$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft File: F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft (raw, json) Hash identifier: 90dEHc87ar+yFbh8Slmod4q5ylcpEYaYXjfgoxrVdKA= Subject key identifier: DF:AD:C5:7B:3E:A2:D8:66:40:BA:C5:AC:6B:58:88:28:B7:00:93:D4 Authority key identifier: F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 Certificate issuer: /CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Certificate serial: 7687644F7A74FD20F676A33F7B94729CC85D2DE6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft Manifest number: 0323 Signing time: Fri 17 Apr 2026 18:11:12 +0000 Manifest this update: Fri 17 Apr 2026 18:06:10 +0000 Manifest next update: Sat 18 Apr 2026 19:14:10 +0000 Files and hashes: 1: F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl (hash: 30CPPTdMTcEOcdC+ZAEWqM2ZWdgmUFzCWuqOPfTOTcc=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 19:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:87:64:4f:7a:74:fd:20:f6:76:a3:3f:7b:94:72:9c:c8:5d:2d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Validity Not Before: Apr 17 18:06:10 2026 GMT Not After : Apr 18 19:14:10 2026 GMT Subject: CN=DFADC57B3EA2D86640BAC5AC6B588828B70093D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:36:ca:6b:ac:a5:bc:d9:a7:3c:75:37:fd:ad: 88:bf:07:dd:fa:ce:58:a6:9d:f7:f3:d4:a6:ae:56: 63:10:c3:85:4c:ff:4a:db:cf:f2:95:19:87:a7:d1: fd:8e:84:9c:4d:b6:3f:49:48:ce:fc:29:75:f0:e0: 3f:74:ba:e5:54:b4:97:15:be:93:9e:71:a9:5d:02: c7:6e:62:c6:eb:91:1f:14:ea:58:45:dd:0e:e3:d9: d9:12:71:15:d8:60:d4:c5:40:8a:21:c9:6c:dc:30: d1:ae:d9:42:a0:54:5c:85:dc:8d:73:f2:77:5b:27: fa:94:ae:8e:88:3a:23:6d:3a:de:52:8b:d1:b6:87: f1:47:3a:4a:3c:65:32:de:62:2d:63:a5:21:36:6d: eb:ad:7d:23:1c:ef:12:b7:0e:40:1d:40:ac:1c:63: 71:85:5f:d3:15:6f:77:d8:23:5c:95:52:6d:e3:ff: cb:ac:52:e0:b3:d2:9c:42:a8:c6:79:67:78:a5:c1: 5d:34:26:6d:bf:02:40:14:55:01:e8:25:a9:98:44: b1:10:b4:d1:89:b1:4b:3c:45:c5:14:26:0d:6e:8e: b0:f0:e0:a3:b9:75:d0:c9:22:c0:4c:e4:06:61:56: f9:78:76:3b:a2:4a:5a:29:15:2d:c8:61:4e:5d:42: c2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AD:C5:7B:3E:A2:D8:66:40:BA:C5:AC:6B:58:88:28:B7:00:93:D4 X509v3 Authority Key Identifier: keyid:F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:ce:92:71:b5:9c:a5:18:d9:57:61:85:a9:c4:9a:4f:1d:d9: b4:15:86:4c:de:3a:8c:6a:38:99:7c:8e:2f:ab:b1:bf:6b:e0: 58:cc:e2:c0:67:d4:d0:b6:60:38:ea:5c:1d:52:20:6d:e4:f3: f2:ac:27:ca:f1:c3:4f:b7:56:20:89:b3:65:ef:37:43:bb:ea: 02:d1:69:f7:ec:94:a6:b7:6b:e5:df:08:50:ed:8b:27:5a:ca: cc:11:0d:58:a4:60:e7:99:85:e2:4f:72:77:90:19:90:85:65: c5:f0:4b:20:99:f5:3c:16:3a:c1:05:8f:39:56:19:18:37:19: 59:71:61:08:dc:9f:c8:68:36:0e:a9:50:b4:55:5f:91:8d:93: 9a:08:f3:4f:d5:81:23:7b:da:e1:b8:83:53:f4:a5:4a:49:88: d0:f0:16:40:c4:ce:a1:eb:6b:92:9f:ab:e0:6c:f2:31:c3:24: f0:02:1c:72:4e:05:26:c9:f6:30:95:d9:01:5a:bb:d2:97:df: 47:aa:0c:c8:17:7b:9d:9c:91:56:2b:43:a6:66:5d:b2:43:be: 62:62:d1:67:82:67:f2:9f:23:a3:4c:59:98:25:aa:e6:e5:38: cb:bf:bd:64:90:7d:a2:b4:10:a6:09:9a:e2:7c:cc:f0:2c:01: 9a:04:bd:85 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUdodkT3p0/SD2dqM/e5RynMhdLeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2 OTg2RDdDNjAeFw0yNjA0MTcxODA2MTBaFw0yNjA0MTgxOTE0MTBaMDMxMTAvBgNV BAMTKERGQURDNTdCM0VBMkQ4NjY0MEJBQzVBQzZCNTg4ODI4QjcwMDkzRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDONsprrKW82ac8dTf9rYi/B936 zlimnffz1KauVmMQw4VM/0rbz/KVGYen0f2OhJxNtj9JSM78KXXw4D90uuVUtJcV vpOecaldAsduYsbrkR8U6lhF3Q7j2dkScRXYYNTFQIohyWzcMNGu2UKgVFyF3I1z 8ndbJ/qUro6IOiNtOt5Si9G2h/FHOko8ZTLeYi1jpSE2beutfSMc7xK3DkAdQKwc Y3GFX9MVb3fYI1yVUm3j/8usUuCz0pxCqMZ5Z3ilwV00Jm2/AkAUVQHoJamYRLEQ tNGJsUs8RcUUJg1ujrDw4KO5ddDJIsBM5AZhVvl4djuiSlopFS3IYU5dQsKtAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU363Fez6i2GZAusWsa1iIKLcAk9QwHwYDVR0j BBgwFoAU95TfoAnqkLTLuzQN5MJVRGmG18YwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2RlNTMzMzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAv Rjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GNzk0REZBMDA5RUE5MEI0Q0JCQjM0MERFNEMyNTU0 NDY5ODZEN0M2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2RlNTMz Mzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAvRjc5NERGQTAwOUVBOTBCNENC QkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALHOknG1nKUY2VdhhanE mk8d2bQVhkzeOoxqOJl8ji+rsb9r4FjM4sBn1NC2YDjqXB1SIG3k8/KsJ8rxw0+3 ViCJs2XvN0O76gLRaffslKa3a+XfCFDtiydayswRDVikYOeZheJPcneQGZCFZcXw SyCZ9TwWOsEFjzlWGRg3GVlxYQjcn8hoNg6pULRVX5GNk5oI80/VgSN72uG4g1P0 pUpJiNDwFkDEzqHra5Kfq+Bs8jHDJPACHHJOBSbJ9jCV2QFau9KX30eqDMgXe52c kVYrQ6ZmXbJDvmJi0WeCZ/KfI6NMWZglqublOMu/vWSQfaK0EKYJmuJ8zPAsAZoE vYU= -----END CERTIFICATE-----Generated at Sat Apr 18 08:56:19 2026 by rpki-client