$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json) Hash identifier: AdJ2dUyUncg/1t5FtVh/TfzUH0l34rSfn2qrrsxlqpU= Subject key identifier: AF:E0:63:50:BD:A6:BC:82:07:73:25:0F:F1:A1:BD:D2:A9:9B:0B:C8 Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Certificate serial: 4AA04BFC0B94A4BC96BA174DBCE9F5E296E48604 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft Manifest number: 0328 Signing time: Wed 14 Oct 2026 13:04:20 +0000 Manifest this update: Wed 14 Oct 2026 12:59:18 +0000 Manifest next update: Thu 15 Oct 2026 16:09:18 +0000 Files and hashes: 1: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: eVkO33UBcXsp5fUsSWX9b++Lh/oAtSFD4aVI9+z6ncg=) 2: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: V7a7LRqWRSavnh0Ifl2d/PovkOzhE52bZJXDIw2uFaM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Oct 2026 16:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a0:4b:fc:0b:94:a4:bc:96:ba:17:4d:bc:e9:f5:e2:96:e4:86:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Validity Not Before: Oct 14 12:59:18 2026 GMT Not After : Oct 15 16:09:18 2026 GMT Subject: CN=AFE06350BDA6BC820773250FF1A1BDD2A99B0BC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fc:29:80:fc:3a:e1:03:bd:49:b8:ab:a6:55: f7:dc:55:d7:fc:d3:c7:1b:f0:a2:88:29:d2:b1:13: 91:b3:a8:dd:85:8c:b3:35:01:63:9e:dc:df:7c:91: d2:43:73:80:27:97:42:a4:bd:eb:24:21:cf:0f:c9: 9d:6d:db:0e:ea:76:a3:4f:64:88:da:3f:f0:3a:75: 5f:c9:1d:16:33:e1:54:92:a1:12:63:35:0b:02:9a: c0:51:89:01:ff:5c:d2:c0:a2:58:06:04:f2:71:67: 73:29:e4:80:0f:18:47:89:67:6f:d1:39:84:f5:5b: 58:bf:9a:b6:3e:5b:50:c8:55:78:cf:c0:e5:36:dc: a2:c6:41:6f:17:28:32:59:8d:08:e9:90:a7:29:19: a5:24:b8:95:98:46:c0:e0:90:c5:46:67:25:f7:14: f8:6a:3f:15:bc:23:33:a6:af:34:74:a7:90:a7:53: 93:43:11:36:53:1d:9d:f0:b7:33:a9:ea:12:1b:5c: 42:bc:28:30:87:9a:bd:75:8e:ff:57:36:10:c3:ba: 82:d6:38:58:92:70:80:f7:c3:18:d4:03:db:07:98: 90:35:f4:6e:c8:11:a5:db:fe:07:b0:e7:a5:ef:a3: 53:5c:cf:95:de:bb:f2:44:2c:9e:84:5b:ce:51:21: 21:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E0:63:50:BD:A6:BC:82:07:73:25:0F:F1:A1:BD:D2:A9:9B:0B:C8 X509v3 Authority Key Identifier: keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:af:3b:10:4a:41:96:fe:2d:8a:cf:cb:15:40:fe:92:44:6e: f2:75:4a:19:45:61:c2:79:01:ed:2b:60:fc:4a:c3:ec:68:fe: 83:b2:c3:0c:97:47:f1:b0:5b:70:8b:4b:77:5c:48:c3:aa:3c: cf:b6:a1:ec:90:12:0c:8c:c2:e5:03:c8:37:a1:75:2c:de:0a: b4:ff:28:09:02:f7:be:24:24:0e:2c:fe:6d:7c:05:da:ff:e9: 55:ca:9c:c1:1e:fa:56:50:25:35:50:72:63:57:fd:a6:df:c4: bf:f8:29:68:f8:64:d3:17:4e:90:ed:8d:a4:ef:4e:c3:89:27: 12:e5:12:e8:66:47:96:1f:43:bc:40:01:ad:4d:cb:0e:18:4b: 7f:53:0a:6d:3e:a1:e8:c8:e6:5b:f4:33:6c:d9:d1:22:97:89: 54:b8:06:90:53:96:b8:37:05:b9:db:51:6a:db:94:26:b4:b4: 76:1b:82:3c:58:bf:db:d7:92:86:74:4e:0a:4b:e5:62:4b:fc: 43:98:ad:3c:d9:22:2c:ec:32:29:ec:90:c3:fc:69:0d:ca:90: 3c:ce:8f:dc:fc:d5:d7:9f:02:61:ba:b4:dc:cf:be:39:1a:61: a6:3e:80:0d:f5:d8:a6:c8:94:4a:34:0b:37:41:ea:c9:17:1c: ad:b2:1c:e6 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUSqBL/AuUpLyWuhdNvOn14pbkhgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdE NTQ3ODZEMzAeFw0yNjEwMTQxMjU5MThaFw0yNjEwMTUxNjA5MThaMDMxMTAvBgNV BAMTKEFGRTA2MzUwQkRBNkJDODIwNzczMjUwRkYxQTFCREQyQTk5QjBCQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/CmA/DrhA71JuKumVffcVdf8 08cb8KKIKdKxE5GzqN2FjLM1AWOe3N98kdJDc4Anl0KkveskIc8PyZ1t2w7qdqNP ZIjaP/A6dV/JHRYz4VSSoRJjNQsCmsBRiQH/XNLAolgGBPJxZ3Mp5IAPGEeJZ2/R OYT1W1i/mrY+W1DIVXjPwOU23KLGQW8XKDJZjQjpkKcpGaUkuJWYRsDgkMVGZyX3 FPhqPxW8IzOmrzR0p5CnU5NDETZTHZ3wtzOp6hIbXEK8KDCHmr11jv9XNhDDuoLW OFiScID3wxjUA9sHmJA19G7IEaXb/gew56Xvo1Ncz5Xeu/JELJ6EW85RISFrAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUr+BjUL2mvIIHcyUP8aG90qmbC8gwHwYDVR0j BBgwFoAUbZS517fBinpJen6fXi4il9VHhtMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzFlYmZkNTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAv NkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82RDk0QjlEN0I3QzE4QTdBNDk3QTdFOUY1RTJFMjI5 N0Q1NDc4NkQzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzFlYmZk NTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAvNkQ5NEI5RDdCN0MxOEE3QTQ5 N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABGvOxBKQZb+LYrPyxVA /pJEbvJ1ShlFYcJ5Ae0rYPxKw+xo/oOywwyXR/GwW3CLS3dcSMOqPM+2oeyQEgyM wuUDyDehdSzeCrT/KAkC974kJA4s/m18Bdr/6VXKnMEe+lZQJTVQcmNX/abfxL/4 KWj4ZNMXTpDtjaTvTsOJJxLlEuhmR5YfQ7xAAa1Nyw4YS39TCm0+oejI5lv0M2zZ 0SKXiVS4BpBTlrg3BbnbUWrblCa0tHYbgjxYv9vXkoZ0TgpL5WJL/EOYrTzZIizs MinskMP8aQ3KkDzOj9z81defAmG6tNzPvjkaYaY+gA312KbIlEo0CzdB6skXHK2y HOY= -----END CERTIFICATE-----Generated at Thu Oct 15 05:32:47 2026 by rpki-client