$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: DeozMqE81DzS6kv0sD23HARkBSS+u2aJwXWEnhgRJjg= Subject key identifier: 77:CC:B5:AC:47:7D:01:79:AD:85:34:D6:8C:9B:3E:39:8B:72:64:33 Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 3D6663C9A85FBABCD31E4397DF974A9C38E212A8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: 02FA Signing time: Fri 17 Apr 2026 05:10:35 +0000 Manifest this update: Fri 17 Apr 2026 05:05:33 +0000 Manifest next update: Sat 18 Apr 2026 07:09:33 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: LI89M55v0YlwaDL/Ue9utwrp9DAjy+gbx7NVtPUgWU4=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:66:63:c9:a8:5f:ba:bc:d3:1e:43:97:df:97:4a:9c:38:e2:12:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: Apr 17 05:05:33 2026 GMT Not After : Apr 18 07:09:33 2026 GMT Subject: CN=77CCB5AC477D0179AD8534D68C9B3E398B726433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a3:9c:a7:02:52:ec:db:41:ca:e8:1b:00:e2: b4:4b:ac:7f:49:e4:6b:b5:c5:1f:41:5f:4a:3f:4c: f6:c3:76:b9:46:f8:3c:9f:21:5a:27:24:cc:63:4e: db:e3:8f:75:d9:de:af:d2:4f:34:5d:dc:08:15:8d: 16:f2:b2:9b:ac:ed:68:3b:78:9a:7f:18:f3:7a:f8: e3:8f:53:00:8a:af:0c:f7:21:aa:de:e6:bb:c1:27: a3:27:12:14:46:54:c7:e4:3c:09:c8:ed:ea:bc:42: 68:0b:90:7e:76:c4:70:a6:1f:12:99:8e:a4:b1:8a: 20:a3:b4:4c:66:f4:d2:8c:3a:d7:c5:8b:ed:62:59: 3d:81:c1:58:67:6e:27:99:f4:07:f2:c3:67:49:e0: 96:e3:49:d4:66:d6:0a:66:3c:ba:a6:ef:5c:12:72: fa:37:ba:8e:41:5b:f5:e4:d6:f2:54:7c:1a:90:58: 09:af:17:5c:d5:8b:88:67:12:04:43:e3:25:76:8d: 38:7c:f5:71:78:db:08:b1:4d:69:a7:ad:19:6b:02: d6:f9:4a:08:b4:b1:50:4a:60:d2:f1:f1:64:e4:10: 9b:f4:1f:13:9e:1a:72:43:de:0a:f5:cf:e6:97:11: 13:d2:5a:36:4f:3a:38:99:f3:d0:f7:05:63:6f:87: 4c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:CC:B5:AC:47:7D:01:79:AD:85:34:D6:8C:9B:3E:39:8B:72:64:33 X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f6:d6:57:09:fb:84:4c:a1:7f:5c:cc:ac:a4:64:b6:43:c6: 98:27:cf:29:28:d2:a0:87:37:0e:d6:8c:7d:6b:6a:46:32:54: 3f:ff:a6:7d:df:f2:18:a7:69:d7:ea:c4:53:1f:da:0c:cb:b9: eb:d4:68:5f:c1:07:08:e1:d1:69:e8:98:81:c4:38:5c:f1:cf: 58:d4:08:20:db:2a:b6:bf:4b:d9:f2:6f:c8:98:aa:5c:9a:e1: 4c:43:e6:54:46:38:aa:65:02:be:2e:6c:ba:e1:0f:c5:bd:49: 84:f0:14:14:d2:f1:e6:2d:67:58:f5:3e:6f:f2:db:fb:99:90: ba:e9:b5:d0:6e:2c:d9:55:6b:54:47:f2:e6:f4:cd:0d:c7:c7: a1:1c:27:c5:e7:31:82:55:34:c3:70:78:04:be:2b:7b:8d:14: 03:82:bc:f5:fd:4e:0b:3d:11:b4:8b:2a:67:12:94:2b:8d:80: 41:f3:48:b7:85:22:1c:47:71:b7:f8:d6:04:50:82:33:6b:8b: e5:63:f9:96:16:27:95:4c:65:7b:21:8d:0e:4d:3a:79:b3:e5: 92:81:17:c3:a6:7a:35:aa:30:36:28:ff:48:94:33:24:06:50: 7f:70:e1:f0:9f:cd:60:ed:d1:23:db:a5:cf:52:1b:eb:91:fb: 5c:d6:76:cd -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUPWZjyahfurzTHkOX35dKnDjiEqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNjA0MTcwNTA1MzNaFw0yNjA0MTgwNzA5MzNaMDMxMTAvBgNV BAMTKDc3Q0NCNUFDNDc3RDAxNzlBRDg1MzRENjhDOUIzRTM5OEI3MjY0MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuo5ynAlLs20HK6BsA4rRLrH9J 5Gu1xR9BX0o/TPbDdrlG+DyfIVonJMxjTtvjj3XZ3q/STzRd3AgVjRbyspus7Wg7 eJp/GPN6+OOPUwCKrwz3Iare5rvBJ6MnEhRGVMfkPAnI7eq8QmgLkH52xHCmHxKZ jqSxiiCjtExm9NKMOtfFi+1iWT2BwVhnbieZ9Afyw2dJ4JbjSdRm1gpmPLqm71wS cvo3uo5BW/Xk1vJUfBqQWAmvF1zVi4hnEgRD4yV2jTh89XF42wixTWmnrRlrAtb5 Sgi0sVBKYNLx8WTkEJv0HxOeGnJD3gr1z+aXERPSWjZPOjiZ89D3BWNvh0wTAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUd8y1rEd9AXmthTTWjJs+OYtyZDMwHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFL21lcJ+4RMoX9czKyk ZLZDxpgnzyko0qCHNw7WjH1rakYyVD//pn3f8hinadfqxFMf2gzLuevUaF/BBwjh 0WnomIHEOFzxz1jUCCDbKra/S9nyb8iYqlya4UxD5lRGOKplAr4ubLrhD8W9SYTw FBTS8eYtZ1j1Pm/y2/uZkLrptdBuLNlVa1RH8ub0zQ3Hx6EcJ8XnMYJVNMNweAS+ K3uNFAOCvPX9Tgs9EbSLKmcSlCuNgEHzSLeFIhxHcbf41gRQgjNri+Vj+ZYWJ5VM ZXshjQ5NOnmz5ZKBF8OmejWqMDYo/0iUMyQGUH9w4fCfzWDt0SPbpc9SG+uR+1zW ds0= -----END CERTIFICATE-----Generated at Sat Apr 18 01:37:06 2026 by rpki-client