$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft File: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft (raw, json) Hash identifier: sPov/FIzl7DdzXe3UYEvY6G0JvcYTCxx4MfMDl1HZuc= Subject key identifier: CB:59:94:B1:37:BD:FF:31:54:D9:EB:53:7B:23:77:D9:AA:1A:34:57 Authority key identifier: 69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E Certificate issuer: /CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E Certificate serial: 43CF7683FBF97F5E5F32C865BACB5652F05C016A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft Manifest number: 03E1 Signing time: Tue 22 Sep 2026 01:02:01 +0000 Manifest this update: Tue 22 Sep 2026 00:57:01 +0000 Manifest next update: Wed 23 Sep 2026 04:34:01 +0000 Files and hashes: 1: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl (hash: 3GVBx1iUbRuFIbpdNU7WR7J1la/GvElNp2HAtcKMkLk=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 04:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:cf:76:83:fb:f9:7f:5e:5f:32:c8:65:ba:cb:56:52:f0:5c:01:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E Validity Not Before: Sep 22 00:57:01 2026 GMT Not After : Sep 23 04:34:01 2026 GMT Subject: CN=CB5994B137BDFF3154D9EB537B2377D9AA1A3457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8f:ff:a3:71:55:b4:37:d9:28:77:ac:9e:09: 38:f3:e6:ac:b3:90:bf:ef:93:72:d3:eb:58:a2:ef: 3b:e6:d3:3c:4f:f9:b5:35:f6:e0:ca:35:e5:ee:a6: 1b:d6:57:79:d6:1a:6e:fe:e9:4b:83:70:93:db:e5: c2:cd:ba:f9:d9:8a:50:61:28:a7:b9:88:eb:c8:48: 08:0e:66:71:cb:29:9e:fd:5c:6f:dc:50:dc:98:8c: 79:11:08:72:20:50:99:a3:fc:11:5f:15:29:ce:34: 91:37:53:96:76:51:d8:d7:67:8b:ea:70:84:76:3b: c6:1d:64:3c:35:39:d4:45:b8:bf:f6:29:5e:c7:41: 0a:1f:c5:c7:d6:32:f3:73:08:91:03:2b:0a:36:49: 0d:08:96:df:27:66:12:33:ad:9b:e7:17:8a:2b:45: 90:ea:d6:db:de:ab:25:5d:06:5c:c7:0e:b5:9c:1e: 13:b9:df:b7:06:f1:62:69:b1:f8:5b:22:df:48:80: 37:9f:19:87:a2:49:09:90:b9:d6:e2:5b:f8:bc:1f: 2d:7a:7d:cf:3b:66:00:d3:64:34:dd:43:77:56:f9: e8:49:05:c9:41:b3:f5:71:60:07:80:de:4c:ae:3c: 1c:09:5e:bb:66:02:cd:4d:9a:26:9d:7b:e2:0a:18: c8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:59:94:B1:37:BD:FF:31:54:D9:EB:53:7B:23:77:D9:AA:1A:34:57 X509v3 Authority Key Identifier: keyid:69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:46:c9:00:e1:b4:23:56:07:6d:51:88:fb:c0:19:55:9a:dc: ff:e1:eb:b8:e2:2a:28:c0:38:d6:1f:1b:b9:0b:9a:ff:e5:0c: 