$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft File: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft (raw, json) Hash identifier: EEivz5fv1Fm0tm4JJ9mWZTqx/1qQ4dPD232yvUaPQ8M= Subject key identifier: 26:AE:5E:E9:CF:C1:D4:A5:C8:3C:D4:4A:44:54:AC:BF:81:85:57:C1 Authority key identifier: 28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 Certificate issuer: /CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Certificate serial: D5BFA3C3F6873E69540F84CF98F9BBD4C1938C Authority info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft Manifest number: 5B Signing time: Tue 12 May 2026 09:18:31 +0000 Manifest this update: Tue 12 May 2026 09:13:31 +0000 Manifest next update: Wed 13 May 2026 12:13:31 +0000 Files and hashes: 1: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl (hash: GyTN94qneQbGH4+y3aSBdODMoxqVyG0JHmelJJxzzL4=) 2: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: qwNG09yUfI2Z1oL7Swg14pL+g0Ex6NYiwi4RBuSwo9s=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 12:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d5:bf:a3:c3:f6:87:3e:69:54:0f:84:cf:98:f9:bb:d4:c1:93:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Validity Not Before: May 12 09:13:31 2026 GMT Not After : May 13 12:13:31 2026 GMT Subject: CN=26AE5EE9CFC1D4A5C83CD44A4454ACBF818557C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a9:0f:bb:8a:1d:80:cc:52:91:e9:b4:70:f7: f6:11:89:89:30:06:56:81:a8:8f:32:6d:86:88:e8: ee:cc:78:f7:9a:46:cd:2a:b1:d9:36:af:06:f3:15: c6:7d:dc:17:0b:e6:bb:e9:b4:89:0c:a4:e7:e4:b8: 69:63:18:52:a6:fb:e3:9d:ba:b2:7e:35:1d:18:42: f5:10:7b:7f:c1:d3:1c:d8:f9:49:fe:98:f7:b2:09: de:0a:5a:23:2f:79:74:ee:58:73:61:0f:82:68:00: 4b:ec:8b:45:8d:f2:e7:9a:f7:a0:62:4d:8e:75:6c: 18:7b:52:5f:fc:de:02:00:ab:1c:6b:70:c9:a9:1b: 35:bd:c8:44:26:c6:22:06:b3:fb:c9:f2:73:bc:69: 59:0b:82:62:f3:1e:f1:e3:ce:d2:94:c1:28:63:a8: e7:91:de:5b:a2:e6:d0:66:9d:cb:d3:9a:0f:c4:f5: f5:a8:a5:fb:9d:5a:b1:66:6d:25:56:9b:ee:b8:02: 8c:03:18:44:8a:3d:8b:f1:7d:aa:6c:92:32:76:a0: c8:94:bb:7f:dc:fb:cf:61:97:b0:60:f8:34:43:be: ec:6a:7f:6e:51:99:04:42:a0:fc:16:02:59:65:5b: a7:93:99:08:a2:a0:c4:eb:36:54:9e:5f:0d:26:3c: e5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AE:5E:E9:CF:C1:D4:A5:C8:3C:D4:4A:44:54:AC:BF:81:85:57:C1 X509v3 Authority Key Identifier: keyid:28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl Authority Information Access: CA Issuers - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5a:88:cc:03:86:fe:4e:c0:f5:4c:3b:f4:41:11:7c:9d:bd: 08:c7:b5:5d:20:f7:2c:58:0e:63:97:31:7b:2b:1c:8e:3e:4c: