$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: PLhq5O89kypf3fbni0+aj2o0cFpQZZx7mOHmUgj2ef4= Subject key identifier: 55:BA:5E:4B:0E:73:BB:E7:FD:E4:C1:B2:6B:D6:49:7F:5B:2D:C2:B1 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 069F47EAF0B35CB2E6E419A0378155FBC7F9E308 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 0341 Signing time: Tue 12 May 2026 10:41:56 +0000 Manifest this update: Tue 12 May 2026 10:36:56 +0000 Manifest next update: Wed 13 May 2026 14:36:56 +0000 Files and hashes: 1: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: Kk1bQIf9LRxj6c8BCVTFj/J0x7No1PMyTUzJXHrtFfg=) 2: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: lnfQwENn8jiIwu+w3vm7Hsuj6srsCbLGyFRY4iLhiT8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:9f:47:ea:f0:b3:5c:b2:e6:e4:19:a0:37:81:55:fb:c7:f9:e3:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: May 12 10:36:56 2026 GMT Not After : May 13 14:36:56 2026 GMT Subject: CN=55BA5E4B0E73BBE7FDE4C1B26BD6497F5B2DC2B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5b:18:9a:12:55:90:e5:e5:66:4a:bb:2f:49: bb:90:8c:e5:8e:9b:dd:1d:f5:2a:3f:ab:0a:c0:5d: 20:b4:65:60:fb:b9:38:09:90:22:c0:8e:a7:66:62: 3e:92:df:ba:09:be:83:70:9e:fa:66:55:57:2d:99: c9:71:0a:6f:c6:4e:24:a6:87:7b:05:c6:5c:b1:b6: 7f:bb:5e:34:5f:c5:a4:5f:b3:6a:e5:64:13:7c:47: 44:41:d5:98:db:b8:36:a5:36:f6:88:fc:c2:cc:29: df:13:08:d8:cf:5a:b4:5f:12:3a:91:2e:d7:48:eb: 1b:d2:75:e0:41:14:48:f1:64:f9:59:39:50:6f:45: 48:1a:d3:5c:e6:7f:1f:aa:d3:2e:ed:1e:60:d0:d8: 6b:9c:67:40:44:ef:a0:88:d3:21:39:7d:2a:55:df: 0b:69:2a:7d:ab:cc:ae:72:64:94:76:ce:f9:eb:d9: eb:e4:57:06:93:c9:0f:22:b8:e5:21:50:d3:2d:77: 8d:2d:99:e5:e0:d4:34:19:ab:58:73:0f:2a:0c:85: b8:9e:eb:e0:35:5e:6b:8f:20:22:a5:b6:03:e2:22: 75:5b:4e:4a:2b:0d:26:b1:39:42:a3:ae:c4:cb:e0: 02:f5:3a:99:6b:0c:e8:39:94:28:c4:f7:ee:7f:0b: 1f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BA:5E:4B:0E:73:BB:E7:FD:E4:C1:B2:6B:D6:49:7F:5B:2D:C2:B1 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:78:1b:94:b6:63:9b:a6:df:d1:a7:ba:98:fb:ea:77:cb:80: d0:92:ae:03:7e:c2:a9:d1:1d:c2:33:52:d4:b6:cd:ff:c9:cb: e2:a0:52:ff:ba:a1:44:99:0f:90:29:7d:cd:c9:10:13:d7:37: 88:ca:d0:62:a8:77:ae:80:92:3a:1a:1c:bf:ec:25:58:00:3a: ca:83:28:24:ee:e3:52:ce:e3:da:ae:8a:43:fc:04:cf:1a:83: e5:ed:ae:3f:9f:0e:93:0d:78:1d:73:69:55:30:0e:f6:f7:cb: d2:ae:62:b7:6a:d3:8f:4a:91:0c:2e:70:3a:09:f1:a2:57:30: c3:a3:8d:35:63:c4:a9:41:5c:b4:9b:8f:14:21:ac:b7:ff:b2: 6a:27:ac:bd:ee:81:65:be:09:8e:3d:08:f5:a8:eb:85:a3:a3: 9e:fe:b5:be:3a:0d:34:e2:0c:92:00:b7:6a:0e:4e:ad:2d:e8: 8e:fa:aa:37:b8:73:d0:56:c3:08:68:d6:17:98:25:3e:7b:74: 4a:b7:64:36:07:a3:4f:14:06:64:bc:99:d1:8b:18:3a:21:16: eb:cb:e8:d0:06:f1:86:c1:e6:8d:85:ec:10:79:ad:81:1a:52: e8:84:87:4a:d3:62:4f:75:d0:b9:65:6a:63:88:7a:53:66:85: bf:e7:6d:97 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUBp9H6vCzXLLm5BmgN4FV+8f54wgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNjA1MTIxMDM2NTZaFw0yNjA1MTMxNDM2NTZaMDMxMTAvBgNV BAMTKDU1QkE1RTRCMEU3M0JCRTdGREU0QzFCMjZCRDY0OTdGNUIyREMyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLWxiaElWQ5eVmSrsvSbuQjOWO m90d9So/qwrAXSC0ZWD7uTgJkCLAjqdmYj6S37oJvoNwnvpmVVctmclxCm/GTiSm h3sFxlyxtn+7XjRfxaRfs2rlZBN8R0RB1ZjbuDalNvaI/MLMKd8TCNjPWrRfEjqR LtdI6xvSdeBBFEjxZPlZOVBvRUga01zmfx+q0y7tHmDQ2GucZ0BE76CI0yE5fSpV 3wtpKn2rzK5yZJR2zvnr2evkVwaTyQ8iuOUhUNMtd40tmeXg1DQZq1hzDyoMhbie 6+A1XmuPICKltgPiInVbTkorDSaxOUKjrsTL4AL1OplrDOg5lCjE9+5/Cx/vAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUVbpeSw5zu+f95MGya9ZJf1stwrEwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACZ4G5S2Y5um39Gnupj7 6nfLgNCSrgN+wqnRHcIzUtS2zf/Jy+KgUv+6oUSZD5Apfc3JEBPXN4jK0GKod66A kjoaHL/sJVgAOsqDKCTu41LO49quikP8BM8ag+Xtrj+fDpMNeB1zaVUwDvb3y9Ku Yrdq049KkQwucDoJ8aJXMMOjjTVjxKlBXLSbjxQhrLf/smonrL3ugWW+CY49CPWo 64Wjo57+tb46DTTiDJIAt2oOTq0t6I76qje4c9BWwwho1heYJT57dEq3ZDYHo08U BmS8mdGLGDohFuvL6NAG8YbB5o2F7BB5rYEaUuiEh0rTYk910LllamOIelNmhb/n bZc= -----END CERTIFICATE-----Generated at Wed May 13 08:32:03 2026 by rpki-client