$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft File: BBED14E9793905EC1EA5CE10AA03C497D737B115.mft (raw, json) Hash identifier: GZd+bUy+tntdnc78agE/P21BUjfs1FXmaou6/q9khdY= Subject key identifier: 54:AC:B4:37:68:21:DF:B4:00:42:FC:79:C3:B9:6D:79:70:98:EB:82 Authority key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 Certificate issuer: /CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Certificate serial: 5859AF2E51CEB88DF226C25813A45A2271F1B004 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft Manifest number: 031B Signing time: Fri 17 Apr 2026 19:55:00 +0000 Manifest this update: Fri 17 Apr 2026 19:49:58 +0000 Manifest next update: Sat 18 Apr 2026 22:55:58 +0000 Files and hashes: 1: BBED14E9793905EC1EA5CE10AA03C497D737B115.crl (hash: byZcq+dsWWYIVpnEtHju1NKwz7Qaa/AVuOAkyVqyEn8=) 2: 326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (hash: MpewGrhFOYc7jc70q6ubpOkEuQ0IJ7Wp+DrSPfwP1vQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 21:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:59:af:2e:51:ce:b8:8d:f2:26:c2:58:13:a4:5a:22:71:f1:b0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Validity Not Before: Apr 17 19:49:58 2026 GMT Not After : Apr 18 22:55:58 2026 GMT Subject: CN=54ACB4376821DFB40042FC79C3B96D797098EB82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a9:9a:52:a9:93:c5:c7:8f:41:46:5d:dc:e3: 21:2b:cb:c5:b8:d9:18:31:fe:0f:13:5b:da:63:36: 11:38:72:fb:aa:a9:18:7d:e6:a6:c1:f7:1e:68:cd: 89:95:25:0b:4a:d5:dd:0d:ec:3f:4e:62:c4:7d:41: 5a:5b:13:0a:93:0b:15:6f:1a:9a:7f:df:21:25:1a: 04:ac:cc:4d:ec:e3:48:5e:5a:c1:7e:05:8e:4e:51: 23:90:c5:75:77:85:89:d1:c1:9d:e2:e5:4e:94:fd: 6f:c4:b2:c6:62:d7:b8:97:59:c0:cc:8a:2c:7e:73: 2e:21:4f:53:99:76:0d:17:bd:fb:68:26:87:82:89: 8c:fc:8d:59:25:6f:b8:5a:d1:5c:81:17:1e:ed:74: ea:40:90:04:fb:8c:bf:98:e4:ba:c8:57:3a:28:6c: 64:40:13:94:cb:a7:a5:ec:5e:9a:1c:5b:e1:4b:00: fd:9d:45:8c:b3:e4:69:aa:9d:a3:7d:5b:46:59:cf: 82:56:e1:8e:a4:c8:d2:a2:58:06:61:f2:2e:c9:4e: 72:26:9a:23:18:86:9e:c6:33:d4:81:8d:18:70:b7: 73:cc:84:db:22:a0:40:83:ac:c1:f7:18:a8:a7:e4: 02:17:75:0e:0b:7f:32:45:1e:06:15:2c:d5:00:4b: be:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AC:B4:37:68:21:DF:B4:00:42:FC:79:C3:B9:6D:79:70:98:EB:82 X509v3 Authority Key Identifier: keyid:BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:4f:de:36:16:f4:30:58:a3:5a:3e:06:ff:dc:2c:10:32:6d: f7:39:09:f5:2b:25:f8:41:dc:2b:51:19:0a:3c:e5:9c:63:f6: 82:79:ae:74:fc:46:1e:43:80:a3:da:15:f3:92:6b:74:a9:1c: 38:0b:61:d7:b2:d7:da:27:cc:d3:98:a3:31:f1:f7:64:0d:7e: e2:cf:01:d9:67:d8:07:82:28:64:47:bb:9e:2e:00:42:77:fc: 7d:53:16:f9:30:c3:c9:37:9e:9d:8e:d7:80:50:fe:7b:eb:49: f9:cf:f3:e5:50:f8:80:1e:a6:c7:86:95:b9:bb:6a:41:fa:f7: 1a:f7:5e:d3:26:b8:ce:95:06:89:bb:35:1c:fc:8d:ce:a8:99: 8f:39:1f:ad:88:0b:34:f1:ca:e2:0e:43:b2:97:34:f5:3d:37: a5:81:9c:0e:d8:b7:61:a6:be:f1:71:70:84:66:10:7d:4c:d3: fa:c8:0e:de:14:b6:fb:e9:dc:5d:9f:6d:77:0d:7d:b4:58:02: a3:98:5f:71:22:bc:05:69:8c:bc:cb:9a:7e:d2:6d:96:22:d2: 4c:a3:a6:26:68:d0:90:7b:6f:c7:ab:ce:2c:74:ab:a5:66:70: fd:db:28:13:6c:07:c2:4f:15:a4:57:3f:6c:7f:ad:9e:c0:aa: 7b:01:a8:78 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUWFmvLlHOuI3yJsJYE6RaInHxsAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdE NzM3QjExNTAeFw0yNjA0MTcxOTQ5NThaFw0yNjA0MTgyMjU1NThaMDMxMTAvBgNV BAMTKDU0QUNCNDM3NjgyMURGQjQwMDQyRkM3OUMzQjk2RDc5NzA5OEVCODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAqZpSqZPFx49BRl3c4yEry8W4 2Rgx/g8TW9pjNhE4cvuqqRh95qbB9x5ozYmVJQtK1d0N7D9OYsR9QVpbEwqTCxVv Gpp/3yElGgSszE3s40heWsF+BY5OUSOQxXV3hYnRwZ3i5U6U/W/EssZi17iXWcDM iix+cy4hT1OZdg0XvftoJoeCiYz8jVklb7ha0VyBFx7tdOpAkAT7jL+Y5LrIVzoo bGRAE5TLp6XsXpocW+FLAP2dRYyz5GmqnaN9W0ZZz4JW4Y6kyNKiWAZh8i7JTnIm miMYhp7GM9SBjRhwt3PMhNsioECDrMH3GKin5AIXdQ4LfzJFHgYVLNUAS74lAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUVKy0N2gh37QAQvx5w7lteXCY64IwHwYDVR0j BBgwFoAUu+0U6Xk5Bewepc4QqgPEl9c3sRUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNhOTdmNzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAv QkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdENzM3QjExNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CQkVEMTRFOTc5MzkwNUVDMUVBNUNFMTBBQTAzQzQ5 N0Q3MzdCMTE1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNhOTdm NzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAvQkJFRDE0RTk3OTM5MDVFQzFF QTVDRTEwQUEwM0M0OTdENzM3QjExNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAJP3jYW9DBYo1o+Bv/c LBAybfc5CfUrJfhB3CtRGQo85Zxj9oJ5rnT8Rh5DgKPaFfOSa3SpHDgLYdey19on zNOYozHx92QNfuLPAdln2AeCKGRHu54uAEJ3/H1TFvkww8k3np2O14BQ/nvrSfnP 8+VQ+IAepseGlbm7akH69xr3XtMmuM6VBom7NRz8jc6omY85H62ICzTxyuIOQ7KX NPU9N6WBnA7Yt2GmvvFxcIRmEH1M0/rIDt4Utvvp3F2fbXcNfbRYAqOYX3EivAVp jLzLmn7SbZYi0kyjpiZo0JB7b8erzix0q6VmcP3bKBNsB8JPFaRXP2x/rZ7AqnsB qHg= -----END CERTIFICATE-----Generated at Sat Apr 18 03:08:39 2026 by rpki-client