$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft File: 1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json) Hash identifier: ngvHbQlX8h8Ln2ftPzzxucRsGztMRzJksbqwN/iISHs= Subject key identifier: 23:CB:AB:96:FA:F7:76:F5:7E:38:B0:A4:1D:0A:67:58:63:5A:47:DD Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F Certificate issuer: /CN=1D570B984E9C5E382B0A879AA21F6518621F059F Certificate serial: 293C303D7DBBEC005972113260EF6D3D485D8FF2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft Manifest number: 0324 Signing time: Fri 17 Apr 2026 21:20:02 +0000 Manifest this update: Fri 17 Apr 2026 21:14:59 +0000 Manifest next update: Sun 19 Apr 2026 00:46:59 +0000 Files and hashes: 1: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: SZhn4FgWqY4qggdiI6TrYJUIT99auk+OFjrgNv4awjA=) 2: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: Ju8K/uKfVndrUxmdjlHAMbNiwQPdVWM2J2LlsVsmOm8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:3c:30:3d:7d:bb:ec:00:59:72:11:32:60:ef:6d:3d:48:5d:8f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F Validity Not Before: Apr 17 21:14:59 2026 GMT Not After : Apr 19 00:46:59 2026 GMT Subject: CN=23CBAB96FAF776F57E38B0A41D0A6758635A47DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4d:48:e4:7e:ad:ee:c1:57:f7:e3:44:69:a0: 01:58:69:a8:07:1d:4d:97:c9:65:39:f4:6d:a7:21: 42:10:95:08:c3:f8:b9:98:d4:0b:29:9a:73:30:79: ee:a3:bb:50:e4:f8:b9:85:b7:45:1c:28:ac:6e:fd: f3:84:ed:9e:89:dc:49:7f:40:32:34:7f:25:f4:3c: 2a:ec:a7:35:de:a9:4c:8a:d3:a9:e8:9a:fd:24:8b: 3e:15:98:49:42:bd:64:33:24:ca:fe:bf:42:6d:21: b4:22:57:84:0c:65:42:5a:d5:7d:c9:a8:96:79:7f: 30:92:0c:d4:e0:bc:cc:11:93:1e:82:28:30:83:03: 3e:38:40:85:46:c1:0b:a7:02:d7:50:28:12:fd:21: 9a:1b:82:3a:da:7f:3b:13:91:68:64:39:36:f1:e8: 20:52:ba:9c:a8:f9:b0:6e:6d:21:ef:95:5f:38:83: 72:1e:58:92:22:41:5a:11:22:dc:3e:46:d3:4f:e2: f8:5a:7a:a1:72:57:5e:94:f0:64:83:0c:c7:b1:55: a5:40:f2:3d:b0:55:95:db:46:cc:9d:17:8f:c3:94: a0:12:b1:b0:67:d9:b1:cb:ae:e4:0e:a1:cf:69:70: 78:65:44:43:e2:94:ff:3c:8c:4d:42:e3:c7:3b:d7: 36:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CB:AB:96:FA:F7:76:F5:7E:38:B0:A4:1D:0A:67:58:63:5A:47:DD X509v3 Authority Key Identifier: keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:80:c2:61:f1:da:01:78:7d:15:a1:2f:70:09:a6:23:31:c3: 18:92:57:c2:1d:71:4f:7f:f7:0b:44:42:79:43:3f:64:2b:44: e3:de:ee:50:09:53:63:27:24:c0:e1:6a:0b:b9:49:b3:ab:bf: 1c:2b:62:e2:10:6d:1a:03:42:b2:79:4e:0b:f6:a5:ab:6a:e7: 40:22:f8:7a:eb:30:a8:01:4b:c8:dd:1c:01:e6:88:4f:80:66: ba:25:34:cd:18:df:43:d1:15:aa:05:d9:55:c5:27:b3:ec:cd: 65:ce:77:6b:79:b0:28:27:20:fc:ce:b3:d5:15:91:8a:71:7a: 90:e7:e3:7c:7b:7e:4f:ff:34:25:2a:f5:3c:22:9d:74:c5:73: 5e:20:44:c0:44:24:43:d4:b6:50:44:44:ed:24:05:e6:d0:4b: 89:af:29:5a:0f:2f:82:c8:4e:cd:c7:6c:24:0b:be:17:a3:a7: 6f:dd:b7:09:09:af:08:00:00:83:b1:26:b0:08:af:d2:44:46: 71:67:9e:b4:36:5c:d7:4e:68:23:c9:ea:99:5f:bd:52:ba:b8: 83:b2:cc:22:4c:32:ce:4c:b8:f0:ab:6e:9a:0d:09:bc:3f:8c: ac:76:2b:56:2c:b1:ac:f8:8c:6c:cb:df:a6:82:7d:66:f0:1c: 13:fd:52:a0 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUKTwwPX277ABZchEyYO9tPUhdj/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2 MjFGMDU5RjAeFw0yNjA0MTcyMTE0NTlaFw0yNjA0MTkwMDQ2NTlaMDMxMTAvBgNV BAMTKDIzQ0JBQjk2RkFGNzc2RjU3RTM4QjBBNDFEMEE2NzU4NjM1QTQ3REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGTUjkfq3uwVf340RpoAFYaagH HU2XyWU59G2nIUIQlQjD+LmY1AspmnMwee6ju1Dk+LmFt0UcKKxu/fOE7Z6J3El/ QDI0fyX0PCrspzXeqUyK06nomv0kiz4VmElCvWQzJMr+v0JtIbQiV4QMZUJa1X3J qJZ5fzCSDNTgvMwRkx6CKDCDAz44QIVGwQunAtdQKBL9IZobgjrafzsTkWhkOTbx 6CBSupyo+bBubSHvlV84g3IeWJIiQVoRItw+RtNP4vhaeqFyV16U8GSDDMexVaVA 8j2wVZXbRsydF4/DlKASsbBn2bHLruQOoc9pcHhlREPilP88jE1C48c71zZLAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUI8urlvr3dvV+OLCkHQpnWGNaR90wHwYDVR0j BBgwFoAUHVcLmE6cXjgrCoeaoh9lGGIfBZ8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAv MUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRDU3MEI5ODRFOUM1RTM4MkIwQTg3OUFBMjFGNjUx ODYyMUYwNTlGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzRkNWMz MDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAvMUQ1NzBCOTg0RTlDNUUzODJC MEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJ2AwmHx2gF4fRWhL3AJ piMxwxiSV8IdcU9/9wtEQnlDP2QrROPe7lAJU2MnJMDhagu5SbOrvxwrYuIQbRoD QrJ5Tgv2patq50Ai+HrrMKgBS8jdHAHmiE+AZrolNM0Y30PRFaoF2VXFJ7PszWXO d2t5sCgnIPzOs9UVkYpxepDn43x7fk//NCUq9TwinXTFc14gRMBEJEPUtlBERO0k BebQS4mvKVoPL4LITs3HbCQLvhejp2/dtwkJrwgAAIOxJrAIr9JERnFnnrQ2XNdO aCPJ6plfvVK6uIOyzCJMMs5MuPCrbpoNCbw/jKx2K1Yssaz4jGzL36aCfWbwHBP9 UqA= -----END CERTIFICATE-----Generated at Sat Apr 18 00:03:26 2026 by rpki-client