$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: ubb4CQO0nQCiFI9JLUMT8qbmYCoEvpSyCKXtmQKaLE8= Subject key identifier: 4A:F5:37:D0:9E:3D:5B:25:43:6F:6A:E7:33:9C:A8:D6:42:9B:4D:47 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: AAFD937610D3E26849CBF7A6648F9AD7FD5604 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 03A1 Signing time: Thu 23 Jul 2026 13:57:09 +0000 Manifest this update: Thu 23 Jul 2026 13:52:09 +0000 Manifest next update: Fri 24 Jul 2026 15:04:09 +0000 Files and hashes: 1: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: KI8pu1ft2htvcwn/OMcC0pg40ytfpTUukjUtAxkMsUE=) 2: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: Kk1bQIf9LRxj6c8BCVTFj/J0x7No1PMyTUzJXHrtFfg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: aa:fd:93:76:10:d3:e2:68:49:cb:f7:a6:64:8f:9a:d7:fd:56:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Jul 23 13:52:09 2026 GMT Not After : Jul 24 15:04:09 2026 GMT Subject: CN=4AF537D09E3D5B25436F6AE7339CA8D6429B4D47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ca:e1:48:5b:da:32:da:0a:d8:4f:30:85:6c: 68:fd:b3:03:f3:32:19:85:2c:67:a0:9a:55:2f:df: a6:7e:66:bd:f3:a4:fc:9e:41:f6:44:fa:98:f0:8b: b8:81:91:3a:fc:05:bf:63:ef:c1:c7:af:d1:57:4d: ff:3d:f7:b8:73:01:98:1c:87:7d:9b:20:e1:33:38: d9:04:e8:23:ac:97:46:46:ad:e9:00:4e:45:15:ce: 9e:f8:6a:5a:12:bf:c2:23:a8:90:24:4d:67:89:dd: 81:19:ca:8b:3c:6e:14:3e:52:1e:e6:a9:65:65:f7: 83:e9:60:d3:96:82:1a:1a:89:63:4c:e2:8c:2b:9b: 15:1c:f1:71:00:f9:cb:4e:a4:5e:7c:b5:c7:c9:1c: a0:7e:81:24:26:78:50:26:a6:80:0c:d0:1a:0f:9a: 97:1c:85:9d:ce:25:c1:00:19:0e:07:5f:4f:6d:8e: 22:15:4a:68:ff:e6:8e:9c:41:2c:eb:3d:15:f5:b2: a5:07:ab:da:c9:54:b0:5f:bc:d6:f3:16:ae:f5:48: 4b:05:95:14:36:3d:6d:2e:2a:40:4e:82:c3:2e:17: c4:ff:d2:48:b8:24:12:db:9b:3e:8d:ea:7a:e5:ca: 0b:2c:9f:6d:c1:00:a8:28:b8:50:28:d7:83:a3:ae: 94:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F5:37:D0:9E:3D:5B:25:43:6F:6A:E7:33:9C:A8:D6:42:9B:4D:47 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c3:6e:3c:aa:fe:1d:9a:77:a8:43:4f:e9:e1:ba:ca:d3:32: 24:eb:9f:aa:50:e4:d0:82:64:35:4d:a5:84:d6:c0:0b:72:7a: fd:f6:08:1f:ad:72:40:4e:2b:d5:02:7d:60:c0:18:16:13:d4: a6:7b:ce:b4:64:c0:fa:41:36:86:c0:0f:ac:9e:86:05:bf:34: 69:7c:3b:02:8f:12:f1:d5:70:19:e6:01:95:92:41:14:86:c8: de:98:c1:53:c3:2f:22:39:f8:6a:c5:f2:08:9f:7b:71:33:fd: 12:23:63:50:69:a6:30:ad:1a:05:83:6a:b3:f4:19:11:15:b6: 9f:c8:1c:8f:78:75:52:2c:01:33:9d:90:ab:14:45:7b:06:9b: 57:be:26:8f:54:39:34:bf:66:23:6d:44:82:cf:d0:bb:12:e8: f4:17:eb:5e:2a:bf:a5:93:b0:f1:79:5a:bc:21:48:fd:f0:dd: 83:38:23:f8:aa:47:c5:10:85:13:58:6a:27:52:ad:d3:ce:c4: fd:85:82:d1:dc:e3:64:89:56:49:35:3c:6b:ac:c9:7a:41:f0: 96:43:64:39:40:de:0b:29:91:76:37:5a:44:e1:e5:dc:55:d6: 0b:75:df:8c:4b:c6:db:28:19:9e:78:24:3e:db:86:03:3a:07: c1:14:6d:e1 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUAKr9k3YQ0+JoScv3pmSPmtf9VgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNjA3MjMxMzUyMDlaFw0yNjA3MjQxNTA0MDlaMDMxMTAvBgNV BAMTKDRBRjUzN0QwOUUzRDVCMjU0MzZGNkFFNzMzOUNBOEQ2NDI5QjRENDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCayuFIW9oy2grYTzCFbGj9swPz MhmFLGegmlUv36Z+Zr3zpPyeQfZE+pjwi7iBkTr8Bb9j78HHr9FXTf8997hzAZgc h32bIOEzONkE6COsl0ZGrekATkUVzp74aloSv8IjqJAkTWeJ3YEZyos8bhQ+Uh7m qWVl94PpYNOWghoaiWNM4owrmxUc8XEA+ctOpF58tcfJHKB+gSQmeFAmpoAM0BoP mpcchZ3OJcEAGQ4HX09tjiIVSmj/5o6cQSzrPRX1sqUHq9rJVLBfvNbzFq71SEsF lRQ2PW0uKkBOgsMuF8T/0ki4JBLbmz6N6nrlygssn23BAKgouFAo14OjrpQXAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUSvU30J49WyVDb2rnM5yo1kKbTUcwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHnDbjyq/h2ad6hDT+nh usrTMiTrn6pQ5NCCZDVNpYTWwAtyev32CB+tckBOK9UCfWDAGBYT1KZ7zrRkwPpB NobAD6yehgW/NGl8OwKPEvHVcBnmAZWSQRSGyN6YwVPDLyI5+GrF8gife3Ez/RIj Y1BppjCtGgWDarP0GREVtp/IHI94dVIsATOdkKsURXsGm1e+Jo9UOTS/ZiNtRILP 0LsS6PQX614qv6WTsPF5WrwhSP3w3YM4I/iqR8UQhRNYaidSrdPOxP2FgtHc42SJ Vkk1PGusyXpB8JZDZDlA3gspkXY3WkTh5dxV1gt134xLxtsoGZ54JD7bhgM6B8EU beE= -----END CERTIFICATE-----Generated at Fri Jul 24 07:12:09 2026 by rpki-client