$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft File: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft (raw, json) Hash identifier: XvYQA7bJi/KWDkMJZDq2Hg7ExHekfJ/m9g+8zyndMjw= Subject key identifier: B9:52:E6:95:CE:C9:34:07:1D:AF:25:C3:0D:80:14:C2:9B:78:BC:29 Authority key identifier: 28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 Certificate issuer: /CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Certificate serial: 66D1B21101DFF864165B03D2A858B59154F41A13 Authority info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft Manifest number: 010A Signing time: Sat 03 Oct 2026 11:28:01 +0000 Manifest this update: Sat 03 Oct 2026 11:23:01 +0000 Manifest next update: Sun 04 Oct 2026 14:14:01 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: qwNG09yUfI2Z1oL7Swg14pL+g0Ex6NYiwi4RBuSwo9s=) 2: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl (hash: nf/0Hstkna8jba0o4InFFWUGr0RlppATAOzvhQD2r0I=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 02:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d1:b2:11:01:df:f8:64:16:5b:03:d2:a8:58:b5:91:54:f4:1a:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Validity Not Before: Oct 3 11:23:01 2026 GMT Not After : Oct 4 14:14:01 2026 GMT Subject: CN=B952E695CEC934071DAF25C30D8014C29B78BC29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2a:c9:3b:e6:e3:3c:de:1a:d6:20:91:80:03: 87:78:17:e9:8a:14:ab:d7:70:1c:19:7a:4c:94:80: 0f:68:25:b5:49:bc:6a:9a:10:49:54:7f:a5:14:c6: 91:91:b5:7a:66:38:f4:d1:79:7d:72:d0:c0:07:38: 53:e6:44:bc:85:d7:36:5d:99:2c:65:09:19:39:cc: 6c:2c:97:0e:eb:51:45:b9:cb:35:0c:f0:34:c3:21: 51:76:02:be:d4:c0:6e:bb:b3:c1:fa:83:7d:a1:fa: d2:ac:4d:6f:fd:35:76:5e:92:62:a7:94:ac:9d:7e: 2d:e2:29:73:19:1f:78:64:0d:9f:77:86:4e:79:29: a9:a8:fc:a9:4c:67:d6:dc:b6:14:20:46:b1:37:dd: 32:a2:b5:05:1a:b5:04:ca:4c:2d:30:b2:b4:4e:82: 09:77:6e:f1:3e:ac:57:72:30:34:c2:88:71:be:8b: 9b:16:11:90:31:1c:88:15:6d:0a:94:04:90:60:44: 7b:5c:af:bf:21:b3:60:ae:57:27:09:91:0f:fe:5e: 07:91:85:12:a4:a3:a8:1a:7b:7a:b3:37:ef:30:58: b0:b4:b3:80:fa:3c:aa:c3:63:9c:e9:03:38:21:83: fb:83:2f:e4:c4:cd:58:17:28:fe:26:61:14:1b:bb: d1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:52:E6:95:CE:C9:34:07:1D:AF:25:C3:0D:80:14:C2:9B:78:BC:29 X509v3 Authority Key Identifier: keyid:28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl Authority Information Access: CA Issuers - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:8a:e1:15:b6:45:9d:86:32:5d:ee:5a:88:85:dd:37:bd:9f: 92:40:07:51:04:e8:55:6c:f4:3d:91:5e:37:c8:df:a4:f7:a7: 