$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: YL9phmEQDBDmv6kXI/Ay3OV5Cy4I0O7/wkJ0Ps1Cwb0= Subject key identifier: CD:F3:3E:B1:53:C6:C1:82:05:F0:F9:57:34:68:5B:36:98:0C:6B:49 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 4FE57D4C7D8D498195EDB46958B733952B112A54 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 03E9 Signing time: Tue 29 Sep 2026 00:20:29 +0000 Manifest this update: Tue 29 Sep 2026 00:15:27 +0000 Manifest next update: Wed 30 Sep 2026 00:59:27 +0000 Files and hashes: 1: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: JerlSLm1R4kvkVwPT7nIbtIv4p+tVt4zFaqZh2tqyYk=) 2: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: Kk1bQIf9LRxj6c8BCVTFj/J0x7No1PMyTUzJXHrtFfg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 19:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e5:7d:4c:7d:8d:49:81:95:ed:b4:69:58:b7:33:95:2b:11:2a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Sep 29 00:15:27 2026 GMT Not After : Sep 30 00:59:27 2026 GMT Subject: CN=CDF33EB153C6C18205F0F95734685B36980C6B49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e2:22:d8:0c:31:79:05:51:55:d6:b7:02:73: b4:0b:08:41:28:81:7d:8f:fe:fc:1b:e8:28:7c:6b: e7:85:56:a1:f0:02:ef:81:e1:38:4b:97:3f:ca:4e: b5:6d:96:d0:d6:a5:2e:af:be:c0:6f:7f:43:08:56: 1a:72:ed:70:b4:e1:8d:68:43:d4:71:92:2c:2c:00: 5b:c4:2f:15:ac:44:87:d2:b5:d9:45:13:b7:3d:d8: 73:11:49:c7:85:cb:0c:39:7c:91:3d:21:88:d2:a7: f0:8d:ad:02:86:b7:60:10:e7:44:4c:7f:d6:c1:9d: 5e:cb:da:ed:b8:d8:05:78:54:38:2b:c9:aa:de:12: fe:c8:72:0f:e4:c2:5c:10:51:b2:93:aa:d1:24:33: 0d:06:e6:05:11:5f:b8:fd:3b:71:2d:46:9b:1e:b1: 81:26:b6:15:a3:d8:06:69:04:71:87:5c:96:b7:e2: 0f:e0:48:9a:10:83:7d:c1:c9:a3:c5:1c:d1:3d:d2: eb:b5:36:dd:29:fa:22:9f:89:c4:dc:66:13:c3:b1: 0a:b5:67:bb:7e:86:f0:cd:68:96:2b:1f:d5:76:34: 20:ab:09:cd:ed:ae:a0:a7:82:f0:4f:94:79:ee:9c: e2:6b:0c:b7:3d:88:80:45:6f:d4:68:c7:41:33:eb: 52:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F3:3E:B1:53:C6:C1:82:05:F0:F9:57:34:68:5B:36:98:0C:6B:49 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:5d:5f:07:7f:1a:74:8d:ec:78:7f:c0:20:89:39:b8:34:30: 7b:b2:65:0f:1a:c6:bb:b8:e6:b9:55:40:1f:82:4f:fe:7c:6e: dc:70:bd:37:60:23:7c:73:51:06:95:43:ed:b8:34:01:49:cd: 12:9b:27:81:92:a3:94:77:ea:84:8d:75:6b:0e:36:2d:49:8f: 6b:14:90:70:39:63:92:a4:a1:1e:87:c3:81:e8:fb:19:29:c5: 6b:8c:f6:36:a6:46:fe:9a:12:1e:9a:3c:1c:b1:a8:06:dc:89: df:db:8b:ae:b3:59:36:24:b5:f3:42:d4:ec:93:f3:be:be:03: 81:8b:9f:ce:33:46:5a:d6:f9:7f:9a:e0:2a:83:29:91:8d:d9: 8c:19:98:07:bd:de:98:3e:44:01:d1:56:7f:7d:c1:26:1f:eb: 18:2a:03:8a:35:ad:41:16:98:a4:66:f5:6d:67:b5:ae:9e:13: 3e:f4:7a:f7:52:19:3f:7b:d7:ce:dd:a0:d1:23:d1:64:8f:c1: 3c:e1:b2:89:63:a9:be:f9:d4:7e:71:c7:0e:76:01:31:87:2e: 93:25:39:63:f2:21:97:52:7c:93:7d:f9:04:e8:76:71:98:ca: 50:e4:ac:ef:66:2e:52:ba:f6:1b:a0:be:ab:35:18:7a:3f:fc: cb:1e:2f:13 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUT+V9TH2NSYGV7bRpWLczlSsRKlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNjA5MjkwMDE1MjdaFw0yNjA5MzAwMDU5MjdaMDMxMTAvBgNV BAMTKENERjMzRUIxNTNDNkMxODIwNUYwRjk1NzM0Njg1QjM2OTgwQzZCNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS4iLYDDF5BVFV1rcCc7QLCEEo gX2P/vwb6Ch8a+eFVqHwAu+B4ThLlz/KTrVtltDWpS6vvsBvf0MIVhpy7XC04Y1o Q9RxkiwsAFvELxWsRIfStdlFE7c92HMRSceFyww5fJE9IYjSp/CNrQKGt2AQ50RM f9bBnV7L2u242AV4VDgryareEv7Icg/kwlwQUbKTqtEkMw0G5gURX7j9O3EtRpse sYEmthWj2AZpBHGHXJa34g/gSJoQg33ByaPFHNE90uu1Nt0p+iKficTcZhPDsQq1 Z7t+hvDNaJYrH9V2NCCrCc3trqCngvBPlHnunOJrDLc9iIBFb9Rox0Ez61KFAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUzfM+sVPGwYIF8PlXNGhbNpgMa0kwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACddXwd/GnSN7Hh/wCCJ Obg0MHuyZQ8axru45rlVQB+CT/58btxwvTdgI3xzUQaVQ+24NAFJzRKbJ4GSo5R3 6oSNdWsONi1Jj2sUkHA5Y5KkoR6Hw4Ho+xkpxWuM9jamRv6aEh6aPByxqAbcid/b i66zWTYktfNC1OyT876+A4GLn84zRlrW+X+a4CqDKZGN2YwZmAe93pg+RAHRVn99 wSYf6xgqA4o1rUEWmKRm9W1nta6eEz70evdSGT97187doNEj0WSPwTzhsoljqb75 1H5xxw52ATGHLpMlOWPyIZdSfJN9+QTodnGYylDkrO9mLlK69hugvqs1GHo//Mse LxM= -----END CERTIFICATE-----Generated at Tue Sep 29 06:09:03 2026 by rpki-client