$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft File: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft (raw, json) Hash identifier: SaZBKtHxKr0jAL5DmXqCeCKLfM0L/+IyFYVTrLYWVnk= Subject key identifier: B6:54:34:12:24:3F:35:44:86:0E:8A:F0:84:18:CF:98:18:53:A9:AA Authority key identifier: 66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C Certificate issuer: /CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C Certificate serial: 1BBFD825FC8E4FE254266F590DFBFD599C849BDD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer Subject info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft Manifest number: 71 Signing time: Tue 12 May 2026 12:39:19 +0000 Manifest this update: Tue 12 May 2026 12:34:19 +0000 Manifest next update: Wed 13 May 2026 14:48:19 +0000 Files and hashes: 1: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl (hash: VP+v/Unk/+S8/nWQRdrYwncY502nT/8fkDOjBHV3NWo=) 2: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer (hash: ynXwUJN5JMWLP0eeAHCJKATWObgf6l2CFVROKgpYj7U=) 3: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: eKfFEzgr+H6yF3j6egSuIVRG25C7FeWL17iAWbZC228=) Validation: OK Signature path: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:bf:d8:25:fc:8e:4f:e2:54:26:6f:59:0d:fb:fd:59:9c:84:9b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C Validity Not Before: May 12 12:34:19 2026 GMT Not After : May 13 14:48:19 2026 GMT Subject: CN=B6543412243F3544860E8AF08418CF981853A9AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3e:83:73:fd:a7:0a:97:b6:db:0f:6f:29:d1: 4d:af:51:94:28:0a:8b:25:9b:c6:10:e6:bd:ce:ec: 8e:ec:d9:35:a3:f8:57:28:c2:c5:a7:0a:a2:01:a6: 77:7c:ee:fa:fd:e0:e4:e3:3f:5d:16:42:76:c6:ff: e4:0c:fd:f8:91:37:4d:fc:b4:cc:dc:dc:13:0e:21: ad:3f:f5:af:5f:86:f1:87:8d:ee:eb:2d:20:8c:72: 80:30:95:92:24:d4:c5:01:cf:7e:c4:f5:d7:83:31: b3:8f:6c:a4:18:61:ff:ba:41:32:8d:c6:bd:cd:bb: d5:1c:a1:60:8e:d0:0b:64:89:91:88:dd:60:8c:38: c0:f0:2d:5e:94:e2:c1:e9:20:a7:ba:d5:32:7f:7b: 35:ab:55:7d:f3:b5:8a:42:d1:2a:fe:d6:3b:2d:08: d2:a7:3f:59:f9:9c:b0:44:3d:69:ec:00:7f:6f:ef: 8a:8d:e9:13:f5:d4:a5:a4:b4:f5:2b:ee:e8:65:be: e3:af:e3:b1:66:99:7b:53:7a:0e:bd:2f:80:c5:89: 23:18:61:b4:5a:ea:41:34:a5:15:d7:15:fb:06:66: 23:27:a9:4e:cf:b0:62:30:cb:1c:d5:6f:d0:6f:61: 34:c1:c3:6b:13:5d:11:c5:2b:1a:4c:f5:75:26:df: 76:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:54:34:12:24:3F:35:44:86:0E:8A:F0:84:18:CF:98:18:53:A9:AA X509v3 Authority Key Identifier: keyid:66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer Subject Information Access: Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:61:a1:f5:19:a6:08:47:fa:f3:b8:8e:a9:c9:6d:a5:1a:87: 