$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft File: F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft (raw, json) Hash identifier: TAlWzWswNBXkqjdZvVOXkwaPM9j+8e01EsvFhAMVwdo= Subject key identifier: DB:23:B1:92:71:B5:0C:11:72:F0:C7:16:26:24:81:18:C9:88:6F:34 Authority key identifier: F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 Certificate issuer: /CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Certificate serial: 588E53614AFC910DBA5051F251F8C03533C13B53 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft Manifest number: 0412 Signing time: Wed 28 Oct 2026 02:47:11 +0000 Manifest this update: Wed 28 Oct 2026 02:42:10 +0000 Manifest next update: Thu 29 Oct 2026 04:30:10 +0000 Files and hashes: 1: F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl (hash: Kc5fPR7s92GQ07KIw2lA14uXmvHvYxcshlvpf16DSHI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 04:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:8e:53:61:4a:fc:91:0d:ba:50:51:f2:51:f8:c0:35:33:c1:3b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Validity Not Before: Oct 28 02:42:10 2026 GMT Not After : Oct 29 04:30:10 2026 GMT Subject: CN=DB23B19271B50C1172F0C71626248118C9886F34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:91:21:f4:a4:28:0b:c1:26:44:73:ad:46:91: da:29:c2:fd:88:e6:79:d0:59:e0:22:70:bf:53:5c: bc:a9:b0:de:d5:1d:f8:c3:23:cf:11:5d:38:40:7b: ba:b7:d3:52:1a:67:f1:a8:c5:7b:ae:3c:b8:32:22: ae:83:ce:df:d2:58:69:3e:f9:66:43:11:57:bb:e6: 79:08:56:a5:67:0e:5f:08:56:b4:6b:d7:02:d7:34: a3:c2:d7:99:56:a0:0f:93:6a:b7:9c:16:ba:a5:5e: 6e:9c:2e:3e:59:98:34:02:cb:fd:f5:0d:2e:e7:45: 4b:0a:a0:cb:9d:f1:9c:7b:c9:e8:a7:53:38:e9:6f: 93:16:7d:9d:30:16:c9:c8:73:86:23:25:72:a8:07: c7:bb:a0:97:d3:cc:ed:2f:be:38:45:5b:4d:a4:7f: 12:45:64:5b:89:f2:5c:37:56:4b:fb:14:6e:99:a6: 62:bc:7a:ba:13:66:5c:7d:1c:3f:0b:28:be:94:af: 54:13:07:c0:c2:92:3f:e2:bf:1d:d1:7e:39:01:72: 90:cc:50:6a:09:56:6e:c4:eb:f1:fb:4e:82:6e:ff: 1d:6c:fb:7a:4a:ce:aa:9c:87:05:36:83:45:06:5d: 10:ad:d2:50:cc:6e:ae:51:d1:0e:f7:90:59:37:d7: 7e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:23:B1:92:71:B5:0C:11:72:F0:C7:16:26:24:81:18:C9:88:6F:34 X509v3 Authority Key Identifier: keyid:F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a0:5f:7c:a3:ca:7d:3c:45:e4:60:a7:61:6e:f5:07:01:1e: e2:23:ff:54:3f:9d:39:bc:94:ff:c4:d8:5d:43:e4:54:2e:b9: cd:86:73:17:46:dd:e6:a1:c1:db:81:a3:a3:cf:7a:93:1e:32: bb:50:f7:07:4a:33:94:19:f6:5b:cc:3a:07:22:ad:ee:be:7c: d6:db:56:60:ee:49:a9:b3:4f:6d:50:32:77:a7:fb:b6:c8:4a: 1e:8f:b0:95:80:d5:c8:e8:6f:89:0c:d9:37:66:cc:93:e5:c9: 52:55:0e:a8:0e:c1:b1:ab:a9:ef:36:56:6c:08:31:88:62:a7: 96:9b:7b:36:21:bc:f9:c0:71:13:1e:93:56:16:ec:18:66:e5: 2a:04:65:c8:46:74:37:c2:56:e0:98:dc:8e:12:8e:a2:a1:cf: ff:19:cd:29:d8:4c:d1:b0:b7:ef:62:91:b0:6b:b5:19:87:a6: 08:87:0d:c6:63:30:9e:7d:0c:2f:36:63:83:6d:cf:7a:ff:ca: 02:49:f1:4b:ab:af:56:1d:f8:e4:cc:c8:ac:18:c0:dd:49:eb: 67:d1:ea:5d:e3:76:1e:73:8f:0e:81:a7:10:8e:13:d7:97:c7: f7:f0:b8:cd:e0:50:73:33:97:b6:54:4a:28:a4:49:6f:ec:4a: 0b:b1:10:27 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUWI5TYUr8kQ26UFHyUfjANTPBO1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2 OTg2RDdDNjAeFw0yNjEwMjgwMjQyMTBaFw0yNjEwMjkwNDMwMTBaMDMxMTAvBgNV BAMTKERCMjNCMTkyNzFCNTBDMTE3MkYwQzcxNjI2MjQ4MTE4Qzk4ODZGMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLkSH0pCgLwSZEc61Gkdopwv2I 5nnQWeAicL9TXLypsN7VHfjDI88RXThAe7q301IaZ/GoxXuuPLgyIq6Dzt/SWGk+ +WZDEVe75nkIVqVnDl8IVrRr1wLXNKPC15lWoA+TarecFrqlXm6cLj5ZmDQCy/31 DS7nRUsKoMud8Zx7yeinUzjpb5MWfZ0wFsnIc4YjJXKoB8e7oJfTzO0vvjhFW02k fxJFZFuJ8lw3Vkv7FG6ZpmK8eroTZlx9HD8LKL6Ur1QTB8DCkj/ivx3RfjkBcpDM UGoJVm7E6/H7ToJu/x1s+3pKzqqchwU2g0UGXRCt0lDMbq5R0Q73kFk3135TAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU2yOxknG1DBFy8McWJiSBGMmIbzQwHwYDVR0j BBgwFoAU95TfoAnqkLTLuzQN5MJVRGmG18YwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2RlNTMzMzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAv Rjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GNzk0REZBMDA5RUE5MEI0Q0JCQjM0MERFNEMyNTU0 NDY5ODZEN0M2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2RlNTMz Mzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAvRjc5NERGQTAwOUVBOTBCNENC QkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACygX3yjyn08ReRgp2Fu 9QcBHuIj/1Q/nTm8lP/E2F1D5FQuuc2GcxdG3eahwduBo6PPepMeMrtQ9wdKM5QZ 9lvMOgcire6+fNbbVmDuSamzT21QMnen+7bISh6PsJWA1cjob4kM2TdmzJPlyVJV DqgOwbGrqe82VmwIMYhip5abezYhvPnAcRMek1YW7Bhm5SoEZchGdDfCVuCY3I4S jqKhz/8ZzSnYTNGwt+9ikbBrtRmHpgiHDcZjMJ59DC82Y4Ntz3r/ygJJ8Uurr1Yd +OTMyKwYwN1J62fR6l3jdh5zjw6BpxCOE9eXx/fwuM3gUHMzl7ZUSiikSW/sSgux ECc= -----END CERTIFICATE-----Generated at Wed Oct 28 13:01:09 2026 by rpki-client