$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft File: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft (raw, json) Hash identifier: w+1Ow09z8rZbEWq/75PmOA9By2/FK0S3VvDxTg3MGbk= Subject key identifier: D2:68:7A:B8:AB:35:24:76:21:6C:ED:D0:5D:38:71:35:8C:CE:85:26 Authority key identifier: 28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 Certificate issuer: /CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Certificate serial: 5C0130DD1C430786D996913E289C959A51186D37 Authority info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft Manifest number: BC Signing time: Fri 24 Jul 2026 00:10:14 +0000 Manifest this update: Fri 24 Jul 2026 00:05:14 +0000 Manifest next update: Sat 25 Jul 2026 03:24:14 +0000 Files and hashes: 1: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl (hash: i990VkFa245bh1jun0IC7AhZptvCGBLwwn2N6xCVBWw=) 2: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: qwNG09yUfI2Z1oL7Swg14pL+g0Ex6NYiwi4RBuSwo9s=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 03:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:01:30:dd:1c:43:07:86:d9:96:91:3e:28:9c:95:9a:51:18:6d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Validity Not Before: Jul 24 00:05:14 2026 GMT Not After : Jul 25 03:24:14 2026 GMT Subject: CN=D2687AB8AB352476216CEDD05D3871358CCE8526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ff:9b:59:49:17:cf:89:9c:2b:30:9f:69:31: 31:af:a6:6c:e9:70:72:1d:ce:5d:e4:b0:a0:ec:ff: e8:70:b6:84:68:33:7f:18:f7:7f:49:a2:68:06:34: 5b:7f:fc:8b:6a:d9:1e:96:41:a0:dd:c7:3c:7c:51: 19:2a:0d:8b:d8:11:c7:5d:0f:26:e7:2e:8a:ad:72: a2:be:12:81:34:85:9b:3f:5d:c3:c7:76:c1:32:68: 6e:92:b7:f5:64:f6:a7:7e:49:0e:bc:c9:eb:69:84: 8b:97:55:87:9d:4d:c2:68:00:e4:9c:f5:ed:60:1a: b8:6b:42:af:02:fd:21:9b:ae:87:f8:f0:fc:bf:b1: 1f:e2:71:ed:41:9d:b4:70:a2:e1:9f:f8:e1:1f:29: 11:16:04:d8:1f:8a:b2:85:00:24:ac:27:64:17:96: ee:be:30:9d:3c:12:e9:64:e7:6b:a7:be:87:02:91: 8e:79:57:85:14:75:38:f0:3d:03:19:83:f7:79:4d: a8:34:d7:a9:de:01:3a:88:5d:5c:12:07:20:9c:41: 80:ef:fe:32:86:3f:f9:ad:56:89:b3:d2:00:cc:b3: 5e:3f:9e:b9:13:a9:69:03:a9:1f:7a:10:fe:d3:19: 82:4b:ac:6d:79:58:e1:94:75:11:0c:4c:b4:ac:25: 38:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:68:7A:B8:AB:35:24:76:21:6C:ED:D0:5D:38:71:35:8C:CE:85:26 X509v3 Authority Key Identifier: keyid:28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl Authority Information Access: CA Issuers - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:43:20:a1:02:81:32:55:31:6d:ec:ea:aa:2d:d2:0a:17:54: 32:a6:ef:cf:20:19:fd:a7:b3:c7:c3:65:aa:42:0a:e5:92:49: 