$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft File: C2724A29EF989A4340933B8130B402DD4627A501.mft (raw, json) Hash identifier: F5RbW7oPAj1CkZYpls6RAkyosqxSZ8z7InJHG7p1J9Y= Subject key identifier: 8F:4D:C6:23:F9:16:F8:74:93:BF:6C:8D:AD:D5:00:7F:D7:2B:0A:6A Authority key identifier: C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01 Certificate issuer: /CN=C2724A29EF989A4340933B8130B402DD4627A501 Certificate serial: 213F6EBBA1221EEF90771EB7F3773BC36AC7E846 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft Manifest number: 040B Signing time: Tue 27 Oct 2026 08:57:48 +0000 Manifest this update: Tue 27 Oct 2026 08:52:46 +0000 Manifest next update: Wed 28 Oct 2026 12:04:46 +0000 Files and hashes: 1: 326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa (hash: Iu5zEupNr3d2HM/VgOsiZY0jlgghbGowPktIjWL0DAU=) 2: C2724A29EF989A4340933B8130B402DD4627A501.crl (hash: qmp+rvzbdm0WIkyAKuu0y/DdCb32rXVw6Gwb7XPY9qE=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 22:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:3f:6e:bb:a1:22:1e:ef:90:77:1e:b7:f3:77:3b:c3:6a:c7:e8:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2724A29EF989A4340933B8130B402DD4627A501 Validity Not Before: Oct 27 08:52:46 2026 GMT Not After : Oct 28 12:04:46 2026 GMT Subject: CN=8F4DC623F916F87493BF6C8DADD5007FD72B0A6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:45:0b:3f:ed:5b:98:a1:66:b1:cc:06:4a:e2: 6a:9d:22:fa:fa:b2:4e:24:57:0d:81:93:f9:f1:89: fb:61:46:71:6f:56:7a:ce:bb:bf:31:fb:c7:73:71: 89:99:95:17:d9:37:c3:de:15:9c:32:5c:aa:ae:37: c0:71:9d:ae:42:b5:b4:04:e9:56:ac:5c:e3:e0:5a: dd:05:5e:ee:e3:43:0e:3c:c4:2c:ec:f0:d4:30:c2: 35:89:a7:fd:84:75:88:56:27:5d:36:ea:0e:f4:70: 82:a5:81:9b:1d:ff:9e:88:a5:f6:f6:ab:dd:e6:13: ed:12:2b:0e:e5:90:b8:78:51:2c:c8:0a:80:98:59: 47:c8:cb:4d:9d:ac:5c:04:55:e8:bb:7e:59:b6:35: 31:d8:29:6b:d4:75:c7:6c:82:a3:38:a1:e3:42:64: ac:42:d4:ed:8d:8d:ac:7b:17:9f:db:d1:10:58:f2: a7:a2:92:9b:a8:23:01:eb:4b:65:97:27:73:1a:76: cb:c1:13:ac:d6:bc:32:bc:e6:e9:5a:46:e4:33:4c: d2:b8:a7:eb:5f:32:22:73:c3:9e:26:03:7a:d4:79: 26:0c:47:e0:57:ab:8c:38:8a:8b:b5:e1:91:14:9e: 46:8c:80:db:4b:ab:be:58:f2:e6:4e:04:e4:2b:09: 76:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4D:C6:23:F9:16:F8:74:93:BF:6C:8D:AD:D5:00:7F:D7:2B:0A:6A X509v3 Authority Key Identifier: keyid:C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:01:74:0d:40:21:c8:11:98:c1:0e:22:41:0a:18:3a:2b:d7: 