$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft File: 1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json) Hash identifier: qJpRRAb43tE5puIWAlyjwnXU1RIzaVdTu3PjTVewegc= Subject key identifier: EE:51:B7:DD:35:AB:26:65:15:5C:7A:09:96:26:27:C9:5E:53:78:86 Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F Certificate issuer: /CN=1D570B984E9C5E382B0A879AA21F6518621F059F Certificate serial: 5F83471259A4F22C8CE684669E840D093398D274 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft Manifest number: 03F2 Signing time: Fri 02 Oct 2026 20:19:40 +0000 Manifest this update: Fri 02 Oct 2026 20:14:40 +0000 Manifest next update: Sat 03 Oct 2026 23:34:40 +0000 Files and hashes: 1: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: 3KY2U553Fx+yf0R67tbVsnEj5CXGvDOuNyBgwbwPd2g=) 2: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: tLThUwSwrPfCypAsdBnMMAhmoYAyEUY8DuOIJQne5ZA=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Oct 2026 23:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:83:47:12:59:a4:f2:2c:8c:e6:84:66:9e:84:0d:09:33:98:d2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F Validity Not Before: Oct 2 20:14:40 2026 GMT Not After : Oct 3 23:34:40 2026 GMT Subject: CN=EE51B7DD35AB2665155C7A09962627C95E537886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:06:ce:70:cb:a4:be:bb:10:76:74:a7:83:94: 2c:26:c0:e7:18:e2:c1:02:91:0b:80:b9:87:1e:5b: e7:5b:2d:3b:a7:79:38:3c:73:3a:a5:2b:8f:e9:b7: 0c:ca:cd:39:e2:56:35:12:c9:6b:09:69:f4:4d:85: af:35:88:db:41:92:48:ce:9a:43:47:09:9c:82:3c: 48:bc:b4:12:3b:8b:3b:c0:6a:bb:6a:e1:17:bd:57: ab:27:e2:05:0d:8f:f7:26:69:5f:e4:d5:11:eb:e0: 2c:15:1d:a3:fc:b4:33:fe:36:ba:25:73:1c:d2:dd: 22:cf:96:d5:62:4d:39:b8:80:06:17:7d:58:4d:73: d5:95:5b:98:c6:c9:90:e9:1a:d5:17:e6:5a:29:14: b6:63:82:b4:df:be:b8:b7:ac:0e:7c:93:6d:00:58: 03:a0:da:2c:61:f8:50:44:fa:dd:ce:88:2e:ca:b5: c9:5c:c4:ee:73:15:c9:a7:e3:38:a6:5a:cc:3c:fb: 0c:c5:25:e5:5c:ee:3d:3e:80:2c:db:b3:25:4e:cf: 2a:ab:d0:36:50:41:4c:24:94:f3:62:1a:23:d5:2a: d0:7e:c4:5d:11:d9:cc:d9:e4:f3:ce:c2:8f:0e:c2: 97:49:d8:aa:af:fd:62:7a:f8:08:53:54:d4:1f:c8: d9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:51:B7:DD:35:AB:26:65:15:5C:7A:09:96:26:27:C9:5E:53:78:86 X509v3 Authority Key Identifier: keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:92:52:d1:60:7e:bd:1a:ad:31:98:e9:4e:b9:82:11:89:55: 15:c8:d4:a1:3e:61:c1:67:e4:f9:61:bb:e9:3e:f8:4d:94:19: 24:fd:89:95:7e:d7:97:d1:bb:a7:d5:1b:b1:55:35:f4:0e:f7: 2a:22:ff:ad:3f:62:80:ae:c1:e0:d2:bf:c7:0e:b7:2b:50:9b: f3:ce:a1:8d:0d:3c:6c:65:a3:4b:e3:9c:2b:00:db:70:f9:e6: 2e:fe:9b:bb:37:49:91:79:f6:e8:28:5d:23:36:b3:30:51:33: dc:0d:e7:86:42:6b:bf:ba:f7:00:28:51:61:8b:86:ae:1a:75: 95:99:4a:f7:06:45:f9:99:16:f1:5b:96:94:2c:17:e4:1f:8e: 0d:88:38:eb:b6:5d:db:ce:24:4a:41:8e:d8:81:d3:9d:88:29: 02:6d:42:e1:3d:5c:08:7d:25:19:a7:a1:04:de:c5:c6:05:ec: 00:bf:1c:f6:d4:af:c5:25:c5:eb:f5:9a:9e:10:4a:f6:b0:00: 56:ad:e4:50:23:e5:f4:a1:b5:53:c3:a0:07:da:0e:98:e6:c5: 78:2a:06:be:02:56:c2:e0:81:36:e5:2b:c9:4b:bc:95:a1:c1: 88:f9:48:b5:ae:38:76:4f:e7:55:46:39:65:ed:f4:d5:7c:91: 65:4c:7e:36 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUX4NHElmk8iyM5oRmnoQNCTOY0nQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2 MjFGMDU5RjAeFw0yNjEwMDIyMDE0NDBaFw0yNjEwMDMyMzM0NDBaMDMxMTAvBgNV BAMTKEVFNTFCN0REMzVBQjI2NjUxNTVDN0EwOTk2MjYyN0M5NUU1Mzc4ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzBs5wy6S+uxB2dKeDlCwmwOcY 4sECkQuAuYceW+dbLTuneTg8czqlK4/ptwzKzTniVjUSyWsJafRNha81iNtBkkjO mkNHCZyCPEi8tBI7izvAartq4Re9V6sn4gUNj/cmaV/k1RHr4CwVHaP8tDP+Nrol cxzS3SLPltViTTm4gAYXfVhNc9WVW5jGyZDpGtUX5lopFLZjgrTfvri3rA58k20A WAOg2ixh+FBE+t3OiC7KtclcxO5zFcmn4zimWsw8+wzFJeVc7j0+gCzbsyVOzyqr 0DZQQUwklPNiGiPVKtB+xF0R2czZ5PPOwo8OwpdJ2Kqv/WJ6+AhTVNQfyNlVAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU7lG33TWrJmUVXHoJliYnyV5TeIYwHwYDVR0j BBgwFoAUHVcLmE6cXjgrCoeaoh9lGGIfBZ8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAv MUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRDU3MEI5ODRFOUM1RTM4MkIwQTg3OUFBMjFGNjUx ODYyMUYwNTlGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzRkNWMz MDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAvMUQ1NzBCOTg0RTlDNUUzODJC MEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFCSUtFgfr0arTGY6U65 ghGJVRXI1KE+YcFn5Plhu+k++E2UGST9iZV+15fRu6fVG7FVNfQO9yoi/60/YoCu weDSv8cOtytQm/POoY0NPGxlo0vjnCsA23D55i7+m7s3SZF59ugoXSM2szBRM9wN 54ZCa7+69wAoUWGLhq4adZWZSvcGRfmZFvFblpQsF+Qfjg2IOOu2XdvOJEpBjtiB 052IKQJtQuE9XAh9JRmnoQTexcYF7AC/HPbUr8Ulxev1mp4QSvawAFat5FAj5fSh tVPDoAfaDpjmxXgqBr4CVsLggTblK8lLvJWhwYj5SLWuOHZP51VGOWXt9NV8kWVM fjY= -----END CERTIFICATE-----Generated at Sat Oct 3 14:29:30 2026 by rpki-client