$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft File: 3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft (raw, json) Hash identifier: QRRQy7cl3Q7qIJMjjQXO3DHHSvlbyxrAthvPNJYg0e8= Subject key identifier: B7:19:80:E6:D7:0F:0D:47:0E:50:C5:37:05:3F:8A:E3:F1:5C:E6:6B Authority key identifier: 3F:F2:98:2D:4C:8A:E1:0F:3F:4E:AB:DC:81:63:F1:D2:09:27:18:24 Certificate issuer: /CN=3FF2982D4C8AE10F3F4EABDC8163F1D209271824 Certificate serial: 7F4417CC828F382A7953F238E226E6DEF5C8C377 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft Manifest number: BD Signing time: Tue 29 Sep 2026 21:18:19 +0000 Manifest this update: Tue 29 Sep 2026 21:13:18 +0000 Manifest next update: Wed 30 Sep 2026 22:12:18 +0000 Files and hashes: 1: 3FF2982D4C8AE10F3F4EABDC8163F1D209271824.crl (hash: SAlWE2CmM3/mzQeW9Y+9CwwNCdTIs+tAoBUybkJ/WWY=) 2: 326131313a663263303a666665333a3a2f34382d3438203d3e20323131333730.roa (hash: v6P7lVcBcrvneKUvz62ZdwKzn3zDH59Qve86pHfHkj8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Sep 2026 17:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:44:17:cc:82:8f:38:2a:79:53:f2:38:e2:26:e6:de:f5:c8:c3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FF2982D4C8AE10F3F4EABDC8163F1D209271824 Validity Not Before: Sep 29 21:13:18 2026 GMT Not After : Sep 30 22:12:18 2026 GMT Subject: CN=B71980E6D70F0D470E50C537053F8AE3F15CE66B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c0:9c:e4:47:98:87:54:52:29:8c:cd:34:e3: a2:8b:c3:36:b6:87:68:65:68:3c:5c:00:c8:2a:5a: 01:5d:75:5a:7f:76:5b:84:3d:af:44:f8:52:01:83: f1:65:ab:db:b1:5a:76:3d:c5:09:2d:57:1f:7f:c8: 5b:82:51:65:7a:39:2a:58:7c:8c:f2:b0:39:46:89: ea:b6:cd:fa:8b:c0:3a:af:af:24:07:f0:68:2f:e4: 13:ff:22:16:0c:9f:e8:d4:4b:c4:c7:b4:9e:2c:c4: 8b:25:b9:6c:9e:13:46:ba:a8:f7:86:4f:22:ad:34: 3a:ef:2f:54:77:cd:b0:2f:9a:ae:7c:f9:b7:86:f1: cc:9f:77:f1:82:5e:c7:21:0e:f8:22:0f:eb:c5:9e: 8c:80:0a:e5:76:84:de:ab:36:e0:92:29:0f:6e:bd: bd:91:ec:41:ba:b8:58:cd:2f:ab:f1:e7:db:5d:77: d0:6b:dc:dc:bd:f0:2b:ed:ea:61:57:c5:ed:f5:02: 26:8c:a3:c3:d6:d3:9a:64:f4:7c:ce:20:39:85:c4: 01:0f:e0:c3:b6:d0:38:d8:e0:13:dc:10:cb:25:59: 25:26:11:a4:db:35:d8:e3:b6:93:fd:11:e4:35:28: 72:72:90:61:5e:74:8e:17:42:4e:4d:ca:45:de:b9: 58:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:19:80:E6:D7:0F:0D:47:0E:50:C5:37:05:3F:8A:E3:F1:5C:E6:6B X509v3 Authority Key Identifier: keyid:3F:F2:98:2D:4C:8A:E1:0F:3F:4E:AB:DC:81:63:F1:D2:09:27:18:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:9b:bb:a9:20:1f:4e:ce:e9:b9:eb:68:a7:82:46:2f:e9:34: