$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft File: 9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft (raw, json) Hash identifier: Xh96d2mGOfIOvZsXHzVwYU6xiwofXhgJN4Qy+eJ/Rf4= Subject key identifier: 16:88:DB:EE:BC:68:BA:FA:D6:01:BA:57:EC:55:92:57:F9:F6:31:E7 Authority key identifier: 9C:DF:06:7D:D0:8A:88:DE:7C:64:53:3C:E5:EF:0A:1C:41:47:30:81 Certificate issuer: /CN=9CDF067DD08A88DE7C64533CE5EF0A1C41473081 Certificate serial: 19F0E6383846757CD2E35A89D27172903D70C9BD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft Manifest number: 7A Signing time: Wed 29 Jul 2026 07:20:01 +0000 Manifest this update: Wed 29 Jul 2026 07:15:00 +0000 Manifest next update: Thu 30 Jul 2026 07:40:00 +0000 Files and hashes: 1: 9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl (hash: 6tyXYQhz5tN4HKXtCo8apKbr8GQddW3WYticfxdVP/g=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Jul 2026 01:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f0:e6:38:38:46:75:7c:d2:e3:5a:89:d2:71:72:90:3d:70:c9:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDF067DD08A88DE7C64533CE5EF0A1C41473081 Validity Not Before: Jul 29 07:15:00 2026 GMT Not After : Jul 30 07:40:00 2026 GMT Subject: CN=1688DBEEBC68BAFAD601BA57EC559257F9F631E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e2:bd:4c:68:59:71:b5:82:fe:7c:8a:47:4d: c1:c5:4d:04:b2:fe:54:d7:51:87:8f:c4:4a:fd:44: 16:66:e1:e2:11:a0:93:44:92:cf:46:c0:34:4c:15: b6:9b:de:f7:33:f5:9a:9b:b2:aa:6b:30:e0:76:f4: d9:bf:eb:b1:94:c5:59:25:3f:00:3b:b0:fe:35:34: 47:d9:28:db:7f:cb:31:6d:0e:c5:0c:5a:eb:71:40: 6d:72:3c:a3:60:49:2c:fd:29:7d:a0:56:19:9b:80: 89:0c:7a:79:c8:52:54:67:e3:f6:45:d5:fd:07:2e: 7a:48:4d:e5:44:1e:d0:a9:a9:59:23:a0:bc:26:da: ae:be:25:91:12:82:3f:2c:b2:70:1b:fc:07:b6:01: 8e:e0:bf:cb:8a:75:7d:bb:ad:2b:2a:55:da:a6:bd: 50:aa:de:be:2f:65:22:f6:b4:ad:3d:9c:0e:0c:cf: 4a:7c:f4:55:5c:1f:46:4f:47:ac:1a:8e:75:ed:8a: c1:27:c6:7c:22:04:6f:f9:fa:0b:e5:c8:f1:2e:1c: b4:aa:a3:b8:87:2a:37:25:9d:d8:78:20:55:9e:c5: 44:90:e3:f8:82:a4:ef:f5:34:33:e4:5b:5a:65:26: 73:dc:eb:4c:8e:2c:26:98:f0:c0:ee:44:50:84:08: b7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:88:DB:EE:BC:68:BA:FA:D6:01:BA:57:EC:55:92:57:F9:F6:31:E7 X509v3 Authority Key Identifier: keyid:9C:DF:06:7D:D0:8A:88:DE:7C:64:53:3C:E5:EF:0A:1C:41:47:30:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:8b:78:ad:be:1b:6f:ac:f2:e3:93:18:0a:58:8e:d8:eb:10: c9:86:3c:7a:d0:83:64:fa:91:fc:79:b6:50:09:68:b9:65:bd: