$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json) Hash identifier: L5vD33yRu3ynmEBZL4Q8SWWGpdlA33ge5UOcmFcgnzk= Subject key identifier: 7A:63:A1:8C:B6:A0:42:A7:C5:F9:8F:27:82:29:EB:96:9A:42:23:F0 Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 4AE8B1A61401FB2369A3AA9EE2DA25BCDE3E4C5C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft Manifest number: 0308 Signing time: Thu 26 Mar 2026 02:28:50 +0000 Manifest this update: Thu 26 Mar 2026 02:23:47 +0000 Manifest next update: Fri 27 Mar 2026 05:03:47 +0000 Files and hashes: 1: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: KIVFOZ+9luDQru4P9AgBA10ZtX5QD10jK+Pk/mH5uvo=) 2: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: onhCLB3gV3HdQhsHYazqCSyNdZ/2h865cbuFqj2YlvA=) 3: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: b4lO7qQITmIuTe+1DZpcfLD2H0yGfI8Xz4qwvBeBNzo=) 4: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: pRpvcvkpUIjn6KDjm+Ywf0niLgvvVoNWrBKMV64s3Gs=) 5: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: scCBjh8HfhV3GwKDOrHZF1YXj718at6+uNm0y/KBmOw=) 6: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: fW3/1bM6uuAVh4/BqcyWFGfZeggD1zO77SW4GWfaw4U=) 7: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: Kgbp0+Zk4p3tpOkyAtCJ3HEWdnZBbzm3NgMcGrByxQs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 05:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e8:b1:a6:14:01:fb:23:69:a3:aa:9e:e2:da:25:bc:de:3e:4c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: Mar 26 02:23:47 2026 GMT Not After : Mar 27 05:03:47 2026 GMT Subject: CN=7A63A18CB6A042A7C5F98F278229EB969A4223F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:3d:2d:bd:af:83:45:28:68:80:26:77:81: 20:ff:8d:01:f1:ba:d0:a2:8a:2b:0f:2e:32:dd:43: 33:b1:8e:47:6d:68:58:d8:a7:95:7f:97:cc:24:c9: 7d:73:d7:ad:ac:6c:8b:9f:ed:7c:35:71:50:8a:ef: 25:5b:11:81:95:b2:d8:4a:32:75:a9:e8:99:bb:d8: d8:a3:0a:cc:46:64:de:6c:3b:0f:9d:85:46:3b:9b: ef:13:0d:54:13:ce:c4:87:01:3f:38:e2:f8:b6:ce: bd:83:76:e4:23:79:ca:de:d0:23:16:f3:e6:af:82: 57:09:1b:e3:e0:dd:5d:8c:25:b0:8a:8c:b9:a7:67: f4:14:e9:39:e8:46:a9:ee:71:ab:e1:be:3a:20:d0: 24:bf:fa:bf:f9:e0:e5:83:64:40:f6:ec:3c:82:44: 83:14:f5:ae:00:fb:8e:36:a3:75:ed:ad:80:b2:ed: 79:dd:eb:32:08:b4:e2:03:16:ca:dc:92:ae:42:67: ab:e0:c8:f2:3c:f3:ce:cb:8c:cc:ea:55:17:d2:60: 54:bb:4e:51:00:9d:83:45:69:f2:02:b8:3b:0e:21: fa:72:37:ad:b0:12:5d:5f:85:f2:06:2a:66:f7:1c: fa:2f:8a:4d:90:6e:a6:ef:2f:bf:fa:08:bb:53:01: c5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:63:A1:8C:B6:A0:42:A7:C5:F9:8F:27:82:29:EB:96:9A:42:23:F0 X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:74:d5:4f:49:dd:3e:b4:ad:44:f1:a9:72:35:97:71:1c:6c: db:5f:b3:17:1b:ff:eb:40:60:40:a0:5a:ff:b8:b3:72:a9:e6: 91:c9:e8:a6:9a:53:02:ec:7a:b8:b4:2d:e1:36:f1:4c:86:e7: 6c:0e:78:e9:85:aa:a8:98:d2:27:2c:71:64:a1:a0:48:4b:46: 58:2c:4a:76:24:56:a0:9d:42:00:7c:3f:77:5e:fe:62:aa:d2: 41:0d:7a:70:15:52:3d:3c:b9:f7:f7:e8:4c:5f:a3:bc:f6:dc: 8d:34:39:14:dc:b9:6a:e3:a2:83:6b:41:be:b0:80:39:8e:9c: 33:4c:68:d4:80:0a:07:97:e6:cc:bd:1c:a6:be:bf:68:30:7c: 6d:cf:0a:33:99:92:6b:af:36:1a:72:8e:1b:90:73:08:5e:dc: 45:4d:cd:e9:08:3d:c5:a5:96:69:5e:d9:ab:61:ae:01:f5:10: 30:02:3e:b0:4f:b2:e6:79:7c:c2:89:bf:0a:d7:3d:a4:e7:5f: 1b:61:e0:0f:12:84:32:aa:0f:cb:66:69:71:da:48:f8:58:85: 20:a8:3f:cf:07:d4:8a:29:76:08:6d:88:ad:4e:d2:0e:11:2e: 7b:3a:ab:e2:2d:3b:e9:d9:37:7d:06:e6:43:d6:2c:4c:1d:c6: d7:54:6f:cb -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUSuixphQB+yNpo6qe4tolvN4+TFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNjAzMjYwMjIzNDdaFw0yNjAzMjcwNTAzNDdaMDMxMTAvBgNV BAMTKDdBNjNBMThDQjZBMDQyQTdDNUY5OEYyNzgyMjlFQjk2OUE0MjIzRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC20z0tva+DRShogCZ3gSD/jQHx utCiiisPLjLdQzOxjkdtaFjYp5V/l8wkyX1z162sbIuf7Xw1cVCK7yVbEYGVsthK MnWp6Jm72NijCsxGZN5sOw+dhUY7m+8TDVQTzsSHAT844vi2zr2DduQjecre0CMW 8+avglcJG+Pg3V2MJbCKjLmnZ/QU6TnoRqnucavhvjog0CS/+r/54OWDZED27DyC RIMU9a4A+442o3XtrYCy7Xnd6zIItOIDFsrckq5CZ6vgyPI8887LjMzqVRfSYFS7 TlEAnYNFafICuDsOIfpyN62wEl1fhfIGKmb3HPovik2QbqbvL7/6CLtTAcWhAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUemOhjLagQqfF+Y8nginrlppCI/AwHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzI1NDA1 Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0QTQ1MzgwQzZENDU1 Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACB01U9J3T60rUTxqXI1 l3EcbNtfsxcb/+tAYECgWv+4s3Kp5pHJ6KaaUwLseri0LeE28UyG52wOeOmFqqiY 0icscWShoEhLRlgsSnYkVqCdQgB8P3de/mKq0kENenAVUj08uff36Exfo7z23I00 ORTcuWrjooNrQb6wgDmOnDNMaNSACgeX5sy9HKa+v2gwfG3PCjOZkmuvNhpyjhuQ cwhe3EVNzekIPcWllmle2athrgH1EDACPrBPsuZ5fMKJvwrXPaTnXxth4A8ShDKq D8tmaXHaSPhYhSCoP88H1IopdghtiK1O0g4RLns6q+ItO+nZN30G5kPWLEwdxtdU b8s= -----END CERTIFICATE-----Generated at Thu Mar 26 21:19:18 2026 by rpki-client