$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft File: 4742E76772F118A935D69FD40F69858085C80999.mft (raw, json) Hash identifier: gkw2d++2G+Ox6lxdHSent2pJykbSfQXaM/jqQe5ZW+g= Subject key identifier: 9C:47:88:38:6C:40:9E:65:11:AF:44:68:2F:3B:E3:CE:B7:2E:60:86 Authority key identifier: 47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99 Certificate issuer: /CN=4742E76772F118A935D69FD40F69858085C80999 Certificate serial: 4C2DE70048FAAE912F647345568778B5A9342FC8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft Manifest number: 0323 Signing time: Fri 17 Apr 2026 18:22:55 +0000 Manifest this update: Fri 17 Apr 2026 18:17:52 +0000 Manifest next update: Sat 18 Apr 2026 19:42:52 +0000 Files and hashes: 1: 4742E76772F118A935D69FD40F69858085C80999.crl (hash: xpMRi27FhYg4eb4+An8jkNbrvWoZ7Xvb8RfdrHGkZhs=) 2: 326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa (hash: gUgzdRxmuJNOQsawEIqvnF9DX0YCEOe/wm39FVRE0Uw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:2d:e7:00:48:fa:ae:91:2f:64:73:45:56:87:78:b5:a9:34:2f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4742E76772F118A935D69FD40F69858085C80999 Validity Not Before: Apr 17 18:17:52 2026 GMT Not After : Apr 18 19:42:52 2026 GMT Subject: CN=9C4788386C409E6511AF44682F3BE3CEB72E6086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:60:21:e1:14:d6:67:0e:86:03:72:50:b3:b7: 80:11:77:87:6a:2c:55:ba:42:7d:52:5b:fc:47:ce: f5:bb:c4:4e:76:44:7f:4b:20:5c:8e:b6:55:30:81: 8f:8b:f3:3c:b8:57:92:c7:1b:30:5c:c9:66:11:3c: 2e:42:75:c3:2b:0c:7b:18:93:e2:f3:e9:df:df:89: 02:20:8f:2a:a1:bb:f7:16:15:a5:1d:dc:d6:26:cf: 1c:f7:cb:d9:23:47:58:a0:e6:f7:41:be:b5:80:61: e0:44:1d:27:a8:1d:e3:58:07:5e:13:87:3a:27:e2: 12:f0:9c:ec:90:ff:ae:83:d2:04:6f:2b:67:69:23: f9:d5:19:5a:95:d7:61:e0:6a:31:21:36:12:40:12: b3:dc:a7:1d:79:b4:36:c8:a1:fb:f5:0c:f8:c1:7c: ab:95:f8:e5:49:cb:c0:15:12:03:7c:92:ce:07:2e: 2d:6e:e8:b1:a3:c3:75:8a:b0:6a:9c:53:17:aa:64: d5:d4:71:38:3b:09:29:ce:0f:c0:a1:e2:21:77:b9: 74:30:13:9c:2d:88:61:b1:0e:7f:e7:c1:f8:a7:24: 16:47:4a:6d:e2:46:c0:84:09:f3:d1:73:9e:5c:8f: 4b:f0:7b:1a:a7:34:8c:b2:a2:78:c7:74:53:5f:da: f4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:47:88:38:6C:40:9E:65:11:AF:44:68:2F:3B:E3:CE:B7:2E:60:86 X509v3 Authority Key Identifier: keyid:47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c5:e0:e7:bc:47:b4:33:47:69:57:06:5f:24:a1:7c:b8:49: 07:94:77:5d:5f:6f:2a:c9:d3:b4:12:a1:cb:62:6f:ba:0f:31: