$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json) Hash identifier: 3mHpuEPNzj2H36OQYBPQsaaDZ9MSYeEhe3HLEtb9QaU= Subject key identifier: A9:97:83:22:48:F1:06:C2:33:8A:07:F0:B4:71:98:17:FA:4C:0B:75 Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 0D7C9308B1BBE4C79BA6471537BC0BBCDAA86ED9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft Manifest number: 03A7 Signing time: Fri 24 Jul 2026 11:00:17 +0000 Manifest this update: Fri 24 Jul 2026 10:55:17 +0000 Manifest next update: Sat 25 Jul 2026 11:13:17 +0000 Files and hashes: 1: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: 8j902cWXOhTuCO690tGBwZ7dH1WqGBRJ8B21eNCGG6w=) 2: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: +Pw2Pz/niLR0OIvDdEcfjmpFskGwMua2flzbLEwL+Go=) 3: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: 69p/W7aMF0l1FFhwg605CUNB6ScuYD1xqSS91Niih9k=) 4: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: AvPgJpOsI1TploqZ0/2ASRnaOVLSsJ7W3kE96A2TVTo=) 5: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: vn32w0zGgfB0cVJZQUH0tGQAvf+HZ/StuvYLZuELll0=) 6: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: udhj+Cj6LdKS6F7VmXpps98C6UmzFOStEjpktiC8S+w=) 7: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: KSgTOOL8ZdXrf0lBxQkVAAr95/tmOBwkp7oTrpzhA3k=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 09:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:7c:93:08:b1:bb:e4:c7:9b:a6:47:15:37:bc:0b:bc:da:a8:6e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: Jul 24 10:55:17 2026 GMT Not After : Jul 25 11:13:17 2026 GMT Subject: CN=A997832248F106C2338A07F0B4719817FA4C0B75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:17:06:ae:23:b7:18:0b:78:b3:5c:ae:14:d6: 10:c4:84:b5:62:24:83:4e:63:50:b9:06:ef:98:19: ab:27:ac:25:3f:ad:00:b2:6c:98:d6:a4:ef:95:33: 09:9b:9c:e8:34:97:d4:52:e6:d9:01:ff:47:c3:82: 86:a2:5c:80:49:8f:4f:c4:73:fc:a2:8c:4e:d5:19: 5c:f7:eb:d3:95:f2:cb:dd:4c:6e:05:a6:39:86:ed: 0a:41:92:4b:6a:66:f2:45:24:3f:0c:ce:5b:f2:73: cf:d9:4d:70:8c:b0:13:36:50:6f:e6:f5:33:0e:8d: b2:a5:fa:1b:91:d7:3f:0f:66:35:5a:0a:70:73:92: a8:e3:66:cc:74:61:67:c6:2e:d8:ef:0c:78:5a:b2: a1:73:3f:59:9f:10:d4:07:b8:49:bc:4a:dd:e9:12: 4a:63:a9:44:bb:c5:7e:32:fa:91:b1:fd:65:48:d1: 48:32:c4:07:15:11:52:3e:c1:73:cb:9a:bf:60:96: 0c:e4:7c:53:ee:21:32:ac:42:01:db:4f:7e:e3:9b: 82:de:4a:7c:98:f9:c5:c2:41:93:05:06:20:bd:00: a1:1c:31:62:c0:93:78:5b:86:bc:22:46:b7:64:53: 01:d6:94:2a:d3:74:50:57:b6:bf:25:de:6f:bd:71: 2b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:97:83:22:48:F1:06:C2:33:8A:07:F0:B4:71:98:17:FA:4C:0B:75 X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:fe:ca:3d:ea:14:75:ca:30:fc:0e:45:a4:1d:33:91:2e:c9: a4:9b:03:65:b5:cf:24:17:b9:d6:cb:de:85:fc:71:4d:85:28: 66:a9:8b:4e:da:d8:8d:56:f4:e7:33:a3:ae:5e:42:18:cc:96: 6a:6b:b1:e7:9b:3d:a1:b3:a5:e9:a2:a8:b4:a1:c9:64:e5:cf: 4e:d8:80:03:c9:c1:ff:34:c0:99:49:42:39:49:51:ca:a4:8e: 51:0c:1d:33:82:6b:4d:39:1b:c0:e5:74:1b:db:99:e9:b2:21: 0e:96:d4:c3:6f:2b:1d:99:b2:0b:fa:21:de:41:79:db:62:83: 10:53:11:c8:1f:7c:c5:00:e2:5d:a7:0a:11:7b:71:35:87:6c: a3:2c:0e:d3:27:2d:60:4e:39:71:be:6e:07:8e:91:a4:41:ff: 21:e3:39:2b:bb:9a:95:94:13:4d:bf:3e:64:bd:08:e1:79:cf: 88:a8:67:3a:75:75:77:4e:73:a0:12:df:91:87:87:f8:c8:2e: ad:d2:4a:a6:ea:ec:af:c1:02:b3:2b:75:35:e9:2c:22:ef:3e: 5a:24:a8:56:d9:16:e7:47:5d:41:f1:a0:0f:fd:b9:f0:f6:1a: e9:f6:bb:20:19:ae:60:e9:b8:b5:19:ae:53:8c:bd:47:67:6f: 88:22:f9:94 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUDXyTCLG75MebpkcVN7wLvNqobtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNjA3MjQxMDU1MTdaFw0yNjA3MjUxMTEzMTdaMDMxMTAvBgNV BAMTKEE5OTc4MzIyNDhGMTA2QzIzMzhBMDdGMEI0NzE5ODE3RkE0QzBCNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnFwauI7cYC3izXK4U1hDEhLVi JINOY1C5Bu+YGasnrCU/rQCybJjWpO+VMwmbnOg0l9RS5tkB/0fDgoaiXIBJj0/E c/yijE7VGVz369OV8svdTG4FpjmG7QpBkktqZvJFJD8Mzlvyc8/ZTXCMsBM2UG/m 9TMOjbKl+huR1z8PZjVaCnBzkqjjZsx0YWfGLtjvDHhasqFzP1mfENQHuEm8St3p EkpjqUS7xX4y+pGx/WVI0UgyxAcVEVI+wXPLmr9glgzkfFPuITKsQgHbT37jm4Le SnyY+cXCQZMFBiC9AKEcMWLAk3hbhrwiRrdkUwHWlCrTdFBXtr8l3m+9cSthAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUqZeDIkjxBsIzigfwtHGYF/pMC3UwHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzI1NDA1 Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0QTQ1MzgwQzZENDU1 Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGj+yj3qFHXKMPwORaQd M5EuyaSbA2W1zyQXudbL3oX8cU2FKGapi07a2I1W9Oczo65eQhjMlmprseebPaGz pemiqLShyWTlz07YgAPJwf80wJlJQjlJUcqkjlEMHTOCa005G8DldBvbmemyIQ6W 1MNvKx2Zsgv6Id5BedtigxBTEcgffMUA4l2nChF7cTWHbKMsDtMnLWBOOXG+bgeO kaRB/yHjOSu7mpWUE02/PmS9COF5z4ioZzp1dXdOc6AS35GHh/jILq3SSqbq7K/B ArMrdTXpLCLvPlokqFbZFudHXUHxoA/9ufD2Gun2uyAZrmDpuLUZrlOMvUdnb4gi +ZQ= -----END CERTIFICATE-----Generated at Fri Jul 24 22:32:54 2026 by rpki-client