$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: pWZV1KftU9YfqLFfjWwASaAzw7yWYlsq3gBjH60u+ao= Subject key identifier: 06:1A:22:A0:3A:4B:93:27:19:21:A3:75:0D:67:D6:A2:C8:4A:3D:05 Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 23B52C2AFFA14E767F6AF962E0248763B9FF9117 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 03AC Signing time: Wed 29 Jul 2026 09:36:19 +0000 Manifest this update: Wed 29 Jul 2026 09:31:19 +0000 Manifest next update: Thu 30 Jul 2026 12:14:19 +0000 Files and hashes: 1: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: dc7aFvZsFxdINUzmo03viwCzNgQ2HUK3QhleWk4YGzY=) 2: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: mGICFwpePDC//7H7pNzqqtaxos1cs8gBg5nTz4FiekQ=) 3: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: EKjFkWSSzskMSbczNzG9oCEaCGlOLi6crfw40agNBcU=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Jul 2026 01:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b5:2c:2a:ff:a1:4e:76:7f:6a:f9:62:e0:24:87:63:b9:ff:91:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Jul 29 09:31:19 2026 GMT Not After : Jul 30 12:14:19 2026 GMT Subject: CN=061A22A03A4B93271921A3750D67D6A2C84A3D05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:09:47:b0:b0:ab:2c:ff:4e:83:ed:7f:06:2b: 15:3c:c7:70:b5:a5:44:8c:f0:5f:0b:8f:f2:4d:50: 54:d3:b7:34:53:a0:d9:23:e9:64:1f:4d:df:35:22: 76:8b:9c:33:7f:cb:83:8e:1c:55:98:1c:89:e2:1e: 72:4b:48:a9:f2:46:ed:bb:89:d3:25:e1:93:01:c0: 81:87:29:5a:50:48:b4:b7:e6:dd:0f:f1:39:36:8f: 8d:8c:4a:1c:aa:16:38:e9:92:03:eb:b8:b0:a0:c5: 50:6e:5b:ea:93:24:a3:85:ac:87:bb:2b:cd:b7:86: 49:01:35:c9:f8:1e:3a:90:50:cd:4e:07:68:29:cf: 33:6d:41:49:71:c2:69:bf:e3:9c:86:4e:41:11:00: f9:c7:ce:ad:62:98:af:31:77:de:e7:e8:bf:52:c5: f4:84:9b:7c:8d:94:31:f8:d3:08:16:a3:af:ff:6e: b3:b7:4b:c0:2f:22:dc:9c:c0:33:a8:23:d9:7b:e6: 3d:c0:fc:17:0b:04:b0:43:78:4a:5a:81:a6:4b:98: 2e:e3:86:a5:e1:7d:0c:b6:ae:70:9b:7c:53:15:bd: 66:4e:a2:10:85:68:fe:7e:40:5b:d2:b2:78:d9:5d: 0f:ca:b2:88:b8:b3:03:91:6c:7c:fd:e8:d1:cf:0d: ec:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1A:22:A0:3A:4B:93:27:19:21:A3:75:0D:67:D6:A2:C8:4A:3D:05 X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:a3:f3:7b:9f:61:1d:6a:6f:d1:66:65:1b:dc:63:6b:06:0a: 6c:d8:75:fd:df:fe:cb:a8:37:03:6e:24:a7:13:9e:eb:cf:30: 01:40:e6:fa:36:04:c1:53:da:42:8f:1c:93:62:e9:c9:6f:07: ae:51:be:97:9c:88:b8:fc:61:51:8f:70:cc:8c:03:87:e9:bd: 37:69:18:d3:27:04:1b:bc:9b:ba:9f:95:5e:9a:00:67:0b:b6: f0:71:47:04:fd:ec:17:97:80:b6:be:e7:eb:4f:89:44:50:8c: 5b:6b:34:38:64:cc:49:80:88:1c:26:f9:e8:01:c3:4a:71:a5: b9:10:85:7c:a4:93:30:bd:c5:ab:b8:ad:ac:dd:60:a5:3f:d4: 8b:3d:2a:67:3c:c7:53:bc:b5:ac:d0:24:16:a5:f0:f2:3f:d9: db:0b:2e:3a:e9:18:09:57:d0:28:82:67:ae:83:b9:03:01:1e: 44:a7:92:ab:23:fb:50:b8:24:8e:c4:b4:84:01:27:29:19:23: 91:2d:7f:f3:5c:2b:b3:2a:ed:72:4e:9b:50:81:72:27:fe:13: 95:ac:8b:10:4c:64:91:bf:ce:01:d7:cb:49:44:16:59:1d:91: b8:8e:8c:62:11:bf:f6:c2:64:ac:60:0e:83:9a:b6:a7:bb:3d: df:37:86:bd -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUI7UsKv+hTnZ/avli4CSHY7n/kRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNjA3MjkwOTMxMTlaFw0yNjA3MzAxMjE0MTlaMDMxMTAvBgNV BAMTKDA2MUEyMkEwM0E0QjkzMjcxOTIxQTM3NTBENjdENkEyQzg0QTNEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOCUewsKss/06D7X8GKxU8x3C1 pUSM8F8Lj/JNUFTTtzRToNkj6WQfTd81InaLnDN/y4OOHFWYHIniHnJLSKnyRu27 idMl4ZMBwIGHKVpQSLS35t0P8Tk2j42MShyqFjjpkgPruLCgxVBuW+qTJKOFrIe7 K823hkkBNcn4HjqQUM1OB2gpzzNtQUlxwmm/45yGTkERAPnHzq1imK8xd97n6L9S xfSEm3yNlDH40wgWo6//brO3S8AvItycwDOoI9l75j3A/BcLBLBDeEpagaZLmC7j hqXhfQy2rnCbfFMVvWZOohCFaP5+QFvSsnjZXQ/Ksoi4swORbHz96NHPDexHAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUBhoioDpLkycZIaN1DWfWoshKPQUwHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADaj83ufYR1qb9FmZRvc Y2sGCmzYdf3f/suoNwNuJKcTnuvPMAFA5vo2BMFT2kKPHJNi6clvB65RvpeciLj8 YVGPcMyMA4fpvTdpGNMnBBu8m7qflV6aAGcLtvBxRwT97BeXgLa+5+tPiURQjFtr NDhkzEmAiBwm+egBw0pxpbkQhXykkzC9xau4razdYKU/1Is9Kmc8x1O8tazQJBal 8PI/2dsLLjrpGAlX0CiCZ66DuQMBHkSnkqsj+1C4JI7EtIQBJykZI5Etf/NcK7Mq 7XJOm1CBcif+E5WsixBMZJG/zgHXy0lEFlkdkbiOjGIRv/bCZKxgDoOatqe7Pd83 hr0= -----END CERTIFICATE-----Generated at Wed Jul 29 16:15:59 2026 by rpki-client