$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft File: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft (raw, json) Hash identifier: 9LSI2ilSfiTwIIRwDlIdIx7vlfy3LixuFxejJdgyz7k= Subject key identifier: C2:B2:F2:4D:E8:41:D4:5A:E9:C9:CB:E6:84:E7:0F:AA:C3:AA:72:FA Authority key identifier: 28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 Certificate issuer: /CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Certificate serial: 69628CCF2613AF017184C34171CE9772B5CEFE4E Authority info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft Manifest number: 1F Signing time: Fri 27 Mar 2026 19:11:28 +0000 Manifest this update: Fri 27 Mar 2026 19:06:26 +0000 Manifest next update: Sat 28 Mar 2026 21:31:26 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: qwNG09yUfI2Z1oL7Swg14pL+g0Ex6NYiwi4RBuSwo9s=) 2: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl (hash: fN1Q0j3EGE/mMfI+UyIrZi1mK0pOGGY/XW5V71Jo514=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 21:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:62:8c:cf:26:13:af:01:71:84:c3:41:71:ce:97:72:b5:ce:fe:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Validity Not Before: Mar 27 19:06:26 2026 GMT Not After : Mar 28 21:31:26 2026 GMT Subject: CN=C2B2F24DE841D45AE9C9CBE684E70FAAC3AA72FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:90:9c:c6:15:8d:51:2d:86:e2:b3:6b:9e:b4: 39:e5:20:3b:72:d3:a8:86:66:e3:63:f6:ae:31:3b: 25:bf:ca:f1:c9:5c:b8:61:cf:c5:a1:1d:81:87:6d: 00:b6:06:a4:7b:a5:c6:e1:58:d1:8a:8f:0f:23:a9: d1:17:fd:07:b0:98:f1:69:52:c4:f7:a8:21:5e:76: 71:55:f5:b0:f6:4c:e2:84:6d:43:1a:49:69:04:18: fa:1f:fd:ce:3f:68:08:9a:e3:29:0f:d9:c4:86:b0: 6e:09:e7:a3:2f:7b:61:0a:be:8e:3d:f1:f5:b6:4a: 76:01:43:99:15:a1:ce:8f:27:de:07:ec:34:ef:75: da:11:d3:00:1a:f3:8c:eb:9a:69:91:c0:90:df:9a: 13:e7:9c:52:b7:60:e8:57:f8:b2:1a:ef:53:16:0b: 7f:12:4d:e6:56:47:c6:78:77:ac:03:2d:7a:e4:3f: df:b9:ac:b3:18:64:28:e2:60:87:41:a9:46:44:60: ab:c0:19:d0:14:29:60:34:ae:da:5a:0d:e9:73:7f: 3b:b4:ee:c6:48:3d:3a:01:d2:4c:99:b0:c1:ad:ac: d7:bc:14:f8:d9:55:09:39:3c:07:8b:55:be:7b:95: 39:d7:cb:60:24:3e:64:3e:9a:a7:00:64:2c:17:28: 8f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B2:F2:4D:E8:41:D4:5A:E9:C9:CB:E6:84:E7:0F:AA:C3:AA:72:FA X509v3 Authority Key Identifier: keyid:28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl Authority Information Access: CA Issuers - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:7e:90:bf:72:12:67:aa:b5:2d:30:82:e1:c5:d4:55:6e:ed: 3c:cc:48:61:42:2a:57:2e:35:a1:d3:e4:e1:91:ba:35:d4:05: 