$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft File: 9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft (raw, json) Hash identifier: 8udTYSbUGoTiaR20NhgU2m+7EnqNyld7902nCE9a0co= Subject key identifier: FD:90:26:00:6D:35:A5:F1:B0:6F:86:5E:89:BF:70:80:0C:C5:B3:D9 Authority key identifier: 9C:DF:06:7D:D0:8A:88:DE:7C:64:53:3C:E5:EF:0A:1C:41:47:30:81 Certificate issuer: /CN=9CDF067DD08A88DE7C64533CE5EF0A1C41473081 Certificate serial: 59EA5EF944A653E6FCC2D0C8F13A882892DD42C1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft Manifest number: C9 Signing time: Sat 10 Oct 2026 02:31:01 +0000 Manifest this update: Sat 10 Oct 2026 02:25:59 +0000 Manifest next update: Sun 11 Oct 2026 04:23:59 +0000 Files and hashes: 1: 9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl (hash: 3yS+OA84R6rCTGSgPRzxDgB0GIPDgBTCTwoMh3TgOyI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Oct 2026 04:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ea:5e:f9:44:a6:53:e6:fc:c2:d0:c8:f1:3a:88:28:92:dd:42:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDF067DD08A88DE7C64533CE5EF0A1C41473081 Validity Not Before: Oct 10 02:25:59 2026 GMT Not After : Oct 11 04:23:59 2026 GMT Subject: CN=FD9026006D35A5F1B06F865E89BF70800CC5B3D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:6a:ba:62:b0:28:28:9b:bf:d4:dc:27:2d: 41:6e:05:84:d5:d6:74:d0:79:ba:c4:1e:e3:93:79: 50:eb:65:28:65:a3:b5:a0:e8:0e:ce:54:ee:96:4f: 93:82:9c:28:37:3d:a4:43:7e:59:99:60:ac:90:43: 66:cd:26:37:9e:67:ad:0d:c4:8d:4f:71:b1:23:f4: a0:84:40:05:2a:74:db:c7:ee:cf:54:40:17:3e:16: 07:7c:1c:69:ee:25:b5:d6:0a:ec:ad:f2:4a:5a:92: ee:85:85:10:a5:fc:76:4f:54:cd:9d:bf:a6:d7:e0: 17:e9:db:79:18:50:9f:bd:3f:2f:42:2e:a1:59:bb: 05:a7:ac:0a:69:07:46:04:a2:e5:73:70:5c:b7:a2: c0:a1:eb:9a:41:2a:2b:1e:9f:28:c9:26:81:d5:d5: fa:03:6f:fa:13:c2:e2:ef:29:4b:88:f7:a4:5b:de: 81:14:e4:b1:ea:a3:68:7f:9f:29:f9:68:e1:5f:a4: bd:96:37:18:fd:d9:91:a3:06:72:6c:93:6e:82:a8: 60:2e:c6:e6:1d:98:f3:e2:ff:c1:8d:79:68:ce:e6: ef:eb:68:57:2e:a8:b7:c0:fa:fb:dd:d5:46:24:44: 4c:83:ed:91:aa:c7:06:15:96:2d:7e:f5:d2:63:2c: 36:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:90:26:00:6D:35:A5:F1:B0:6F:86:5E:89:BF:70:80:0C:C5:B3:D9 X509v3 Authority Key Identifier: keyid:9C:DF:06:7D:D0:8A:88:DE:7C:64:53:3C:E5:EF:0A:1C:41:47:30:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/2/9CDF067DD08A88DE7C64533CE5EF0A1C41473081.