$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft File: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft (raw, json) Hash identifier: lpGaxIaeDIGDJPSv0+WuhnMLv2umv0BKdJacWv71HzU= Subject key identifier: 7B:8E:FC:50:EF:D3:6F:87:19:99:AC:FD:29:88:CD:5B:36:57:ED:81 Authority key identifier: 2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E Certificate issuer: /CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Certificate serial: 3F2EA3AC3CEBB848E8195FD3FA712340DE58132F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft Manifest number: 013D Signing time: Thu 23 Jul 2026 11:46:27 +0000 Manifest this update: Thu 23 Jul 2026 11:41:27 +0000 Manifest next update: Fri 24 Jul 2026 14:07:27 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: SsKZ08+rzpnXlHPVlF1X2ydZv//GE/sZxshtEoPOB40=) 2: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl (hash: 2ufgN+5/0AkQA5XpnYfFiLiAc/WcWfbSEh2nP2bENqU=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:2e:a3:ac:3c:eb:b8:48:e8:19:5f:d3:fa:71:23:40:de:58:13:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Validity Not Before: Jul 23 11:41:27 2026 GMT Not After : Jul 24 14:07:27 2026 GMT Subject: CN=7B8EFC50EFD36F871999ACFD2988CD5B3657ED81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c4:42:86:f8:6e:b9:aa:37:22:fb:e7:e4:e7: c5:bb:ff:12:a8:c2:a1:32:1f:72:be:ce:a4:ff:9f: a0:7b:42:60:72:2a:71:33:b3:77:43:cc:49:f1:ce: d0:c3:84:2f:54:59:c7:0f:e5:06:3c:38:4d:3c:61: 3c:d1:b2:7b:3e:09:ed:8c:de:fa:5f:0e:2a:ae:e3: d2:c7:da:66:52:01:c2:6e:06:9a:76:d8:d1:57:98: 34:55:94:b6:ed:e9:6a:6c:04:57:2f:c9:1b:7a:b5: e1:40:27:7d:fe:b7:b0:2d:26:90:d0:c3:09:06:da: ec:37:a0:59:03:cd:c3:fa:2a:c6:19:33:d3:84:2b: ec:53:3a:f4:7a:2e:62:d9:f0:ff:ce:ec:62:ac:42: 47:a8:20:5c:ae:d1:72:e5:92:bf:1b:50:a0:c4:74: 78:53:c5:70:67:42:76:6c:7d:1c:8e:5c:ae:ff:10: 88:37:ad:90:d9:b9:07:26:c9:4a:39:a1:49:0b:3c: 52:25:b0:f0:1e:05:ae:54:09:48:1b:71:06:68:01: a2:2f:30:c4:b7:19:e1:58:05:cd:12:01:b3:29:88: 90:0e:2a:f0:4a:d9:55:42:c6:65:a7:cb:1b:b6:9c: 15:c4:99:b5:b7:a5:0f:de:2d:e1:da:74:a2:2a:d7: 76:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8E:FC:50:EF:D3:6F:87:19:99:AC:FD:29:88:CD:5B:36:57:ED:81 X509v3 Authority Key Identifier: keyid:2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:2c:90:1a:04:37:0b:a3:9c:e4:da:1a:48:19:e9:47:72:0f: a1:96:ab:35:a8:72:0c:26:40:82:05:50:fa:2c:70:0a:79:a2: a1:bf:5b:6b:5b:de:f5:02:29:83:0d:f0:ee:d3:52:bf:62:b3: 2b:68:f1:2d:5c:7e:ca:1f:89:e3:0e:96:ab:a0:af:78:7f:f0: 0c:a4:f0:1d:d8:ae:c3:64:a1:71:d4:6c:0d:f6:6a:0e:49:bc: 63:0c:18:bf:96:91:a5:5d:c2:56:28:0e:15:66:ae:98:33:d1: 3d:41:51:cc:52:a0:81:ee:67:a8:2f:d4:fc:e6:9f:99:78:0a: 77:4f:84:15:d4:44:d2:2f:63:9f:70:bb:c6:f6:b8:78:ab:45: 68:b9:96:82:c4:d1:16:e7:ee:b0:22:0b:41:66:09:c0:94:90: 84:0d:ce:5e:df:f9:ce:5f:84:8a:50:e6:16:7f:53:1a:85:fd: a1:cf:93:19:1d:0d:f6:37:e2:cc:65:60:aa:d5:b2:6f:0c:db: f2:d4:2d:2c:97:d0:16:5e:12:3b:56:ed:a7:2a:0b:e1:f1:33: a2:ce:d2:09:8c:9a:98:df:2e:ff:21:2f:2b:82:ef:6a:3f:0c: 37:bd:24:47:56:b8:70:fc:66:e0:6b:04:72:3e:68:60:65:db: e8:45:0e:fd -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUPy6jrDzruEjoGV/T+nEjQN5YEy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4 NUU4MjMxRTAeFw0yNjA3MjMxMTQxMjdaFw0yNjA3MjQxNDA3MjdaMDMxMTAvBgNV BAMTKDdCOEVGQzUwRUZEMzZGODcxOTk5QUNGRDI5ODhDRDVCMzY1N0VEODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmxEKG+G65qjci++fk58W7/xKo wqEyH3K+zqT/n6B7QmByKnEzs3dDzEnxztDDhC9UWccP5QY8OE08YTzRsns+Ce2M 3vpfDiqu49LH2mZSAcJuBpp22NFXmDRVlLbt6WpsBFcvyRt6teFAJ33+t7AtJpDQ wwkG2uw3oFkDzcP6KsYZM9OEK+xTOvR6LmLZ8P/O7GKsQkeoIFyu0XLlkr8bUKDE dHhTxXBnQnZsfRyOXK7/EIg3rZDZuQcmyUo5oUkLPFIlsPAeBa5UCUgbcQZoAaIv MMS3GeFYBc0SAbMpiJAOKvBK2VVCxmWnyxu2nBXEmbW3pQ/eLeHadKIq13bPAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUe478UO/Tb4cZmaz9KYjNWzZX7YEwHwYDVR0j BBgwFoAUKzuXM02gaXgYXax2ovPqNYXoIx4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAv MkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8yQjNCOTczMzREQTA2OTc4MTg1REFDNzZBMkYzRUEz NTg1RTgyMzFFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2YxMTRj MWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAvMkIzQjk3MzM0REEwNjk3ODE4 NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALsskBoENwujnOTaGkgZ 6UdyD6GWqzWocgwmQIIFUPoscAp5oqG/W2tb3vUCKYMN8O7TUr9isyto8S1cfsof ieMOlqugr3h/8Ayk8B3YrsNkoXHUbA32ag5JvGMMGL+WkaVdwlYoDhVmrpgz0T1B UcxSoIHuZ6gv1Pzmn5l4CndPhBXURNIvY59wu8b2uHirRWi5loLE0Rbn7rAiC0Fm CcCUkIQNzl7f+c5fhIpQ5hZ/UxqF/aHPkxkdDfY34sxlYKrVsm8M2/LULSyX0BZe EjtW7acqC+HxM6LO0gmMmpjfLv8hLyuC72o/DDe9JEdWuHD8ZuBrBHI+aGBl2+hF Dv0= -----END CERTIFICATE-----Generated at Fri Jul 24 06:05:47 2026 by rpki-client