$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json) Hash identifier: uXVd0yF9C5JkuYhn30KWhg+xQpCTfaaXNblrv6rSGIs= Subject key identifier: 28:D0:BC:0E:8D:98:DF:98:BD:93:61:96:45:1C:F0:8D:8B:48:BD:01 Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 51F52524927DD29A55D7BB9F65D4D678EFFDD5DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft Manifest number: 026F Signing time: Wed 05 Nov 2025 00:24:31 +0000 Manifest this update: Wed 05 Nov 2025 00:19:31 +0000 Manifest next update: Thu 06 Nov 2025 04:16:31 +0000 Files and hashes: 1: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: fW3/1bM6uuAVh4/BqcyWFGfZeggD1zO77SW4GWfaw4U=) 2: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: ze+8T7polQZVTsjDxIxR7LF0a4lIJi9Kn/FYNOjawIg=) 3: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: scCBjh8HfhV3GwKDOrHZF1YXj718at6+uNm0y/KBmOw=) 4: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: onhCLB3gV3HdQhsHYazqCSyNdZ/2h865cbuFqj2YlvA=) 5: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: pRpvcvkpUIjn6KDjm+Ywf0niLgvvVoNWrBKMV64s3Gs=) 6: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: Kgbp0+Zk4p3tpOkyAtCJ3HEWdnZBbzm3NgMcGrByxQs=) 7: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: b4lO7qQITmIuTe+1DZpcfLD2H0yGfI8Xz4qwvBeBNzo=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f5:25:24:92:7d:d2:9a:55:d7:bb:9f:65:d4:d6:78:ef:fd:d5:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: Nov 5 00:19:31 2025 GMT Not After : Nov 6 04:16:31 2025 GMT Subject: CN=28D0BC0E8D98DF98BD936196451CF08D8B48BD01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ef:f1:e5:2c:71:b0:8a:99:0b:36:1a:e4:d0: 27:6e:5e:03:00:f8:ab:c5:c9:c3:76:77:8f:0b:cb: 0b:3c:46:da:e6:24:1b:0f:4d:93:0a:c2:94:59:32: 99:bd:96:6f:80:a7:4d:2c:9e:44:71:05:11:d8:c4: 91:ec:b4:d2:96:74:75:2d:40:3d:f2:50:c0:16:6d: b7:a2:a9:06:b7:53:e3:37:aa:d0:97:45:1b:f0:07: fe:06:34:c5:40:b4:3c:fc:df:29:da:a6:15:3c:cb: 6d:50:50:e0:67:d1:13:5c:bf:06:a8:1c:cd:e7:14: e9:35:02:25:91:01:8c:73:02:9f:7a:98:7d:15:ae: 14:f8:74:ad:11:43:53:d2:00:82:91:78:e3:66:2f: 80:02:08:07:bb:33:38:52:43:f4:71:21:83:6e:68: aa:96:06:46:98:5d:8b:b8:f8:bf:26:0c:e1:7e:66: 4a:04:95:cc:f1:78:ad:bc:ff:8b:94:c2:a7:c6:c4: 0d:5d:26:19:d7:aa:b6:d9:b1:bf:d1:bf:a7:41:fb: 72:4d:e6:32:dd:39:1c:8e:a0:d3:d2:44:fc:9b:b0: a9:c7:9a:99:84:f3:d1:4b:70:8c:03:c6:6e:de:49: 41:63:bc:80:02:77:08:d0:b5:1b:f8:f9:97:ae:32: 7d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D0:BC:0E:8D:98:DF:98:BD:93:61:96:45:1C:F0:8D:8B:48:BD:01 X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:bb:0b:de:7a:a0:a7:97:8b:92:17:d6:a7:3a:cb:23:f0:96: 93:76:a2:35:90:65:7b:e2:fc:42:0f:ae:10:de:4b:a8:b6:07: 95:54:9d:32:38:ad:00:a3:71:64:2a:35:7f:34:4d:31:13:bc: 04:76:22:b9:7f:3d:a4:c3:d2:4a:5d:d6:04:c8:98:5d:dd:88: 53:a8:f1:03:71:a5:48:1d:64:16:ab:11:84:30:d6:bb:9f:50: fa:91:ab:0d:42:16:bd:97:eb:20:fc:5a:fd:78:fe:d0:51:4d: e7:80:f4:aa:0f:59:66:e6:49:e0:94:51:b3:67:38:cd:5b:f2: fa:c4:61:0e:c9:86:29:c5:a6:d1:91:bb:1d:7c:7b:e9:2a:d6: 18:f7:c4:48:5c:60:fe:cc:7c:ff:a6:31:af:d0:7e:b5:79:40: 81:cb:27:b9:0f:0f:f9:9f:72:c4:62:6e:e4:58:8b:8d:19:85: 0a:6e:ee:a7:d1:86:9f:32:6c:95:66:df:5c:33:2d:2f:05:23: f8:ba:d0:ed:c7:f7:fd:94:f7:97:44:fb:65:4d:39:e7:3c:bb: 0a:ab:a9:b8:97:57:fe:44:82:f3:59:65:43:d0:17:1d:12:7b: ba:11:c1:a7:a2:0f:1f:f7:2f:3d:55:fe:1e:37:f0:d0:01:01: 5e:40:15:42 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUUfUlJJJ90ppV17ufZdTWeO/91d8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNTExMDUwMDE5MzFaFw0yNTExMDYwNDE2MzFaMDMxMTAvBgNV BAMTKDI4RDBCQzBFOEQ5OERGOThCRDkzNjE5NjQ1MUNGMDhEOEI0OEJEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ7/HlLHGwipkLNhrk0CduXgMA +KvFycN2d48Lyws8RtrmJBsPTZMKwpRZMpm9lm+Ap00snkRxBRHYxJHstNKWdHUt QD3yUMAWbbeiqQa3U+M3qtCXRRvwB/4GNMVAtDz83ynaphU8y21QUOBn0RNcvwao HM3nFOk1AiWRAYxzAp96mH0VrhT4dK0RQ1PSAIKReONmL4ACCAe7MzhSQ/RxIYNu aKqWBkaYXYu4+L8mDOF+ZkoElczxeK28/4uUwqfGxA1dJhnXqrbZsb/Rv6dB+3JN 5jLdORyOoNPSRPybsKnHmpmE89FLcIwDxm7eSUFjvIACdwjQtRv4+ZeuMn01AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUKNC8Do2Y35i9k2GWRRzwjYtIvQEwHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzI1NDA1 Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0QTQ1MzgwQzZENDU1 Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADK7C956oKeXi5IX1qc6 yyPwlpN2ojWQZXvi/EIPrhDeS6i2B5VUnTI4rQCjcWQqNX80TTETvAR2Irl/PaTD 0kpd1gTImF3diFOo8QNxpUgdZBarEYQw1rufUPqRqw1CFr2X6yD8Wv14/tBRTeeA 9KoPWWbmSeCUUbNnOM1b8vrEYQ7JhinFptGRux18e+kq1hj3xEhcYP7MfP+mMa/Q frV5QIHLJ7kPD/mfcsRibuRYi40ZhQpu7qfRhp8ybJVm31wzLS8FI/i60O3H9/2U 95dE+2VNOec8uwqrqbiXV/5EgvNZZUPQFx0Se7oRwaeiDx/3Lz1V/h438NABAV5A FUI= -----END CERTIFICATE-----Generated at Wed Nov 5 09:55:29 2025 by rpki-client