$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json) Hash identifier: 5C92r1kY45j8Cya6NKfilHf3CxQFmP+e9wZmiduW6Bg= Subject key identifier: F7:4C:A2:DE:5E:2D:AB:0C:32:E0:24:7A:4E:2D:31:2E:48:48:DA:77 Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Certificate serial: 04BB06955B87A5BA2816C451B2F76F682C69AFFC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft Manifest number: 02D1 Signing time: Tue 28 Jul 2026 11:51:34 +0000 Manifest this update: Tue 28 Jul 2026 11:46:33 +0000 Manifest next update: Wed 29 Jul 2026 14:25:33 +0000 Files and hashes: 1: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: moF3vvSYxmzFiFNRTVllRFDFjY4IRbcZNl4saB2WJQA=) 2: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: V7a7LRqWRSavnh0Ifl2d/PovkOzhE52bZJXDIw2uFaM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:bb:06:95:5b:87:a5:ba:28:16:c4:51:b2:f7:6f:68:2c:69:af:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Validity Not Before: Jul 28 11:46:33 2026 GMT Not After : Jul 29 14:25:33 2026 GMT Subject: CN=F74CA2DE5E2DAB0C32E0247A4E2D312E4848DA77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:34:af:07:be:37:d0:f4:72:1d:47:3f:58:49: f5:75:ac:b0:a6:9e:32:86:a1:a2:8e:87:0c:8c:24: 11:55:4c:8a:1d:75:b6:3c:9b:d4:5d:f2:5a:c0:c3: b2:78:7d:40:a0:14:30:b5:0b:14:87:bb:9c:0e:68: 03:d2:21:0b:fc:af:72:c6:47:0a:a3:41:e9:dc:98: 96:a9:28:a8:00:b5:09:9b:c4:ea:e8:b6:c6:46:a8: 56:99:d8:56:5f:d2:f1:30:f4:f4:77:93:87:cb:54: 7b:a8:2c:32:71:d0:69:d4:94:60:a0:ea:2d:b7:4f: ac:0f:89:d8:d3:1d:cc:77:40:50:0e:13:a6:51:17: df:92:6d:d5:15:c9:1d:c2:3b:8e:06:86:85:df:cf: f5:34:0e:94:20:1d:02:b1:d6:39:50:8b:ad:70:d5: 39:16:64:69:0c:c2:7b:6d:e7:6d:46:d3:cf:4c:9d: c4:d4:89:de:1b:26:94:10:e8:03:6b:cb:f2:b8:71: 3c:f2:3d:aa:e5:fd:62:9d:2c:ad:59:5e:12:de:ba: 7e:91:96:0c:4c:17:4e:e9:1d:d2:27:86:4a:47:1e: b5:b6:41:60:d2:11:bc:ab:aa:04:f7:e1:e1:5d:b4: e9:14:2b:ad:e4:5f:81:25:aa:6d:44:4d:ff:2f:ba: 1e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:4C:A2:DE:5E:2D:AB:0C:32:E0:24:7A:4E:2D:31:2E:48:48:DA:77 X509v3 Authority Key Identifier: keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:7b:fb:75:67:23:3a:78:97:1a:b7:84:e8:12:c1:83:70:76: 19:ea:32:7b:46:08:ff:2b:76:f9:d7:48:b4:d3:b1:10:0e:34: 1b:4b:8f:7e:93:b1:c4:fe:0c:aa:ea:f0:90:2b:0f:d4:f0:67: ca:40:17:10:fb:2f:32:f2:7c:dc:3c:ca:23:74:33:03:df:4e: d1:8e:22:71:64:1b:08:e9:73:e1:66:37:19:bb:ae:15:5f:12: 48:cc:1c:7b:f0:e9:24:d4:7d:81:a2:aa:56:80:83:99:8d:6c: a7:8f:8f:9f:36:71:ca:5e:38:af:6f:d8:84:26:bb:6f:d2:1c: cf:fc:a5:c9:d2:73:13:01:37:1e:cb:a4:68:ed:ed:86:89:91: 42:ba:53:88:9f:87:68:53:bf:52:36:b5:b5:1e:bb:c9:f0:29: 6e:6e:3c:16:4d:be:31:ef:fa:33:b6:9b:14:4e:e8:77:fa:df: 45:af:8d:93:72:d7:da:8d:27:44:fd:60:74:23:12:f4:b9:85: 83:be:56:77:d2:f9:74:79:20:c2:52:6e:c6:35:e4:b1:df:a7: c1:d5:c3:d7:34:ea:50:fe:e9:8e:de:dc:d6:a8:e4:f4:43:0d: c6:09:16:b4:be:a9:fa:0a:73:7c:24:84:c5:11:bb:c4:32:fa: 89:10:a6:9d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUBLsGlVuHpbooFsRRsvdvaCxpr/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdE NTQ3ODZEMzAeFw0yNjA3MjgxMTQ2MzNaFw0yNjA3MjkxNDI1MzNaMDMxMTAvBgNV BAMTKEY3NENBMkRFNUUyREFCMEMzMkUwMjQ3QTRFMkQzMTJFNDg0OERBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNK8HvjfQ9HIdRz9YSfV1rLCm njKGoaKOhwyMJBFVTIoddbY8m9Rd8lrAw7J4fUCgFDC1CxSHu5wOaAPSIQv8r3LG RwqjQencmJapKKgAtQmbxOrotsZGqFaZ2FZf0vEw9PR3k4fLVHuoLDJx0GnUlGCg 6i23T6wPidjTHcx3QFAOE6ZRF9+SbdUVyR3CO44GhoXfz/U0DpQgHQKx1jlQi61w 1TkWZGkMwntt521G089MncTUid4bJpQQ6ANry/K4cTzyParl/WKdLK1ZXhLeun6R lgxMF07pHdInhkpHHrW2QWDSEbyrqgT34eFdtOkUK63kX4Elqm1ETf8vuh7HAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU90yi3l4tqwwy4CR6Ti0xLkhI2ncwHwYDVR0j BBgwFoAUbZS517fBinpJen6fXi4il9VHhtMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzFlYmZkNTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAv NkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82RDk0QjlEN0I3QzE4QTdBNDk3QTdFOUY1RTJFMjI5 N0Q1NDc4NkQzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzFlYmZk NTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAvNkQ5NEI5RDdCN0MxOEE3QTQ5 N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGN7+3VnIzp4lxq3hOgS wYNwdhnqMntGCP8rdvnXSLTTsRAONBtLj36TscT+DKrq8JArD9TwZ8pAFxD7LzLy fNw8yiN0MwPfTtGOInFkGwjpc+FmNxm7rhVfEkjMHHvw6STUfYGiqlaAg5mNbKeP j582ccpeOK9v2IQmu2/SHM/8pcnScxMBNx7LpGjt7YaJkUK6U4ifh2hTv1I2tbUe u8nwKW5uPBZNvjHv+jO2mxRO6Hf630WvjZNy19qNJ0T9YHQjEvS5hYO+VnfS+XR5 IMJSbsY15LHfp8HVw9c06lD+6Y7e3Nao5PRDDcYJFrS+qfoKc3wkhMURu8Qy+okQ pp0= -----END CERTIFICATE-----Generated at Wed Jul 29 03:03:52 2026 by rpki-client