$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft File: 31586760843F668A816117EA02F6F30FE8F9C359.mft (raw, json) Hash identifier: D22+UpAKsTntmcLyh7Ozt+LKN2MUaB9n8kejl4qf++8= Subject key identifier: 9F:A1:06:87:3C:40:DA:4E:E3:DA:F8:C2:1E:0A:63:E4:80:1D:2F:80 Authority key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 Certificate issuer: /CN=31586760843F668A816117EA02F6F30FE8F9C359 Certificate serial: 1A023BADAE73A9C17236E7753243BC623763806C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft Manifest number: 0345 Signing time: Wed 13 May 2026 01:18:10 +0000 Manifest this update: Wed 13 May 2026 01:13:10 +0000 Manifest next update: Thu 14 May 2026 02:26:10 +0000 Files and hashes: 1: 326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa (hash: BjKc9VMASsXPgZhYz/2yz7n3Gaf1Y9hvN7y8UGTtnR0=) 2: 31586760843F668A816117EA02F6F30FE8F9C359.crl (hash: LMqOwG7OjglhripQb0ZXX1YZGbs0VJdfHOSUZGESUfc=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 00:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:02:3b:ad:ae:73:a9:c1:72:36:e7:75:32:43:bc:62:37:63:80:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31586760843F668A816117EA02F6F30FE8F9C359 Validity Not Before: May 13 01:13:10 2026 GMT Not After : May 14 02:26:10 2026 GMT Subject: CN=9FA106873C40DA4EE3DAF8C21E0A63E4801D2F80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:36:97:68:35:b5:c1:e8:ea:61:d2:79:8f:0b: 3c:0d:a8:92:4a:9f:da:d0:f0:7d:c6:6b:36:38:3e: 40:bf:c4:94:4f:4e:1b:86:39:39:e0:c4:12:02:8a: cc:4c:43:f3:7a:b2:d0:a7:a0:b0:a1:4e:12:b5:2a: a7:df:cc:5a:d5:a5:e1:3b:ed:da:3d:91:9b:d2:85: 19:55:ee:f2:a1:73:35:80:6f:06:b1:2b:9a:09:7e: 52:55:19:c9:4c:06:e7:21:5b:94:43:32:2f:4e:45: 68:b9:64:d9:42:98:16:27:6b:52:66:17:a7:0c:21: 99:28:e7:a5:d9:11:62:42:f1:d0:75:c5:cf:fa:8e: f3:4e:37:27:c9:1b:13:2f:c1:fc:53:24:22:c0:21: eb:3d:a9:91:ab:8f:c2:cc:49:e8:5d:51:ce:07:ee: 46:8d:c8:58:50:bc:78:b8:96:2a:d2:ee:41:a1:ae: 4c:a9:6f:38:5b:d5:d4:59:50:98:a6:93:70:0a:95: 89:f8:d6:c2:e9:7a:f6:48:91:38:fc:90:4e:cc:6c: 74:5d:16:6c:a9:65:74:73:07:4a:c0:22:b0:65:b4: 82:3f:45:19:3b:bc:02:99:01:e7:f5:4e:cc:26:4d: d5:30:9d:30:c2:e1:8a:ae:ea:90:53:d1:00:bc:71: db:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A1:06:87:3C:40:DA:4E:E3:DA:F8:C2:1E:0A:63:E4:80:1D:2F:80 X509v3 Authority Key Identifier: keyid:31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:9d:ba:e2:98:91:a2:9e:c9:2b:b0:a3:17:6a:fe:97:23:17: 0b:c9:43:97:de:20:95:db:6f:72:0c:0b:a7:38:c2:c5:3b:e6: 98:64:d3:92:b9:24:56:c8:33:70:81:35:fb:1b:4b:aa:11:2a: ac:60:78:e0:23:df:a7:4d:fa:7b:49:56:b0:c1:10:bb:6e:4b: 10:13:f9:77:b5:8f:de:51:b3:3a:98:5d:70:ad:86:92:41:50: a1:dc:aa:cd:c4:0c:db:1c:bc:f0:36:d8:20:f3:80:e3:c7:ff: 5d:45:01:94:b6:db:3a:bc:49:4b:e6:33:6b:0e:67:b8:27:a1: 8b:35:e4:32:88:06:da:cc:ca:c5:8e:20:05:c5:a7:70:de:3e: 30:a1:2f:9f:e6:ce:5b:ba:8d:68:5f:f1:29:2f:4e:04:19:7b: 2a:c2:f7:a8:4c:a2:de:5d:b5:3c:43:5e:7b:29:c1:0b:45:94: 73:e8:e9:f8:7a:12:0a:ed:b7:01:d6:fe:57:71:c1:cd:20:6f: 3e:5a:bc:4b:95:b7:27:00:21:16:1f:e6:08:54:5f:54:ca:cb: 2b:f8:64:c4:c0:33:b0:50:2b:6b:a2:4b:05:00:6d:e6:e7:b7: 3e:d6:33:c1:d9:12:cd:4d:4e:de:e0:a0:68:2c:71:9c:0a:80: f2:41:72:80 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUGgI7ra5zqcFyNud1MkO8YjdjgGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZF OEY5QzM1OTAeFw0yNjA1MTMwMTEzMTBaFw0yNjA1MTQwMjI2MTBaMDMxMTAvBgNV BAMTKDlGQTEwNjg3M0M0MERBNEVFM0RBRjhDMjFFMEE2M0U0ODAxRDJGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRNpdoNbXB6Oph0nmPCzwNqJJK n9rQ8H3GazY4PkC/xJRPThuGOTngxBICisxMQ/N6stCnoLChThK1KqffzFrVpeE7 7do9kZvShRlV7vKhczWAbwaxK5oJflJVGclMBuchW5RDMi9ORWi5ZNlCmBYna1Jm F6cMIZko56XZEWJC8dB1xc/6jvNONyfJGxMvwfxTJCLAIes9qZGrj8LMSehdUc4H 7kaNyFhQvHi4lirS7kGhrkypbzhb1dRZUJimk3AKlYn41sLpevZIkTj8kE7MbHRd FmypZXRzB0rAIrBltII/RRk7vAKZAef1TswmTdUwnTDC4Yqu6pBT0QC8cdtFAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUn6EGhzxA2k7j2vjCHgpj5IAdL4AwHwYDVR0j BBgwFoAUMVhnYIQ/ZoqBYRfqAvbzD+j5w1kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3YzVkNGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAv MzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZFOEY5QzM1OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zMTU4Njc2MDg0M0Y2NjhBODE2MTE3RUEwMkY2RjMw RkU4RjlDMzU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3YzVk NGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAvMzE1ODY3NjA4NDNGNjY4QTgx NjExN0VBMDJGNkYzMEZFOEY5QzM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJmduuKYkaKeySuwoxdq /pcjFwvJQ5feIJXbb3IMC6c4wsU75phk05K5JFbIM3CBNfsbS6oRKqxgeOAj36dN +ntJVrDBELtuSxAT+Xe1j95RszqYXXCthpJBUKHcqs3EDNscvPA22CDzgOPH/11F AZS22zq8SUvmM2sOZ7gnoYs15DKIBtrMysWOIAXFp3DePjChL5/mzlu6jWhf8Skv TgQZeyrC96hMot5dtTxDXnspwQtFlHPo6fh6EgrttwHW/ldxwc0gbz5avEuVtycA IRYf5ghUX1TKyyv4ZMTAM7BQK2uiSwUAbebntz7WM8HZEs1NTt7goGgscZwKgPJB coA= -----END CERTIFICATE-----Generated at Wed May 13 09:56:23 2026 by rpki-client