09:da:f1:92:ea:8e:15:87:f5:5f:86:bf:10:bb:82:74:10:77: 80:0d:16:06:91:60:4d:bf:e3:92:5e:49:a0:87:d3:fb:5d:38: 69:80:65:76:17:83:07:7e:83:2b:a3:49:1f:cd:a9:e1:27:72: 86:c6:f7:8c:a3:02:18:4c:2e:61:9a:20:b9:75:d6:19:69:99: e3:33:be:0d:59:cf:1a:37:bd:9c:61:a6:22:1d:a5:71:b3:94: a4:f9:75:2a:1b:93:f7:92:68:17:1a:6d:3b:1b:a8:61:e4:9b: 80:b9:44:12:43:97:92:88:06:5f:c5:1a:a3:da:5d:a8:bf:87: db:e0:e6:9b:6b:ce:08:d1:6a:5f:d7:e2:4e:be:26:1b:f3:dc: a5:60:e1:c7:3a:15:49:bb:b7:f3:c2:50:74:2b:c2:f7:aa:5f: b0:41:81:68:2c:65:bd:80:8c:15:0e:ca:e6:ff:97:2c:e1:dc: f2:c3:e4:ca:8a:4f:73:c8:08:88:8f:6c:9a:63:42:e5:70:43: 12:b4:ba:3a:6f:ee:34:56:bc:48:19:05:d2:1c:45:ee:ad:2b: cf:07:57:49 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUXAEw3RxDB4bZlpE+KJyVmlEYbTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZE MTFEN0Q1MjAeFw0yNjA3MjQwMDA1MTRaFw0yNjA3MjUwMzI0MTRaMDMxMTAvBgNV BAMTKEQyNjg3QUI4QUIzNTI0NzYyMTZDRUREMDVEMzg3MTM1OENDRTg1MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO/5tZSRfPiZwrMJ9pMTGvpmzp cHIdzl3ksKDs/+hwtoRoM38Y939JomgGNFt//Itq2R6WQaDdxzx8URkqDYvYEcdd DybnLoqtcqK+EoE0hZs/XcPHdsEyaG6St/Vk9qd+SQ68yetphIuXVYedTcJoAOSc 9e1gGrhrQq8C/SGbrof48Py/sR/ice1BnbRwouGf+OEfKREWBNgfirKFACSsJ2QX lu6+MJ08Eulk52unvocCkY55V4UUdTjwPQMZg/d5Tag016neATqIXVwSByCcQYDv /jKGP/mtVomz0gDMs14/nrkTqWkDqR96EP7TGYJLrG15WOGUdREMTLSsJTjRAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU0mh6uKs1JHYhbO3QXThxNYzOhSYwHwYDVR0j BBgwFoAUKB9dOTyRIxHQD2nKQsxtP9EdfVIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzIv MjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZEMTFEN0Q1Mi5jcmwwdgYI KwYBBQUHAQEEajBoMGYGCCsGAQUFBzAChlpyc3luYzovL3JyZHAuYXMyMTQ3NDku bmV0L3JlcG8vYXMyMTQ3NDktcGF3LzEvMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNB NDJDQzZEM0ZEMTFEN0Q1Mi5jZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEF BQcwC4Z7cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9j YV9mMTE0YzFlYTc3ODg0NTJjYmYzOGJlODU0ZWE4MzU5ZC8yLzI4MUY1RDM5M0M5 MTIzMTFEMDBGNjlDQTQyQ0M2RDNGRDExRDdENTIubWZ0MBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAV BggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASQyChAoEy VTFt7OqqLdIKF1Qypu/PIBn9p7PHw2WqQgrlkkkJ2vGS6o4Vh/Vfhr8Qu4J0EHeA DRYGkWBNv+OSXkmgh9P7XThpgGV2F4MHfoMro0kfzanhJ3KGxveMowIYTC5hmiC5 ddYZaZnjM74NWc8aN72cYaYiHaVxs5Sk+XUqG5P3kmgXGm07G6hh5JuAuUQSQ5eS iAZfxRqj2l2ov4fb4Oaba84I0Wpf1+JOviYb89ylYOHHOhVJu7fzwlB0K8L3ql+w QYFoLGW9gIwVDsrm/5cs4dzyw+TKik9zyAiIj2yaY0LlcEMStLo6b+40VrxIGQXS HEXurSvPB1dJ -----END CERTIFICATE-----Generated at Fri Jul 24 11:26:50 2026 by rpki-client