$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json) Hash identifier: KfiC9SRyg6za/GTYh+lbEvfsthq6qehEda0c7pOzIwc= Subject key identifier: B6:F9:FA:20:C3:B8:74:6D:E2:8D:1A:28:72:23:C1:32:D0:74:7C:3A Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 24342B32D49605D722B6C690E82399386BF7B130 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft Manifest number: 0347 Signing time: Wed 13 May 2026 01:33:13 +0000 Manifest this update: Wed 13 May 2026 01:28:13 +0000 Manifest next update: Thu 14 May 2026 03:02:13 +0000 Files and hashes: 1: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: +Pw2Pz/niLR0OIvDdEcfjmpFskGwMua2flzbLEwL+Go=) 2: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: vn32w0zGgfB0cVJZQUH0tGQAvf+HZ/StuvYLZuELll0=) 3: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: KSgTOOL8ZdXrf0lBxQkVAAr95/tmOBwkp7oTrpzhA3k=) 4: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: udhj+Cj6LdKS6F7VmXpps98C6UmzFOStEjpktiC8S+w=) 5: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: lsyXmgMo2kgoXmRgMmunPZLiaRdS1vAS2tClTiKX7yM=) 6: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: AvPgJpOsI1TploqZ0/2ASRnaOVLSsJ7W3kE96A2TVTo=) 7: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: 8j902cWXOhTuCO690tGBwZ7dH1WqGBRJ8B21eNCGG6w=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 00:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:34:2b:32:d4:96:05:d7:22:b6:c6:90:e8:23:99:38:6b:f7:b1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: May 13 01:28:13 2026 GMT Not After : May 14 03:02:13 2026 GMT Subject: CN=B6F9FA20C3B8746DE28D1A287223C132D0747C3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:61:7b:05:23:4a:6f:42:6b:f9:d7:97:d2: e7:4c:ef:33:c8:92:d9:95:87:3c:ca:8f:2b:b1:f5: 7f:52:54:af:d9:2b:f0:6c:39:bb:cd:39:4b:91:66: a2:6d:86:ca:39:c2:c3:c5:ab:5b:69:eb:62:a3:9e: 71:47:03:5b:23:91:f2:d1:4a:11:ff:ec:d3:5e:6b: ce:8f:0d:a9:55:9b:08:0e:36:8e:e2:eb:70:cf:72: f1:ea:5f:aa:47:dd:a3:b4:50:d0:2b:6c:e0:46:d0: 9a:91:09:ff:2c:38:7e:d4:a3:30:4f:b7:6d:1b:7e: 02:1a:f0:20:3d:6e:c7:de:d9:52:2a:67:d8:54:2f: 72:7f:6d:f7:01:00:08:4b:b6:61:35:92:b6:a8:94: a6:64:e9:d3:be:c7:ad:82:9e:df:03:6d:d8:f4:12: 86:ca:70:c2:7f:7d:35:5b:84:24:a3:19:e3:af:1e: 42:6e:91:dd:fd:99:b2:ee:24:ab:13:5a:36:d7:49: 69:0c:58:13:f8:12:d8:36:f1:64:ed:2e:e8:3b:2a: 07:5c:ca:07:ca:85:69:77:ef:d5:78:1a:83:01:9f: 3a:e5:94:c0:50:69:e0:6c:08:f6:24:8b:90:9b:a3: 79:b7:50:cd:40:cd:32:24:6f:27:40:9a:ff:b6:79: 92:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F9:FA:20:C3:B8:74:6D:E2:8D:1A:28:72:23:C1:32:D0:74:7C:3A X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:16:7a:f3:7a:93:ac:97:f1:63:29:ed:02:25:4a:5c:a9:72: 68:34:cc:c4:81:8e:33:23:2a:d7:b5:27:38:28:34:f1:56:33: 6c:b4:5f:f3:f7:f3:77:f8:34:a4:da:e1:80:bd:9c:3b:c2:1a: 99:ef:9b:6e:76:f5:dc:1a:23:f0:ce:66:27:a8:c8:c9:05:91: 08:ee:ca:e9:15:98:80:7c:50:35:b9:cb:e1:40:c6:01:76:85: 1f:2a:3a:79:67:0b:d6:93:21:e5:95:65:db:9c:be:c0:c6:3a: 1d:42:e8:8b:86:ae:70:dd:a9:49:9f:3c:ed:70:20:1b:40:f7: 93:7d:7d:9f:02:6b:a7:4a:43:c4:60:c0:5b:f5:02:aa:78:fd: 07:77:8e:19:93:d3:ea:73:11:6b:8c:59:21:9c:f3:a0:2d:05: 8e:93:65:1d:9e:94:45:1a:79:52:8c:22:5d:1e:20:00:84:d1: 00:ab:80:35:cc:ef:e0:ed:b5:c3:3e:e1:d0:bc:ff:ff:b0:d0: f7:4f:b6:0f:88:41:fb:80:f5:d5:a0:b4:7b:39:fe:41:14:42: 57:2d:a6:ff:5e:5d:7d:23:ed:25:35:b6:01:15:72:94:a5:88: e5:5c:5f:1f:49:56:0f:68:5e:07:cd:a1:62:5c:af:19:f7:ee: b4:a0:88:9b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUJDQrMtSWBdcitsaQ6COZOGv3sTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNjA1MTMwMTI4MTNaFw0yNjA1MTQwMzAyMTNaMDMxMTAvBgNV BAMTKEI2RjlGQTIwQzNCODc0NkRFMjhEMUEyODcyMjNDMTMyRDA3NDdDM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyX2F7BSNKb0Jr+deX0udM7zPI ktmVhzzKjyux9X9SVK/ZK/BsObvNOUuRZqJthso5wsPFq1tp62KjnnFHA1sjkfLR ShH/7NNea86PDalVmwgONo7i63DPcvHqX6pH3aO0UNArbOBG0JqRCf8sOH7UozBP t20bfgIa8CA9bsfe2VIqZ9hUL3J/bfcBAAhLtmE1kraolKZk6dO+x62Cnt8Dbdj0 EobKcMJ/fTVbhCSjGeOvHkJukd39mbLuJKsTWjbXSWkMWBP4Etg28WTtLug7Kgdc ygfKhWl379V4GoMBnzrllMBQaeBsCPYki5Cbo3m3UM1AzTIkbydAmv+2eZK/AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUtvn6IMO4dG3ijRoociPBMtB0fDowHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzI1NDA1 Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0QTQ1MzgwQzZENDU1 Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAwWevN6k6yX8WMp7QIl Slypcmg0zMSBjjMjKte1JzgoNPFWM2y0X/P383f4NKTa4YC9nDvCGpnvm2529dwa I/DOZieoyMkFkQjuyukVmIB8UDW5y+FAxgF2hR8qOnlnC9aTIeWVZducvsDGOh1C 6IuGrnDdqUmfPO1wIBtA95N9fZ8Ca6dKQ8RgwFv1Aqp4/Qd3jhmT0+pzEWuMWSGc 86AtBY6TZR2elEUaeVKMIl0eIACE0QCrgDXM7+DttcM+4dC8//+w0PdPtg+IQfuA 9dWgtHs5/kEUQlctpv9eXX0j7SU1tgEVcpSliOVcXx9JVg9oXgfNoWJcrxn37rSg iJs= -----END CERTIFICATE-----Generated at Wed May 13 16:14:07 2026 by rpki-client