26:7f:50:3a:30:7c:74:4b:8f:d3:34:c7:92:bc:89:98:ad:7c: 2a:26:57:2a:f2:f7:34:d2:aa:18:50:cb:0b:81:e2:48:c8:3c: c0:d4:16:6b:ee:43:c5:b8:d2:77:22:61:6c:1b:e3:65:14:b6: 61:7a:06:b9:1e:e2:99:3e:94:7c:95:92:47:1f:44:5a:32:56: 17:06:d1:3f:eb:ec:81:de:7e:a6:10:9e:7a:13:7c:ba:67:d7: 97:cf:b1:48:b1:68:16:88:23:f6:68:7a:fb:61:56:77:97:8a: d1:cf:d8:ef:3c:59:4b:15:0d:2c:92:0e:3f:a6:74:6d:96:cd: 61:a4:76:bc:1c:2f:46:49:87:7f:97:68:6c:7f:ca:b9:d0:99: 00:c6:bc:30:18:87:18:52:b6:e8:1c:08:b7:72:b5:c4:37:39: 2b:fd:ee:28:98:a5:a2:3e:c7:91:ee:e1:88:85:62:b8:90:6e: 49:9b:6a:cc:53:9c:e1:be:3a:66:a3:c9:51:62:c6:45:e1:d2: 0b:e0:af:47:9e:00:67:fb:6f:9f:ac:51:60:dc:fd:8a:3f:67: 6d:c4:7d:6f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUQ892g/v5f15fMshlustWUvBcAWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlCREQxMDkyQUNFOUExMEU0Qzk0RkFEOEIyREEzRERD Q0Y2NEE5RTAeFw0yNjA5MjIwMDU3MDFaFw0yNjA5MjMwNDM0MDFaMDMxMTAvBgNV BAMTKENCNTk5NEIxMzdCREZGMzE1NEQ5RUI1MzdCMjM3N0Q5QUExQTM0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbj/+jcVW0N9kod6yeCTjz5qyz kL/vk3LT61ii7zvm0zxP+bU19uDKNeXuphvWV3nWGm7+6UuDcJPb5cLNuvnZilBh KKe5iOvISAgOZnHLKZ79XG/cUNyYjHkRCHIgUJmj/BFfFSnONJE3U5Z2UdjXZ4vq cIR2O8YdZDw1OdRFuL/2KV7HQQofxcfWMvNzCJEDKwo2SQ0Ilt8nZhIzrZvnF4or RZDq1tveqyVdBlzHDrWcHhO537cG8WJpsfhbIt9IgDefGYeiSQmQudbiW/i8Hy16 fc87ZgDTZDTdQ3dW+ehJBclBs/VxYAeA3kyuPBwJXrtmAs1Nmiade+IKGMjHAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUy1mUsTe9/zFU2etTeyN32aoaNFcwHwYDVR0j BBgwFoAUab3RCSrOmhDkyU+tiy2j3cz2Sp4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzMzOWJiNGNmZjNiNDQ3MzI4NTRkOWFlZmYxMDY3ZDkxLzAv NjlCREQxMDkyQUNFOUExMEU0Qzk0RkFEOEIyREEzRERDQ0Y2NEE5RS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82OUJERDEwOTJBQ0U5QTEwRTRDOTRGQUQ4QjJEQTNE RENDRjY0QTlFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzMzOWJi NGNmZjNiNDQ3MzI4NTRkOWFlZmYxMDY3ZDkxLzAvNjlCREQxMDkyQUNFOUExMEU0 Qzk0RkFEOEIyREEzRERDQ0Y2NEE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAdGyQDhtCNWB21RiPvA GVWa3P/h67jiKijAONYfG7kLmv/lDCZ/UDowfHRLj9M0x5K8iZitfComVyry9zTS qhhQywuB4kjIPMDUFmvuQ8W40nciYWwb42UUtmF6Brke4pk+lHyVkkcfRFoyVhcG 0T/r7IHefqYQnnoTfLpn15fPsUixaBaII/ZoevthVneXitHP2O88WUsVDSySDj+m dG2WzWGkdrwcL0ZJh3+XaGx/yrnQmQDGvDAYhxhStugcCLdytcQ3OSv97iiYpaI+ x5Hu4YiFYriQbkmbasxTnOG+OmajyVFixkXh0gvgr0eeAGf7b5+sUWDc/Yo/Z23E fW8= -----END CERTIFICATE-----Generated at Tue Sep 22 19:49:52 2026 by rpki-client