$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft File: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft (raw, json) Hash identifier: rlC4I3vkZZedksTw+xfEjlsoiVDXUOvKMLkLaBJjcWc= Subject key identifier: D5:89:C9:64:2E:BE:B7:B8:D4:37:4A:C7:50:6B:34:BE:9D:53:E9:F3 Authority key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 Certificate issuer: /CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Certificate serial: 6624B8158769172560C6DAC10D6CA3ED911003E3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft Manifest number: 03AB Signing time: Tue 28 Jul 2026 14:57:55 +0000 Manifest this update: Tue 28 Jul 2026 14:52:55 +0000 Manifest next update: Wed 29 Jul 2026 15:50:55 +0000 Files and hashes: 1: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl (hash: 2maRQuZHUNpWZeEgPEVniDowHpj6qUDN+dkLfefj88w=) 2: 326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (hash: xLQAJrSJm1fgs6FwcnWz9b5L+eTkpEnw3AYpTuci0+w=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 15:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:24:b8:15:87:69:17:25:60:c6:da:c1:0d:6c:a3:ed:91:10:03:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71 Validity Not Before: Jul 28 14:52:55 2026 GMT Not After : Jul 29 15:50:55 2026 GMT Subject: CN=D589C9642EBEB7B8D4374AC7506B34BE9D53E9F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c4:46:3f:38:cd:31:5a:7b:b8:08:52:0e:18: 8c:d1:ff:45:31:52:5a:2c:69:6d:c2:02:02:71:09: 98:fd:aa:10:b2:4b:bb:92:4c:84:fd:e2:49:12:b8: c0:6d:b8:e2:9f:35:dc:bb:bb:d6:1c:6f:c3:7e:96: 27:c7:62:02:72:9c:56:ec:6f:60:49:ca:03:8b:da: 8f:56:cf:17:16:33:48:9c:58:ab:7d:a6:8c:72:25: 00:f6:11:92:5a:71:f5:33:8a:df:71:77:17:cf:dd: b5:32:9a:10:b6:7e:68:d1:36:47:3e:41:a7:36:b5: e5:df:ec:1d:0e:f9:27:ed:f1:ae:27:f8:d0:91:7b: aa:77:f1:75:71:5b:80:bd:1a:0e:51:26:08:1e:ff: 6c:c4:82:ed:0f:7e:74:bd:fc:71:1b:8c:6e:05:4f: 51:6f:3e:af:19:ca:55:0f:9b:60:fb:e7:0e:1a:97: 10:48:27:a4:1c:7d:a8:31:06:21:20:04:ad:42:c1: 4b:49:25:bd:17:3f:68:e2:1f:1b:c6:ba:f2:d0:00: 20:a6:a4:af:41:bb:92:0e:2e:b0:af:15:6f:68:96: 24:b4:06:29:fe:39:ed:6e:05:35:b0:8a:dd:72:c8: 52:51:79:bd:d7:07:b8:ba:0e:24:c5:53:66:6a:6e: bd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:89:C9:64:2E:BE:B7:B8:D4:37:4A:C7:50:6B:34:BE:9D:53:E9:F3 X509v3 Authority Key Identifier: keyid:1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:33:f4:79:43:7d:98:65:83:22:64:df:96:48:07:57:f3:35: 7a:49:3a:c5:56:dc:25:5a:96:f9:d1:ae:89:bf:32:dc:b7:89: ae:f0:cf:c7:a9:0e:5a:b1:36:c2:db:10:a1:fe:86:60:26:11: db:61:18:36:11:55:11:9d:8a:60:69:15:39:9d:f8:b1:7c:37: 90:b5:bf:1d:85:c9:5d:c7:57:f1:01:51:9b:9d:42:ef:19:23: 75:3a:a2:b1:66:ba:f3:4a:35:09:18:7a:b6:e4:28:19:78:d7: e6:41:f2:e5:c4:ed:26:f2:c7:39:54:28:6d:91:2b:8a:ee:2b: 7e:0c:43:02:91:55:7e:d7:59:10:03:46:90:48:98:02:e3:69: f4:0a:54:92:41:cb:56:9a:85:b7:35:31:74:a4:65:0d:1f:35: c9:81:23:74:30:4c:15:e1:24:36:61:9d:00:06:41:78:47:a0: 5a:d2:1a:8d:cc:6f:4b:9f:20:98:ab:88:79:c4:ed:4b:f2:53: d0:b5:5b:07:9e:42:65:4a:42:74:88:e3:01:0c:27:12:26:5d: 33:6a:1c:be:b8:b5:eb:2f:25:aa:da:0d:6d:93:67:e9:27:f9: 19:b9:ea:99:31:ff:80:d1:7e:a5:b8:43:a5:b6:a6:f8:0f:12: 63:a2:f8:ef -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUZiS4FYdpFyVgxtrBDWyj7ZEQA+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJB NkI3RUY3MTAeFw0yNjA3MjgxNDUyNTVaFw0yNjA3MjkxNTUwNTVaMDMxMTAvBgNV BAMTKEQ1ODlDOTY0MkVCRUI3QjhENDM3NEFDNzUwNkIzNEJFOUQ1M0U5RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbxEY/OM0xWnu4CFIOGIzR/0Ux UlosaW3CAgJxCZj9qhCyS7uSTIT94kkSuMBtuOKfNdy7u9Ycb8N+lifHYgJynFbs b2BJygOL2o9WzxcWM0icWKt9poxyJQD2EZJacfUzit9xdxfP3bUymhC2fmjRNkc+ Qac2teXf7B0O+Sft8a4n+NCRe6p38XVxW4C9Gg5RJgge/2zEgu0PfnS9/HEbjG4F T1FvPq8ZylUPm2D75w4alxBIJ6QcfagxBiEgBK1CwUtJJb0XP2jiHxvGuvLQACCm pK9Bu5IOLrCvFW9oliS0Bin+Oe1uBTWwit1yyFJReb3XB7i6DiTFU2Zqbr19AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU1YnJZC6+t7jUN0rHUGs0vp1T6fMwHwYDVR0j BBgwFoAUGrsI1BpaaXQyDZeId2mhW6a373EwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2IzZGE1Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAv MUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQUJCMDhENDFBNUE2OTc0MzIwRDk3ODg3NzY5QTE1 QkE2QjdFRjcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2IzZGE1 Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAvMUFCQjA4RDQxQTVBNjk3NDMy MEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMQz9HlDfZhlgyJk35ZI B1fzNXpJOsVW3CValvnRrom/Mty3ia7wz8epDlqxNsLbEKH+hmAmEdthGDYRVRGd imBpFTmd+LF8N5C1vx2FyV3HV/EBUZudQu8ZI3U6orFmuvNKNQkYerbkKBl41+ZB 8uXE7SbyxzlUKG2RK4ruK34MQwKRVX7XWRADRpBImALjafQKVJJBy1aahbc1MXSk ZQ0fNcmBI3QwTBXhJDZhnQAGQXhHoFrSGo3Mb0ufIJiriHnE7UvyU9C1WweeQmVK QnSI4wEMJxImXTNqHL64tesvJaraDW2TZ+kn+Rm56pkx/4DRfqW4Q6W2pvgPEmOi +O8= -----END CERTIFICATE-----Generated at Wed Jul 29 01:18:17 2026 by rpki-client