$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft File: F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft (raw, json) Hash identifier: gvSFjGCWRJhh6NYuz8Htxl9T72iQ698ahX2fycLeRxY= Subject key identifier: C8:45:40:EA:E5:80:A0:82:CB:A0:20:27:CA:CB:97:94:27:D4:A1:A2 Authority key identifier: F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 Certificate issuer: /CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Certificate serial: 31246F58AC71EF439191D19C56A1940801173E30 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft Manifest number: 02F5 Signing time: Fri 13 Mar 2026 23:08:22 +0000 Manifest this update: Fri 13 Mar 2026 23:03:20 +0000 Manifest next update: Sun 15 Mar 2026 02:41:20 +0000 Files and hashes: 1: F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl (hash: P834WiEHjRzv77Dx+sIqq//iMVx5/JpoG2SMa4FSNhU=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 12:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:24:6f:58:ac:71:ef:43:91:91:d1:9c:56:a1:94:08:01:17:3e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Validity Not Before: Mar 13 23:03:20 2026 GMT Not After : Mar 15 02:41:20 2026 GMT Subject: CN=C84540EAE580A082CBA02027CACB979427D4A1A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e4:8b:84:0a:7a:b0:ce:d9:c5:2c:ca:13:bf: f6:0f:f6:0c:67:62:44:9d:fc:82:28:9e:f9:78:9d: a4:09:bd:0a:58:22:cd:dc:c1:45:58:ba:4c:42:2d: f4:95:33:26:93:59:fd:44:a7:8e:37:94:78:5d:bf: 0d:65:18:4d:6a:ef:f5:b5:70:66:8b:f7:2a:84:cf: 34:72:eb:09:19:d1:cb:36:87:53:1e:ce:09:b1:f2: 22:26:3b:78:f7:06:5d:68:0d:95:36:3a:f2:1c:1b: 59:5f:85:80:54:7e:ed:25:a6:bb:e2:58:6e:26:ad: dd:41:6d:2b:06:35:ab:c1:c6:db:84:07:67:2c:62: 58:30:42:a6:fe:d5:ef:bb:cf:eb:3d:44:d3:e4:e4: f6:55:62:3c:a8:e1:4e:4a:2e:d3:25:a3:88:67:c5: e6:49:0c:fd:7b:aa:2e:61:24:ee:c2:00:b6:de:cb: cd:a0:8a:fe:b2:29:ae:98:14:1f:28:1c:a9:44:1a: e7:68:3f:f3:00:93:58:1a:92:ad:21:b0:92:90:10: 1c:ff:9d:00:f7:e3:75:28:4c:9c:c3:e4:07:84:46: ad:0d:6a:83:33:50:1e:51:4e:3e:b5:d4:31:d0:ec: 2f:1d:d9:d1:a6:8f:27:a3:ab:ae:17:a1:39:eb:30: 28:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:45:40:EA:E5:80:A0:82:CB:A0:20:27:CA:CB:97:94:27:D4:A1:A2 X509v3 Authority Key Identifier: keyid:F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:94:55:47:f9:cb:cb:42:23:ed:43:11:b2:30:36:32:93:28: 4c:98:98:c3:bf:ce:f8:3f:10:07:2d:55:60:13:db:d4:99:73: 1c:3b:64:8e:ae:f8:d1:1c:83:59:30:40:f9:9d:7b:f3:61:40: 69:42:be:37:8f:20:b6:c8:76:c3:2d:12:d5:8f:f6:28:d4:b0: 8a:9b:30:e4:ad:82:e9:dd:91:3b:0a:85:18:43:07:23:2e:42: ec:6b:31:a6:18:e2:fb:f1:d1:ba:e6:da:b2:95:ff:40:4d:33: 7a:cf:d2:c4:ed:c0:27:a8:02:fa:23:c3:aa:64:11:5c:33:e2: 77:71:ba:92:f3:48:2b:03:4d:96:2f:0f:87:76:3c:09:46:b4: c9:af:9c:1a:87:e0:61:b5:c2:53:b9:60:21:a7:c4:73:07:df: 6a:c0:d4:4e:ce:a5:c8:24:0e:22:46:d1:f5:20:bc:4f:a1:27: a6:93:08:bf:c4:c4:c3:55:c1:ee:32:45:87:2b:27:11:bd:d7: 0d:53:94:aa:d4:38:14:6a:b4:cd:a0:3e:9a:ad:bc:24:2d:a0: 92:f3:fd:16:25:0a:db:73:2c:64:ee:4f:95:2a:7f:f6:48:db: 62:95:93:16:51:9d:e5:e2:34:d0:a2:e7:68:38:48:63:52:fc: 49:3a:e0:51 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUMSRvWKxx70ORkdGcVqGUCAEXPjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2 OTg2RDdDNjAeFw0yNjAzMTMyMzAzMjBaFw0yNjAzMTUwMjQxMjBaMDMxMTAvBgNV BAMTKEM4NDU0MEVBRTU4MEEwODJDQkEwMjAyN0NBQ0I5Nzk0MjdENEExQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy5IuECnqwztnFLMoTv/YP9gxn YkSd/IIonvl4naQJvQpYIs3cwUVYukxCLfSVMyaTWf1Ep443lHhdvw1lGE1q7/W1 cGaL9yqEzzRy6wkZ0cs2h1Mezgmx8iImO3j3Bl1oDZU2OvIcG1lfhYBUfu0lprvi WG4mrd1BbSsGNavBxtuEB2csYlgwQqb+1e+7z+s9RNPk5PZVYjyo4U5KLtMlo4hn xeZJDP17qi5hJO7CALbey82giv6yKa6YFB8oHKlEGudoP/MAk1gakq0hsJKQEBz/ nQD343UoTJzD5AeERq0NaoMzUB5RTj611DHQ7C8d2dGmjyejq64XoTnrMCjrAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUyEVA6uWAoILLoCAnysuXlCfUoaIwHwYDVR0j BBgwFoAU95TfoAnqkLTLuzQN5MJVRGmG18YwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2RlNTMzMzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAv Rjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GNzk0REZBMDA5RUE5MEI0Q0JCQjM0MERFNEMyNTU0 NDY5ODZEN0M2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2RlNTMz Mzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAvRjc5NERGQTAwOUVBOTBCNENC QkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGqUVUf5y8tCI+1DEbIw NjKTKEyYmMO/zvg/EActVWAT29SZcxw7ZI6u+NEcg1kwQPmde/NhQGlCvjePILbI dsMtEtWP9ijUsIqbMOStgundkTsKhRhDByMuQuxrMaYY4vvx0brm2rKV/0BNM3rP 0sTtwCeoAvojw6pkEVwz4ndxupLzSCsDTZYvD4d2PAlGtMmvnBqH4GG1wlO5YCGn xHMH32rA1E7OpcgkDiJG0fUgvE+hJ6aTCL/ExMNVwe4yRYcrJxG91w1TlKrUOBRq tM2gPpqtvCQtoJLz/RYlCttzLGTuT5Uqf/ZI22KVkxZRneXiNNCi52g4SGNS/Ek6 4FE= -----END CERTIFICATE-----Generated at Sat Mar 14 05:42:40 2026 by rpki-client