c3:24:b8:c2:ab:8c:1f:37:4c:19:f5:41:4c:8f:87:99:28:01: 85:7f:c4:45:f6:86:09:77:c6:46:c8:37:a0:78:04:ff:82:d4: 6e:ea:b1:13:e1:d2:9a:4a:d4:b2:bd:20:6d:aa:de:ea:8e:ff: 44:28:90:01:9b:81:9e:4c:19:b4:26:ad:86:5c:70:0e:75:08: 57:02:19:23:8e:94:2e:dd:29:69:cc:90:d4:03:ce:a1:f0:59: 77:d5:02:76:8e:ab:43:3a:ba:07:e1:19:61:40:2c:b7:f3:a7: d4:4a:67:2f:a9:ca:34:e1:f0:7a:49:12:c5:b3:73:e6:d2:b7: 3f:cd:3b:a7:6a:bc:0d:d3:29:3a:08:3d:54:0a:7a:dd:c0:cf: a8:9e:b0:e2:c7:86:19:15:d1:46:09:dd:18:44:19:1d:f8:cb: 37:80:6c:1b:77:9f:93:4c:cb:59:02:b3:21:34:14:b8:25:f1: 2a:5c:12:15:a4:ff:49:f7:03:73:65:fc:49:d9:49:c2:53:72: 8e:80:64:dd:98:09:63:f1:d0:ab:47:29:18:30:8b:9b:65:10: 2a:d8:38:85 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUGfDmODhGdXzS41qJ0nFykD1wyb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERjA2N0REMDhBODhERTdDNjQ1MzNDRTVFRjBBMUM0 MTQ3MzA4MTAeFw0yNjA3MjkwNzE1MDBaFw0yNjA3MzAwNzQwMDBaMDMxMTAvBgNV BAMTKDE2ODhEQkVFQkM2OEJBRkFENjAxQkE1N0VDNTU5MjU3RjlGNjMxRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP4r1MaFlxtYL+fIpHTcHFTQSy /lTXUYePxEr9RBZm4eIRoJNEks9GwDRMFbab3vcz9ZqbsqprMOB29Nm/67GUxVkl PwA7sP41NEfZKNt/yzFtDsUMWutxQG1yPKNgSSz9KX2gVhmbgIkMennIUlRn4/ZF 1f0HLnpITeVEHtCpqVkjoLwm2q6+JZESgj8ssnAb/Ae2AY7gv8uKdX27rSsqVdqm vVCq3r4vZSL2tK09nA4Mz0p89FVcH0ZPR6wajnXtisEnxnwiBG/5+gvlyPEuHLSq o7iHKjclndh4IFWexUSQ4/iCpO/1NDPkW1plJnPc60yOLCaY8MDuRFCECLdZAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUFojb7rxouvrWAbpX7FWSV/n2MecwHwYDVR0j BBgwFoAUnN8GfdCKiN58ZFM85e8KHEFHMIEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzVjNTUyMmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzIv OUNERjA2N0REMDhBODhERTdDNjQ1MzNDRTVFRjBBMUM0MTQ3MzA4MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85Q0RGMDY3REQwOEE4OERFN0M2NDUzM0NFNUVGMEEx QzQxNDczMDgxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzVjNTUy MmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzIvOUNERjA2N0REMDhBODhERTdD NjQ1MzNDRTVFRjBBMUM0MTQ3MzA4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALqLeK2+G2+s8uOTGApY jtjrEMmGPHrQg2T6kfx5tlAJaLllvcMkuMKrjB83TBn1QUyPh5koAYV/xEX2hgl3 xkbIN6B4BP+C1G7qsRPh0ppK1LK9IG2q3uqO/0QokAGbgZ5MGbQmrYZccA51CFcC GSOOlC7dKWnMkNQDzqHwWXfVAnaOq0M6ugfhGWFALLfzp9RKZy+pyjTh8HpJEsWz c+bStz/NO6dqvA3TKToIPVQKet3Az6iesOLHhhkV0UYJ3RhEGR34yzeAbBt3n5NM y1kCsyE0FLgl8SpcEhWk/0n3A3Nl/EnZScJTco6AZN2YCWPx0KtHKRgwi5tlECrY OIU= -----END CERTIFICATE-----Generated at Wed Jul 29 13:13:51 2026 by rpki-client