$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft File: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft (raw, json) Hash identifier: /0/daB/zLGiS1LAewGK4UlxjP8NiVNLupgZlU3BY/x8= Subject key identifier: 5C:D3:02:08:EE:9D:68:8C:1A:84:39:99:DD:05:0D:C1:7D:90:B6:6B Authority key identifier: 2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E Certificate issuer: /CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Certificate serial: 062BECFDA177AE758D3E40F666767B11F5A941DD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft Manifest number: DE Signing time: Tue 12 May 2026 12:42:33 +0000 Manifest this update: Tue 12 May 2026 12:37:33 +0000 Manifest next update: Wed 13 May 2026 14:27:33 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: SsKZ08+rzpnXlHPVlF1X2ydZv//GE/sZxshtEoPOB40=) 2: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl (hash: /Y5aywEGWOwV02sFA4rGVvA3s6vQgx+HiKhWTPKknxg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2b:ec:fd:a1:77:ae:75:8d:3e:40:f6:66:76:7b:11:f5:a9:41:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Validity Not Before: May 12 12:37:33 2026 GMT Not After : May 13 14:27:33 2026 GMT Subject: CN=5CD30208EE9D688C1A843999DD050DC17D90B66B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:13:6a:10:ed:56:12:ad:1b:83:3b:a3:56:ee: 5d:6a:69:fa:f0:e0:04:ef:dc:75:5f:72:39:5c:70: 6d:0c:d3:47:6a:15:33:43:8b:50:ac:6b:42:1a:d0: 39:65:20:1a:d6:ce:a2:48:18:4a:e7:69:fe:da:f0: 10:0a:1a:9a:e8:27:93:02:a6:7c:df:5c:5e:52:ff: cc:1b:7f:01:34:34:a9:9d:5b:a8:f0:63:a2:2a:10: 8c:79:e1:98:29:17:58:af:33:d1:ae:25:bf:10:41: 5a:46:4b:e4:62:5c:d5:43:97:db:b4:9d:fc:73:9c: a4:9f:71:4f:05:ee:1f:7f:76:3c:20:99:a8:79:bf: dc:6f:46:81:1c:9c:9c:24:7a:40:89:e0:ac:12:fb: 8c:1d:cb:4d:1f:a4:a7:8b:0b:73:3f:e5:ea:db:04: 7d:18:30:f3:09:e8:b3:73:0b:dc:d8:57:61:1d:96: ad:95:67:00:1c:c0:a0:29:bb:9e:48:f4:10:db:7c: cd:40:ac:cc:60:35:a7:17:7f:a1:43:9c:27:82:22: be:3a:25:83:fe:31:4e:e8:1c:b4:7b:79:f7:56:1a: 40:84:39:63:ed:47:78:6b:ff:77:c2:67:8f:1c:b5: a3:6a:99:6c:13:60:b5:ba:35:71:e3:b8:e1:b3:c7: 60:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D3:02:08:EE:9D:68:8C:1A:84:39:99:DD:05:0D:C1:7D:90:B6:6B X509v3 Authority Key Identifier: keyid:2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:6b:e8:9b:be:27:b8:a9:c4:04:d7:dd:d0:b5:2e:c4:2c:c3: 6e:b1:bc:8e:db:e6:14:d4:69:46:ec:d3:24:65:40:49:4e:9d: be:3e:3b:f0:2d:d3:c7:bf:9e:25:eb:6b:9b:23:9d:9a:17:1b: ac:f6:d2:1e:6a:2f:09:af:cd:de:65:ec:ec:da:6b:4f:e4:07: 70:3b:c1:b4:0b:c2:d8:6c:32:a0:6c:e1:27:de:33:22:d4:4d: 5c:f9:e0:10:a6:fa:82:98:42:9a:d5:6c:7e:ce:16:19:61:12: ad:1c:33:c5:56:a0:2c:fa:ec:bf:00:8d:3e:f0:25:02:a4:2d: 5a:f3:6f:fb:4e:c7:c6:5a:4e:4a:f2:04:8e:00:e6:2a:5e:32: 32:b0:db:96:3d:9e:6a:1c:8d:77:56:29:89:7d:56:3c:37:90: 6e:c7:e7:9e:07:a3:6d:0b:57:4d:cf:6c:80:48:60:e9:4b:85: 93:98:36:7f:2d:ac:12:0a:11:b9:35:53:42:38:7d:e2:66:ac: 2d:b1:c3:83:52:92:ec:eb:27:5e:7b:db:c2:43:79:49:cd:a5: 8f:3f:85:6a:e1:e1:31:f9:5e:a9:6b:ef:70:5c:a5:1c:05:29: 28:a3:56:b4:16:21:79:e2:16:c5:9f:45:2e:ac:73:b4:4d:9a: 18:ba:d8:00 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUBivs/aF3rnWNPkD2ZnZ7EfWpQd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4 NUU4MjMxRTAeFw0yNjA1MTIxMjM3MzNaFw0yNjA1MTMxNDI3MzNaMDMxMTAvBgNV BAMTKDVDRDMwMjA4RUU5RDY4OEMxQTg0Mzk5OUREMDUwREMxN0Q5MEI2NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrE2oQ7VYSrRuDO6NW7l1qafrw 4ATv3HVfcjlccG0M00dqFTNDi1Csa0Ia0DllIBrWzqJIGErnaf7a8BAKGproJ5MC pnzfXF5S/8wbfwE0NKmdW6jwY6IqEIx54ZgpF1ivM9GuJb8QQVpGS+RiXNVDl9u0 nfxznKSfcU8F7h9/djwgmah5v9xvRoEcnJwkekCJ4KwS+4wdy00fpKeLC3M/5erb BH0YMPMJ6LNzC9zYV2Edlq2VZwAcwKApu55I9BDbfM1ArMxgNacXf6FDnCeCIr46 JYP+MU7oHLR7efdWGkCEOWPtR3hr/3fCZ48ctaNqmWwTYLW6NXHjuOGzx2BrAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUXNMCCO6daIwahDmZ3QUNwX2QtmswHwYDVR0j BBgwFoAUKzuXM02gaXgYXax2ovPqNYXoIx4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAv MkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8yQjNCOTczMzREQTA2OTc4MTg1REFDNzZBMkYzRUEz NTg1RTgyMzFFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2YxMTRj MWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAvMkIzQjk3MzM0REEwNjk3ODE4 NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGlr6Ju+J7ipxATX3dC1 LsQsw26xvI7b5hTUaUbs0yRlQElOnb4+O/At08e/niXra5sjnZoXG6z20h5qLwmv zd5l7Ozaa0/kB3A7wbQLwthsMqBs4SfeMyLUTVz54BCm+oKYQprVbH7OFhlhEq0c M8VWoCz67L8AjT7wJQKkLVrzb/tOx8ZaTkryBI4A5ipeMjKw25Y9nmocjXdWKYl9 Vjw3kG7H554Ho20LV03PbIBIYOlLhZOYNn8trBIKEbk1U0I4feJmrC2xw4NSkuzr J15728JDeUnNpY8/hWrh4TH5Xqlr73BcpRwFKSijVrQWIXniFsWfRS6sc7RNmhi6 2AA= -----END CERTIFICATE-----Generated at Wed May 13 08:38:13 2026 by rpki-client