$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json) Hash identifier: o78WSD0MMFA2cC39savdmD7BLYT9q+JO0jqtNiK9ScM= Subject key identifier: 93:7B:BC:D1:B4:71:7C:98:B9:A0:2C:DE:C2:16:93:FE:D6:99:EC:1B Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Certificate serial: 104B71A3FFD33F725E0B7F5C8930E02E6C1D627B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft Manifest number: 02B7 Signing time: Wed 23 Sep 2026 11:25:36 +0000 Manifest this update: Wed 23 Sep 2026 11:20:36 +0000 Manifest next update: Thu 24 Sep 2026 11:51:36 +0000 Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: AsmO8/uNG9rVGcXv4XLq7jA8CLYGe9Cho7SRxoJ+lk0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 11:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:4b:71:a3:ff:d3:3f:72:5e:0b:7f:5c:89:30:e0:2e:6c:1d:62:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Validity Not Before: Sep 23 11:20:36 2026 GMT Not After : Sep 24 11:51:36 2026 GMT Subject: CN=937BBCD1B4717C98B9A02CDEC21693FED699EC1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ef:5a:1f:a5:ee:e4:fe:28:5f:d4:28:af:95: 28:df:3b:75:8c:ba:51:c8:2f:b9:03:5d:72:65:2b: 13:ba:a7:0d:f2:86:65:b8:d1:bc:32:b8:b2:71:2a: 9b:2e:66:eb:8f:e3:e9:b3:18:67:8d:8c:1c:b2:b0: d9:1e:b6:2b:cb:f1:20:90:81:55:84:e1:3a:22:78: 9c:ab:ef:fb:39:75:83:c4:87:c8:6c:aa:af:51:6a: 5b:d3:c8:fc:71:a3:57:42:0c:02:ca:66:7b:59:11: 09:e1:06:96:4b:7c:c9:9a:05:2d:01:95:42:a4:8e: b2:eb:dc:08:12:be:e0:46:22:a3:65:df:95:60:5c: c0:39:9e:c2:44:f9:b4:08:33:34:7c:bc:61:eb:52: 29:6f:0c:17:c2:12:86:3b:62:fc:a4:ca:0c:42:11: 5c:38:c6:b6:6e:ec:df:9d:5b:34:85:5f:73:9b:fc: af:78:38:05:c2:8d:7c:1b:fe:f5:18:69:5d:bd:4e: e3:c6:c6:b3:3d:7d:ac:f4:2c:ea:ab:79:37:45:6b: de:01:17:53:be:bd:0a:37:5b:80:3d:89:91:fb:f4: f6:1b:d7:96:e0:08:b1:04:1e:c0:dd:15:f7:74:0a: 63:c1:2a:3a:5c:b6:eb:f1:15:9f:0f:c4:cd:e3:cd: a6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7B:BC:D1:B4:71:7C:98:B9:A0:2C:DE:C2:16:93:FE:D6:99:EC:1B X509v3 Authority Key Identifier: keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:29:9d:e3:2c:41:06:02:19:78:64:42:79:ec:76:d0:39:d7: 05:3a:6b:31:b3:ce:33:2c:8c:54:81:d5:90:7f:42:39:f2:37: d4:2e:32:8e:c6:8a:13:2d:26:7f:be:cb:d7:c8:6d:a1:2b:59: 37:20:31:98:7d:c3:00:f7:85:db:11:3a:ee:f0:34:9b:f3:d4: 1a:9a:00:b2:51:d8:95:ff:eb:30:70:67:8b:03:40:37:26:ab: 5f:a0:9b:73:a7:96:70:49:7f:64:38:bb:4e:0e:08:90:8d:50: 4c:65:7d:98:62:3f:5a:b8:28:93:24:4f:90:d7:c0:51:18:67: 19:c7:de:f3:05:aa:66:e7:c8:1c:eb:70:ee:74:a5:78:b1:72: 22:08:86:e5:dc:d8:53:52:8f:6e:fd:f4:ce:3a:03:c3:2d:7c: cb:c0:2a:cf:1c:cb:d2:55:89:ec:4d:0c:2e:16:55:9c:6b:67: c6:85:15:ae:8b:ca:6f:16:16:e6:64:cd:dc:92:02:a4:52:98: d6:56:5e:c2:5d:1c:eb:82:5e:85:cf:4d:8e:eb:4a:4c:56:01: 18:1b:a2:34:70:8d:4b:8d:b6:96:e8:bf:7a:e0:97:d4:97:0e: a7:da:f7:bd:c3:81:5d:53:a4:a5:b2:21:20:7e:42:ae:aa:99: ab:df:de:d0 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUEEtxo//TP3JeC39ciTDgLmwdYnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz REREMDgwRDAeFw0yNjA5MjMxMTIwMzZaFw0yNjA5MjQxMTUxMzZaMDMxMTAvBgNV BAMTKDkzN0JCQ0QxQjQ3MTdDOThCOUEwMkNERUMyMTY5M0ZFRDY5OUVDMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg71ofpe7k/ihf1CivlSjfO3WM ulHIL7kDXXJlKxO6pw3yhmW40bwyuLJxKpsuZuuP4+mzGGeNjByysNketivL8SCQ gVWE4ToieJyr7/s5dYPEh8hsqq9RalvTyPxxo1dCDALKZntZEQnhBpZLfMmaBS0B lUKkjrLr3AgSvuBGIqNl35VgXMA5nsJE+bQIMzR8vGHrUilvDBfCEoY7YvykygxC EVw4xrZu7N+dWzSFX3Ob/K94OAXCjXwb/vUYaV29TuPGxrM9faz0LOqreTdFa94B F1O+vQo3W4A9iZH79PYb15bgCLEEHsDdFfd0CmPBKjpctuvxFZ8PxM3jzaYBAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUk3u80bRxfJi5oCzewhaT/taZ7BswHwYDVR0j BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGopneMsQQYCGXhkQnns dtA51wU6azGzzjMsjFSB1ZB/QjnyN9QuMo7GihMtJn++y9fIbaErWTcgMZh9wwD3 hdsROu7wNJvz1BqaALJR2JX/6zBwZ4sDQDcmq1+gm3OnlnBJf2Q4u04OCJCNUExl fZhiP1q4KJMkT5DXwFEYZxnH3vMFqmbnyBzrcO50pXixciIIhuXc2FNSj2799M46 A8MtfMvAKs8cy9JViexNDC4WVZxrZ8aFFa6Lym8WFuZkzdySAqRSmNZWXsJdHOuC XoXPTY7rSkxWARgbojRwjUuNtpbov3rgl9SXDqfa973DgV1TpKWyISB+Qq6qmavf 3tA= -----END CERTIFICATE-----Generated at Wed Sep 23 20:33:15 2026 by rpki-client