$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft File: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft (raw, json) Hash identifier: L3hk8ei4QyHHnSpHJEdMU2s9MAaq5x5pwif7mW9q0+U= Subject key identifier: EA:3F:DB:D7:E3:C1:C0:C1:34:BD:53:74:21:72:57:D7:2A:D4:14:E1 Authority key identifier: 2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E Certificate issuer: /CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Certificate serial: 7B1031AFAF7E6E6D7CF4D3A6FB79AE5D9BA2F869 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft Manifest number: A0 Signing time: Wed 25 Mar 2026 20:29:35 +0000 Manifest this update: Wed 25 Mar 2026 20:24:33 +0000 Manifest next update: Thu 26 Mar 2026 22:02:33 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: SsKZ08+rzpnXlHPVlF1X2ydZv//GE/sZxshtEoPOB40=) 2: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl (hash: UmIdzv42GejznMJkExAihpOuRajTOYbjrmKnwRPV4g4=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 22:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:10:31:af:af:7e:6e:6d:7c:f4:d3:a6:fb:79:ae:5d:9b:a2:f8:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Validity Not Before: Mar 25 20:24:33 2026 GMT Not After : Mar 26 22:02:33 2026 GMT Subject: CN=EA3FDBD7E3C1C0C134BD5374217257D72AD414E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:72:af:16:4d:a6:2a:2d:dc:c0:0c:b3:af:6d: 2c:bf:ca:7f:5c:64:1e:96:b0:4e:f8:4f:2e:3d:7b: 99:59:52:bd:b9:de:df:12:0b:7b:d6:85:7a:6d:49: b6:e0:46:db:5d:79:2c:87:42:40:9c:0d:dd:85:9e: 06:14:2f:70:33:16:a0:0b:df:a9:4a:68:7c:ac:f8: 64:2a:e6:58:cc:ea:c8:7b:9c:3e:d7:b1:a6:25:e8: f7:43:a4:b1:66:c0:77:32:76:ec:5c:1a:c4:21:36: ea:25:be:77:6c:75:a7:d7:49:ef:b7:1f:5c:19:f4: 0a:09:88:d7:9c:a9:df:55:bd:4e:7e:f9:38:a5:57: 3f:df:df:b0:d8:ad:7e:f8:d3:ca:91:69:13:79:f1: c5:65:0a:82:a4:5d:ca:03:1a:a2:e3:8b:f9:df:10: cf:9b:d9:b4:b7:ad:2e:1e:cc:66:7c:1a:0a:96:e3: c5:3d:48:33:e8:e2:c7:f6:5b:e3:10:26:30:c8:77: 1d:25:ef:55:ea:20:7d:69:da:b0:b0:c2:e4:53:d0: 4e:53:f9:b0:15:18:c7:0b:4e:fe:a9:80:fc:9e:4c: c3:f0:2c:c4:83:dd:86:aa:0f:73:b2:3f:47:b8:52: 66:95:63:e0:e3:27:19:b8:b3:88:80:31:63:7e:10: 19:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3F:DB:D7:E3:C1:C0:C1:34:BD:53:74:21:72:57:D7:2A:D4:14:E1 X509v3 Authority Key Identifier: keyid:2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d1:5d:8b:2b:60:15:d4:d3:19:df:d5:15:bc:17:9b:5f:e1: 25:24:0c:88:b3:c9:08:ea:61:70:cb:96:9b:15:6b:aa:a1:0a: b7:99:fb:93:24:9b:8b:6f:d4:84:a4:bc:10:47:72:0d:e9:4b: df:f6:94:9b:5e:e8:11:37:96:d7:40:7c:03:ad:33:ea:04:8b: 42:1e:18:90:92:24:d9:c7:c6:6e:00:1d:c4:d3:53:c2:dc:32: a8:89:16:fc:5e:24:ea:3f:8c:40:85:2f:06:a5:a3:8e:a7:73: cd:62:9f:eb:a1:1b:16:0b:41:86:37:0b:4f:66:2a:aa:83:69: f2:a5:f3:45:c0:7a:e9:78:82:15:07:fd:bf:01:59:8d:f3:1e: 41:f6:62:7d:06:d7:44:01:ba:04:0f:e4:3a:9e:ba:f2:c9:3b: bd:09:c1:d3:cf:1a:7b:f3:a2:8b:df:a8:b4:db:77:95:e0:e4: 90:60:fc:a8:7e:b8:fb:f9:7e:7f:23:30:0b:09:24:b2:ab:a7: 40:12:d8:ef:ac:a9:bc:e9:f0:0e:c2:a3:d7:52:6f:62:5e:e8: 0e:b6:6e:4e:7e:6a:eb:fa:85:3d:ba:b9:af:3f:d7:cc:e8:a6: 1b:5a:f5:bb:07:0c:c8:29:c0:63:b2:8c:da:b1:de:07:6a:e3: 0d:b1:14:5f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUexAxr69+bm189NOm+3muXZui+GkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4 NUU4MjMxRTAeFw0yNjAzMjUyMDI0MzNaFw0yNjAzMjYyMjAyMzNaMDMxMTAvBgNV BAMTKEVBM0ZEQkQ3RTNDMUMwQzEzNEJENTM3NDIxNzI1N0Q3MkFENDE0RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZcq8WTaYqLdzADLOvbSy/yn9c ZB6WsE74Ty49e5lZUr253t8SC3vWhXptSbbgRttdeSyHQkCcDd2FngYUL3AzFqAL 36lKaHys+GQq5ljM6sh7nD7XsaYl6PdDpLFmwHcyduxcGsQhNuolvndsdafXSe+3 H1wZ9AoJiNecqd9VvU5++TilVz/f37DYrX7408qRaRN58cVlCoKkXcoDGqLji/nf EM+b2bS3rS4ezGZ8GgqW48U9SDPo4sf2W+MQJjDIdx0l71XqIH1p2rCwwuRT0E5T +bAVGMcLTv6pgPyeTMPwLMSD3YaqD3OyP0e4UmaVY+DjJxm4s4iAMWN+EBlPAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU6j/b1+PBwME0vVN0IXJX1yrUFOEwHwYDVR0j BBgwFoAUKzuXM02gaXgYXax2ovPqNYXoIx4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAv MkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8yQjNCOTczMzREQTA2OTc4MTg1REFDNzZBMkYzRUEz NTg1RTgyMzFFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2YxMTRj MWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAvMkIzQjk3MzM0REEwNjk3ODE4 NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIvRXYsrYBXU0xnf1RW8 F5tf4SUkDIizyQjqYXDLlpsVa6qhCreZ+5Mkm4tv1ISkvBBHcg3pS9/2lJte6BE3 ltdAfAOtM+oEi0IeGJCSJNnHxm4AHcTTU8LcMqiJFvxeJOo/jECFLwalo46nc81i n+uhGxYLQYY3C09mKqqDafKl80XAeul4ghUH/b8BWY3zHkH2Yn0G10QBugQP5Dqe uvLJO70JwdPPGnvzoovfqLTbd5Xg5JBg/Kh+uPv5fn8jMAsJJLKrp0AS2O+sqbzp 8A7Co9dSb2Je6A62bk5+auv6hT26ua8/18zophta9bsHDMgpwGOyjNqx3gdq4w2x FF8= -----END CERTIFICATE-----Generated at Thu Mar 26 13:57:31 2026 by rpki-client