$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft File: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft (raw, json) Hash identifier: bXLSRgqITHRYJIdWJeMnuAwWgZ6fIWvDWsk7iuK/wEA= Subject key identifier: 3D:22:ED:D4:ED:4C:91:58:09:02:5A:0C:4A:B2:6F:40:42:42:58:E8 Authority key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 Certificate issuer: /CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Certificate serial: 75E80ECBCE47D018D62E9AF3A7837C226D0DEC1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft Manifest number: 03FA Signing time: Fri 09 Oct 2026 18:36:56 +0000 Manifest this update: Fri 09 Oct 2026 18:31:54 +0000 Manifest next update: Sat 10 Oct 2026 18:39:54 +0000 Files and hashes: 1: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl (hash: 4k1TfKC3dqh3tKp3fMxjjRW0aATMvBrcK7RdmrHGgC0=) 2: 326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (hash: xLQAJrSJm1fgs6FwcnWz9b5L+eTkpEnw3AYpTuci0+w=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Oct 2026 13:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e8:0e:cb:ce:47:d0:18:d6:2e:9a:f3:a7:83:7c:22:6d:0d:ec:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Validity Not Before: Oct 9 18:31:54 2026 GMT Not After : Oct 10 18:39:54 2026 GMT Subject: CN=3D22EDD4ED4C915809025A0C4AB26F40424258E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f9:8c:4b:a3:93:b6:7a:bc:d4:5f:d8:5c:6c: 4b:80:ea:4a:68:23:fa:73:c7:fc:cf:ff:67:61:f5: d0:83:11:9f:96:8f:76:77:f1:b0:5d:bc:56:dc:b9: c7:41:0a:b2:81:78:a5:bd:4b:9c:d4:85:21:a2:7f: ce:af:d5:29:cb:f1:eb:ee:b0:b5:ed:bb:5b:6b:ba: e6:fb:a2:43:4e:f2:ae:f6:99:69:47:26:68:ce:d7: 6a:c7:50:22:c6:0f:ed:1b:76:0d:53:7c:08:86:de: 71:66:ac:36:d0:7f:2e:70:8a:fe:53:99:d4:a0:1d: fd:b9:3f:82:f8:33:f6:f2:b1:f9:e2:d7:08:69:e6: 5f:8d:48:b2:7d:9f:ce:f7:f2:b7:86:43:d0:59:64: 49:78:8d:30:fa:b1:37:00:85:60:3b:78:77:77:71: cc:74:84:a9:ba:6c:73:5b:84:a3:5b:cd:a6:66:22: 1a:55:6c:07:86:7f:9c:22:12:1c:10:5b:36:61:08: 95:f3:f1:e4:f0:9e:ea:7d:73:7c:28:9d:06:05:86: a0:e1:dd:c5:9d:43:dc:ac:b8:30:c5:c4:1f:04:b6: d4:b8:44:a8:1e:a5:49:17:5f:fa:54:90:d4:a4:b4: f8:d4:3a:62:13:e0:a2:5e:63:35:0a:80:93:c0:3b: 2b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:22:ED:D4:ED:4C:91:58:09:02:5A:0C:4A:B2:6F:40:42:42:58:E8 X509v3 Authority Key Identifier: keyid:1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ef:37:58:3e:19:ea:bb:40:5b:5d:17:10:6b:d9:46:50:22:6a: 4d:fa:f9:30:d4:ad:29:5b:36:54:0c:c7:fe:74:2b:0a:6c:94: ef:b9:dc:4d:f4:b0:9e:d4:f8:7a:97:ef:06:67:1a:f9:e2:e5: e0:d6:6f:a6:cf:e6:98:d4:06:1f:5f:6b:50:1e:d1:9f:be:c7: 95:96:b5:f5:1c:c6:65:77:8e:ec:2a:1c:5d:5b:f9:c6:49:c6: 7a:fc:62:d9:40:83:f4:cf:e9:e6:a0:45:19:03:ca:1d:c7:48: 91:34:4e:e5:4a:f0:ff:01:1a:97:11:66:f4:68:35:0d:ef:26: d8:10:6e:20:e9:e2:13:9c:88:44:56:8e:ce:e2:37:9b:fd:ee: d9:a9:8c:8a:7d:5d:b1:d0:a1:d8:c8:58:77:fb:2e:1d:7c:30: 5f:8f:58:bf:f3:0d:05:08:dc:f3:ec:a4:d7:4c:02:92:90:26: 63:84:37:56:4b:3a:f6:6e:6b:99:18:02:80:b7:2e:6c:9a:53: f1:c7:62:e4:c4:c5:40:2d:d5:bb:c1:de:78:22:35:fb:ac:05: 39:ff:a1:9b:75:9d:ee:47:74:51:05:3b:d4:35:73:e0:29:13: b8:5d:ed:31:b1:39:bf:ff:59:fd:86:c1:c9:39:96:9c:40:93: 57:22:ba:1d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUdegOy85H0BjWLprzp4N8Im0N7BowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJB NkI3RUY3MTAeFw0yNjEwMDkxODMxNTRaFw0yNjEwMTAxODM5NTRaMDMxMTAvBgNV BAMTKDNEMjJFREQ0RUQ0QzkxNTgwOTAyNUEwQzRBQjI2RjQwNDI0MjU4RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3+YxLo5O2erzUX9hcbEuA6kpo I/pzx/zP/2dh9dCDEZ+Wj3Z38bBdvFbcucdBCrKBeKW9S5zUhSGif86v1SnL8evu sLXtu1truub7okNO8q72mWlHJmjO12rHUCLGD+0bdg1TfAiG3nFmrDbQfy5wiv5T mdSgHf25P4L4M/bysfni1whp5l+NSLJ9n8738reGQ9BZZEl4jTD6sTcAhWA7eHd3 ccx0hKm6bHNbhKNbzaZmIhpVbAeGf5wiEhwQWzZhCJXz8eTwnup9c3wonQYFhqDh 3cWdQ9ysuDDFxB8EttS4RKgepUkXX/pUkNSktPjUOmIT4KJeYzUKgJPAOyv7AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUPSLt1O1MkVgJAloMSrJvQEJCWOgwHwYDVR0j BBgwFoAUGrsI1BpaaXQyDZeId2mhW6a373EwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2IzZGE1Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAv MUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQUJCMDhENDFBNUE2OTc0MzIwRDk3ODg3NzY5QTE1 QkE2QjdFRjcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2IzZGE1 Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAvMUFCQjA4RDQxQTVBNjk3NDMy MEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAO83WD4Z6rtAW10XEGvZ RlAiak36+TDUrSlbNlQMx/50KwpslO+53E30sJ7U+HqX7wZnGvni5eDWb6bP5pjU Bh9fa1Ae0Z++x5WWtfUcxmV3juwqHF1b+cZJxnr8YtlAg/TP6eagRRkDyh3HSJE0 TuVK8P8BGpcRZvRoNQ3vJtgQbiDp4hOciERWjs7iN5v97tmpjIp9XbHQodjIWHf7 Lh18MF+PWL/zDQUI3PPspNdMApKQJmOEN1ZLOvZua5kYAoC3LmyaU/HHYuTExUAt 1bvB3ngiNfusBTn/oZt1ne5HdFEFO9Q1c+ApE7hd7TGxOb//Wf2Gwck5lpxAk1ci uh0= -----END CERTIFICATE-----Generated at Fri Oct 9 22:43:59 2026 by rpki-client