
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
File: B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json)
Hash identifier: LKW3e3bnCXFo5pI+RhLW66uGhVWuWyiPKUNqpU1GFMI=
Subject key identifier: 68:15:BC:AD:7F:97:45:22:DF:5A:0E:69:0F:E1:C2:CB:C8:C6:CE:1C
Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
Certificate issuer: /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Certificate serial: 73EFCD67C0F9559F3E745950EF876C625BC45F7A
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
Manifest number: 0326
Signing time: Sat 18 Apr 2026 00:26:41 +0000
Manifest this update: Sat 18 Apr 2026 00:21:39 +0000
Manifest next update: Sun 19 Apr 2026 01:44:39 +0000
Files and hashes: 1: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: MlubGqxKcu9/AdY4j4/cMK0ZlCKeMWkqNbhfRk1N6mE=)
2: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: Q2VDtB5Njm02O4meV9vBBxqDfC3vELf0gmjE5kkipSI=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ef:cd:67:c0:f9:55:9f:3e:74:59:50:ef:87:6c:62:5b:c4:5f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Validity
Not Before: Apr 18 00:21:39 2026 GMT
Not After : Apr 19 01:44:39 2026 GMT
Subject: CN=6815BCAD7F974522DF5A0E690FE1C2CBC8C6CE1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:bf:57:e6:54:36:4d:ff:62:43:f6:2e:67:
f3:6c:ed:78:4a:12:ba:56:ac:73:7c:bf:91:7f:a5:
93:3d:fa:d1:a0:b3:fc:b2:df:57:a6:48:83:f9:88:
09:2c:09:36:06:23:21:c9:55:f8:6e:37:d8:65:5f:
84:65:b2:c5:90:fc:79:d3:82:07:19:bc:f6:32:4a:
c2:9a:7e:63:c5:d8:3e:39:f0:c4:f2:23:79:ca:03:
49:ac:ba:c2:e5:32:4f:49:43:c0:6f:4e:35:48:08:
20:1c:b2:f2:fe:ff:e4:79:1c:24:2a:55:67:ef:36:
c7:ec:03:7a:0a:bb:8d:82:50:4a:31:cd:03:01:c3:
7e:2a:06:75:12:a9:97:1f:15:51:a0:80:de:28:7e:
6f:94:17:81:48:6d:9a:d1:7e:c7:ed:09:01:f0:f8:
24:64:b4:ab:1e:f8:2f:84:2b:32:96:85:3b:39:68:
c2:98:c3:d9:5e:11:28:95:d1:dc:47:4c:c6:e4:f4:
90:67:6c:3c:5d:f3:af:6b:7d:78:ab:95:f5:6e:e0:
08:7a:dd:11:7d:79:ff:e7:c0:d9:15:65:bd:bc:ae:
53:fd:6c:6e:3d:62:f7:61:c4:16:b6:2b:6f:f9:d6:
76:bc:8e:ff:b7:a6:94:c7:5b:c6:85:b5:a1:8a:6d:
00:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:15:BC:AD:7F:97:45:22:DF:5A:0E:69:0F:E1:C2:CB:C8:C6:CE:1C
X509v3 Authority Key Identifier:
keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a6:df:47:ca:d5:f0:b0:14:fa:72:fa:4e:c5:2e:92:9d:76:
b2:f2:29:69:e4:9a:6c:5e:2b:94:05:17:25:73:f9:b1:ef:5f:
6a:da:e9:24:6c:ca:dd:13:c0:11:4c:62:c2:d3:6a:a6:61:57:
a9:c8:c3:4b:86:83:97:64:be:59:85:8a:da:f0:06:e8:24:8b:
45:2e:9b:72:2f:78:d4:61:19:d5:46:d2:31:ef:2e:54:87:61:
4b:6b:04:3c:73:b5:ce:31:85:70:77:0e:9c:7b:2a:ed:0f:b7:
40:a3:83:d0:6d:a7:9a:68:ad:17:16:e2:ba:f2:cc:f8:16:2f:
58:19:42:eb:1e:e5:7b:01:92:6e:2b:a5:5b:df:f5:45:cd:0b:
b9:a6:6b:98:9d:13:7a:2f:d0:96:b7:a7:62:24:41:08:6f:c4:
68:6e:e2:d3:ff:80:33:99:c4:5d:df:87:c2:63:58:d7:b8:07:
ce:e7:fc:05:19:b9:8f:f6:66:44:ab:a6:72:62:1e:36:ce:f0:
be:86:d1:73:0f:f4:96:8c:52:55:bc:e5:a3:84:87:79:b6:c4:
5e:db:f4:5b:7b:b9:38:ff:21:d2:3e:ca:25:14:84:e4:68:2c:
c6:07:7d:9b:d1:45:0d:9c:d8:79:c4:2a:5d:70:c2:e8:a7:bd:
e6:1b:4a:fb
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUc+/NZ8D5VZ8+dFlQ74dsYlvEX3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RE
RUEwODc3NzAeFw0yNjA0MTgwMDIxMzlaFw0yNjA0MTkwMTQ0MzlaMDMxMTAvBgNV
BAMTKDY4MTVCQ0FEN0Y5NzQ1MjJERjVBMEU2OTBGRTFDMkNCQzhDNkNFMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClqb9X5lQ2Tf9iQ/YuZ/Ns7XhK
ErpWrHN8v5F/pZM9+tGgs/yy31emSIP5iAksCTYGIyHJVfhuN9hlX4RlssWQ/HnT
ggcZvPYySsKafmPF2D458MTyI3nKA0msusLlMk9JQ8BvTjVICCAcsvL+/+R5HCQq
VWfvNsfsA3oKu42CUEoxzQMBw34qBnUSqZcfFVGggN4ofm+UF4FIbZrRfsftCQHw
+CRktKse+C+EKzKWhTs5aMKYw9leESiV0dxHTMbk9JBnbDxd869rfXirlfVu4Ah6
3RF9ef/nwNkVZb28rlP9bG49YvdhxBa2K2/51na8jv+3ppTHW8aFtaGKbQAjAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUaBW8rX+XRSLfWg5pD+HCy8jGzhwwHwYDVR0j
BBgwFoAUuCIqhFwM3Fno02muI+EWzd6gh3cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzA5ODBlMjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAv
QjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy9CODIyMkE4NDVDMENEQzU5RThEMzY5QUUyM0UxMTZD
RERFQTA4Nzc3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzA5ODBl
MjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAvQjgyMjJBODQ1QzBDREM1OUU4
RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADim30fK1fCwFPpy+k7F
LpKddrLyKWnkmmxeK5QFFyVz+bHvX2ra6SRsyt0TwBFMYsLTaqZhV6nIw0uGg5dk
vlmFitrwBugki0Uum3IveNRhGdVG0jHvLlSHYUtrBDxztc4xhXB3Dpx7Ku0Pt0Cj
g9Btp5porRcW4rryzPgWL1gZQuse5XsBkm4rpVvf9UXNC7mma5idE3ov0Ja3p2Ik
QQhvxGhu4tP/gDOZxF3fh8JjWNe4B87n/AUZuY/2ZkSrpnJiHjbO8L6G0XMP9JaM
UlW85aOEh3m2xF7b9Ft7uTj/IdI+yiUUhORoLMYHfZvRRQ2c2HnEKl1wwuinveYb
Svs=
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:55:40 2026 by rpki-client