$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json) Hash identifier: 0hqRAwQUuv/U84pf95ddYItSP5BO/Hpm0OSLqJU88Xk= Subject key identifier: B9:F1:B3:8E:E9:6F:47:0F:01:C4:2B:B2:F9:75:FD:02:8A:59:3A:53 Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 45EF2B79848257DE6C622684A049F9D110EEBB44 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft Manifest number: 0407 Signing time: Sun 18 Oct 2026 07:28:55 +0000 Manifest this update: Sun 18 Oct 2026 07:23:54 +0000 Manifest next update: Mon 19 Oct 2026 11:11:54 +0000 Files and hashes: 1: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: KSgTOOL8ZdXrf0lBxQkVAAr95/tmOBwkp7oTrpzhA3k=) 2: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: AvPgJpOsI1TploqZ0/2ASRnaOVLSsJ7W3kE96A2TVTo=) 3: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: 8j902cWXOhTuCO690tGBwZ7dH1WqGBRJ8B21eNCGG6w=) 4: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: vn32w0zGgfB0cVJZQUH0tGQAvf+HZ/StuvYLZuELll0=) 5: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: udhj+Cj6LdKS6F7VmXpps98C6UmzFOStEjpktiC8S+w=) 6: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: +Pw2Pz/niLR0OIvDdEcfjmpFskGwMua2flzbLEwL+Go=) 7: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: Z52u1hJ9Tu52TlLUmiJBerp8jE9GjeJdJu61JsZoqB4=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Oct 2026 11:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ef:2b:79:84:82:57:de:6c:62:26:84:a0:49:f9:d1:10:ee:bb:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: Oct 18 07:23:54 2026 GMT Not After : Oct 19 11:11:54 2026 GMT Subject: CN=B9F1B38EE96F470F01C42BB2F975FD028A593A53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:c8:72:b6:97:fc:62:b4:8c:83:75:d8:e0: ac:bd:34:ee:b5:88:d6:92:57:3b:25:68:66:6f:f7: 25:b2:f7:9d:ff:3d:09:2a:18:71:c6:5a:98:a5:18: 3c:35:79:7f:b2:b1:21:90:10:96:6f:59:b1:98:aa: ae:17:6d:27:29:e8:c3:7a:68:69:32:b2:3e:89:f0: 41:e8:5a:9e:7d:0c:50:bd:01:aa:9c:25:79:00:66: 1f:3b:d9:64:89:c9:f4:f3:f1:31:d3:ca:0d:0d:98: 0e:1f:b9:44:5f:e8:fe:cf:8e:af:71:36:20:f2:97: cd:60:36:9b:0d:47:b7:ed:3b:34:e4:08:3d:d3:15: 53:ab:24:a3:63:ee:1b:46:68:b4:13:5d:ab:58:9c: 23:59:6c:42:06:42:b2:28:6f:fc:7a:21:f3:08:d9: 7f:17:94:9f:52:2c:e8:79:d2:bf:29:a2:af:90:e7: cb:95:10:45:47:ed:56:74:1f:7f:33:87:44:81:05: 1b:3c:b4:c2:17:84:68:df:fa:7d:26:a6:61:ff:8d: 74:93:8f:b0:28:4d:c7:25:be:23:95:81:51:88:03: 94:7a:a8:4e:dc:f5:4d:53:3d:d4:3c:62:27:42:24: 01:f7:d7:80:83:91:89:46:1b:fe:07:ef:92:f9:cb: 7c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F1:B3:8E:E9:6F:47:0F:01:C4:2B:B2:F9:75:FD:02:8A:59:3A:53 X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:46:f2:db:e3:46:d9:0c:21:78:eb:5b:c5:8c:ea:40:0e:fe: ec:23:55:52:76:30:20:00:12:f5:d4:60:81:80:bc:ae:b7:f4: 3a:b1:98:5a:e5:37:89:2f:1b:2f:39:57:f9:93:79:02:c6:54: 6e:12:7c:81:27:5e:b6:40:bf:44:bc:1f:d0:65:2a:f6:53:ae: 24:ad:90:81:43:97:cf:63:36:77:38:61:d3:57:52:58:2a:d4: ea:8b:88:6c:43:a3:4c:7a:21:fa:01:dd:bb:62:96:dd:ad:c1: 3a:fe:ab:34:9a:79:06:0c:c7:16:4a:f1:04:cd:1a:ba:64:b1: 2f:4f:d5:21:ee:44:9d:7a:19:78:47:c1:17:7b:6a:e7:88:28: 70:e6:ba:0b:ec:0f:c1:22:15:b1:88:b3:9a:47:02:21:a1:27: 69:18:0f:e7:c8:6f:15:ab:09:71:1e:ce:67:ea:88:58:5c:7c: ab:93:09:e6:e0:a2:bd:04:b9:df:60:58:7c:be:7a:cd:c9:e4: 5c:ac:25:91:5a:ae:2b:c6:cf:c8:06:22:76:54:c7:7a:b9:7f: d9:4c:87:a6:18:b6:cb:27:92:9d:05:24:06:30:33:ca:a0:97: 96:9c:eb:58:76:7d:8d:d2:f0:e0:c9:4d:38:d3:69:11:1b:c1: 42:ea:cf:af -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIURe8reYSCV95sYiaEoEn50RDuu0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNjEwMTgwNzIzNTRaFw0yNjEwMTkxMTExNTRaMDMxMTAvBgNV BAMTKEI5RjFCMzhFRTk2RjQ3MEYwMUM0MkJCMkY5NzVGRDAyOEE1OTNBNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEa8hytpf8YrSMg3XY4Ky9NO61 iNaSVzslaGZv9yWy953/PQkqGHHGWpilGDw1eX+ysSGQEJZvWbGYqq4XbScp6MN6 aGkysj6J8EHoWp59DFC9AaqcJXkAZh872WSJyfTz8THTyg0NmA4fuURf6P7Pjq9x NiDyl81gNpsNR7ftOzTkCD3TFVOrJKNj7htGaLQTXatYnCNZbEIGQrIob/x6IfMI 2X8XlJ9SLOh50r8poq+Q58uVEEVH7VZ0H38zh0SBBRs8tMIXhGjf+n0mpmH/jXST j7AoTcclviOVgVGIA5R6qE7c9U1TPdQ8YidCJAH314CDkYlGG/4H75L5y3zhAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUufGzjulvRw8BxCuy+XX9AopZOlMwHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzI1NDA1 Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0QTQ1MzgwQzZENDU1 Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH5G8tvjRtkMIXjrW8WM 6kAO/uwjVVJ2MCAAEvXUYIGAvK639DqxmFrlN4kvGy85V/mTeQLGVG4SfIEnXrZA v0S8H9BlKvZTriStkIFDl89jNnc4YdNXUlgq1OqLiGxDo0x6IfoB3btilt2twTr+ qzSaeQYMxxZK8QTNGrpksS9P1SHuRJ16GXhHwRd7aueIKHDmugvsD8EiFbGIs5pH AiGhJ2kYD+fIbxWrCXEezmfqiFhcfKuTCebgor0Eud9gWHy+es3J5FysJZFarivG z8gGInZUx3q5f9lMh6YYtssnkp0FJAYwM8qgl5ac61h2fY3S8ODJTTjTaREbwULq z68= -----END CERTIFICATE-----Generated at Mon Oct 19 02:43:41 2026 by rpki-client