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ae:c6:d4:64:14:b6:b7:06:37:4b:2b:ad:e7:12:8d:e9:2a: 6b:46:d6:d9:b2:e0:46:fd:d8:40:40:2b:e8:4a:5e:58:50:64: 4d:61:8b:dd:0c:60:23:ba:a4:ad:bf:18:47:9d:d4:1e:17:c0: 14:78:c3:21:57:eb:7c:a3:2b:f6:98:26:30:a8:20:70:ec:16: 1c:51:c0:3b:4c:43:ee:10:a2:b3:40:d4:a5:2d:a9:a1:0e:62: 34:b8:67:1b:e0:41:00:80:ae:d3:5e:48:f4:24:f1:32:d4:b6: 28:98:32:84:53:f0:d7:f9:f9:cb:bd:a0:fc:76:55:d5:cc:0d: 04:a0:5a:24:92:b3:9f:66:e8:f3:14:81:fb:a7:d5:ad:2f:8e: 0c:c6:ef:b7:52:ec:54:6e:2d:0d:0d:93:22:7c:73:f6:6d:79: eb:20:a3:30:9b:e2:40:4a:0e:06:e3:77:4d:6e:3b:42:78:e4: 03:69:34:23:7b:81:b0:06:6d:0e:90:21:23:7f:8a:88:d5:40: 74:e4:31:93:e8:8f:09:be:5a:36:1f:0d:bf:5c:0f:de:13:53: 4a:d1:6f:39:48:8d:1d:6f:e6:39:14:1d:5b:45:0d:64:a0:6b: c1:34:13:de:e3:97:e5:f8:8e:c5:1d:2d:8f:2f:41:18:07:39: 0f:4f:1a:cb -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUWepe+USmU+b8wtDI8TqIKJLdQsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERjA2N0REMDhBODhERTdDNjQ1MzNDRTVFRjBBMUM0 MTQ3MzA4MTAeFw0yNjEwMTAwMjI1NTlaFw0yNjEwMTEwNDIzNTlaMDMxMTAvBgNV BAMTKEZEOTAyNjAwNkQzNUE1RjFCMDZGODY1RTg5QkY3MDgwMENDNUIzRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7V2q6YrAoKJu/1NwnLUFuBYTV 1nTQebrEHuOTeVDrZShlo7Wg6A7OVO6WT5OCnCg3PaRDflmZYKyQQ2bNJjeeZ60N xI1PcbEj9KCEQAUqdNvH7s9UQBc+Fgd8HGnuJbXWCuyt8kpaku6FhRCl/HZPVM2d v6bX4Bfp23kYUJ+9Py9CLqFZuwWnrAppB0YEouVzcFy3osCh65pBKisenyjJJoHV 1foDb/oTwuLvKUuI96Rb3oEU5LHqo2h/nyn5aOFfpL2WNxj92ZGjBnJsk26CqGAu xuYdmPPi/8GNeWjO5u/raFcuqLfA+vvd1UYkREyD7ZGqxwYVli1+9dJjLDa1AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU/ZAmAG01pfGwb4Zeib9wgAzFs9kwHwYDVR0j BBgwFoAUnN8GfdCKiN58ZFM85e8KHEFHMIEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzVjNTUyMmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzIv OUNERjA2N0REMDhBODhERTdDNjQ1MzNDRTVFRjBBMUM0MTQ3MzA4MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85Q0RGMDY3REQwOEE4OERFN0M2NDUzM0NFNUVGMEEx QzQxNDczMDgxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzVjNTUy MmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzIvOUNERjA2N0REMDhBODhERTdD NjQ1MzNDRTVFRjBBMUM0MTQ3MzA4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJ+uxtRkFLa3BjdLK63n Eo3pKmtG1tmy4Eb92EBAK+hKXlhQZE1hi90MYCO6pK2/GEed1B4XwBR4wyFX63yj K/aYJjCoIHDsFhxRwDtMQ+4QorNA1KUtqaEOYjS4ZxvgQQCArtNeSPQk8TLUtiiY MoRT8Nf5+cu9oPx2VdXMDQSgWiSSs59m6PMUgfun1a0vjgzG77dS7FRuLQ0NkyJ8 c/ZteesgozCb4kBKDgbjd01uO0J45ANpNCN7gbAGbQ6QISN/iojVQHTkMZPojwm+ WjYfDb9cD94TU0rRbzlIjR1v5jkUHVtFDWSga8E0E97jl+X4jsUdLY8vQRgHOQ9P Gss= -----END CERTIFICATE-----Generated at Sat Oct 10 17:58:29 2026 by rpki-client