$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: MStMI2HQpcXJVgIvoWSGK0YGIe20ThQoosuM0R1xYSw= Subject key identifier: B2:98:9B:B8:98:50:F4:3D:8F:8C:AE:6F:D3:0E:5A:D0:27:18:B8:94 Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 03C539D2D918F46CCE4426D48DDA0D9AC2DA30CE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 0402 Signing time: Thu 15 Oct 2026 18:06:46 +0000 Manifest this update: Thu 15 Oct 2026 18:01:44 +0000 Manifest next update: Fri 16 Oct 2026 20:03:44 +0000 Files and hashes: 1: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: 9i58R0gUfaDtpcCpj6QSKAWfXILEkOXgpPJj6OV7TgU=) 2: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: mGICFwpePDC//7H7pNzqqtaxos1cs8gBg5nTz4FiekQ=) 3: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: dc7aFvZsFxdINUzmo03viwCzNgQ2HUK3QhleWk4YGzY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Oct 2026 17:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c5:39:d2:d9:18:f4:6c:ce:44:26:d4:8d:da:0d:9a:c2:da:30:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Oct 15 18:01:44 2026 GMT Not After : Oct 16 20:03:44 2026 GMT Subject: CN=B2989BB89850F43D8F8CAE6FD30E5AD02718B894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e9:8d:63:29:90:00:f4:2e:0c:cf:ac:0d:82: 7a:31:19:be:6f:82:b2:67:d7:40:c4:82:d4:bb:fc: f5:03:83:ca:3a:9a:8c:d6:f9:dd:44:ed:63:79:4a: c4:bd:60:fb:51:8f:e3:cf:58:4b:a1:be:0b:95:d2: 28:36:f4:7d:7f:8c:96:0d:a5:8d:42:bf:c5:86:eb: 6e:6b:5c:1f:9c:12:e6:cf:2a:05:19:74:3a:fe:32: c6:b0:4a:0e:c6:b6:63:a1:79:06:71:d2:4d:79:97: 96:0b:a9:cc:06:47:cc:46:b0:dc:76:5e:4e:4a:1b: 95:4a:e8:c8:20:2a:00:e0:3e:72:2b:54:52:51:cc: 46:8f:9d:0d:7a:d7:8f:4e:5c:7a:d4:b1:52:5c:3e: fc:b2:ab:87:fb:20:5f:56:37:d8:cb:07:c6:27:4c: 6b:e5:3c:41:37:82:b3:b1:a2:78:40:d0:af:72:9d: 77:a0:b0:19:a6:a2:0a:7b:41:50:0b:59:49:29:4e: b9:c5:f9:61:76:aa:71:27:f9:bf:dc:05:76:24:7f: 03:6d:fc:e5:94:d4:b5:23:21:49:6f:42:31:32:45: ff:88:c0:79:96:d1:c5:89:b6:76:c6:5f:d5:9a:e8: 9d:f6:f3:05:9a:b9:9d:47:89:84:97:62:c1:c3:9d: d2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:98:9B:B8:98:50:F4:3D:8F:8C:AE:6F:D3:0E:5A:D0:27:18:B8:94 X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:a6:34:a2:77:c7:95:0d:05:70:aa:43:0d:9f:3f:ad:3f:eb: 8b:0d:0d:bc:b5:54:dd:9b:a3:4e:80:9f:4e:55:ec:5d:3d:97: 8e:ce:61:a0:45:5c:a2:14:fa:26:90:87:b6:ff:1e:97:62:7a: 12:f8:89:f9:3b:53:06:0c:cc:14:99:99:11:78:65:fd:a7:c5: d3:e9:3c:39:5c:ca:5f:60:8e:ce:5b:87:c5:34:df:16:5f:68: 17:0b:e7:b8:27:b9:e4:66:a7:43:f1:a3:a3:53:ef:40:37:67: 8a:01:0c:2a:8f:04:bf:23:ca:dd:c4:3b:3a:9b:29:f3:9a:80: e1:31:ae:78:fe:a7:fa:17:e9:94:04:24:6d:86:d6:3e:65:22: a2:3f:9e:a6:1d:0f:10:eb:8d:ee:9a:f7:29:ee:ab:6d:fd:86: 31:e3:30:e4:4e:50:1b:6a:d9:60:77:af:f0:ec:7e:f0:d2:2f: 54:04:a9:98:14:a7:79:5d:32:9c:50:f6:00:a7:a4:fa:ed:09: 2c:96:bc:67:51:6e:6d:04:5d:3a:95:b9:04:a4:2a:d3:53:33: 16:88:61:13:e1:6c:f0:7a:e5:f2:be:5e:b6:ee:3e:72:20:ff: c1:f8:6d:a2:3c:8f:12:a4:2f:78:73:3e:3b:64:93:af:80:a0: 65:c7:ff:02 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUA8U50tkY9GzORCbUjdoNmsLaMM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNjEwMTUxODAxNDRaFw0yNjEwMTYyMDAzNDRaMDMxMTAvBgNV BAMTKEIyOTg5QkI4OTg1MEY0M0Q4RjhDQUU2RkQzMEU1QUQwMjcxOEI4OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ6Y1jKZAA9C4Mz6wNgnoxGb5v grJn10DEgtS7/PUDg8o6mozW+d1E7WN5SsS9YPtRj+PPWEuhvguV0ig29H1/jJYN pY1Cv8WG625rXB+cEubPKgUZdDr+MsawSg7GtmOheQZx0k15l5YLqcwGR8xGsNx2 Xk5KG5VK6MggKgDgPnIrVFJRzEaPnQ16149OXHrUsVJcPvyyq4f7IF9WN9jLB8Yn TGvlPEE3grOxonhA0K9ynXegsBmmogp7QVALWUkpTrnF+WF2qnEn+b/cBXYkfwNt /OWU1LUjIUlvQjEyRf+IwHmW0cWJtnbGX9Wa6J328wWauZ1HiYSXYsHDndLLAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUspibuJhQ9D2PjK5v0w5a0CcYuJQwHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACWmNKJ3x5UNBXCqQw2f P60/64sNDby1VN2bo06An05V7F09l47OYaBFXKIU+iaQh7b/HpdiehL4ifk7UwYM zBSZmRF4Zf2nxdPpPDlcyl9gjs5bh8U03xZfaBcL57gnueRmp0Pxo6NT70A3Z4oB DCqPBL8jyt3EOzqbKfOagOExrnj+p/oX6ZQEJG2G1j5lIqI/nqYdDxDrje6a9ynu q239hjHjMOROUBtq2WB3r/DsfvDSL1QEqZgUp3ldMpxQ9gCnpPrtCSyWvGdRbm0E XTqVuQSkKtNTMxaIYRPhbPB65fK+XrbuPnIg/8H4baI8jxKkL3hzPjtkk6+AoGXH /wI= -----END CERTIFICATE-----Generated at Fri Oct 16 00:15:14 2026 by rpki-client