$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft File: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft (raw, json) Hash identifier: L8bw4ker1wSJODX0WEBmUaBcMrFNEKX9vGuZ/416tco= Subject key identifier: C3:DF:2B:A5:1A:8C:BB:F1:6C:0C:D9:A7:F6:44:89:D7:7F:30:3A:A7 Authority key identifier: 69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E Certificate issuer: /CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E Certificate serial: 2256A69D6D1B92510F697ED7961BD4CF56999894 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft Manifest number: 0323 Signing time: Fri 17 Apr 2026 17:31:36 +0000 Manifest this update: Fri 17 Apr 2026 17:26:33 +0000 Manifest next update: Sat 18 Apr 2026 19:53:33 +0000 Files and hashes: 1: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl (hash: R+B3wQ34cz8XliX2UD5CNO8/oQvlchKQJc1eml6Ggys=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:56:a6:9d:6d:1b:92:51:0f:69:7e:d7:96:1b:d4:cf:56:99:98:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E Validity Not Before: Apr 17 17:26:33 2026 GMT Not After : Apr 18 19:53:33 2026 GMT Subject: CN=C3DF2BA51A8CBBF16C0CD9A7F64489D77F303AA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:29:bc:80:5f:6f:4e:84:68:c3:fb:b0:97:a8: 5b:0b:40:a6:56:11:65:10:b8:14:21:75:b7:a5:b4: f1:bc:88:7e:0d:68:0d:b3:e7:31:4c:e8:90:c5:d6: f8:27:b6:0f:7d:a3:ba:57:5c:1c:dd:b0:71:8e:22: fd:fe:44:b0:57:f1:c9:24:0f:f8:30:b6:de:bc:17: 34:28:05:ac:9b:d7:e2:c3:4e:4f:64:43:86:5e:98: 48:5d:58:05:92:f6:9b:1d:76:7b:f1:4e:82:f1:1d: 91:74:3a:98:cf:e2:39:72:66:2a:bc:3d:ea:2e:97: 09:46:c2:e0:c9:8b:15:57:3e:f8:2a:9f:d9:de:99: 0a:8f:ea:01:7c:ef:2c:92:95:03:7b:a8:87:cc:30: b6:df:da:fb:16:97:72:6b:6e:e8:70:83:b4:0b:8f: 4a:c8:bc:df:71:7a:ed:30:18:5d:b2:c6:60:b0:40: a2:f7:89:7c:94:c5:c6:2e:fc:59:df:db:72:61:5c: f3:43:b8:d6:53:1e:2f:db:0b:38:42:6b:bd:46:ea: 5d:f6:85:0c:8d:3d:3b:ec:c0:b4:bf:44:47:3e:b2: da:71:96:78:5e:53:11:52:42:1d:50:31:ba:56:9a: 47:26:11:1c:48:76:14:1b:b0:10:d5:36:5c:d1:7d: 50:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DF:2B:A5:1A:8C:BB:F1:6C:0C:D9:A7:F6:44:89:D7:7F:30:3A:A7 X509v3 Authority Key Identifier: keyid:69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:d6:40:96:0c:98:e1:bd:81:95:29:52:16:6d:28:7d:68:d0: fc:d7:81:9a:5a:24:c4:d0:1a:28:1b:07:cb:3d:a6:43:02:5e: a3:a9:55:eb:d0:51:23:4d:82:f4:4c:bf:c7:78:af:e0:b3:7a: