$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft File: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft (raw, json) Hash identifier: UGmMsCv+Ou+hiaBIT5N2gLTd82A4hkJ4wc5IS+MpfUI= Subject key identifier: F5:2F:18:0A:BF:CE:53:A2:BA:E4:2D:8A:71:50:CC:C7:6F:42:9B:72 Authority key identifier: 06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5 Certificate issuer: /CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5 Certificate serial: 1546E18A4EC52387CBA2DC0CA59B4C4E5936E0BA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft Manifest number: 03B0 Signing time: Tue 28 Jul 2026 17:03:48 +0000 Manifest this update: Tue 28 Jul 2026 16:58:47 +0000 Manifest next update: Wed 29 Jul 2026 19:08:47 +0000 Files and hashes: 1: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl (hash: BDCrL/m+CtcIzGhIIGYHiLon1hLhtMZwSJ6B7yi/UZ0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 19:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:46:e1:8a:4e:c5:23:87:cb:a2:dc:0c:a5:9b:4c:4e:59:36:e0:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5 Validity Not Before: Jul 28 16:58:47 2026 GMT Not After : Jul 29 19:08:47 2026 GMT Subject: CN=F52F180ABFCE53A2BAE42D8A7150CCC76F429B72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:dd:2b:de:27:2b:63:45:8f:8e:89:07:cb:f0: 24:55:e7:5c:ca:a6:3c:89:66:22:1d:91:20:d4:42: ec:18:e3:65:e8:54:1f:78:0c:2c:61:2a:17:0a:39: 7e:b2:c2:24:80:13:b0:32:83:d3:3e:ad:54:3a:db: 4d:00:fd:73:f0:1a:f3:23:1f:9e:07:5c:d9:ff:a9: bb:a5:55:5f:11:25:9c:5d:4a:a9:22:d3:f6:a0:e3: 28:ec:31:11:2e:be:82:ec:0e:b2:e4:2a:cc:98:2a: ae:cc:14:6a:b7:d8:39:14:36:cc:9c:74:2f:df:e5: cf:ff:c7:71:2d:80:65:0a:f2:1d:ec:91:b5:02:2c: 08:fa:f3:30:90:17:45:1b:a3:74:9b:6d:d8:bc:f3: 73:e5:a5:7f:3e:6b:ac:1e:e3:8f:c2:04:1e:bc:d7: 9a:b6:7c:37:16:df:e6:5a:4c:e1:f6:b0:48:28:66: 4d:19:67:82:96:2c:fb:8e:f0:bc:5a:7a:5a:0b:1a: fd:8e:f0:2a:0e:5a:d1:de:1a:0c:2c:10:29:57:81: d6:76:54:fd:ef:7c:80:90:b9:e4:b3:35:e1:bb:14: 65:5b:db:71:72:2b:e5:2d:e4:24:24:12:d8:a8:c6: eb:e0:18:f6:ea:9c:fb:6d:a5:47:30:4e:29:77:3b: 20:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2F:18:0A:BF:CE:53:A2:BA:E4:2D:8A:71:50:CC:C7:6F:42:9B:72 X509v3 Authority Key Identifier: keyid:06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:99:64:db:f0:c0:3c:ba:f0:80:6c:6a:9e:b1:4a:02:6d:67: 2b:fa:df:bd:c1:89:b1:1e:c7:0b:56:d8:ec:4e:d6:36:67:c9: e0:ed:47:b4:e4:a3:7e:a0:81:4d:18:73:fa:d8:de:87:9c:76: f8:05:9b:c8:ce:b6:25:5a:45:5b:26:c9:6a:48:59:bf:2a:61: 08:c2:7b:d6:6d:da:33:9f:d9:f4:ac:87:ab:7f:d7:b5:eb:da: b0:4f:2a:aa:70:63:fd:62:7e:e6:e6:36:4e:49:a7:20:f5:9a: 7c:08:5a:60:f0:36:bf:99:a3:9f:f0:a3:aa:0b:2e:98:bb:f3: 8a:22:73:a7:63:16:99:ca:ec:59:6d:85:a2:0e:ac:af:3f:db: 65:a0:77:8a:53:93:fe:f1:24:45:c7:16:5f:f0:ef:ed:66:18: f8:15:3a:3e:0f:76:12:21:7e:17:bb:57:be:da:0d:42:b6:a9: 11:98:39:47:b5:c1:c6:91:59:12:f3:e3:60:9b:fa:30:57:5e: a1:74:73:0b:b3:3c:13:17:c2:b9:26:6d:ed:11:b9:5c:2d:6e: 76:d1:90:fc:d4:b3:90:31:57:79:f8:76:69:02:35:32:d9:08: da:c1:a3:63:fd:96:7a:13:b9:69:4e:4a:04:ee:3b:65:87:93: 17:00:89:cd -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUFUbhik7FI4fLotwMpZtMTlk24LowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3REJDNkJDRjBGOTU4MkRGNzgzNjYzODlBRUFGNTk2 NTU2NUVGNTAeFw0yNjA3MjgxNjU4NDdaFw0yNjA3MjkxOTA4NDdaMDMxMTAvBgNV BAMTKEY1MkYxODBBQkZDRTUzQTJCQUU0MkQ4QTcxNTBDQ0M3NkY0MjlCNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt3SveJytjRY+OiQfL8CRV51zK pjyJZiIdkSDUQuwY42XoVB94DCxhKhcKOX6ywiSAE7Ayg9M+rVQ6200A/XPwGvMj H54HXNn/qbulVV8RJZxdSqki0/ag4yjsMREuvoLsDrLkKsyYKq7MFGq32DkUNsyc dC/f5c//x3EtgGUK8h3skbUCLAj68zCQF0Ubo3Sbbdi883PlpX8+a6we44/CBB68 15q2fDcW3+ZaTOH2sEgoZk0ZZ4KWLPuO8LxaeloLGv2O8CoOWtHeGgwsEClXgdZ2 VP3vfICQueSzNeG7FGVb23FyK+Ut5CQkEtioxuvgGPbqnPttpUcwTil3OyBPAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU9S8YCr/OU6K65C2KcVDMx29Cm3IwHwYDVR0j BBgwFoAUBn28a88PlYLfeDZjia6vWWVWXvUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzAxNGI5MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzAv MDY3REJDNkJDRjBGOTU4MkRGNzgzNjYzODlBRUFGNTk2NTU2NUVGNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wNjdEQkM2QkNGMEY5NTgyREY3ODM2NjM4OUFFQUY1 OTY1NTY1RUY1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzAxNGI5 MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzAvMDY3REJDNkJDRjBGOTU4MkRG NzgzNjYzODlBRUFGNTk2NTU2NUVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACSZZNvwwDy68IBsap6x SgJtZyv6373BibEexwtW2OxO1jZnyeDtR7Tko36ggU0Yc/rY3oecdvgFm8jOtiVa RVsmyWpIWb8qYQjCe9Zt2jOf2fSsh6t/17Xr2rBPKqpwY/1ifubmNk5JpyD1mnwI WmDwNr+Zo5/wo6oLLpi784oic6djFpnK7FlthaIOrK8/22Wgd4pTk/7xJEXHFl/w 7+1mGPgVOj4PdhIhfhe7V77aDUK2qRGYOUe1wcaRWRLz42Cb+jBXXqF0cwuzPBMX wrkmbe0RuVwtbnbRkPzUs5AxV3n4dmkCNTLZCNrBo2P9lnoTuWlOSgTuO2WHkxcA ic0= -----END CERTIFICATE-----Generated at Wed Jul 29 02:42:52 2026 by rpki-client