$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json) Hash identifier: 1A/tRrzWmAmnqUs3Ns+cd0gji3nFLFFXUWvBBegimJ4= Subject key identifier: 28:54:43:9A:AD:47:74:5F:0C:68:D1:4A:3C:C1:8F:32:41:81:E5:64 Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Certificate serial: 772D9C72264AB932784197BA5C729128D4DE6248 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft Manifest number: 01F8 Signing time: Fri 17 Apr 2026 18:40:33 +0000 Manifest this update: Fri 17 Apr 2026 18:35:31 +0000 Manifest next update: Sat 18 Apr 2026 19:34:31 +0000 Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: bTDvAhY+MPA8/0xlUv2r0UervCYx78AL6K9xFBSFwaY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:2d:9c:72:26:4a:b9:32:78:41:97:ba:5c:72:91:28:d4:de:62:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Validity Not Before: Apr 17 18:35:31 2026 GMT Not After : Apr 18 19:34:31 2026 GMT Subject: CN=2854439AAD47745F0C68D14A3CC18F324181E564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:eb:63:76:9d:3f:f7:18:1d:8f:6c:8c:6a:33: 04:b2:59:d2:17:bd:7f:6d:6d:6f:90:12:20:40:8e: e0:8f:9d:df:0a:9a:3a:14:fd:20:16:69:5c:fb:08: c0:47:9d:99:62:f4:c6:d3:4d:b1:98:09:e0:6c:26: 6e:7c:ca:a3:7b:8b:06:41:fe:b6:97:b7:ea:9b:15: e9:d4:a6:2c:29:22:c1:46:b5:dd:9f:2b:aa:eb:f6: 72:6c:31:e8:47:d4:f6:f9:62:a9:d8:73:89:2f:fe: eb:ca:53:85:90:12:23:17:80:19:dc:41:40:1f:23: e4:bb:fc:39:b5:6e:e6:d6:20:ab:fe:bf:04:dc:a1: 23:45:a9:2b:91:15:70:68:09:f8:32:fe:4b:ea:41: 11:dc:eb:f9:7b:a5:ab:eb:4b:af:64:32:98:b6:31: 16:6b:5d:84:c9:9a:cc:6d:c3:14:72:5f:eb:f0:5f: 09:c4:88:87:02:56:06:96:67:14:66:60:24:ff:61: 06:b9:df:17:68:da:8c:3d:84:18:55:8d:c0:1e:de: 1b:e1:75:96:f3:f3:4c:ac:f0:71:aa:28:9c:b3:cb: ca:84:44:c4:b1:85:ea:38:38:07:f7:24:68:35:0d: 78:d4:56:e4:24:1f:93:e9:b5:b6:62:90:35:b7:5c: 3b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:54:43:9A:AD:47:74:5F:0C:68:D1:4A:3C:C1:8F:32:41:81:E5:64 X509v3 Authority Key Identifier: keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:e8:4e:a4:8f:b4:9f:4f:f0:b6:c7:ff:0b:bf:d5:34:11:ad: 1b:e9:d5:dc:b0:51:16:44:e3:72:a3:a3:57:46:5e:71:52:e5: 98:b9:52:1f:4d:f7:cd:5b:cc:82:a7:18:b7:e4:33:4a:6c:9d: 06:9d:e0:d7:04:3d:e0:09:9e:32:40:66:14:72:21:8f:17:19: 6c:06:e8:e1:20:fa:48:18:4b:b8:cf:e5:7c:2e:bb:50:e5:4f: b2:c1:ab:89:99:7a:62:32:0f:7f:62:66:15:72:d7:ec:ec:df: 66:3c:e5:1f:e1:6f:95:5a:61:40:6a:dd:22:32:5a:4c:fe:f9: e9:07:10:84:2e:63:0c:bc:f4:a6:a7:f0:58:64:b1:a8:6a:c7: 3d:ca:e7:34:5c:c3:24:a1:0b:15:87:32:24:22:28:f6:68:1a: 9d:d2:a9:80:b0:26:c3:34:79:e1:7d:d4:f3:09:c2:89:b2:8d: af:53:9e:b7:f6:81:96:02:4b:5c:b9:42:58:ae:8b:85:b9:4e: 9a:df:5b:a5:24:75:eb:33:0a:ce:e2:72:ef:28:57:04:02:68: 38:4b:79:ae:64:9b:cb:d9:3b:e6:a5:99:c7:0d:12:d1:6b:a1: 38:11:34:5a:0b:ef:37:88:aa:fb:81:7a:00:00:46:e5:d6:95: 49:11:68:82 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUdy2cciZKuTJ4QZe6XHKRKNTeYkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz REREMDgwRDAeFw0yNjA0MTcxODM1MzFaFw0yNjA0MTgxOTM0MzFaMDMxMTAvBgNV BAMTKDI4NTQ0MzlBQUQ0Nzc0NUYwQzY4RDE0QTNDQzE4RjMyNDE4MUU1NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi62N2nT/3GB2PbIxqMwSyWdIX vX9tbW+QEiBAjuCPnd8KmjoU/SAWaVz7CMBHnZli9MbTTbGYCeBsJm58yqN7iwZB /raXt+qbFenUpiwpIsFGtd2fK6rr9nJsMehH1Pb5YqnYc4kv/uvKU4WQEiMXgBnc QUAfI+S7/Dm1bubWIKv+vwTcoSNFqSuRFXBoCfgy/kvqQRHc6/l7pavrS69kMpi2 MRZrXYTJmsxtwxRyX+vwXwnEiIcCVgaWZxRmYCT/YQa53xdo2ow9hBhVjcAe3hvh dZbz80ys8HGqKJyzy8qERMSxheo4OAf3JGg1DXjUVuQkH5PptbZikDW3XDvNAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUKFRDmq1HdF8MaNFKPMGPMkGB5WQwHwYDVR0j BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJnoTqSPtJ9P8LbH/wu/ 1TQRrRvp1dywURZE43Kjo1dGXnFS5Zi5Uh9N981bzIKnGLfkM0psnQad4NcEPeAJ njJAZhRyIY8XGWwG6OEg+kgYS7jP5Xwuu1DlT7LBq4mZemIyD39iZhVy1+zs32Y8 5R/hb5VaYUBq3SIyWkz++ekHEIQuYwy89Kan8Fhksahqxz3K5zRcwyShCxWHMiQi KPZoGp3SqYCwJsM0eeF91PMJwomyja9Tnrf2gZYCS1y5Qliui4W5TprfW6Ukdesz Cs7icu8oVwQCaDhLea5km8vZO+almccNEtFroTgRNFoL7zeIqvuBegAARuXWlUkR aII= -----END CERTIFICATE-----Generated at Sat Apr 18 01:30:26 2026 by rpki-client