$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json) Hash identifier: VgbmJJ/cJ3Ixv2Nk2ciBsN5tKtkaV4x6RE7asAmQId8= Subject key identifier: 15:BF:82:52:6B:A0:34:75:88:EC:9B:9E:89:FF:15:21:3F:4F:E2:06 Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 4E6E843F2DDD82ABC2FC7CCAB38AA7BCF533632E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft Manifest number: 0211 Signing time: Tue 05 Aug 2025 22:12:43 +0000 Manifest this update: Tue 05 Aug 2025 22:07:43 +0000 Manifest next update: Wed 06 Aug 2025 23:35:43 +0000 Files and hashes: 1: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: IaJGQoAKH+KWm0+4twvXdO8cdPBxxDgSyOBYDKXjXYI=) 2: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: onhCLB3gV3HdQhsHYazqCSyNdZ/2h865cbuFqj2YlvA=) 3: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: Kgbp0+Zk4p3tpOkyAtCJ3HEWdnZBbzm3NgMcGrByxQs=) 4: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: pRpvcvkpUIjn6KDjm+Ywf0niLgvvVoNWrBKMV64s3Gs=) 5: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: fW3/1bM6uuAVh4/BqcyWFGfZeggD1zO77SW4GWfaw4U=) 6: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: scCBjh8HfhV3GwKDOrHZF1YXj718at6+uNm0y/KBmOw=) 7: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: b4lO7qQITmIuTe+1DZpcfLD2H0yGfI8Xz4qwvBeBNzo=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 14:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:6e:84:3f:2d:dd:82:ab:c2:fc:7c:ca:b3:8a:a7:bc:f5:33:63:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: Aug 5 22:07:43 2025 GMT Not After : Aug 6 23:35:43 2025 GMT Subject: CN=15BF82526BA0347588EC9B9E89FF15213F4FE206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:82:f0:2c:0b:cf:61:ad:14:22:1e:62:33:ea: ec:87:fd:6c:8a:e0:fd:01:a6:25:14:d2:e7:22:98: 48:fc:66:b5:bc:5f:fa:5a:33:dc:99:9e:e4:3c:f0: 92:cc:f6:72:bc:7f:f1:4e:4c:3b:47:53:61:c8:6a: 86:0f:68:e5:9d:cb:f7:4c:45:58:0f:39:f7:d2:1c: a3:9c:19:4a:f4:34:de:92:09:26:c9:5f:72:ed:8f: 0e:5f:78:f8:42:22:ef:71:ab:80:c5:27:a8:ff:5a: 03:f5:1b:10:7b:f6:a5:c0:c7:1b:a4:e5:c8:a1:8a: 2c:50:5b:46:99:bb:19:7b:f2:9b:e5:81:b1:2e:a3: ff:4c:c7:78:ba:5d:7f:6a:a3:e0:5a:e8:12:80:61: 02:46:8b:71:04:e1:0a:bc:eb:64:b7:19:b8:98:8a: e7:e8:24:01:36:2c:51:6c:f9:cc:60:c0:bd:bf:ff: 36:c9:fb:f1:4b:d0:c4:50:74:c2:a7:bf:45:ea:23: b5:a6:60:c7:45:bb:3f:0e:dc:be:1d:7f:55:d9:60: ad:ba:25:1b:8f:6b:17:d0:6b:82:53:2e:17:6e:d4: 6c:f5:90:89:f9:9a:9b:d8:94:8a:38:77:96:38:00: ef:c1:a2:cd:aa:ea:58:ff:92:f3:23:f5:cf:c9:a4: 89:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BF:82:52:6B:A0:34:75:88:EC:9B:9E:89:FF:15:21:3F:4F:E2:06 X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:59:d1:ea:9b:04:23:b3:01:d7:a6:36:2f:07:84:7e:89:3f: 9d:aa:12:4e:18:b7:86:ac:73:e9:4a:42:9f:f4:2a:a9:2a:24: 79:ae:35:83:dc:7c:01:ac:80:15:04:68:1c:6e:36:c2:8b:61: 5c:b0:07:5f:2b:8b:44:26:89:2a:76:ee:a8:a9:99:ee:41:af: f3:22:83:e7:9e:1e:a8:e7:d9:22:a7:fb:ba:6b:4d:57:eb:4e: 20:36:f6:34:9f:d3:e7:1e:77:98:f7:60:4d:6e:bb:0a:7e:39: 5b:50:ab:31:86:57:0b:17:0b:a4:6a:73:ef:f5:bf:40:24:90: b1:01:8a:a1:28:96:58:31:2d:6e:16:5d:5f:c3:c4:bd:b3:3a: a6:d7:56:d2:60:ba:8d:1c:26:b2:ee:45:fe:4e:5b:51:b0:54: b6:a4:0b:e1:5b:7e:4d:11:f3:f4:b3:6e:54:08:31:1d:0b:e2: 1e:0b:ac:65:c6:29:04:7c:c9:ce:50:df:bd:e3:4b:04:e9:44: 67:46:ab:54:80:97:36:8b:6c:fa:5e:9f:43:5e:3d:40:4f:ef: 1d:1c:b1:35:08:b8:76:a9:70:6d:a4:38:0b:12:bd:b5:b9:53: 1d:cf:b4:1c:dc:03:2a:3c:08:a6:53:40:47:e3:53:a1:63:32: ce:59:48:6f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUTm6EPy3dgqvC/HzKs4qnvPUzYy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNTA4MDUyMjA3NDNaFw0yNTA4MDYyMzM1NDNaMDMxMTAvBgNV BAMTKDE1QkY4MjUyNkJBMDM0NzU4OEVDOUI5RTg5RkYxNTIxM0Y0RkUyMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClgvAsC89hrRQiHmIz6uyH/WyK 4P0BpiUU0ucimEj8ZrW8X/paM9yZnuQ88JLM9nK8f/FOTDtHU2HIaoYPaOWdy/dM RVgPOffSHKOcGUr0NN6SCSbJX3Ltjw5fePhCIu9xq4DFJ6j/WgP1GxB79qXAxxuk 5cihiixQW0aZuxl78pvlgbEuo/9Mx3i6XX9qo+Ba6BKAYQJGi3EE4Qq862S3GbiY iufoJAE2LFFs+cxgwL2//zbJ+/FL0MRQdMKnv0XqI7WmYMdFuz8O3L4df1XZYK26 JRuPaxfQa4JTLhdu1Gz1kIn5mpvYlIo4d5Y4AO/Bos2q6lj/kvMj9c/JpIlhAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUFb+CUmugNHWI7Jueif8VIT9P4gYwHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzI1NDA1 Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0QTQ1MzgwQzZENDU1 Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAhZ0eqbBCOzAdemNi8H hH6JP52qEk4Yt4asc+lKQp/0KqkqJHmuNYPcfAGsgBUEaBxuNsKLYVywB18ri0Qm iSp27qipme5Br/Mig+eeHqjn2SKn+7prTVfrTiA29jSf0+ced5j3YE1uuwp+OVtQ qzGGVwsXC6Rqc+/1v0AkkLEBiqEollgxLW4WXV/DxL2zOqbXVtJguo0cJrLuRf5O W1GwVLakC+Fbfk0R8/SzblQIMR0L4h4LrGXGKQR8yc5Q373jSwTpRGdGq1SAlzaL bPpen0NePUBP7x0csTUIuHapcG2kOAsSvbW5Ux3PtBzcAyo8CKZTQEfjU6FjMs5Z SG8= -----END CERTIFICATE-----Generated at Wed Aug 6 04:08:49 2025 by rpki-client