a8:07:02:a9:80:cb:23:b7:f4:9d:c6:b6:b0:9a:00:3e:44:fd: 86:ab:a5:ee:ab:9b:d2:01:d0:ae:07:3f:5e:cc:f0:47:60:5e: 67:33:bc:81:1c:db:dc:81:e7:e4:04:51:06:c8:7f:d6:2f:e9: 92:f5:42:34:05:c9:62:f3:3a:db:49:33:b0:7e:14:61:eb:ee: 12:28:39:f7:61:54:1b:bf:64:d1:1c:9c:f5:bb:50:4d:43:26: b3:40:51:63:d1:d0:7a:50:13:4d:d3:65:1c:72:c5:56:3e:f7: 9b:d8:e0:c5:ea:b4:f0:eb:36:8c:69:97:64:b8:0b:5b:a4:8d: 84:03:71:c0:a9:ce:5c:f1:f8:35:6c:2b:e1:22:07:cd:22:12: 88:1e:79:f2:07:1f:4b:0c:56:5e:48:f7:a7:a1:bd:78:75:ee: f8:64:db:7a:0b:a1:a3:31:f6:ca:2b:e8:98:4c:a1:4e:c1:cb: 09:53:e2:4d:7b:84:70:1f:c4:e5:92:93:1d:a6:04:5b:92:4b: 55:40:f7:72:39:e2:fd:e0:57:44:fb:f4:35:c5:16:5f:50:d1: 37:49:f3:90 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUANW/o8P2hz5pVA+Ez5j5u9TBk4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZE MTFEN0Q1MjAeFw0yNjA1MTIwOTEzMzFaFw0yNjA1MTMxMjEzMzFaMDMxMTAvBgNV BAMTKDI2QUU1RUU5Q0ZDMUQ0QTVDODNDRDQ0QTQ0NTRBQ0JGODE4NTU3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdqQ+7ih2AzFKR6bRw9/YRiYkw BlaBqI8ybYaI6O7MePeaRs0qsdk2rwbzFcZ93BcL5rvptIkMpOfkuGljGFKm++Od urJ+NR0YQvUQe3/B0xzY+Un+mPeyCd4KWiMveXTuWHNhD4JoAEvsi0WN8uea96Bi TY51bBh7Ul/83gIAqxxrcMmpGzW9yEQmxiIGs/vJ8nO8aVkLgmLzHvHjztKUwShj qOeR3lui5tBmncvTmg/E9fWopfudWrFmbSVWm+64AowDGESKPYvxfapskjJ2oMiU u3/c+89hl7Bg+DRDvuxqf25RmQRCoPwWAlllW6eTmQiioMTrNlSeXw0mPOVZAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUJq5e6c/B1KXIPNRKRFSsv4GFV8EwHwYDVR0j BBgwFoAUKB9dOTyRIxHQD2nKQsxtP9EdfVIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzIv MjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZEMTFEN0Q1Mi5jcmwwdgYI KwYBBQUHAQEEajBoMGYGCCsGAQUFBzAChlpyc3luYzovL3JyZHAuYXMyMTQ3NDku bmV0L3JlcG8vYXMyMTQ3NDktcGF3LzEvMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNB NDJDQzZEM0ZEMTFEN0Q1Mi5jZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEF BQcwC4Z7cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9j YV9mMTE0YzFlYTc3ODg0NTJjYmYzOGJlODU0ZWE4MzU5ZC8yLzI4MUY1RDM5M0M5 MTIzMTFEMDBGNjlDQTQyQ0M2RDNGRDExRDdENTIubWZ0MBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAV BggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfWojMA4b+ TsD1TDv0QRF8nb0Ix7VdIPcsWA5jlzF7KxyOPkyoBwKpgMsjt/SdxrawmgA+RP2G q6Xuq5vSAdCuBz9ezPBHYF5nM7yBHNvcgefkBFEGyH/WL+mS9UI0Bcli8zrbSTOw fhRh6+4SKDn3YVQbv2TRHJz1u1BNQyazQFFj0dB6UBNN02UccsVWPveb2ODF6rTw 6zaMaZdkuAtbpI2EA3HAqc5c8fg1bCvhIgfNIhKIHnnyBx9LDFZeSPenob14de74 ZNt6C6GjMfbKK+iYTKFOwcsJU+JNe4RwH8TlkpMdpgRbkktVQPdyOeL94FdE+/Q1 xRZfUNE3SfOQ -----END CERTIFICATE-----Generated at Wed May 13 06:21:39 2026 by rpki-client