$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: F+LBg4VjliuwC+FMyuARET3CVGnvrw6TqI05aRAO8oM= Subject key identifier: 1A:8F:98:88:5E:69:27:B2:EE:3F:45:4B:15:70:3A:14:0C:FD:3A:17 Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 3C369E89828A61A22D8C3B12257DEDA8F5C06188 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: 0383 Signing time: Tue 28 Jul 2026 07:55:00 +0000 Manifest this update: Tue 28 Jul 2026 07:50:00 +0000 Manifest next update: Wed 29 Jul 2026 11:45:00 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: cmll/I+j5tKVNrSO6DwbLme0r3ldkWLlxE2QjdZ6+8M=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 11:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:36:9e:89:82:8a:61:a2:2d:8c:3b:12:25:7d:ed:a8:f5:c0:61:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: Jul 28 07:50:00 2026 GMT Not After : Jul 29 11:45:00 2026 GMT Subject: CN=1A8F98885E6927B2EE3F454B15703A140CFD3A17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:96:35:0f:22:7e:1d:f4:95:63:56:da:43:c6: 72:e5:b1:47:7b:16:9f:45:ed:85:44:68:91:28:a9: b9:3f:64:50:ea:5d:32:79:b7:2a:b2:a6:9c:33:21: 26:b2:54:f4:bf:6e:69:a7:2c:49:f1:43:0d:6b:10: 87:55:37:71:17:e0:0a:4a:55:26:dc:8c:63:b3:47: 0b:53:ec:e5:ca:50:2e:6e:9c:a0:50:a6:ca:28:eb: 16:a6:e0:de:84:c4:e8:03:bf:79:a4:29:32:ad:15: cf:9e:71:a1:06:d4:64:43:60:d8:0c:6c:b1:82:89: fd:0d:50:0f:7d:dc:bc:00:63:30:2b:28:94:88:a1: 82:2e:fb:40:72:8a:9b:d9:2c:a7:4f:99:b1:9b:17: c6:65:ed:de:dd:9a:d5:02:83:dc:33:1f:c1:5c:1a: 20:7d:6b:67:5a:b4:6f:0e:b5:ba:93:e3:e0:42:38: 03:c3:73:83:2f:1a:19:e9:0f:ca:0e:bf:11:ab:51: 0a:72:c7:dd:13:ac:d0:b9:02:f2:4a:e5:37:4d:26: 54:95:f4:0b:1c:ba:cf:7c:8d:eb:29:fb:27:13:3c: f5:82:76:6d:2e:32:87:4d:84:bb:3f:b2:a7:e8:67: f9:bf:33:e2:80:c2:ff:a8:5a:88:4c:31:8f:2d:3b: 0b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8F:98:88:5E:69:27:B2:EE:3F:45:4B:15:70:3A:14:0C:FD:3A:17 X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:67:cb:5b:e5:f8:2e:81:ac:99:a9:aa:5b:d2:93:33:29:93: 00:ea:bf:1e:6f:41:b1:1c:8d:07:92:2d:fa:18:e3:39:cc:19: 6d:7d:63:59:df:b2:de:74:16:13:8c:c3:8c:61:64:51:be:72: a2:41:0d:5d:58:ca:d2:31:18:11:02:67:1e:ac:20:df:06:36: 0b:b7:94:b4:e2:be:8e:3a:79:a3:97:9c:92:24:b2:59:82:c4: 6c:be:13:15:34:f5:81:02:d0:dd:c8:4e:a0:b0:8f:50:be:92: 33:4a:ab:50:3b:71:24:24:41:21:db:1b:a6:36:43:ff:99:68: 40:44:8a:1e:0d:dc:4e:e6:45:d5:2a:e8:ea:3d:e0:f0:5e:69: dc:2e:12:f9:25:01:ee:1f:c0:df:0a:b9:01:6b:21:83:8f:4a: df:0d:ea:ce:d4:6c:42:ec:fe:9e:e4:40:73:b9:fc:fd:30:4a: 4a:0a:8f:4a:d6:c0:ac:68:14:0e:b0:7a:40:e6:b3:59:db:2a: fb:08:e3:cf:8c:31:48:16:98:0e:13:7c:37:3c:96:8e:e8:06: 8c:cb:3c:d6:21:2f:b6:65:82:4c:55:7f:91:13:1d:14:cf:e7: 89:ad:a3:23:44:4c:b7:3b:a9:40:70:49:97:d3:0e:64:15:bc: 57:db:f9:ea -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUPDaeiYKKYaItjDsSJX3tqPXAYYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNjA3MjgwNzUwMDBaFw0yNjA3MjkxMTQ1MDBaMDMxMTAvBgNV BAMTKDFBOEY5ODg4NUU2OTI3QjJFRTNGNDU0QjE1NzAzQTE0MENGRDNBMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOljUPIn4d9JVjVtpDxnLlsUd7 Fp9F7YVEaJEoqbk/ZFDqXTJ5tyqyppwzISayVPS/bmmnLEnxQw1rEIdVN3EX4ApK VSbcjGOzRwtT7OXKUC5unKBQpsoo6xam4N6ExOgDv3mkKTKtFc+ecaEG1GRDYNgM bLGCif0NUA993LwAYzArKJSIoYIu+0ByipvZLKdPmbGbF8Zl7d7dmtUCg9wzH8Fc GiB9a2datG8OtbqT4+BCOAPDc4MvGhnpD8oOvxGrUQpyx90TrNC5AvJK5TdNJlSV 9Ascus98jesp+ycTPPWCdm0uModNhLs/sqfoZ/m/M+KAwv+oWohMMY8tOwvjAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUGo+YiF5pJ7LuP0VLFXA6FAz9OhcwHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKZny1vl+C6BrJmpqlvS kzMpkwDqvx5vQbEcjQeSLfoY4znMGW19Y1nfst50FhOMw4xhZFG+cqJBDV1YytIx GBECZx6sIN8GNgu3lLTivo46eaOXnJIkslmCxGy+ExU09YEC0N3ITqCwj1C+kjNK q1A7cSQkQSHbG6Y2Q/+ZaEBEih4N3E7mRdUq6Oo94PBeadwuEvklAe4fwN8KuQFr IYOPSt8N6s7UbELs/p7kQHO5/P0wSkoKj0rWwKxoFA6wekDms1nbKvsI48+MMUgW mA4TfDc8lo7oBozLPNYhL7ZlgkxVf5ETHRTP54mtoyNETLc7qUBwSZfTDmQVvFfb +eo= -----END CERTIFICATE-----Generated at Wed Jul 29 03:55:03 2026 by rpki-client