$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft File: 31586760843F668A816117EA02F6F30FE8F9C359.mft (raw, json) Hash identifier: dAwjUVTQxr3T+I6IWSvMDHNOFB2q2O++MtyGY4RN/S0= Subject key identifier: 8C:5A:5B:40:4C:FE:AD:48:44:AF:5C:BD:E0:78:00:24:DA:A9:8F:17 Authority key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 Certificate issuer: /CN=31586760843F668A816117EA02F6F30FE8F9C359 Certificate serial: 2ED69E79E05783C5F1BB91A680DDE81E66966578 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft Manifest number: 0306 Signing time: Thu 26 Mar 2026 15:40:37 +0000 Manifest this update: Thu 26 Mar 2026 15:35:35 +0000 Manifest next update: Fri 27 Mar 2026 17:31:35 +0000 Files and hashes: 1: 31586760843F668A816117EA02F6F30FE8F9C359.crl (hash: Gbazr64fDma6s+MVc4J8p3WM2paSGi4ppNZCw9n1Peo=) 2: 326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa (hash: K6ERbHzYMOmGY8zVjajZjctj/rooDOMsKI1zpR886Vs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 08:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d6:9e:79:e0:57:83:c5:f1:bb:91:a6:80:dd:e8:1e:66:96:65:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31586760843F668A816117EA02F6F30FE8F9C359 Validity Not Before: Mar 26 15:35:35 2026 GMT Not After : Mar 27 17:31:35 2026 GMT Subject: CN=8C5A5B404CFEAD4844AF5CBDE0780024DAA98F17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:30:ff:ec:18:36:07:2c:39:07:69:54:6d:c2: 53:cd:51:a4:f1:34:80:98:f1:bc:a3:a3:9f:15:c2: 21:10:77:8b:a4:ac:24:2c:a3:a1:3b:3d:b8:9f:23: 62:22:98:2c:6f:5d:85:73:7e:4e:01:98:17:e2:f9: 82:fa:f9:7f:eb:0f:20:5c:c2:32:9b:b7:a0:0e:ff: 56:0d:a2:23:bd:c3:6e:91:ef:c0:08:64:33:bb:87: 25:d9:a2:03:f0:bf:d1:cc:15:a9:7d:64:ff:68:f5: b6:ff:90:92:00:90:e2:8e:21:9a:88:dc:b7:68:b2: 72:9b:1f:f2:f5:99:c2:76:a2:bb:68:04:de:3c:72: 5d:b5:b0:e2:4c:39:52:ce:fc:d5:58:6a:b9:44:2c: a1:72:40:cb:46:74:e4:7b:56:b7:32:02:da:aa:7d: 57:5c:83:b1:02:fd:86:e8:32:9f:84:eb:36:01:33: 21:b4:74:72:35:d5:56:55:53:6d:7b:54:75:7c:36: 8f:89:65:b4:1e:4f:5d:d6:6f:eb:c8:e8:90:32:de: d5:a7:06:db:30:e9:6f:a9:4a:35:65:47:6f:d0:1a: c1:20:c6:cb:7a:91:ed:85:75:95:ae:b6:b9:2b:4c: 1e:2f:5f:95:09:92:dc:ae:fb:df:31:ed:6f:87:8a: a9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5A:5B:40:4C:FE:AD:48:44:AF:5C:BD:E0:78:00:24:DA:A9:8F:17 X509v3 Authority Key Identifier: keyid:31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:1c:07:98:5f:20:91:16:ee:ed:6e:11:55:9f:75:16:6f:f8: 