$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft File: B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json) Hash identifier: V8kZLaGs/YVpJPfnggnUhUtUouN7X+7YYm2l2jpTi6E= Subject key identifier: 41:5D:48:63:56:A8:48:3E:2A:A8:4C:09:5C:95:C0:74:BD:4B:7A:9B Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 Certificate issuer: /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Certificate serial: 5D4216B58658F1494AF095A7497BE71259F8AE06 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft Manifest number: 0324 Signing time: Fri 17 Apr 2026 04:14:13 +0000 Manifest this update: Fri 17 Apr 2026 04:09:11 +0000 Manifest next update: Sat 18 Apr 2026 07:15:11 +0000 Files and hashes: 1: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: nMLfH1nYsI5mPwv+N0MEzTUVq1YFB35SCmO/3EjXxsg=) 2: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: tOaIT6qTvs/T2L2c3rEpmXq3gx7f0jW4s/J1R0UAbuM=) 3: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: sqKWQ1PyEfdoWQB7gFPPeq1OW+xnTsFiI/LMn60Evks=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:42:16:b5:86:58:f1:49:4a:f0:95:a7:49:7b:e7:12:59:f8:ae:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Validity Not Before: Apr 17 04:09:11 2026 GMT Not After : Apr 18 07:15:11 2026 GMT Subject: CN=415D486356A8483E2AA84C095C95C074BD4B7A9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5b:b5:40:39:7f:af:7e:77:9b:ab:11:9d:27: ba:32:51:4f:f3:6b:98:9a:85:18:d2:2f:65:9c:7a: 4a:ba:a0:3e:76:30:0a:b4:89:d1:b4:2c:93:c3:08: ee:0a:4a:31:ec:6c:f8:c1:94:8c:95:eb:ee:83:d3: 31:c5:a0:14:9b:a8:aa:99:19:04:6c:68:0e:43:51: c2:a3:48:e6:91:df:04:59:1c:4d:f3:ce:41:60:d4: 9b:d4:c5:bd:9b:65:e1:8e:bc:3c:67:fc:61:83:9f: 14:5a:f1:58:e0:81:d2:0a:34:01:b0:51:02:34:7c: 2b:1a:f8:2f:cc:e7:89:d4:cb:5f:2b:15:8d:b5:5e: f7:85:b5:38:09:99:4f:4a:57:38:e0:ec:1a:6b:18: 48:e3:e2:b6:98:9d:b5:f1:56:23:be:85:7d:75:ac: 66:f2:5b:25:d3:88:cb:cd:eb:1b:47:de:aa:0a:d4: c6:55:37:65:a7:81:31:5c:b8:18:6c:43:09:cb:fa: 15:71:df:f7:e4:58:c9:14:f8:f4:9f:d2:a5:c1:22: 31:63:b7:80:98:56:9c:45:3c:87:f7:3c:d1:2e:0c: af:73:d8:94:18:2f:c3:5b:66:8a:3f:7d:58:51:76: 77:b4:3c:4a:b2:9d:8f:14:3a:51:60:d1:8e:c4:85: 43:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5D:48:63:56:A8:48:3E:2A:A8:4C:09:5C:95:C0:74:BD:4B:7A:9B X509v3 Authority Key Identifier: keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a6:b9:54:17:78:27:32:5d:72:90:95:26:dc:e7:50:4a:50: bb:e0:63:f1:bb:e9:84:4f:9d:3b:f0:1d:2e:12:f3:74:98:a1: a4:e7:ca:ca:87:8d:15:3d:e6:d1:b4:65:95:be:34:5b:60:0a: e0:ce:93:4f:fe:bd:8d:bf:d7:64:77:84:58:9e:5a:d8:6a:59: 93:80:b1:30:2a:d3:aa:b8:45:64:a7:ee:ca:aa:db:c1:93:be: a7:dd:6e:42:f0:6f:57:9c:d1:b9:52:6f:b9:85:8a:09:af:b3: 1a:47:7c:8f:82:c9:35:83:82:52:42:a8:3e:94:d5:77:ff:80: 98:70:38:26:7a:cd:9d:03:76:8e:81:b0:36:7f:e5:0f:a8:87: 58:90:05:e3:4f:4d:c8:b6:8c:ab:8f:13:e7:c3:8a:aa:de:30: ed:e5:14:40:16:b6:2a:4d:df:bd:39:71:02:d6:2f:52:3a:82: 7f:f2:50:e4:bb:7c:7b:3d:6b:36:e6:94:69:c6:8a:bb:9f:b8: 4a:5f:18:2a:8f:ef:85:c6:af:04:12:b8:e3:29:cf:4f:4c:3b: 8a:dd:96:a9:e9:73:20:7e:70:dc:64:32:63:29:9b:3c:2d:87: 6f:80:24:e3:97:ac:3d:6e:d2:9c:44:e2:85:b1:bc:d6:3c:f9: ca:b9:1d:30 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUXUIWtYZY8UlK8JWnSXvnEln4rgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG MjFFMDUxODAeFw0yNjA0MTcwNDA5MTFaFw0yNjA0MTgwNzE1MTFaMDMxMTAvBgNV BAMTKDQxNUQ0ODYzNTZBODQ4M0UyQUE4NEMwOTVDOTVDMDc0QkQ0QjdBOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFW7VAOX+vfnebqxGdJ7oyUU/z a5iahRjSL2Wcekq6oD52MAq0idG0LJPDCO4KSjHsbPjBlIyV6+6D0zHFoBSbqKqZ GQRsaA5DUcKjSOaR3wRZHE3zzkFg1JvUxb2bZeGOvDxn/GGDnxRa8VjggdIKNAGw UQI0fCsa+C/M54nUy18rFY21XveFtTgJmU9KVzjg7BprGEjj4raYnbXxViO+hX11 rGbyWyXTiMvN6xtH3qoK1MZVN2WngTFcuBhsQwnL+hVx3/fkWMkU+PSf0qXBIjFj t4CYVpxFPIf3PNEuDK9z2JQYL8NbZoo/fVhRdne0PEqynY8UOlFg0Y7EhUPVAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUQV1IY1aoSD4qqEwJXJXAdL1LepswHwYDVR0j BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD OEYyMUUwNTE4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzBhNDYz N2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAvQjg4QTk0RENBMDlFM0E2NTND MDZGNDc4NDM0REM3QzhGMjFFMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJOmuVQXeCcyXXKQlSbc 51BKULvgY/G76YRPnTvwHS4S83SYoaTnysqHjRU95tG0ZZW+NFtgCuDOk0/+vY2/ 12R3hFieWthqWZOAsTAq06q4RWSn7sqq28GTvqfdbkLwb1ec0blSb7mFigmvsxpH fI+CyTWDglJCqD6U1Xf/gJhwOCZ6zZ0Ddo6BsDZ/5Q+oh1iQBeNPTci2jKuPE+fD iqreMO3lFEAWtipN3705cQLWL1I6gn/yUOS7fHs9azbmlGnGirufuEpfGCqP74XG rwQSuOMpz09MO4rdlqnpcyB+cNxkMmMpmzwth2+AJOOXrD1u0pxE4oWxvNY8+cq5 HTA= -----END CERTIFICATE-----Generated at Sat Apr 18 00:06:45 2026 by rpki-client