc5OTYyNDFFOTY5QjYw QTFFM0YxMzg5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2QwZjJk Yjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAvNDRDNEM5MTNENThGNUVGODQ3 OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG4EM6E+9Z/IpO0GyHJv 216iKujroRA+mhLlAkOd6rU5B9u4luMIYMhUlIBztFo8aqoBbj9TqVGSpQiiFjc1 WXjD8d74KVGdBs1GNj1sCYOILyt9UMRnFyHRmpNxy9fIxn4i1i/VzNjikSwXvboG 1OMMKOvb+7PW0xKzD9Q10lD2fyMJWTDO2Cs8Ufxp7Od82jDYQenoVQ/iajFpscvR DdHhyR3k6WDLNKEA1wVnh9YO8bZw/epLurnG/wRPNyd13XcjWjU0mWY0j35N7NLh dme5F6ltApRHIpMKSzx1I6iAMUi+73nGdrTRhZmYJYpvmS3kiDwiOvJdH2EJXpx5 OBM= -----END CERTIFICATE-----Generated at Thu Apr 30 13:48:41 2026 by rpki-client