$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft File: 31586760843F668A816117EA02F6F30FE8F9C359.mft (raw, json) Hash identifier: 9R4kmiBXEJNDUvR0GChTjO95eem/3YH2AsgCsYDq9VU= Subject key identifier: 67:C7:A2:3A:99:9C:6A:51:15:60:CA:C0:3F:02:96:B1:4D:B9:E4:70 Authority key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 Certificate issuer: /CN=31586760843F668A816117EA02F6F30FE8F9C359 Certificate serial: 1FEC920513C30A92DD90EA37E0CC4F143DF7A927 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft Manifest number: 0322 Signing time: Fri 17 Apr 2026 19:25:59 +0000 Manifest this update: Fri 17 Apr 2026 19:20:56 +0000 Manifest next update: Sat 18 Apr 2026 20:23:56 +0000 Files and hashes: 1: 31586760843F668A816117EA02F6F30FE8F9C359.crl (hash: N8wWb7gjR+JSe6yZ+9SJBmEg7SJOILNVd5LScgKqw8g=) 2: 326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa (hash: K6ERbHzYMOmGY8zVjajZjctj/rooDOMsKI1zpR886Vs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ec:92:05:13:c3:0a:92:dd:90:ea:37:e0:cc:4f:14:3d:f7:a9:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31586760843F668A816117EA02F6F30FE8F9C359 Validity Not Before: Apr 17 19:20:56 2026 GMT Not After : Apr 18 20:23:56 2026 GMT Subject: CN=67C7A23A999C6A511560CAC03F0296B14DB9E470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6a:f5:50:4d:1a:91:7d:cd:81:75:45:a3:d6: a3:9a:74:f7:97:ab:f7:6b:13:b5:1a:61:88:cf:79: a9:ba:0e:b4:ae:6f:1c:db:13:73:b6:3b:24:47:0c: 28:01:fd:cf:9b:fa:f9:d6:e6:68:e7:37:f3:4c:e2: 6f:d1:52:0f:1a:55:6a:2f:5f:9e:ba:01:c7:03:a9: e9:c8:a4:a0:d8:4d:77:7d:42:89:4a:2c:70:ed:63: ed:5d:bf:d8:a0:7f:e2:3b:5f:d1:2b:cf:23:a1:b6: 53:f3:1e:9f:c0:9b:5b:c8:8b:86:d5:c9:bd:64:a3: a5:03:d9:fe:4a:25:fd:5e:07:be:3e:2c:c9:99:21: 6b:87:af:b9:c0:f3:1e:53:c0:37:be:a3:aa:67:11: 24:d7:88:5e:8e:0f:c7:8e:2f:c9:97:6b:53:fc:6f: 4a:01:5e:71:07:4d:ea:99:90:64:44:cd:e0:b4:52: 1e:56:4e:c9:a7:b6:0e:cd:19:82:71:2d:28:9b:6d: 79:ab:b3:33:eb:35:54:3f:ef:d1:a6:6a:d1:d0:29: 03:a5:4b:14:9c:5a:56:de:25:4e:81:21:91:46:9c: cd:94:e6:8d:92:13:80:b2:16:d6:43:cf:96:2d:8c: e5:05:f5:c6:4e:b5:a1:ce:50:6b:0c:78:fe:ed:54: 00:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C7:A2:3A:99:9C:6A:51:15:60:CA:C0:3F:02:96:B1:4D:B9:E4:70 X509v3 Authority Key Identifier: keyid:31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:94:9c:a0:b4:de:16:31:e2:1e:63:eb:a1:d4:bd:84:54:dc: b7:76:7e:50:75:4a:22:fd:f6:b9:e6:04:56:0e:2a:83:5c:e9: 