$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft File: F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft (raw, json) Hash identifier: vLsk1d2p17qFr+YqxhIQq4j4zDQpCql4PqzrOTo8uc0= Subject key identifier: 0D:FD:B5:3D:6E:EB:86:26:B0:94:FE:AF:74:FC:A5:4C:34:B1:39:07 Authority key identifier: F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 Certificate issuer: /CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Certificate serial: 176BEE12CB449CCDA598313A2638DC82EC1B5F06 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft Manifest number: 0334 Signing time: Thu 30 Apr 2026 12:04:18 +0000 Manifest this update: Thu 30 Apr 2026 11:59:18 +0000 Manifest next update: Fri 01 May 2026 14:58:18 +0000 Files and hashes: 1: F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl (hash: 7knUDgU6AKhN9YqhEolPN9Xmlu7XdqDY/f0vUeI9hz0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:6b:ee:12:cb:44:9c:cd:a5:98:31:3a:26:38:dc:82:ec:1b:5f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Validity Not Before: Apr 30 11:59:18 2026 GMT Not After : May 1 14:58:18 2026 GMT Subject: CN=0DFDB53D6EEB8626B094FEAF74FCA54C34B13907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:4b:14:f7:fc:93:4d:08:06:83:51:ce:9d: 7d:3c:f6:03:f6:27:ce:84:db:af:3a:85:8a:72:e6: e4:67:41:c0:18:ef:b0:bd:37:97:7c:e5:d5:66:07: 21:7a:eb:82:ec:32:61:35:98:16:66:1b:41:55:fd: 2c:f6:46:27:7d:f6:00:cb:80:58:cc:4e:47:85:fd: 54:e9:e1:d2:13:a8:1f:14:67:00:62:b9:21:e4:b7: 5e:3d:5f:ce:63:4a:65:cf:d0:17:4f:43:35:a8:d1: ec:bc:dc:54:22:76:e8:65:1e:79:82:b5:e2:1a:df: 95:75:30:7f:f9:6f:16:5f:4b:85:c9:98:ec:76:b4: d7:01:0b:c5:34:6d:b7:c7:80:78:9f:a9:70:b5:d2: f7:05:78:d0:63:e2:d6:85:3c:ae:75:34:ee:5b:8b: bb:80:40:a0:7e:e7:1a:d9:8d:db:91:a6:f8:66:9d: 9a:ff:43:6e:05:f9:0f:cf:a0:90:00:f0:68:c5:b1: 9d:7c:d7:1f:6f:ef:6b:b6:71:1b:11:cc:5c:54:f9: 66:90:41:31:1d:8b:5f:f1:55:c3:ee:23:76:af:ad: 43:ab:8c:57:8c:5f:6d:53:f9:2c:3c:37:ab:af:56: ed:c8:30:58:3b:b5:87:e3:86:d4:bd:5a:47:3b:b1: 7a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FD:B5:3D:6E:EB:86:26:B0:94:FE:AF:74:FC:A5:4C:34:B1:39:07 X509v3 Authority Key Identifier: keyid:F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:aa:c1:57:d9:32:c4:ae:41:44:02:f9:8d:60:87:d0:c4:fc: cf:62:4c:5f:fa:41:c1:8e:4a:5d:a6:b5:d4:b0:33:0d:35:aa: 57:16:6c:9d:c7:e5:6a:75:f0:f2:7f:eb:71:eb:b1:db:0c:7d: 51:bd:fa:2f:b6:ca:28:c7:27:cf:24:ec:0e:2e:b0:3c:c3:aa: 98:fc:4f:76:26:c1:ad:ff:74:85:7d:4d:94:62:72:c3:de:4a: a2:4c:97:95:08:54:3e:f2:18:81:f9:32:86:0c:76:23:ca:a8: f5:53:4c:e3:15:ab:3f:c1:d9:03:a2:77:ee:de:d3:a3:ae:24: b1:b5:07:5a:42:6d:41:87:3a:5a:92:02:25:97:9a:4e:8f:b7: 61:19:bd:22:d4:73:3d:4e:0e:55:52:76:da:ac:d9:75:b0:6d: 78:0a:77:e5:46:e7:be:bb:07:c9:99:b6:01:09:38:b8:44:65: 03:12:97:a5:d9:78:dd:b0:80:d1:73:3c:35:6f:b5:7c:3e:3c: 36:4d:e2:b1:3c:12:4a:4d:01:13:21:5a:85:b6:fa:aa:95:44: 3e:c8:b1:0f:f6:1d:bd:e7:53:e2:4b:0e:b4:90:d0:02:40:55: 44:62:9d:a3:1e:08:f5:88:d4:40:a3:42:b9:cf:a8:0e:51:79: 52:75:44:a5 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUF2vuEstEnM2lmDE6JjjcguwbXwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2 OTg2RDdDNjAeFw0yNjA0MzAxMTU5MThaFw0yNjA1MDExNDU4MThaMDMxMTAvBgNV BAMTKDBERkRCNTNENkVFQjg2MjZCMDk0RkVBRjc0RkNBNTRDMzRCMTM5MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxpEsU9/yTTQgGg1HOnX089gP2 J86E2686hYpy5uRnQcAY77C9N5d85dVmByF664LsMmE1mBZmG0FV/Sz2Rid99gDL gFjMTkeF/VTp4dITqB8UZwBiuSHkt149X85jSmXP0BdPQzWo0ey83FQiduhlHnmC teIa35V1MH/5bxZfS4XJmOx2tNcBC8U0bbfHgHifqXC10vcFeNBj4taFPK51NO5b i7uAQKB+5xrZjduRpvhmnZr/Q24F+Q/PoJAA8GjFsZ181x9v72u2cRsRzFxU+WaQ QTEdi1/xVcPuI3avrUOrjFeMX21T+Sw8N6uvVu3IMFg7tYfjhtS9Wkc7sXq9AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUDf21PW7rhiawlP6vdPylTDSxOQcwHwYDVR0j BBgwFoAU95TfoAnqkLTLuzQN5MJVRGmG18YwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2RlNTMzMzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAv Rjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GNzk0REZBMDA5RUE5MEI0Q0JCQjM0MERFNEMyNTU0 NDY5ODZEN0M2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2RlNTMz Mzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAvRjc5NERGQTAwOUVBOTBCNENC QkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGKqwVfZMsSuQUQC+Y1g h9DE/M9iTF/6QcGOSl2mtdSwMw01qlcWbJ3H5Wp18PJ/63HrsdsMfVG9+i+2yijH J88k7A4usDzDqpj8T3Ymwa3/dIV9TZRicsPeSqJMl5UIVD7yGIH5MoYMdiPKqPVT TOMVqz/B2QOid+7e06OuJLG1B1pCbUGHOlqSAiWXmk6Pt2EZvSLUcz1ODlVSdtqs 2XWwbXgKd+VG5767B8mZtgEJOLhEZQMSl6XZeN2wgNFzPDVvtXw+PDZN4rE8EkpN ARMhWoW2+qqVRD7IsQ/2Hb3nU+JLDrSQ0AJAVURinaMeCPWI1ECjQrnPqA5ReVJ1 RKU= -----END CERTIFICATE-----Generated at Thu Apr 30 14:58:18 2026 by rpki-client