34:4b:16:d5:30:ab:ee:82:b9:57:8e:fb:62:93:1d:8a:e9:df: f8:e3:7b:fa:d4:7c:ad:f4:6c:04:ac:e7:e8:26:24:89:6a:32: e0:4c:43:77:91:97:79:08:d0:c2:b9:1b:ef:ad:f9:52:85:91: 6d:dd:2b:76:22:b0:42:b4:53:26:6a:c2:05:fb:d8:a2:a1:d0: a4:ce:81:3b:8d:b9:51:b1:3c:92:50:64:7b:93:eb:bb:22:f9: f6:8e:1c:aa:84:71:ed:cd:a7:aa:f6:0a:30:c8:bd:b7:a9:1c: 6b:49:cc:c6:36:e8:8d:ac:2d:c5:72:68:3a:03:00:90:50:8b: 40:db:fc:ba:4a:98:0d:d4:02:ae:03:c5:d4:b2:50:0c:02:dd: e8:09:6e:4e:a6:f8:2b:23:a6:e5:af:a1:78:ed:2e:31:d0:2d: b6:77:03:71:3c:59:b5:76:03:3a:34:55:ce:9a:7a:1e:5c:15: 07:c7:68:9e:f2:d7:85:81:63:1a:c7:a9:16:49:74:20:ea:c1: c7:46:5b:27:45:b6:f4:47:8d:6d:13:3b:bc:b0:f8:d8:88:df: 3f:83:ce:00 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUaWKMzyYTrwFxhMNBcc6XcrXO/k4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZE MTFEN0Q1MjAeFw0yNjAzMjcxOTA2MjZaFw0yNjAzMjgyMTMxMjZaMDMxMTAvBgNV BAMTKEMyQjJGMjRERTg0MUQ0NUFFOUM5Q0JFNjg0RTcwRkFBQzNBQTcyRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0kJzGFY1RLYbis2uetDnlIDty 06iGZuNj9q4xOyW/yvHJXLhhz8WhHYGHbQC2BqR7pcbhWNGKjw8jqdEX/QewmPFp UsT3qCFednFV9bD2TOKEbUMaSWkEGPof/c4/aAia4ykP2cSGsG4J56Mve2EKvo49 8fW2SnYBQ5kVoc6PJ94H7DTvddoR0wAa84zrmmmRwJDfmhPnnFK3YOhX+LIa71MW C38STeZWR8Z4d6wDLXrkP9+5rLMYZCjiYIdBqUZEYKvAGdAUKWA0rtpaDelzfzu0 7sZIPToB0kyZsMGtrNe8FPjZVQk5PAeLVb57lTnXy2AkPmQ+mqcAZCwXKI+TAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUwrLyTehB1FrpycvmhOcPqsOqcvowHwYDVR0j BBgwFoAUKB9dOTyRIxHQD2nKQsxtP9EdfVIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzIv MjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZEMTFEN0Q1Mi5jcmwwdgYI KwYBBQUHAQEEajBoMGYGCCsGAQUFBzAChlpyc3luYzovL3JyZHAuYXMyMTQ3NDku bmV0L3JlcG8vYXMyMTQ3NDktcGF3LzEvMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNB NDJDQzZEM0ZEMTFEN0Q1Mi5jZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEF BQcwC4Z7cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9j YV9mMTE0YzFlYTc3ODg0NTJjYmYzOGJlODU0ZWE4MzU5ZC8yLzI4MUY1RDM5M0M5 MTIzMTFEMDBGNjlDQTQyQ0M2RDNGRDExRDdENTIubWZ0MBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAV BggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA3fpC/chJn qrUtMILhxdRVbu08zEhhQipXLjWh0+Thkbo11AU0SxbVMKvugrlXjvtikx2K6d/4 43v61Hyt9GwErOfoJiSJajLgTEN3kZd5CNDCuRvvrflShZFt3St2IrBCtFMmasIF +9iiodCkzoE7jblRsTySUGR7k+u7Ivn2jhyqhHHtzaeq9gowyL23qRxrSczGNuiN rC3Fcmg6AwCQUItA2/y6SpgN1AKuA8XUslAMAt3oCW5OpvgrI6blr6F47S4x0C22 dwNxPFm1dgM6NFXOmnoeXBUHx2ie8teFgWMax6kWSXQg6sHHRlsnRbb0R41tEzu8 sPjYiN8/g84A -----END CERTIFICATE-----Generated at Sat Mar 28 12:17:38 2026 by rpki-client