2d:2a:1b:e6:53:de:ef:fb:95:83:64:b7:21:09:b9:d3:81:b7: 59:99:d5:12:4a:a4:c3:a1:0d:d0:76:69:f8:31:d7:59:0b:10: af:e1:de:1f:d1:47:2e:3c:56:c4:b4:d0:41:02:52:55:06:67: 8d:c0:a1:61:ba:e1:bd:a5:42:8e:0e:06:60:be:1b:40:52:8e: 81:0f:25:16:3f:c1:a1:c9:cc:1f:c5:16:8b:5b:a3:6e:0c:74: 5d:d0:74:d3:36:73:63:e1:34:ae:66:3b:aa:4c:d4:7b:a3:80: a4:9e:e8:db:07:39:a8:42:0b:5b:42:e6:1b:96:a5:9c:50:27: 88:90:0c:cd:f6:18:59:19:99:09:46:23:2e:06:23:51:fb:20: b1:97:1a:15:91:2b:80:19:c8:96:3d:e8:04:b9:ba:47:06:ed: 33:2b:df:b8:0c:d6:3f:a7:7e:65:17:f2:ab:b1:52:9b:95:1e: e8:eb:59:09:59:11:3a:60:27:6a:5e:62:d7:e0:c8:32:75:27: e4:be:c8:0a:78:24:56:cf:0d:c7:a2:ea:49:29:54:14:f4:24: 2e:23:65:b5 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUH+ySBRPDCpLdkOo34MxPFD33qScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZF OEY5QzM1OTAeFw0yNjA0MTcxOTIwNTZaFw0yNjA0MTgyMDIzNTZaMDMxMTAvBgNV BAMTKDY3QzdBMjNBOTk5QzZBNTExNTYwQ0FDMDNGMDI5NkIxNERCOUU0NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3avVQTRqRfc2BdUWj1qOadPeX q/drE7UaYYjPeam6DrSubxzbE3O2OyRHDCgB/c+b+vnW5mjnN/NM4m/RUg8aVWov X566AccDqenIpKDYTXd9QolKLHDtY+1dv9igf+I7X9ErzyOhtlPzHp/Am1vIi4bV yb1ko6UD2f5KJf1eB74+LMmZIWuHr7nA8x5TwDe+o6pnESTXiF6OD8eOL8mXa1P8 b0oBXnEHTeqZkGREzeC0Uh5WTsmntg7NGYJxLSibbXmrszPrNVQ/79GmatHQKQOl SxScWlbeJU6BIZFGnM2U5o2SE4CyFtZDz5YtjOUF9cZOtaHOUGsMeP7tVABFAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUZ8eiOpmcalEVYMrAPwKWsU255HAwHwYDVR0j BBgwFoAUMVhnYIQ/ZoqBYRfqAvbzD+j5w1kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3YzVkNGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAv MzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZFOEY5QzM1OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zMTU4Njc2MDg0M0Y2NjhBODE2MTE3RUEwMkY2RjMw RkU4RjlDMzU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3YzVk NGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAvMzE1ODY3NjA4NDNGNjY4QTgx NjExN0VBMDJGNkYzMEZFOEY5QzM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEGUnKC03hYx4h5j66HU vYRU3Ld2flB1SiL99rnmBFYOKoNc6S0qG+ZT3u/7lYNktyEJudOBt1mZ1RJKpMOh DdB2afgx11kLEK/h3h/RRy48VsS00EECUlUGZ43AoWG64b2lQo4OBmC+G0BSjoEP JRY/waHJzB/FFotbo24MdF3QdNM2c2PhNK5mO6pM1HujgKSe6NsHOahCC1tC5huW pZxQJ4iQDM32GFkZmQlGIy4GI1H7ILGXGhWRK4AZyJY96AS5ukcG7TMr37gM1j+n fmUX8quxUpuVHujrWQlZETpgJ2peYtfgyDJ1J+S+yAp4JFbPDcei6kkpVBT0JC4j ZbU= -----END CERTIFICATE-----Generated at Fri Apr 17 22:44:39 2026 by rpki-client