$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft File: B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json) Hash identifier: j1UWrXZyTepq7xG8W483eoydlS9p9g4UHFklBGJaci0= Subject key identifier: 3A:6E:7C:2A:F9:7B:A1:1F:47:4E:A7:6E:EC:EE:84:3D:8A:2D:08:F3 Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 Certificate issuer: /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Certificate serial: 15AF4D05413407A566A4633A0725ED7F9BC92008 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft Manifest number: 03E1 Signing time: Sun 20 Sep 2026 02:12:10 +0000 Manifest this update: Sun 20 Sep 2026 02:07:10 +0000 Manifest next update: Mon 21 Sep 2026 04:00:10 +0000 Files and hashes: 1: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: 8C6Hy1zWoiCNLulQzuVZUfVeX80dcz9eXhZ4U3AQ9GU=) 2: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: 4QQNsk8lBa8O942cPNbgOsUIiLitH/4e3K7Oj090cpQ=) 3: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: nO1YT0HdU2m72ueMZYtU7pGui3eQWYc9n6VJnhvZh24=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:af:4d:05:41:34:07:a5:66:a4:63:3a:07:25:ed:7f:9b:c9:20:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Validity Not Before: Sep 20 02:07:10 2026 GMT Not After : Sep 21 04:00:10 2026 GMT Subject: CN=3A6E7C2AF97BA11F474EA76EECEE843D8A2D08F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:19:60:41:fb:23:de:dc:08:da:a7:11:c7:a4: 2e:4b:e8:15:24:9c:ef:6f:99:85:df:8a:ad:30:bb: ab:88:db:f2:ad:31:dd:76:6c:5d:b3:e6:a5:fd:31: 1c:55:c2:17:a6:b6:f2:80:e9:13:18:70:77:89:42: de:12:5c:cc:ec:4e:4b:d5:0b:71:17:2c:ef:e8:89: e1:e9:e1:b4:42:d4:f5:8b:72:36:ba:27:9f:27:33: 28:77:b4:aa:f1:75:cd:39:d6:df:3c:b8:3c:2f:26: a3:01:a7:6a:92:8f:57:32:37:6a:83:c1:89:01:70: d5:3c:b2:c1:3f:c7:cf:da:c9:1f:fa:9b:04:e0:cf: 6e:cc:79:44:20:1d:03:00:ef:c3:0a:04:20:5a:45: bc:15:90:62:35:b2:19:fd:47:21:f9:49:43:0f:59: 80:25:11:2a:bf:9f:a4:42:0b:96:19:19:d2:ee:37: 2b:2c:46:2c:ea:b0:14:06:0e:a7:71:47:87:01:37: 3e:0d:0f:f5:32:d3:b0:d8:16:a6:ca:89:d5:25:ac: 73:6d:78:4b:28:45:98:f3:56:23:2b:50:46:2f:a9: b7:1e:31:db:9a:c4:ce:49:5f:6e:54:0d:17:9d:f1: 6c:29:bf:3d:50:29:46:82:40:86:c0:d6:c7:e3:91: f9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6E:7C:2A:F9:7B:A1:1F:47:4E:A7:6E:EC:EE:84:3D:8A:2D:08:F3 X509v3 Authority Key Identifier: keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:cb:40:fc:00:aa:98:41:66:6c:31:7d:78:37:e8:55:4e:1c: 9e:af:0b:01:88:c5:c3:5f:74:95:39:e3:88:12:71:72:81:41: f2:97:b8:fe:5a:13:40:27:28:0a:32:99:13:c9:3b:82:61:de: 74:92:80:b0:35:a9:60:07:f1:2d:7e:cb:4a:e5:e9:fd:5e:3b: 78:11:75:3f:81:88:27:24:d1:8d:d1:3b:57:b4:6a:a0:3c:78: 72:fa:4a:39:a9:00:8c:68:db:e3:4c:8d:35:0a:45:dd:8d:ab: 32:81:5a:b3:54:e9:b5:fa:a2:90:c4:1f:47:b3:ec:a0:e7:d6: c5:75:35:37:46:d2:e4:5a:8c:03:f7:91:a7:15:c9:92:82:10: 59:20:4a:99:17:8e:b3:86:58:b8:6f:db:b2:89:01:fb:7e:f0: 73:3f:e4:09:4c:40:cb:77:fb:ae:f8:92:74:cd:4f:a2:ba:a9: 69:ff:43:b4:e8:1e:54:28:3c:c2:f6:0e:84:c1:59:f3:09:5e: 96:7d:ee:29:e9:42:5f:f1:ea:fe:d1:7b:ed:f5:9e:a0:f2:43: 99:d6:a2:21:91:b1:47:af:25:44:53:2f:c0:ce:68:c2:c5:26: 39:14:c7:82:b5:59:fe:d2:cf:b2:1f:cb:c7:fc:30:18:08:f4: eb:d8:d3:1c -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUFa9NBUE0B6VmpGM6ByXtf5vJIAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG MjFFMDUxODAeFw0yNjA5MjAwMjA3MTBaFw0yNjA5MjEwNDAwMTBaMDMxMTAvBgNV BAMTKDNBNkU3QzJBRjk3QkExMUY0NzRFQTc2RUVDRUU4NDNEOEEyRDA4RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGWBB+yPe3AjapxHHpC5L6BUk nO9vmYXfiq0wu6uI2/KtMd12bF2z5qX9MRxVwhemtvKA6RMYcHeJQt4SXMzsTkvV C3EXLO/oieHp4bRC1PWLcja6J58nMyh3tKrxdc051t88uDwvJqMBp2qSj1cyN2qD wYkBcNU8ssE/x8/ayR/6mwTgz27MeUQgHQMA78MKBCBaRbwVkGI1shn9RyH5SUMP WYAlESq/n6RCC5YZGdLuNyssRizqsBQGDqdxR4cBNz4ND/Uy07DYFqbKidUlrHNt eEsoRZjzViMrUEYvqbceMduaxM5JX25UDRed8Wwpvz1QKUaCQIbA1sfjkfmBAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUOm58Kvl7oR9HTqdu7O6EPYotCPMwHwYDVR0j BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD OEYyMUUwNTE4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzBhNDYz N2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAvQjg4QTk0RENBMDlFM0E2NTND MDZGNDc4NDM0REM3QzhGMjFFMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGHLQPwAqphBZmwxfXg3 6FVOHJ6vCwGIxcNfdJU544gScXKBQfKXuP5aE0AnKAoymRPJO4Jh3nSSgLA1qWAH 8S1+y0rl6f1eO3gRdT+BiCck0Y3RO1e0aqA8eHL6SjmpAIxo2+NMjTUKRd2NqzKB WrNU6bX6opDEH0ez7KDn1sV1NTdG0uRajAP3kacVyZKCEFkgSpkXjrOGWLhv27KJ Aft+8HM/5AlMQMt3+674knTNT6K6qWn/Q7ToHlQoPML2DoTBWfMJXpZ97inpQl/x 6v7Re+31nqDyQ5nWoiGRsUevJURTL8DOaMLFJjkUx4K1Wf7Sz7Ify8f8MBgI9OvY 0xw= -----END CERTIFICATE-----Generated at Sun Sep 20 18:00:05 2026 by rpki-client