$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft File: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft (raw, json) Hash identifier: gbOeB6syMagosIiziKItismIg+nUjEHRHooA8/DK+8Y= Subject key identifier: DA:D2:8A:C0:56:F0:2B:88:37:CA:94:14:88:A9:9A:1F:1B:8D:93:D2 Authority key identifier: 1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87 Certificate issuer: /CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87 Certificate serial: 33ED09409DB34556393B622DAC852C4E9174CA88 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft Manifest number: 031F Signing time: Fri 17 Apr 2026 20:29:06 +0000 Manifest this update: Fri 17 Apr 2026 20:24:03 +0000 Manifest next update: Sat 18 Apr 2026 23:22:03 +0000 Files and hashes: 1: 326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa (hash: Ck9ZZ0tiSTG41w0m3od8Zz6h1DTJUjOEieFp2NJMOpw=) 2: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl (hash: 2YNCwLs6V0JO9Lgo6pKyln2yOYbmQ7ydGhJt0nmT6lk=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ed:09:40:9d:b3:45:56:39:3b:62:2d:ac:85:2c:4e:91:74:ca:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87 Validity Not Before: Apr 17 20:24:03 2026 GMT Not After : Apr 18 23:22:03 2026 GMT Subject: CN=DAD28AC056F02B8837CA941488A99A1F1B8D93D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e7:13:2f:83:78:de:ca:b4:28:8b:c9:24:e1: a6:95:af:f1:e0:16:b5:0f:29:7b:23:ca:e8:a7:d8: 01:e3:14:23:20:1c:1f:81:8d:7e:5d:73:8b:d3:e9: 5f:1e:63:57:0a:5f:b5:e1:1a:8e:fa:ad:76:bd:02: 5e:34:93:05:92:20:3c:b1:89:d0:df:d9:5e:be:97: 08:04:c0:c2:99:f3:ae:5f:09:05:7f:0e:f1:33:14: 03:24:a8:4d:08:3d:f6:e1:b2:7d:0c:27:5f:f9:f4: 1a:d6:6b:e8:ee:e6:f4:db:a3:68:bc:73:16:c3:a1: 56:2f:8e:5e:fb:64:90:4a:ab:d1:f5:10:cf:2b:f7: e1:1a:a7:86:93:91:d9:c5:59:33:ea:f1:76:84:07: 08:fc:b9:a6:10:c6:75:4f:48:de:90:ac:32:ed:c9: f7:26:ff:1e:7f:b1:8b:47:53:46:54:01:3e:2e:06: 71:02:81:b3:4a:bc:99:ae:cb:b6:68:bf:59:97:76: ae:32:2a:b6:76:61:c6:75:0d:79:e7:bc:30:cf:33: 75:06:2d:96:38:be:e6:b5:87:a6:1f:b2:b4:7a:0c: 6c:0c:50:8c:99:da:ab:2f:f2:ce:3a:35:37:57:2a: 0a:32:24:e8:a3:48:4b:db:83:72:a9:d3:65:fd:07: a6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D2:8A:C0:56:F0:2B:88:37:CA:94:14:88:A9:9A:1F:1B:8D:93:D2 X509v3 Authority Key Identifier: keyid:1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:7b:55:51:d3:34:f6:d2:aa:c4:55:8a:27:35:36:8d:3e:fe: 72:56:1f:93:64:88:28:fd:76:10:48:25:08:28:56:70:3c:84: