$ rpki-client -vvvf rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft File: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft (raw, json) Hash identifier: KgsoTzcOXLv2WCIJyYIYqi8zeFQYcHB3Tti75O2RNn8= Subject key identifier: F5:B5:4D:E2:33:3C:C5:31:61:78:A8:2B:9A:34:D9:53:12:A4:EA:9C Authority key identifier: 66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C Certificate issuer: /CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C Certificate serial: 307BB5D2F69057281C2C517889E9C25DACE9EB2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer Subject info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft Manifest number: 0127 Signing time: Sat 26 Sep 2026 01:14:57 +0000 Manifest this update: Sat 26 Sep 2026 01:09:57 +0000 Manifest next update: Sun 27 Sep 2026 04:51:57 +0000 Files and hashes: 1: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer (hash: ynXwUJN5JMWLP0eeAHCJKATWObgf6l2CFVROKgpYj7U=) 2: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl (hash: eEnIh/2mjzM8c+K4vLvZr8AG/cD4ZAWBWC/DF0ursM0=) 3: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: eKfFEzgr+H6yF3j6egSuIVRG25C7FeWL17iAWbZC228=) Validation: OK Signature path: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 02:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:7b:b5:d2:f6:90:57:28:1c:2c:51:78:89:e9:c2:5d:ac:e9:eb:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C Validity Not Before: Sep 26 01:09:57 2026 GMT Not After : Sep 27 04:51:57 2026 GMT Subject: CN=F5B54DE2333CC5316178A82B9A34D95312A4EA9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6d:9a:8c:04:76:f2:d0:e1:ae:1e:aa:46:a1: fe:75:ca:b7:a9:d3:21:c3:58:45:5c:15:37:3e:23: f4:75:1f:6f:e0:ce:d6:d5:02:87:38:44:4c:51:cb: 54:f2:e2:db:a5:84:50:5e:fa:d4:e5:ad:e9:07:cb: 75:ed:9d:26:06:7b:13:b8:fa:69:05:09:ab:53:13: 99:a1:76:9f:3f:fe:36:08:b2:db:e4:ea:07:1e:c2: 5c:21:b4:2e:0b:a6:7c:26:c5:a7:bc:11:27:57:7d: fa:94:4f:78:07:83:54:2c:9a:3d:86:13:f7:eb:56: a1:39:c1:89:68:d9:22:0e:44:9a:ee:c0:2a:fb:82: b7:89:d9:3a:e3:ff:b4:90:d7:c0:06:01:77:9c:39: 88:96:30:b2:43:7a:73:87:33:42:d6:42:c8:cf:4c: c4:7e:ba:58:43:1f:ac:32:c1:e4:62:a0:d2:d6:38: ce:e3:ac:8c:04:6e:00:29:8e:9e:d0:bc:37:bf:51: 13:36:12:53:03:86:db:a4:04:68:4f:7c:b8:fb:c1: c1:88:3d:79:d3:48:e7:b3:bb:ef:b8:22:a1:99:88: e1:e7:76:b7:3b:31:bc:e6:3c:de:67:3f:8a:d7:3b: 49:c0:55:2a:10:52:7c:b2:5d:fa:07:dd:b4:4a:20: 0d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B5:4D:E2:33:3C:C5:31:61:78:A8:2B:9A:34:D9:53:12:A4:EA:9C X509v3 Authority Key Identifier: keyid:66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer Subject Information Access: Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:1a:94:5b:10:57:25:91:59:8b:80:5d:80:2f:77:d4:7b:7b: 