fc:84:1d:c2:6b:c4:f2:4f:5b:28:39:14:94:e7:6c:97:b3:d9: d0:22:97:18:0c:2c:34:6f:f9:cb:c1:34:15:7d:78:83:55:37: 67:10:f4:18:ba:fb:26:d3:a6:44:72:bd:bb:65:e3:a7:be:c4: 51:be:d2:f0:5b:5f:95:f4:1b:1d:d6:80:b7:18:62:95:88:99: 44:3e:1a:27:0d:13:41:ea:06:a2:fb:fb:47:32:69:d5:be:9a: f3:7b:23:c6:a3:c0:1b:f2:50:1a:59:66:94:60:93:06:5f:ba: f6:aa:da:ba:0e:6e:a9:6f:41:e6:a8:c6:8a:97:de:aa:57:25: 1d:57:18:62:be:21:59:d8:76:01:9c:dd:ff:65:5f:57:24:f2: eb:66:b2:25:fa:90:66:99:58:18:ce:fa:36:dc:09:ab:4a:1f: bb:b0:96:d9:5b:7a:8b:ee:80:c5:c8:c9:9f:6e:d9:5c:79:2e: 59:74:b8:c4:b1:fd:07:4f:1f:ac:7a:87:e0:df:c4:02:ab:a8: 41:94:95:ba -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUIlamnW0bklEPaX7XlhvUz1aZmJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlCREQxMDkyQUNFOUExMEU0Qzk0RkFEOEIyREEzRERD Q0Y2NEE5RTAeFw0yNjA0MTcxNzI2MzNaFw0yNjA0MTgxOTUzMzNaMDMxMTAvBgNV BAMTKEMzREYyQkE1MUE4Q0JCRjE2QzBDRDlBN0Y2NDQ4OUQ3N0YzMDNBQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOKbyAX29OhGjD+7CXqFsLQKZW EWUQuBQhdbeltPG8iH4NaA2z5zFM6JDF1vgntg99o7pXXBzdsHGOIv3+RLBX8ckk D/gwtt68FzQoBayb1+LDTk9kQ4ZemEhdWAWS9psddnvxToLxHZF0OpjP4jlyZiq8 PeoulwlGwuDJixVXPvgqn9nemQqP6gF87yySlQN7qIfMMLbf2vsWl3Jrbuhwg7QL j0rIvN9xeu0wGF2yxmCwQKL3iXyUxcYu/Fnf23JhXPNDuNZTHi/bCzhCa71G6l32 hQyNPTvswLS/REc+stpxlnheUxFSQh1QMbpWmkcmERxIdhQbsBDVNlzRfVCZAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUw98rpRqMu/FsDNmn9kSJ138wOqcwHwYDVR0j BBgwFoAUab3RCSrOmhDkyU+tiy2j3cz2Sp4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzMzOWJiNGNmZjNiNDQ3MzI4NTRkOWFlZmYxMDY3ZDkxLzAv NjlCREQxMDkyQUNFOUExMEU0Qzk0RkFEOEIyREEzRERDQ0Y2NEE5RS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82OUJERDEwOTJBQ0U5QTEwRTRDOTRGQUQ4QjJEQTNE RENDRjY0QTlFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzMzOWJi NGNmZjNiNDQ3MzI4NTRkOWFlZmYxMDY3ZDkxLzAvNjlCREQxMDkyQUNFOUExMEU0 Qzk0RkFEOEIyREEzRERDQ0Y2NEE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAHWQJYMmOG9gZUpUhZt KH1o0PzXgZpaJMTQGigbB8s9pkMCXqOpVevQUSNNgvRMv8d4r+CzevyEHcJrxPJP Wyg5FJTnbJez2dAilxgMLDRv+cvBNBV9eINVN2cQ9Bi6+ybTpkRyvbtl46e+xFG+ 0vBbX5X0Gx3WgLcYYpWImUQ+GicNE0HqBqL7+0cyadW+mvN7I8ajwBvyUBpZZpRg kwZfuvaq2roObqlvQeaoxoqX3qpXJR1XGGK+IVnYdgGc3f9lX1ck8utmsiX6kGaZ WBjO+jbcCatKH7uwltlbeovugMXIyZ9u2Vx5Lll0uMSx/QdPH6x6h+DfxAKrqEGU lbo= -----END CERTIFICATE-----Generated at Fri Apr 17 22:43:48 2026 by rpki-client