$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: mLgGYUhvZVmyBsJFnJv6Y83/+g40h2yh0W5YeD55lSg= Subject key identifier: 5E:1F:AF:A3:31:E6:16:AF:3D:42:B0:58:97:11:7C:90:5E:90:A0:06 Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 2DD7D6A3DA848C71DBD9B84FC79592E0DFDEE25C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 0323 Signing time: Fri 17 Apr 2026 17:03:38 +0000 Manifest this update: Fri 17 Apr 2026 16:58:36 +0000 Manifest next update: Sat 18 Apr 2026 19:16:36 +0000 Files and hashes: 1: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: QMaFb2cQYtifWMIXPTfO5S8+Tf71InsYs4C6lWVqd94=) 2: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: vxaqD429klEPt03aXXniKGxzQoHI4Ar9F2T3pRAzV/Y=) 3: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 3wo4yWYqUm70prj7oF5pGF3zOR0/7RB8Epa8stuidcg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 19:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d7:d6:a3:da:84:8c:71:db:d9:b8:4f:c7:95:92:e0:df:de:e2:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Apr 17 16:58:36 2026 GMT Not After : Apr 18 19:16:36 2026 GMT Subject: CN=5E1FAFA331E616AF3D42B05897117C905E90A006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3a:2c:d1:4f:12:bb:21:c3:e2:2f:f8:31:59: 5f:dc:d4:a6:24:b5:6e:67:4b:06:8b:08:cd:fc:f4: 12:43:7f:5b:db:ee:00:ed:2a:d2:6c:6d:61:1f:5f: 1a:bc:f8:0f:af:5e:ba:34:26:c4:00:a8:d7:ef:a6: 13:b4:27:e0:42:20:bf:76:02:6c:30:b8:90:05:88: b1:df:c0:78:a1:b7:8a:a0:0a:97:0c:11:69:7d:e1: 6a:6b:d7:ad:fc:fa:12:0b:98:64:00:92:76:1e:af: 35:b3:0d:8e:e9:db:d3:e5:35:bf:ca:f0:00:a5:93: 2e:c1:f4:df:78:ed:e2:04:d7:ac:58:da:a7:da:ea: 15:68:48:b7:3b:92:79:26:8c:9f:5d:18:9a:80:42: 75:6c:13:45:70:8b:b8:91:d3:f0:40:ec:69:5b:54: 2a:07:5c:c2:0c:b1:c2:d3:e9:98:58:fb:69:10:1d: 88:ec:07:e7:2c:b5:bd:1e:04:a0:00:90:2d:0e:28: 39:e7:1e:a4:1d:5d:85:8a:51:04:54:08:25:b8:ee: 8c:ea:66:c9:5e:08:74:2e:8b:da:c2:bf:83:76:40: 86:91:e3:5b:7c:9d:71:05:b7:a9:ae:65:7f:25:29: 1c:c7:93:2b:fa:cf:14:bc:2c:98:e8:96:4a:59:3a: b1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1F:AF:A3:31:E6:16:AF:3D:42:B0:58:97:11:7C:90:5E:90:A0:06 X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e7:8b:8a:08:ad:ca:0c:09:a9:1e:3b:52:ac:2a:e0:46:bf: 54:90:19:30:37:1a:b1:6f:d3:50:82:fa:62:f9:ff:86:5e:2d: 41:af:9f:1f:92:97:f0:4e:63:07:3e:ad:39:1e:3e:d0:52:9e: f6:cb:db:0d:65:62:ad:ca:38:32:f8:f6:5f:65:51:10:ad:52: 69:24:29:5d:ee:d6:28:c8:93:16:33:6a:e9:ce:91:8f:8c:b3: 71:c2:0d:85:48:39:dd:5a:ab:64:25:87:13:53:ce:47:d9:c2: 35:8e:2c:d5:63:ed:a5:f1:b7:dd:af:09:df:5c:45:87:5e:46: 51:d7:20:d5:e5:7e:52:ba:bc:b0:ee:bb:c8:0d:53:27:13:86: 9d:09:a2:58:e0:85:c6:6d:3b:70:85:d1:77:87:70:86:bc:8f: 55:16:87:25:8f:e0:86:c0:84:c7:b1:0d:a8:22:06:fe:66:0e: 9d:6c:a2:69:34:f4:b7:60:66:9d:37:53:96:76:06:8a:05:1c: 60:95:86:31:a2:15:a8:61:a3:3c:bb:63:4a:b8:8d:58:d4:fe: 2a:3d:de:0a:fd:4e:a0:86:b6:ee:29:e6:ab:84:87:76:8c:8d: 38:3c:13:f7:84:2a:71:d2:0a:37:b8:59:70:5d:90:fb:89:e7: 17:ce:2c:c1 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIULdfWo9qEjHHb2bhPx5WS4N/e4lwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNjA0MTcxNjU4MzZaFw0yNjA0MTgxOTE2MzZaMDMxMTAvBgNV BAMTKDVFMUZBRkEzMzFFNjE2QUYzRDQyQjA1ODk3MTE3QzkwNUU5MEEwMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5OizRTxK7IcPiL/gxWV/c1KYk tW5nSwaLCM389BJDf1vb7gDtKtJsbWEfXxq8+A+vXro0JsQAqNfvphO0J+BCIL92 AmwwuJAFiLHfwHiht4qgCpcMEWl94Wpr1638+hILmGQAknYerzWzDY7p29PlNb/K 8AClky7B9N947eIE16xY2qfa6hVoSLc7knkmjJ9dGJqAQnVsE0Vwi7iR0/BA7Glb VCoHXMIMscLT6ZhY+2kQHYjsB+cstb0eBKAAkC0OKDnnHqQdXYWKUQRUCCW47ozq ZsleCHQui9rCv4N2QIaR41t8nXEFt6muZX8lKRzHkyv6zxS8LJjolkpZOrHVAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUXh+vozHmFq89QrBYlxF8kF6QoAYwHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHzni4oIrcoMCakeO1Ks KuBGv1SQGTA3GrFv01CC+mL5/4ZeLUGvnx+Sl/BOYwc+rTkePtBSnvbL2w1lYq3K ODL49l9lURCtUmkkKV3u1ijIkxYzaunOkY+Ms3HCDYVIOd1aq2QlhxNTzkfZwjWO LNVj7aXxt92vCd9cRYdeRlHXINXlflK6vLDuu8gNUycThp0JoljghcZtO3CF0XeH cIa8j1UWhyWP4IbAhMexDagiBv5mDp1somk09LdgZp03U5Z2BooFHGCVhjGiFahh ozy7Y0q4jVjU/io93gr9TqCGtu4p5quEh3aMjTg8E/eEKnHSCje4WXBdkPuJ5xfO LME= -----END CERTIFICATE-----Generated at Sat Apr 18 10:10:46 2026 by rpki-client