2d:44:6f:88:57:cb:c8:8b:2e:7b:1d:5d:42:06:5a:cc:b3:4a: 58:5d:21:7e:56:59:01:8b:d3:f7:55:d2:50:18:4c:9b:4b:f0: 53:64:9a:9c:83:d9:5d:d3:fb:0a:0e:2e:93:09:b3:67:85:5a: a4:ea:94:29:06:6d:63:5a:66:be:47:6d:70:53:8f:97:f9:47: 35:69:2f:60:27:bf:44:e0:b2:ad:26:a1:56:1e:48:2f:96:6f: 8c:fa:1c:5c:85:39:d9:d1:43:9d:40:f9:be:c5:fe:3d:9d:72: 80:4a:1d:4e:d3:70:f5:69:c6:f8:a0:4d:98:af:ad:f3:e8:cf: 7f:e4:be:ff:3a:22:82:77:41:ed:fd:af:91:99:22:17:f4:53: 6c:ef:25:10:af:11:cb:be:b9:10:37:c9:da:bf:54:bd:e5:0b: c0:b0:65:f9:8d:48:0b:19:50:df:12:da:fc:6c:c3:e3:33:cd: 0b:38:3b:9f:80:4c:b4:bc:38:72:a8:6d:92:61:e7:72:df:60: f9:21:cd:87:e2:e7:0e:0e:7d:d0:72:f4:af:91:e9:61:6d:51: 5d:d7:5e:93:44:36:cc:6a:ec:4b:e7:cc:6b:d8:f4:ff:26:b2: 4c:1b:5f:a9 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIULtaeeeBXg8Xxu5GmgN3oHmaWZXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZF OEY5QzM1OTAeFw0yNjAzMjYxNTM1MzVaFw0yNjAzMjcxNzMxMzVaMDMxMTAvBgNV BAMTKDhDNUE1QjQwNENGRUFENDg0NEFGNUNCREUwNzgwMDI0REFBOThGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwMP/sGDYHLDkHaVRtwlPNUaTx NICY8byjo58VwiEQd4ukrCQso6E7PbifI2IimCxvXYVzfk4BmBfi+YL6+X/rDyBc wjKbt6AO/1YNoiO9w26R78AIZDO7hyXZogPwv9HMFal9ZP9o9bb/kJIAkOKOIZqI 3LdosnKbH/L1mcJ2ortoBN48cl21sOJMOVLO/NVYarlELKFyQMtGdOR7VrcyAtqq fVdcg7EC/YboMp+E6zYBMyG0dHI11VZVU217VHV8No+JZbQeT13Wb+vI6JAy3tWn Btsw6W+pSjVlR2/QGsEgxst6ke2FdZWutrkrTB4vX5UJktyu+98x7W+HiqkHAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUjFpbQEz+rUhEr1y94HgAJNqpjxcwHwYDVR0j BBgwFoAUMVhnYIQ/ZoqBYRfqAvbzD+j5w1kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3YzVkNGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAv MzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZFOEY5QzM1OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zMTU4Njc2MDg0M0Y2NjhBODE2MTE3RUEwMkY2RjMw RkU4RjlDMzU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3YzVk NGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAvMzE1ODY3NjA4NDNGNjY4QTgx NjExN0VBMDJGNkYzMEZFOEY5QzM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH4cB5hfIJEW7u1uEVWf dRZv+C1Eb4hXy8iLLnsdXUIGWsyzSlhdIX5WWQGL0/dV0lAYTJtL8FNkmpyD2V3T +woOLpMJs2eFWqTqlCkGbWNaZr5HbXBTj5f5RzVpL2Anv0Tgsq0moVYeSC+Wb4z6 HFyFOdnRQ51A+b7F/j2dcoBKHU7TcPVpxvigTZivrfPoz3/kvv86IoJ3Qe39r5GZ Ihf0U2zvJRCvEcu+uRA3ydq/VL3lC8CwZfmNSAsZUN8S2vxsw+MzzQs4O5+ATLS8 OHKobZJh53LfYPkhzYfi5w4OfdBy9K+R6WFtUV3XXpNENsxq7EvnzGvY9P8mskwb X6k= -----END CERTIFICATE-----Generated at Thu Mar 26 19:33:17 2026 by rpki-client