19:92:ac:e3:0d:88:7e:f3:b7:5f:39:26:3d:78:47:ad:82:f8: f5:f2:aa:ea:a7:be:9a:f7:24:28:6f:76:20:ad:97:01:73:7b: 75:db:b5:21:d2:a3:4e:15:2f:67:8d:72:ae:24:c9:6e:8d:fb: d7:dc:51:af:3d:74:4c:01:3c:62:98:38:5f:21:bb:7c:0d:7b: 4a:b9:be:ce:11:50:16:be:3d:4b:c5:1b:79:af:cc:e3:c6:dc: 4e:cb:8b:4e:50:a2:d9:ce:c9:39:26:8e:bc:ee:ae:bf:9b:44: 1d:c9:12:59:1c:f4:51:83:e0:41:e5:e8:38:fa:1e:82:3a:90: f8:a9:87:c0:10:88:d0:52:d5:7e:ee:c5:9e:2b:73:24:90:3d: d8:42:5a:cc:41:7e:75:20:13:64:94:19:9e:d1:be:3e:1b:62: 5a:25:ff:79:25:71:77:35:97:89:b2:6d:33:ab:e1:59:de:b6: ea:f4:90:4b:68:88:f8:0b:7d:09:f3:ed:dd:1f:b7:72:17:3e: 23:72:f0:2c:8d:f2:90:d2:2b:28:78:22:82:69:c5:2e:d1:76: 3d:1d:6c:50:6e:ca:ef:c9:de:53:56:20:14:86:64:1b:2a:96: 26:43:67:20 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUIT9uu6EiHu+Qdx6383c7w2rH6EYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI3MjRBMjlFRjk4OUE0MzQwOTMzQjgxMzBCNDAyREQ0 NjI3QTUwMTAeFw0yNjEwMjcwODUyNDZaFw0yNjEwMjgxMjA0NDZaMDMxMTAvBgNV BAMTKDhGNERDNjIzRjkxNkY4NzQ5M0JGNkM4REFERDUwMDdGRDcyQjBBNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRRQs/7VuYoWaxzAZK4mqdIvr6 sk4kVw2Bk/nxifthRnFvVnrOu78x+8dzcYmZlRfZN8PeFZwyXKquN8Bxna5CtbQE 6VasXOPgWt0FXu7jQw48xCzs8NQwwjWJp/2EdYhWJ1026g70cIKlgZsd/56Ipfb2 q93mE+0SKw7lkLh4USzICoCYWUfIy02drFwEVei7flm2NTHYKWvUdcdsgqM4oeNC ZKxC1O2Njax7F5/b0RBY8qeikpuoIwHrS2WXJ3MadsvBE6zWvDK85ulaRuQzTNK4 p+tfMiJzw54mA3rUeSYMR+BXq4w4iou14ZEUnkaMgNtLq75Y8uZOBOQrCXaVAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUj03GI/kW+HSTv2yNrdUAf9crCmowHwYDVR0j BBgwFoAUwnJKKe+YmkNAkzuBMLQC3UYnpQEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzhiODNlNjMxMjc5ZjRjNjlhNTNmYWIyNTBiYmU2OWRiLzAv QzI3MjRBMjlFRjk4OUE0MzQwOTMzQjgxMzBCNDAyREQ0NjI3QTUwMS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9DMjcyNEEyOUVGOTg5QTQzNDA5MzNCODEzMEI0MDJE RDQ2MjdBNTAxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzhiODNl NjMxMjc5ZjRjNjlhNTNmYWIyNTBiYmU2OWRiLzAvQzI3MjRBMjlFRjk4OUE0MzQw OTMzQjgxMzBCNDAyREQ0NjI3QTUwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAA0BdA1AIcgRmMEOIkEK GDor1xmSrOMNiH7zt185Jj14R62C+PXyquqnvpr3JChvdiCtlwFze3XbtSHSo04V L2eNcq4kyW6N+9fcUa89dEwBPGKYOF8hu3wNe0q5vs4RUBa+PUvFG3mvzOPG3E7L i05QotnOyTkmjrzurr+bRB3JElkc9FGD4EHl6Dj6HoI6kPiph8AQiNBS1X7uxZ4r cySQPdhCWsxBfnUgE2SUGZ7Rvj4bYlol/3klcXc1l4mybTOr4Vnetur0kEtoiPgL fQnz7d0ft3IXPiNy8CyN8pDSKyh4IoJpxS7Rdj0dbFBuyu/J3lNWIBSGZBsqliZD ZyA= -----END CERTIFICATE-----Generated at Tue Oct 27 12:10:38 2026 by rpki-client