$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: olYsHIIiC0+MvaFgQD3kmxGxUfF5qkErxB6QAg53QPE= Subject key identifier: 49:78:5A:1A:C8:F9:8E:20:FC:C4:B2:E7:C4:EA:92:7E:A1:DF:9B:1F Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 0D97BFBA0B060A7B87BA92DBAD19433826EA24BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 0302 Signing time: Wed 25 Mar 2026 16:26:14 +0000 Manifest this update: Wed 25 Mar 2026 16:21:12 +0000 Manifest next update: Thu 26 Mar 2026 19:20:12 +0000 Files and hashes: 1: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: mcgrU74w3DUwwWYNIc3uI7rkwrZIyn/jvmB4n8hAIqQ=) 2: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: 40KX5Azg+QOWUNYOrdl6IsWrdX+iJJgcObJYGtl3Q6w=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 19:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:97:bf:ba:0b:06:0a:7b:87:ba:92:db:ad:19:43:38:26:ea:24:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Mar 25 16:21:12 2026 GMT Not After : Mar 26 19:20:12 2026 GMT Subject: CN=49785A1AC8F98E20FCC4B2E7C4EA927EA1DF9B1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:bb:bf:24:33:8e:5b:8f:63:04:ed:b9:1b:2a: 7e:d4:c3:85:bc:9e:6a:37:e8:c9:fe:5d:4b:8a:81: b5:45:23:b9:d3:02:59:7b:2a:8d:24:91:1d:c1:d2: 78:33:52:b9:25:ae:04:bf:42:6e:3a:cf:87:38:e5: 1b:0e:c9:46:13:fc:ff:3c:92:64:7a:25:82:4a:7b: 09:8c:4e:7f:67:07:f7:63:ac:66:38:71:81:35:78: a7:fa:51:52:ae:c8:f1:4c:79:b2:cc:59:42:1f:e7: e7:a5:e6:a4:78:de:a5:ee:b8:3e:da:61:20:af:a8: 9f:9b:66:51:3c:07:bb:9b:94:13:d4:98:57:32:e1: 2b:c4:b5:74:aa:0f:85:5b:8b:b7:b0:df:05:3b:7c: 04:4e:f1:ea:71:78:37:59:17:40:85:64:1c:56:34: 6a:c6:b9:1b:1f:98:b1:7f:aa:f1:57:48:85:c7:bc: 7c:e9:8c:1f:ac:e3:37:0c:6e:1f:c6:fe:6f:bd:9e: 6c:c8:9d:a1:7b:cb:7a:91:5a:37:36:bc:9a:54:9e: af:0d:bc:3e:69:25:b5:91:94:b4:31:0f:64:8c:d3: bd:d5:f1:b1:cd:d4:9a:46:ab:47:a4:7f:fb:ed:19: 8e:19:07:b9:05:31:5b:c4:f7:01:ae:8a:9f:6c:49: ca:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:78:5A:1A:C8:F9:8E:20:FC:C4:B2:E7:C4:EA:92:7E:A1:DF:9B:1F X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:4b:3a:a0:20:d0:a3:7c:dc:b2:0a:99:39:e2:cd:68:e0:d8: 0d:ab:28:2f:2e:cb:49:fe:66:71:b4:13:16:ca:fd:0f:30:cc: 1e:8e:42:6f:cf:b9:da:95:db:f7:c6:b1:e1:4a:b6:7a:15:af: 67:8f:12:c0:68:ce:a3:0c:ab:5d:66:80:7c:64:f2:48:29:4b: 67:4c:4f:d5:b4:36:f9:22:c4:4d:e6:b9:37:a7:5f:ef:17:4c: fa:31:26:c7:aa:b3:0c:1f:62:ae:a3:7e:44:76:6a:e4:fc:15: 3a:a6:93:a5:c5:cd:f0:bc:d9:af:39:9c:b3:ec:2e:97:cd:1c: 2c:ed:4a:dc:de:8e:35:64:a3:51:57:6b:9b:80:31:48:98:7e: 67:a0:e8:73:67:9c:e0:7b:78:70:db:70:38:81:48:4a:42:0e: bf:38:db:24:f6:b7:f3:a3:4b:0b:a3:3b:49:8b:ed:d4:01:0a: 8f:e7:c4:a2:52:d0:96:ed:51:06:e6:f7:2d:7b:2b:e4:3e:27: 17:90:84:a1:a1:29:27:f2:31:f8:9f:2e:d1:79:f9:7a:18:a6: f5:69:5f:27:cd:43:c1:cc:14:d9:e8:ce:aa:28:95:68:a4:2c: 41:60:56:6e:13:af:a2:f6:4a:6f:c6:ed:32:9d:6b:a6:3d:f6: 9a:6a:3f:1f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUDZe/ugsGCnuHupLbrRlDOCbqJL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNjAzMjUxNjIxMTJaFw0yNjAzMjYxOTIwMTJaMDMxMTAvBgNV BAMTKDQ5Nzg1QTFBQzhGOThFMjBGQ0M0QjJFN0M0RUE5MjdFQTFERjlCMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8u78kM45bj2ME7bkbKn7Uw4W8 nmo36Mn+XUuKgbVFI7nTAll7Ko0kkR3B0ngzUrklrgS/Qm46z4c45RsOyUYT/P88 kmR6JYJKewmMTn9nB/djrGY4cYE1eKf6UVKuyPFMebLMWUIf5+el5qR43qXuuD7a YSCvqJ+bZlE8B7ublBPUmFcy4SvEtXSqD4Vbi7ew3wU7fARO8epxeDdZF0CFZBxW NGrGuRsfmLF/qvFXSIXHvHzpjB+s4zcMbh/G/m+9nmzInaF7y3qRWjc2vJpUnq8N vD5pJbWRlLQxD2SM073V8bHN1JpGq0ekf/vtGY4ZB7kFMVvE9wGuip9sScp5AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUSXhaGsj5jiD8xLLnxOqSfqHfmx8wHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADhLOqAg0KN83LIKmTni zWjg2A2rKC8uy0n+ZnG0ExbK/Q8wzB6OQm/PudqV2/fGseFKtnoVr2ePEsBozqMM q11mgHxk8kgpS2dMT9W0NvkixE3muTenX+8XTPoxJseqswwfYq6jfkR2auT8FTqm k6XFzfC82a85nLPsLpfNHCztStzejjVko1FXa5uAMUiYfmeg6HNnnOB7eHDbcDiB SEpCDr842yT2t/OjSwujO0mL7dQBCo/nxKJS0JbtUQbm9y17K+Q+JxeQhKGhKSfy MfifLtF5+XoYpvVpXyfNQ8HMFNnozqoolWikLEFgVm4Tr6L2Sm/G7TKda6Y99ppq Px8= -----END CERTIFICATE-----Generated at Thu Mar 26 12:19:28 2026 by rpki-client