ac:be:24:03:08:9e:ad:a1:f6:d7:6e:b0:7f:99:4b:a8:2c:13: 84:8a:12:a1:b6:24:e9:47:ec:e0:c4:f7:fb:e1:34:7b:37:55: 4b:69:84:a8:e4:f4:38:b5:70:b9:f5:e3:3b:c8:4f:ed:d1:4e: bf:fa:47:6a:ac:13:37:86:c4:e4:16:e7:e7:3a:77:65:6a:61: 11:0b:93:1e:12:fc:5e:df:89:44:e5:09:d9:29:04:80:bd:93: a7:f3:5c:ce:ba:42:e3:70:d3:f1:93:c0:b1:40:89:58:f9:05: ad:58:f8:3e:25:ea:5d:d6:f9:04:df:96:f6:58:41:d0:62:37: 05:d7:3f:05:73:74:2c:5f:d1:53:93:35:84:ab:2b:d0:b9:66: 18:69:13:3b:27:a2:f8:ec:40:3b:cb:d7:86:91:74:bc:ed:7a: dd:23:0b:13:97:54:f0:75:65:b8:b4:f0:de:d1:13:bc:b8:1e: 82:04:d8:69:bd:ff:1f:20:48:44:5d:d4:e9:19:d4:5c:63:0e: 08:43:f0:a2:05:0e:d4:26:5e:76:00:2d:f1:f9:bf:34:0a:4a: 0d:40:19:e2 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUM+0JQJ2zRVY5O2ItrIUsTpF0yogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZCOUM4NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3 MDFCMEY4NzAeFw0yNjA0MTcyMDI0MDNaFw0yNjA0MTgyMzIyMDNaMDMxMTAvBgNV BAMTKERBRDI4QUMwNTZGMDJCODgzN0NBOTQxNDg4QTk5QTFGMUI4RDkzRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj5xMvg3jeyrQoi8kk4aaVr/Hg FrUPKXsjyuin2AHjFCMgHB+BjX5dc4vT6V8eY1cKX7XhGo76rXa9Al40kwWSIDyx idDf2V6+lwgEwMKZ865fCQV/DvEzFAMkqE0IPfbhsn0MJ1/59BrWa+ju5vTbo2i8 cxbDoVYvjl77ZJBKq9H1EM8r9+Eap4aTkdnFWTPq8XaEBwj8uaYQxnVPSN6QrDLt yfcm/x5/sYtHU0ZUAT4uBnECgbNKvJmuy7Zov1mXdq4yKrZ2YcZ1DXnnvDDPM3UG LZY4vua1h6YfsrR6DGwMUIyZ2qsv8s46NTdXKgoyJOijSEvbg3Kp02X9B6YJAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU2tKKwFbwK4g3ypQUiKmaHxuNk9IwHwYDVR0j BBgwFoAUH7nIUPkT1sCad22Ls4MnvnAbD4cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2NjNmMwZDBmNGMwNzQyNDM5MmQ4MjM4NzIwY2M2YTgyLzAv MUZCOUM4NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3MDFCMEY4Ny5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRkI5Qzg1MEY5MTNENkMwOUE3NzZEOEJCMzgzMjdC RTcwMUIwRjg3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2NjNmMw ZDBmNGMwNzQyNDM5MmQ4MjM4NzIwY2M2YTgyLzAvMUZCOUM4NTBGOTEzRDZDMDlB Nzc2RDhCQjM4MzI3QkU3MDFCMEY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABR7VVHTNPbSqsRViic1 No0+/nJWH5NkiCj9dhBIJQgoVnA8hKy+JAMInq2h9tdusH+ZS6gsE4SKEqG2JOlH 7ODE9/vhNHs3VUtphKjk9Di1cLn14zvIT+3RTr/6R2qsEzeGxOQW5+c6d2VqYREL kx4S/F7fiUTlCdkpBIC9k6fzXM66QuNw0/GTwLFAiVj5Ba1Y+D4l6l3W+QTflvZY QdBiNwXXPwVzdCxf0VOTNYSrK9C5ZhhpEzsnovjsQDvL14aRdLztet0jCxOXVPB1 Zbi08N7RE7y4HoIE2Gm9/x8gSERd1OkZ1FxjDghD8KIFDtQmXnYALfH5vzQKSg1A GeI= -----END CERTIFICATE-----Generated at Sat Apr 18 01:53:36 2026 by rpki-client