99:d2:9f:33:8a:20:bd:8e:ca:8d:3c:fd:6d:b9:c0:44:1c:87: 95:1f:64:b2:ce:33:5e:fc:3a:9a:1c:ee:65:b0:e5:7e:dd:50: 67:35:0e:77:67:0d:fc:f1:f5:83:05:b0:a1:05:19:bd:13:b6: 42:57:44:51:31:69:c3:c8:01:8c:59:1e:16:5c:41:7f:1f:11: 8a:63:73:c2:1d:a1:ed:82:89:c0:0f:6a:5e:ff:93:7c:15:1b: 94:57:31:79:95:3a:90:01:3e:ee:b3:9e:14:14:30:23:2a:8d: a9:f7:2e:64:c5:e9:05:4d:fa:56:f9:ac:0b:1f:11:ea:74:2b: 16:d1:c4:1a:59:06:37:09:fe:1d:14:5d:8f:2e:cb:67:76:d5: 78:98:45:73:cb:dc:fd:46:64:36:a7:a1:3d:90:5a:82:5c:eb: a0:20:1c:6b:31:dd:66:ee:9e:ae:5a:2e:64:02:db:8a:fe:62: ee:a4:1f:1d:45:26:ab:5f:59:75:4a:ca:0f:0c:40:22:32:b5: 15:e0:cb:40:fe:58:7c:f7:0a:09:50:48:10:6d:22:ca:24:41: 88:23:95:d2:e2:e8:4e:3d:97:c7:c6:e5:d8:f0:81:8a:d7:27: b8:b1:2b:33 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUG7/YJfyOT+JUJm9ZDfv9WZyEm90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZCRDBDMTAxMzVFNURCRjQ5MTNFMkVFM0YyREQ5RDM1 OEY5RjUxQzAeFw0yNjA1MTIxMjM0MTlaFw0yNjA1MTMxNDQ4MTlaMDMxMTAvBgNV BAMTKEI2NTQzNDEyMjQzRjM1NDQ4NjBFOEFGMDg0MThDRjk4MTg1M0E5QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUPoNz/acKl7bbD28p0U2vUZQo Coslm8YQ5r3O7I7s2TWj+FcowsWnCqIBpnd87vr94OTjP10WQnbG/+QM/fiRN038 tMzc3BMOIa0/9a9fhvGHje7rLSCMcoAwlZIk1MUBz37E9deDMbOPbKQYYf+6QTKN xr3Nu9UcoWCO0AtkiZGI3WCMOMDwLV6U4sHpIKe61TJ/ezWrVX3ztYpC0Sr+1jst CNKnP1n5nLBEPWnsAH9v74qN6RP11KWktPUr7uhlvuOv47FmmXtTeg69L4DFiSMY YbRa6kE0pRXXFfsGZiMnqU7PsGIwyxzVb9BvYTTBw2sTXRHFKxpM9XUm33bXAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUtlQ0EiQ/NUSGDorwhBjPmBhTqaowHwYDVR0j BBgwFoAUZr0MEBNeXb9JE+LuPy3Z01j59RwwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud HwRkMGIwYKBeoFyGWnJzeW5jOi8vcnJkcC5hczIxNDc0OS5uZXQvcmVwby9hczIx NDc0OS1wYXcvMS82NkJEMEMxMDEzNUU1REJGNDkxM0UyRUUzRjJERDlEMzU4RjlG NTFDLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzov L3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RkZTgzN2ZiLTYz OTAtNDFiNS04MmEwLWYwZDAyYzAzYTJjNi83LzY2QkQwQzEwMTM1RTVEQkY0OTEz RTJFRTNGMkREOUQzNThGOUY1MUMuY2VyMHYGCCsGAQUFBwELBGowaDBmBggrBgEF BQcwC4ZacnN5bmM6Ly9ycmRwLmFzMjE0NzQ5Lm5ldC9yZXBvL2FzMjE0NzQ5LXBh dy8xLzY2QkQwQzEwMTM1RTVEQkY0OTEzRTJFRTNGMkREOUQzNThGOUY1MUMubWZ0 MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVYaH1GaYIR/rzuI6pyW2lGoeZ0p8ziiC9jsqNPP1tucBEHIeVH2Sy zjNe/DqaHO5lsOV+3VBnNQ53Zw388fWDBbChBRm9E7ZCV0RRMWnDyAGMWR4WXEF/ HxGKY3PCHaHtgonAD2pe/5N8FRuUVzF5lTqQAT7us54UFDAjKo2p9y5kxekFTfpW +awLHxHqdCsW0cQaWQY3Cf4dFF2PLstndtV4mEVzy9z9RmQ2p6E9kFqCXOugIBxr Md1m7p6uWi5kAtuK/mLupB8dRSarX1l1SsoPDEAiMrUV4MtA/lh89woJUEgQbSLK JEGII5XS4uhOPZfHxuXY8IGK1ye4sSsz -----END CERTIFICATE-----Generated at Tue May 12 23:04:40 2026 by rpki-client