$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft File: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft (raw, json) Hash identifier: Ag1odOsVjDD5jYoRLk6nZZWViFyNntdRpFcJ1js0Ygk= Subject key identifier: 98:A0:B9:84:E9:7E:87:BF:0F:5D:D8:60:82:56:E4:B1:4F:24:43:EB Authority key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 Certificate issuer: /CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Certificate serial: 77E686341988273E32EAC1B5B5B7018272A61E5F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft Manifest number: 0323 Signing time: Fri 17 Apr 2026 04:59:27 +0000 Manifest this update: Fri 17 Apr 2026 04:54:24 +0000 Manifest next update: Sat 18 Apr 2026 08:11:24 +0000 Files and hashes: 1: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl (hash: M84Ejz06FuD/CasjzEXKYkXhN6Qv7ilLLml9d1gAb+g=) 2: 326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (hash: rxzc3BrYti6kxmXubVnEFiS+UC7vkumI3P6AvUB5lwM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:e6:86:34:19:88:27:3e:32:ea:c1:b5:b5:b7:01:82:72:a6:1e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Validity Not Before: Apr 17 04:54:24 2026 GMT Not After : Apr 18 08:11:24 2026 GMT Subject: CN=98A0B984E97E87BF0F5DD8608256E4B14F2443EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f9:94:31:07:1a:b3:36:c4:d0:05:b5:20:e9: d4:d5:83:85:14:69:91:24:b3:cd:8f:ce:ab:17:bd: 3b:f4:b4:ad:53:6a:00:03:cf:5a:65:47:77:eb:85: 59:62:f3:ea:18:7d:3f:b8:de:e7:1f:f3:e2:91:a2: d7:7c:b7:aa:3f:95:7f:6c:3f:c4:b8:5a:35:c2:16: 12:59:58:a9:ea:fe:d8:8c:24:79:1c:bc:75:5b:68: 70:74:69:7d:6b:e0:a6:3c:b0:50:a2:9c:69:d4:6e: 32:a3:65:e0:4c:65:e2:60:57:35:36:ae:9c:c9:6c: 9a:5b:de:d8:a8:91:d8:4d:16:57:cd:1a:69:d8:78: 52:c1:1b:17:c4:a3:50:c5:ff:71:ae:9e:aa:6a:57: 67:75:b4:0e:c1:c0:4e:d0:31:b8:11:a1:1a:64:c4: 65:0d:c0:2a:f9:a7:08:9e:70:2f:ea:4a:a4:3d:c2: 2d:c3:3f:2a:1d:ab:a7:0d:7b:22:c1:a7:e7:ad:b0: ac:fd:43:7d:e1:19:f6:50:93:4e:a4:d3:12:d6:98: 56:92:36:0e:1e:ec:94:0f:92:a4:d8:72:18:14:c0: 7d:55:84:ce:8f:b1:28:76:03:c7:7e:18:96:bd:ae: 44:ad:7d:43:eb:89:52:be:41:0b:fd:98:4c:62:2e: ca:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A0:B9:84:E9:7E:87:BF:0F:5D:D8:60:82:56:E4:B1:4F:24:43:EB X509v3 Authority Key Identifier: keyid:1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:85:26:49:6b:ff:62:d4:f6:7a:d9:38:b7:39:6c:a0:a0:b2: 82:23:f5:a8:2a:06:7c:b1:ab:dd:05:a2:d0:2a:91:7a:a1:6a: c6:0c:57:3c:ca:9f:74:a8:5e:0a:f8:c1:c5:4d:ac:65:e0:87: 6a:28:22:1c:2a:1e:5f:35:0b:b1:f6:07:d2:fc:5d:48:90:0e: f4:d9:4f:1e:75:d4:51:e8:9f:32:ca:fb:cb:6e:00:df:1f:82: 12:b7:80:eb:57:de:66:0c:c8:73:81:08:e2:6e:20:7d:c6:ee: 72:6d:55:45:73:5e:43:d0:fb:25:dd:7c:8e:05:97:3d:b2:44: 0f:ac:15:b7:05:f2:9e:34:8b:74:4b:f1:63:1d:e9:22:5b:21: e9:4d:3f:9d:5e:2f:82:bb:ba:8a:6d:28:b3:e1:70:f8:6a:59: 31:bd:f7:5b:3e:ab:eb:3c:fe:20:b2:f3:4f:80:24:8f:56:2f: fb:ef:b4:a0:47:71:37:c3:8a:28:e9:26:09:c5:38:7d:e6:e6: 8e:80:6c:f6:3c:2a:6a:58:57:51:77:30:d7:70:3c:18:59:32: 8b:ee:28:ea:c0:45:30:c6:5f:13:95:5d:03:b2:a0:d2:7c:d5: 4c:51:ae:bf:b3:76:04:96:4f:e0:7e:2b:24:e5:9e:9c:33:d7: d6:4b:98:67 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUd+aGNBmIJz4y6sG1tbcBgnKmHl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJB NkI3RUY3MTAeFw0yNjA0MTcwNDU0MjRaFw0yNjA0MTgwODExMjRaMDMxMTAvBgNV BAMTKDk4QTBCOTg0RTk3RTg3QkYwRjVERDg2MDgyNTZFNEIxNEYyNDQzRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4+ZQxBxqzNsTQBbUg6dTVg4UU aZEks82PzqsXvTv0tK1TagADz1plR3frhVli8+oYfT+43ucf8+KRotd8t6o/lX9s P8S4WjXCFhJZWKnq/tiMJHkcvHVbaHB0aX1r4KY8sFCinGnUbjKjZeBMZeJgVzU2 rpzJbJpb3tiokdhNFlfNGmnYeFLBGxfEo1DF/3GunqpqV2d1tA7BwE7QMbgRoRpk xGUNwCr5pwiecC/qSqQ9wi3DPyodq6cNeyLBp+etsKz9Q33hGfZQk06k0xLWmFaS Ng4e7JQPkqTYchgUwH1VhM6PsSh2A8d+GJa9rkStfUPriVK+QQv9mExiLsofAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUmKC5hOl+h78PXdhgglbksU8kQ+swHwYDVR0j BBgwFoAUGrsI1BpaaXQyDZeId2mhW6a373EwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2IzZGE1Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAv MUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQUJCMDhENDFBNUE2OTc0MzIwRDk3ODg3NzY5QTE1 QkE2QjdFRjcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2IzZGE1 Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAvMUFCQjA4RDQxQTVBNjk3NDMy MEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG+FJklr/2LU9nrZOLc5 bKCgsoIj9agqBnyxq90FotAqkXqhasYMVzzKn3SoXgr4wcVNrGXgh2ooIhwqHl81 C7H2B9L8XUiQDvTZTx511FHonzLK+8tuAN8fghK3gOtX3mYMyHOBCOJuIH3G7nJt VUVzXkPQ+yXdfI4Flz2yRA+sFbcF8p40i3RL8WMd6SJbIelNP51eL4K7uoptKLPh cPhqWTG991s+q+s8/iCy80+AJI9WL/vvtKBHcTfDiijpJgnFOH3m5o6AbPY8KmpY V1F3MNdwPBhZMovuKOrARTDGXxOVXQOyoNJ81UxRrr+zdgSWT+B+KyTlnpwz19ZL mGc= -----END CERTIFICATE-----Generated at Fri Apr 17 21:03:58 2026 by rpki-client