ae:90:e2:73:2e:9e:75:aa:ca:a5:b8:5c:18:1a:31:59:f6:18: 40:53:9a:c6:a7:dd:6b:21:36:34:dc:5c:81:2c:52:30:4d:53: 5e:3e:e7:52:0d:d3:8f:cd:5c:69:a4:65:85:9f:f2:58:54:4a: 68:59:a3:7e:c9:d5:8e:06:76:4b:0c:dc:a6:96:c7:31:1c:b8: 59:1c:c2:99:44:68:67:27:b9:e4:4d:44:19:ca:e3:81:74:63: d7:a0:db:bc:cc:46:fe:48:e6:b5:45:5c:f9:54:ea:9b:ed:5a: 4b:14:61:6f:c6:3f:08:0d:5f:c0:bb:b8:bc:ad:e6:cb:5e:98: f5:c6:65:a1:a5:35:e9:84:40:9f:6a:df:24:c0:35:5a:6c:42: cd:8b:b2:9c:3e:a4:d7:da:f1:2c:14:82:6f:f5:64:26:54:ff: 9a:d6:b4:31:e2:08:bc:1e:cf:29:27:4d:99:39:a3:32:07:99: 0d:45:1d:f5:ca:34:3b:7d:4d:11:1f:c2:46:70:cb:70:ca:bf: 45:f7:af:b5:95:6a:aa:fd:2d:18:59:86:b9:2a:db:fe:43:d9: 87:59:c2:0d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUTC3nAEj6rpEvZHNFVod4tak0L8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc0MkU3Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4 NUM4MDk5OTAeFw0yNjA0MTcxODE3NTJaFw0yNjA0MTgxOTQyNTJaMDMxMTAvBgNV BAMTKDlDNDc4ODM4NkM0MDlFNjUxMUFGNDQ2ODJGM0JFM0NFQjcyRTYwODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvYCHhFNZnDoYDclCzt4ARd4dq LFW6Qn1SW/xHzvW7xE52RH9LIFyOtlUwgY+L8zy4V5LHGzBcyWYRPC5CdcMrDHsY k+Lz6d/fiQIgjyqhu/cWFaUd3NYmzxz3y9kjR1ig5vdBvrWAYeBEHSeoHeNYB14T hzon4hLwnOyQ/66D0gRvK2dpI/nVGVqV12HgajEhNhJAErPcpx15tDbIofv1DPjB fKuV+OVJy8AVEgN8ks4HLi1u6LGjw3WKsGqcUxeqZNXUcTg7CSnOD8Ch4iF3uXQw E5wtiGGxDn/nwfinJBZHSm3iRsCECfPRc55cj0vwexqnNIyyonjHdFNf2vQBAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUnEeIOGxAnmURr0RoLzvjzrcuYIYwHwYDVR0j BBgwFoAUR0LnZ3LxGKk11p/UD2mFgIXICZkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzYwYTA5MGMyN2MwNjRlMDc4YTdmNmU0NDZhNGZiZjcwLzAv NDc0MkU3Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4NUM4MDk5OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80NzQyRTc2NzcyRjExOEE5MzVENjlGRDQwRjY5ODU4 MDg1QzgwOTk5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzYwYTA5 MGMyN2MwNjRlMDc4YTdmNmU0NDZhNGZiZjcwLzAvNDc0MkU3Njc3MkYxMThBOTM1 RDY5RkQ0MEY2OTg1ODA4NUM4MDk5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABPF4Oe8R7QzR2lXBl8k oXy4SQeUd11fbyrJ07QSoctib7oPMa6Q4nMunnWqyqW4XBgaMVn2GEBTmsan3Wsh NjTcXIEsUjBNU14+51IN04/NXGmkZYWf8lhUSmhZo37J1Y4GdksM3KaWxzEcuFkc wplEaGcnueRNRBnK44F0Y9eg27zMRv5I5rVFXPlU6pvtWksUYW/GPwgNX8C7uLyt 5stemPXGZaGlNemEQJ9q3yTANVpsQs2Lspw+pNfa8SwUgm/1ZCZU/5rWtDHiCLwe zyknTZk5ozIHmQ1FHfXKNDt9TREfwkZwy3DKv0X3r7WVaqr9LRhZhrkq2/5D2YdZ wg0= -----END CERTIFICATE-----Generated at Fri Apr 17 22:02:19 2026 by rpki-client