03:05:c6:56:10:58:15:0d:3a:5e:cc:f0:84:53:79:a6:01:f5: a6:89:3c:fe:f0:27:d3:84:25:ee:c9:a9:c8:4c:c6:6a:df:21: 3d:7b:75:83:0a:ff:ef:01:04:c0:9e:66:0a:77:78:39:7a:2c: cd:91:c0:55:7e:11:6a:55:ec:c7:2f:4f:99:6b:18:9c:b8:1a: 00:6b:22:c0:1f:f5:b8:91:3b:db:b1:fc:10:78:66:79:19:01: ea:e4:41:b9:63:28:5f:15:e3:7d:4d:88:2b:ba:ae:ac:1b:da: bf:5b:f6:2e:52:02:a1:e0:91:12:1e:84:57:78:bf:6d:a6:79: 53:82:81:87:33:2e:5f:24:e9:53:c2:23:a8:95:c0:3e:82:b1: fa:b5:69:4f:5b:31:46:df:8e:d3:4f:cf:99:66:26:a5:9d:b6: 7b:fb:de:44:09:68:d4:2d:29:04:37:83:f5:c6:5d:22:a9:b5: 83:9f:f3:39:d0:bb:2e:83:fe:c7:29:7e:50:67:55:4f:bc:b6: d2:ab:7a:49:f9:73:5a:b5:e1:7b:db:d1:fe:d2:86:82:b3:53: 41:ab:d6:33 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUZtGyEQHf+GQWWwPSqFi1kVT0GhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZE MTFEN0Q1MjAeFw0yNjEwMDMxMTIzMDFaFw0yNjEwMDQxNDE0MDFaMDMxMTAvBgNV BAMTKEI5NTJFNjk1Q0VDOTM0MDcxREFGMjVDMzBEODAxNEMyOUI3OEJDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Ksk75uM83hrWIJGAA4d4F+mK FKvXcBwZekyUgA9oJbVJvGqaEElUf6UUxpGRtXpmOPTReX1y0MAHOFPmRLyF1zZd mSxlCRk5zGwslw7rUUW5yzUM8DTDIVF2Ar7UwG67s8H6g32h+tKsTW/9NXZekmKn lKydfi3iKXMZH3hkDZ93hk55Kamo/KlMZ9bcthQgRrE33TKitQUatQTKTC0wsrRO ggl3bvE+rFdyMDTCiHG+i5sWEZAxHIgVbQqUBJBgRHtcr78hs2CuVycJkQ/+XgeR hRKko6gae3qzN+8wWLC0s4D6PKrDY5zpAzghg/uDL+TEzVgXKP4mYRQbu9FtAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUuVLmlc7JNAcdryXDDYAUwpt4vCkwHwYDVR0j BBgwFoAUKB9dOTyRIxHQD2nKQsxtP9EdfVIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzIv MjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZEMTFEN0Q1Mi5jcmwwdgYI KwYBBQUHAQEEajBoMGYGCCsGAQUFBzAChlpyc3luYzovL3JyZHAuYXMyMTQ3NDku bmV0L3JlcG8vYXMyMTQ3NDktcGF3LzEvMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNB NDJDQzZEM0ZEMTFEN0Q1Mi5jZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEF BQcwC4Z7cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9j YV9mMTE0YzFlYTc3ODg0NTJjYmYzOGJlODU0ZWE4MzU5ZC8yLzI4MUY1RDM5M0M5 MTIzMTFEMDBGNjlDQTQyQ0M2RDNGRDExRDdENTIubWZ0MBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAV BggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAniuEVtkWd hjJd7lqIhd03vZ+SQAdRBOhVbPQ9kV43yN+k96cDBcZWEFgVDTpezPCEU3mmAfWm iTz+8CfThCXuyanITMZq3yE9e3WDCv/vAQTAnmYKd3g5eizNkcBVfhFqVezHL0+Z axicuBoAayLAH/W4kTvbsfwQeGZ5GQHq5EG5YyhfFeN9TYgruq6sG9q/W/YuUgKh 4JESHoRXeL9tpnlTgoGHMy5fJOlTwiOolcA+grH6tWlPWzFG347TT8+ZZialnbZ7 +95ECWjULSkEN4P1xl0iqbWDn/M50Lsug/7HKX5QZ1VPvLbSq3pJ+XNateF729H+ 0oaCs1NBq9Yz -----END CERTIFICATE-----Generated at Sat Oct 3 17:52:29 2026 by rpki-client