fb:cb:1b:8d:f2:d3:2f:c5:5e:eb:f2:ce:5b:fb:6e:e8:10:19: 25:8a:fc:84:d6:ab:99:72:28:4f:f4:da:66:5a:f7:8b:a2:85: 14:22:08:a9:04:2b:00:d0:61:d2:ba:1e:56:8b:82:0d:df:af: 8e:81:ae:58:8c:8b:2e:03:18:c9:e0:23:57:8c:3f:b3:cb:81: 99:e6:64:de:f7:cb:92:23:82:75:12:9a:d9:71:b2:23:f4:fe: 7b:fc:0a:56:33:30:09:e6:58:5b:5d:24:9c:61:69:46:60:78: 9b:b4:89:cf:fb:aa:70:8c:83:d7:26:17:fb:fb:7f:fe:15:9b: 10:4a:68:8d:ef:fb:59:00:74:82:29:08:30:f5:1a:ab:d2:0a: 66:e7:5d:76:ab:28:5c:56:8f:64:69:eb:b4:bf:26:00:ca:65: 20:5d:76:93:11:9a:e1:2e:93:33:1b:6c:e7:66:5c:62:47:e0: f1:21:c1:0c:76:59:c1:18:a3:1d:49:aa:ab:bb:9d:dd:10:15: bc:74:71:ac:53:2b:6a:1f:d4:6d:b4:6a:e8:58:b2:0f:43:c3: ff:c0:a8:50:1f:58:53:4e:12:58:dd:87:5a:33:aa:d8:18:3c: 02:ea:2f:01 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUf0QXzIKPOCp5U/I44ibm3vXIw3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGMjk4MkQ0QzhBRTEwRjNGNEVBQkRDODE2M0YxRDIw OTI3MTgyNDAeFw0yNjA5MjkyMTEzMThaFw0yNjA5MzAyMjEyMThaMDMxMTAvBgNV BAMTKEI3MTk4MEU2RDcwRjBENDcwRTUwQzUzNzA1M0Y4QUUzRjE1Q0U2NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxwJzkR5iHVFIpjM0046KLwza2 h2hlaDxcAMgqWgFddVp/dluEPa9E+FIBg/Flq9uxWnY9xQktVx9/yFuCUWV6OSpY fIzysDlGieq2zfqLwDqvryQH8Ggv5BP/IhYMn+jUS8THtJ4sxIsluWyeE0a6qPeG TyKtNDrvL1R3zbAvmq58+beG8cyfd/GCXschDvgiD+vFnoyACuV2hN6rNuCSKQ9u vb2R7EG6uFjNL6vx59tdd9Br3Ny98Cvt6mFXxe31AiaMo8PW05pk9HzOIDmFxAEP 4MO20DjY4BPcEMslWSUmEaTbNdjjtpP9EeQ1KHJykGFedI4XQk5NykXeuVjFAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUtxmA5tcPDUcOUMU3BT+K4/Fc5mswHwYDVR0j BBgwFoAUP/KYLUyK4Q8/TqvcgWPx0gknGCQwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2NmOGE0ZTE2YjM1ODRhMTFiOTExYmIwNGQ3ZTBhNDNmLzAv M0ZGMjk4MkQ0QzhBRTEwRjNGNEVBQkRDODE2M0YxRDIwOTI3MTgyNC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zRkYyOTgyRDRDOEFFMTBGM0Y0RUFCREM4MTYzRjFE MjA5MjcxODI0LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2NmOGE0 ZTE2YjM1ODRhMTFiOTExYmIwNGQ3ZTBhNDNmLzAvM0ZGMjk4MkQ0QzhBRTEwRjNG NEVBQkRDODE2M0YxRDIwOTI3MTgyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD6bu6kgH07O6bnraKeC Ri/pNPvLG43y0y/FXuvyzlv7bugQGSWK/ITWq5lyKE/02mZa94uihRQiCKkEKwDQ YdK6HlaLgg3fr46BrliMiy4DGMngI1eMP7PLgZnmZN73y5IjgnUSmtlxsiP0/nv8 ClYzMAnmWFtdJJxhaUZgeJu0ic/7qnCMg9cmF/v7f/4VmxBKaI3v+1kAdIIpCDD1 GqvSCmbnXXarKFxWj2Rp67S/JgDKZSBddpMRmuEukzMbbOdmXGJH4PEhwQx2WcEY ox1Jqqu7nd0QFbx0caxTK2of1G20auhYsg9Dw//AqFAfWFNOEljdh1ozqtgYPALq LwE= -----END CERTIFICATE-----Generated at Wed Sep 30 01:00:42 2026 by rpki-client