79:8c:b6:c8:c5:00:68:88:d0:1d:d1:1d:a2:04:62:f8:aa:af: 2b:c6:64:c8:a2:6b:e0:da:d1:00:a0:cc:9b:66:d0:cc:cc:c2: d4:5b:66:2e:83:ae:f5:b1:ea:06:2a:2a:17:c2:55:a8:fe:5f: c2:fd:99:96:cc:25:f3:f0:71:6a:48:b8:64:fe:a8:f8:9f:d5: 1f:50:8a:6e:e0:c4:ee:f8:71:a3:0f:fe:92:4d:86:d4:92:84: 04:ef:04:04:d5:83:6f:c7:f9:b1:3b:0e:3c:63:9d:11:66:9e: 45:f7:df:48:bc:11:50:ba:1b:fd:e8:7f:c7:1f:83:67:98:70: 3a:28:79:d8:c1:cb:3e:31:c9:28:bf:1f:92:a9:a3:dd:28:9b: d8:87:6b:f6:4d:2c:15:2d:d1:40:35:b6:19:b6:22:19:02:ca: de:20:ac:6a:f4:7b:63:62:06:8e:44:af:66:6f:95:ef:df:25: 7d:a5:d2:fe:65:97:90:5f:75:f4:d7:ec:f2:cc:60:6c:5d:16: 22:93:23:e4:d8:5f:8f:f3:d1:36:00:2f:db:ac:87:60:88:1c: dd:6b:6a:15:1c:3c:24:6b:e0:9c:f6:ab:04:90:23:ab:9d:a6: c7:52:f6:d9 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUMHu10vaQVygcLFF4ienCXazp6ywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZCRDBDMTAxMzVFNURCRjQ5MTNFMkVFM0YyREQ5RDM1 OEY5RjUxQzAeFw0yNjA5MjYwMTA5NTdaFw0yNjA5MjcwNDUxNTdaMDMxMTAvBgNV BAMTKEY1QjU0REUyMzMzQ0M1MzE2MTc4QTgyQjlBMzREOTUzMTJBNEVBOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+bZqMBHby0OGuHqpGof51yrep 0yHDWEVcFTc+I/R1H2/gztbVAoc4RExRy1Ty4tulhFBe+tTlrekHy3XtnSYGexO4 +mkFCatTE5mhdp8//jYIstvk6gcewlwhtC4Lpnwmxae8ESdXffqUT3gHg1Qsmj2G E/frVqE5wYlo2SIORJruwCr7greJ2Trj/7SQ18AGAXecOYiWMLJDenOHM0LWQsjP TMR+ulhDH6wyweRioNLWOM7jrIwEbgApjp7QvDe/URM2ElMDhtukBGhPfLj7wcGI PXnTSOezu++4IqGZiOHndrc7MbzmPN5nP4rXO0nAVSoQUnyyXfoH3bRKIA2LAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQU9bVN4jM8xTFheKgrmjTZUxKk6pwwHwYDVR0j BBgwFoAUZr0MEBNeXb9JE+LuPy3Z01j59RwwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud HwRkMGIwYKBeoFyGWnJzeW5jOi8vcnJkcC5hczIxNDc0OS5uZXQvcmVwby9hczIx NDc0OS1wYXcvMS82NkJEMEMxMDEzNUU1REJGNDkxM0UyRUUzRjJERDlEMzU4RjlG NTFDLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzov L3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RkZTgzN2ZiLTYz OTAtNDFiNS04MmEwLWYwZDAyYzAzYTJjNi83LzY2QkQwQzEwMTM1RTVEQkY0OTEz RTJFRTNGMkREOUQzNThGOUY1MUMuY2VyMHYGCCsGAQUFBwELBGowaDBmBggrBgEF BQcwC4ZacnN5bmM6Ly9ycmRwLmFzMjE0NzQ5Lm5ldC9yZXBvL2FzMjE0NzQ5LXBh dy8xLzY2QkQwQzEwMTM1RTVEQkY0OTEzRTJFRTNGMkREOUQzNThGOUY1MUMubWZ0 MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiGpRbEFclkVmLgF2AL3fUe3t5jLbIxQBoiNAd0R2iBGL4qq8rxmTI omvg2tEAoMybZtDMzMLUW2Yug671seoGKioXwlWo/l/C/ZmWzCXz8HFqSLhk/qj4 n9UfUIpu4MTu+HGjD/6STYbUkoQE7wQE1YNvx/mxOw48Y50RZp5F999IvBFQuhv9 6H/HH4NnmHA6KHnYwcs+Mckovx+SqaPdKJvYh2v2TSwVLdFANbYZtiIZAsreIKxq 9HtjYgaORK9mb5Xv3yV9pdL+ZZeQX3X01+zyzGBsXRYikyPk2F+P89E2AC/brIdg iBzda2oVHDwka+Cc9qsEkCOrnabHUvbZ -----END CERTIFICATE-----Generated at Sat Sep 26 14:58:24 2026 by rpki-client