$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json) Hash identifier: igAweGdX4/3akxVzW493em4+3kOSHYOJgAKOVZsGc+I= Subject key identifier: D1:51:B1:76:FC:2D:AA:5F:69:AC:16:82:2B:06:29:14:1D:10:A7:C2 Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Certificate serial: 2F382F13EFB9A924AAD4813DBEFBE8B5A2204118 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft Manifest number: 0249 Signing time: Fri 17 Apr 2026 18:23:03 +0000 Manifest this update: Fri 17 Apr 2026 18:18:00 +0000 Manifest next update: Sat 18 Apr 2026 20:08:00 +0000 Files and hashes: 1: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: V7a7LRqWRSavnh0Ifl2d/PovkOzhE52bZJXDIw2uFaM=) 2: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: w3lwTESZHjViHnWMok86oSYEo6YS4sTfTBirNvWF5ks=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 20:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:38:2f:13:ef:b9:a9:24:aa:d4:81:3d:be:fb:e8:b5:a2:20:41:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Validity Not Before: Apr 17 18:18:00 2026 GMT Not After : Apr 18 20:08:00 2026 GMT Subject: CN=D151B176FC2DAA5F69AC16822B0629141D10A7C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e7:8c:21:56:c9:8c:d7:ee:49:07:57:1b:38: ca:b6:ef:bb:df:53:75:84:81:0d:8a:2f:6e:78:bf: 87:b1:a9:bf:70:5a:b4:6f:cf:1a:93:61:68:12:10: a3:8f:3e:5d:01:02:a4:51:48:a8:4b:c9:a4:f7:8f: 2a:19:ed:3d:95:bf:e9:bd:7e:73:8a:9c:5c:1a:24: 64:73:29:54:07:37:36:0b:56:8a:86:07:a0:4d:8b: 12:29:0c:2c:c5:9a:53:6d:c9:c8:d2:10:90:63:38: 07:2c:24:17:88:4b:69:db:bb:ad:d4:be:a0:66:89: 23:f8:b0:cd:72:aa:d6:41:01:83:4e:1d:c7:5c:13: 24:46:b7:3a:88:d2:4b:8e:72:3a:71:e8:12:38:b6: 82:a2:1c:58:58:0c:ad:a9:72:ba:20:cd:fa:a1:a5: aa:dd:89:23:1c:19:c6:95:16:f8:f2:a9:90:7b:d6: 0c:c9:ac:13:7a:20:59:ec:33:76:69:3d:b6:8e:5a: ae:2a:15:40:3a:f8:57:0d:54:25:0c:67:47:ce:49: 21:66:a6:6d:10:e5:87:82:07:08:b9:ba:f4:e2:07: c0:ff:58:a5:16:62:8b:cb:78:d4:a7:35:11:c8:5f: 51:a3:4b:ae:54:84:c6:5e:bc:fb:d9:ac:6f:a3:de: bc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:51:B1:76:FC:2D:AA:5F:69:AC:16:82:2B:06:29:14:1D:10:A7:C2 X509v3 Authority Key Identifier: keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:b1:b0:1a:04:cb:e0:ed:36:c0:d6:ca:7e:3c:b7:e6:12:05: e5:25:cc:49:5b:b2:3b:a2:80:84:06:a3:50:e3:a7:e3:94:18: 8b:a7:f1:aa:f4:f6:12:01:c5:da:5f:cc:d1:0a:75:cf:ae:68: ac:59:38:2a:a0:90:5c:f9:75:fe:0b:02:af:76:87:22:e5:86: 4e:b9:8f:d9:af:5b:28:23:65:97:e0:ed:83:03:15:16:49:d6: 76:d4:f1:fa:34:bf:6c:8a:53:76:d6:36:1f:2d:3e:56:f6:f3: 93:50:01:0f:3f:79:9d:3e:09:dd:d3:aa:f1:78:9f:49:36:ee: 98:22:13:cf:04:18:29:37:0b:6f:56:e2:74:62:1c:e3:49:5a: 21:bb:91:b7:40:38:b4:6d:54:a1:8d:78:47:d9:4e:d5:8f:a2: 12:c5:65:f4:ff:38:0f:75:cf:c1:37:83:40:32:f7:bc:2c:7b: 15:04:2c:62:1c:6c:f8:73:f6:24:ed:da:09:f2:95:96:f6:e8: ef:5c:8b:2e:f4:66:1c:89:30:07:f5:fb:ea:fb:62:78:bf:a3: 3e:88:97:cc:c6:2b:42:28:3c:8c:06:b3:3d:3f:e1:d3:69:7e: 57:88:e2:ac:bb:d8:d8:fa:5b:08:10:e2:7e:ae:33:1c:c5:e1: e2:96:3f:ef -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIULzgvE++5qSSq1IE9vvvotaIgQRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdE NTQ3ODZEMzAeFw0yNjA0MTcxODE4MDBaFw0yNjA0MTgyMDA4MDBaMDMxMTAvBgNV BAMTKEQxNTFCMTc2RkMyREFBNUY2OUFDMTY4MjJCMDYyOTE0MUQxMEE3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL54whVsmM1+5JB1cbOMq277vf U3WEgQ2KL254v4exqb9wWrRvzxqTYWgSEKOPPl0BAqRRSKhLyaT3jyoZ7T2Vv+m9 fnOKnFwaJGRzKVQHNzYLVoqGB6BNixIpDCzFmlNtycjSEJBjOAcsJBeIS2nbu63U vqBmiSP4sM1yqtZBAYNOHcdcEyRGtzqI0kuOcjpx6BI4toKiHFhYDK2pcrogzfqh pardiSMcGcaVFvjyqZB71gzJrBN6IFnsM3ZpPbaOWq4qFUA6+FcNVCUMZ0fOSSFm pm0Q5YeCBwi5uvTiB8D/WKUWYovLeNSnNRHIX1GjS65UhMZevPvZrG+j3rxjAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU0VGxdvwtql9prBaCKwYpFB0Qp8IwHwYDVR0j BBgwFoAUbZS517fBinpJen6fXi4il9VHhtMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzFlYmZkNTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAv NkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82RDk0QjlEN0I3QzE4QTdBNDk3QTdFOUY1RTJFMjI5 N0Q1NDc4NkQzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzFlYmZk NTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAvNkQ5NEI5RDdCN0MxOEE3QTQ5 N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJSxsBoEy+DtNsDWyn48 t+YSBeUlzElbsjuigIQGo1Djp+OUGIun8ar09hIBxdpfzNEKdc+uaKxZOCqgkFz5 df4LAq92hyLlhk65j9mvWygjZZfg7YMDFRZJ1nbU8fo0v2yKU3bWNh8tPlb285NQ AQ8/eZ0+Cd3TqvF4n0k27pgiE88EGCk3C29W4nRiHONJWiG7kbdAOLRtVKGNeEfZ TtWPohLFZfT/OA91z8E3g0Ay97wsexUELGIcbPhz9iTt2gnylZb26O9ciy70ZhyJ MAf1++r7Yni/oz6Il8zGK0IoPIwGsz0/4dNpfleI4qy72Nj6WwgQ4n6uMxzF4eKW P+8= -----END CERTIFICATE-----Generated at Sat Apr 18 06:19:00 2026 by rpki-client