$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json) Hash identifier: vMRk5nb6Y0GWd/kZ2AK/8XSwVhVzPuKX0ppqLdebc98= Subject key identifier: 4A:AA:1D:B2:8E:77:98:BA:55:AC:D8:B6:29:B0:64:D0:22:71:02:F3 Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 6B555A0FC709FBEE492B3FE3F2CE45E3A88A4DFA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft Manifest number: 0400 Signing time: Tue 13 Oct 2026 05:50:47 +0000 Manifest this update: Tue 13 Oct 2026 05:45:46 +0000 Manifest next update: Wed 14 Oct 2026 08:52:46 +0000 Files and hashes: 1: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: ceCnwcljFctDbZuPZdgDMFDg9FrAGhpiNlRBVegZOgI=) 2: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: 8j902cWXOhTuCO690tGBwZ7dH1WqGBRJ8B21eNCGG6w=) 3: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: KSgTOOL8ZdXrf0lBxQkVAAr95/tmOBwkp7oTrpzhA3k=) 4: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: vn32w0zGgfB0cVJZQUH0tGQAvf+HZ/StuvYLZuELll0=) 5: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: +Pw2Pz/niLR0OIvDdEcfjmpFskGwMua2flzbLEwL+Go=) 6: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: udhj+Cj6LdKS6F7VmXpps98C6UmzFOStEjpktiC8S+w=) 7: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: AvPgJpOsI1TploqZ0/2ASRnaOVLSsJ7W3kE96A2TVTo=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Oct 2026 08:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:55:5a:0f:c7:09:fb:ee:49:2b:3f:e3:f2:ce:45:e3:a8:8a:4d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: Oct 13 05:45:46 2026 GMT Not After : Oct 14 08:52:46 2026 GMT Subject: CN=4AAA1DB28E7798BA55ACD8B629B064D0227102F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:87:c3:75:32:d4:7c:34:50:a7:ba:c5:f8:da: 07:09:3c:98:8d:c3:84:da:d2:33:ae:38:7f:93:a3: eb:3d:b1:fe:12:36:9c:75:af:d6:12:ca:2b:f1:f8: 34:e1:3c:96:f2:13:03:72:69:ca:9e:d2:85:d4:85: a0:58:e9:1c:6c:51:89:d3:ad:b4:ae:47:15:d0:a6: 5e:61:cd:4f:1d:cb:30:1e:5e:27:97:9f:da:95:eb: 18:c0:ca:ff:e9:f7:f8:de:37:4f:ac:a5:bb:07:23: f6:ab:86:06:a8:40:fa:a2:14:b2:f9:8b:0d:43:0a: b3:c2:e0:e6:d0:7d:8c:b6:f0:a3:11:01:c0:bb:83: 23:d0:51:e5:82:5b:3e:b0:fd:33:b3:e4:47:09:40: 66:9d:d9:dd:f0:39:1f:8b:b8:c1:dc:99:9b:e6:53: 43:f4:b6:eb:02:7c:25:bd:cd:0a:36:fa:f5:f9:b7: 87:24:d8:40:48:48:68:bd:c1:d2:7a:7b:44:f9:4e: 0f:01:70:37:37:cb:0b:4c:81:3f:74:72:6e:94:d3: 89:10:51:0a:04:3c:3d:89:93:64:77:88:f5:4c:61: 36:6c:20:33:33:87:e4:af:74:98:82:8f:36:ff:75: 37:4a:c6:2a:6f:0c:29:60:e6:c6:bf:cf:ec:bd:b2: 65:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AA:1D:B2:8E:77:98:BA:55:AC:D8:B6:29:B0:64:D0:22:71:02:F3 X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:d2:92:1a:06:c8:65:a3:83:0a:f4:a3:b4:35:47:94:68:39: d4:e0:88:ad:b2:81:8b:00:a9:af:ee:ee:5e:58:f9:ea:a8:43: 6d:1d:e7:06:7d:34:7b:07:03:bb:23:37:f5:8d:9c:fc:56:8c: 47:13:2c:da:80:7a:7c:fc:22:7b:87:d0:bf:cb:09:ae:52:a3: 3e:4a:a0:f4:f7:85:7e:3d:36:22:4e:87:d3:4d:d3:fb:cd:9d: 3b:65:52:38:fe:e6:ff:f1:aa:9f:9c:76:47:76:71:df:ec:20: ce:53:4b:72:c1:2e:9c:1d:58:80:d9:b0:85:2c:8d:4a:e1:3d: 27:48:ce:b5:a2:70:b8:c3:80:bf:df:18:8e:aa:9c:e7:5d:85: ee:dc:44:a0:c5:f1:1c:3d:d9:93:fa:c8:89:a8:2d:16:91:a9: db:53:c4:a6:c7:65:97:5e:49:8f:c4:94:0a:42:31:b2:48:b6: 7b:9d:c3:07:3f:a6:2b:10:3c:cb:7a:b4:57:b4:ba:20:53:55: bd:59:78:57:0e:27:87:ed:57:d4:0a:ad:6f:0e:f0:b6:12:40: 1c:a3:d7:66:d3:6d:bd:4e:57:1c:7c:b5:88:a3:25:b3:7f:9e: 74:63:04:9e:c4:fc:76:f9:43:16:7c:a4:18:a7:e7:37:a1:24: a2:c2:6a:06 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUa1VaD8cJ++5JKz/j8s5F46iKTfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNjEwMTMwNTQ1NDZaFw0yNjEwMTQwODUyNDZaMDMxMTAvBgNV BAMTKDRBQUExREIyOEU3Nzk4QkE1NUFDRDhCNjI5QjA2NEQwMjI3MTAyRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDph8N1MtR8NFCnusX42gcJPJiN w4Ta0jOuOH+To+s9sf4SNpx1r9YSyivx+DThPJbyEwNyacqe0oXUhaBY6RxsUYnT rbSuRxXQpl5hzU8dyzAeXieXn9qV6xjAyv/p9/jeN0+spbsHI/arhgaoQPqiFLL5 iw1DCrPC4ObQfYy28KMRAcC7gyPQUeWCWz6w/TOz5EcJQGad2d3wOR+LuMHcmZvm U0P0tusCfCW9zQo2+vX5t4ck2EBISGi9wdJ6e0T5Tg8BcDc3ywtMgT90cm6U04kQ UQoEPD2Jk2R3iPVMYTZsIDMzh+SvdJiCjzb/dTdKxipvDClg5sa/z+y9smXHAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUSqodso53mLpVrNi2KbBk0CJxAvMwHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzI1NDA1 Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0QTQ1MzgwQzZENDU1 Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGbSkhoGyGWjgwr0o7Q1 R5RoOdTgiK2ygYsAqa/u7l5Y+eqoQ20d5wZ9NHsHA7sjN/WNnPxWjEcTLNqAenz8 InuH0L/LCa5Soz5KoPT3hX49NiJOh9NN0/vNnTtlUjj+5v/xqp+cdkd2cd/sIM5T S3LBLpwdWIDZsIUsjUrhPSdIzrWicLjDgL/fGI6qnOddhe7cRKDF8Rw92ZP6yImo LRaRqdtTxKbHZZdeSY/ElApCMbJItnudwwc/pisQPMt6tFe0uiBTVb1ZeFcOJ4ft V9QKrW8O8LYSQByj12bTbb1OVxx8tYijJbN/nnRjBJ7E/Hb5QxZ8pBin5zehJKLC agY= -----END CERTIFICATE-----Generated at Tue Oct 13 19:36:15 2026 by rpki-client