$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json) Hash identifier: WP+lGuLKhmAPGwg3U05jJPlaUxy8FVCWHhTnD1oJUck= Subject key identifier: AF:96:23:65:56:86:7A:99:3E:2B:76:48:80:FB:1B:63:2B:4B:74:90 Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 6B01A01A4A1EB58E3795B56EBA3F36144E35156B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft Manifest number: 0325 Signing time: Fri 17 Apr 2026 18:40:06 +0000 Manifest this update: Fri 17 Apr 2026 18:35:04 +0000 Manifest next update: Sat 18 Apr 2026 20:29:04 +0000 Files and hashes: 1: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: W/fn7QAoxgdTmgcAb9WRBSScnfM8Io+phuMxmTv1+fM=) 2: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: b4lO7qQITmIuTe+1DZpcfLD2H0yGfI8Xz4qwvBeBNzo=) 3: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: onhCLB3gV3HdQhsHYazqCSyNdZ/2h865cbuFqj2YlvA=) 4: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: pRpvcvkpUIjn6KDjm+Ywf0niLgvvVoNWrBKMV64s3Gs=) 5: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: Kgbp0+Zk4p3tpOkyAtCJ3HEWdnZBbzm3NgMcGrByxQs=) 6: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: fW3/1bM6uuAVh4/BqcyWFGfZeggD1zO77SW4GWfaw4U=) 7: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: scCBjh8HfhV3GwKDOrHZF1YXj718at6+uNm0y/KBmOw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:01:a0:1a:4a:1e:b5:8e:37:95:b5:6e:ba:3f:36:14:4e:35:15:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: Apr 17 18:35:04 2026 GMT Not After : Apr 18 20:29:04 2026 GMT Subject: CN=AF96236556867A993E2B764880FB1B632B4B7490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6f:d7:da:f5:88:a2:bd:d0:cb:f6:80:5b:41: e1:f6:dd:f0:5e:4d:3b:0f:d3:7b:5a:bd:e2:b1:97: 21:c0:aa:6f:ea:9b:0b:18:4e:32:fb:53:bf:3f:e0: 6e:60:99:e1:da:27:63:57:f0:c6:7a:9d:00:11:16: d7:77:b9:33:2c:d8:13:a9:3b:6c:56:b2:52:29:72: 94:2b:69:4c:d0:63:a0:e5:31:a3:63:69:3f:96:d5: 4d:21:24:fd:15:86:89:66:b8:dc:7b:f0:69:bc:ac: 09:f7:b9:44:9e:10:f7:d6:c9:d7:57:21:2a:67:dc: 2d:88:31:22:f4:09:df:07:f6:cf:fe:68:17:44:4e: e2:72:ba:f5:cd:be:60:62:ef:13:bf:49:db:36:b8: 4a:b3:58:bc:94:66:88:b5:eb:99:bf:00:3c:68:97: 78:04:30:67:98:d3:95:eb:d3:b8:0f:c0:32:0e:d4: ea:5b:f1:0a:b3:34:af:78:7d:ff:80:27:c0:c4:76: 7c:30:81:df:88:e4:33:c0:66:06:dd:9f:be:60:59: c2:ee:4a:6e:72:3e:41:1b:a3:d2:c2:47:34:21:69: 91:85:e3:4b:f0:61:d1:83:e4:a8:9d:69:a5:8c:63: 12:64:9b:c7:bd:ef:82:ba:8d:40:5b:f1:82:32:ff: 5f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:96:23:65:56:86:7A:99:3E:2B:76:48:80:FB:1B:63:2B:4B:74:90 X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9f:02:1b:4d:1e:df:66:ca:e7:a3:ac:d9:ee:cd:32:f5:45: 2f:fd:bd:9c:f5:ec:fa:89:f0:70:dd:79:ac:13:54:14:be:96: 57:a1:06:5c:bd:9f:e1:a2:e1:9c:d7:ac:4c:f3:87:22:d2:f9: dd:c5:01:27:ee:db:46:58:df:df:6c:3e:46:ab:72:eb:b5:e2: 39:2c:e5:3f:51:5c:e5:8c:4b:6c:4f:1b:8d:78:05:e7:50:cc: 57:fc:4b:03:5d:6b:0d:ff:24:d4:7e:dd:71:02:0e:26:5c:57: 43:31:90:42:75:64:75:86:6a:7d:7a:b0:74:da:79:1f:0c:b9: 01:fa:4d:be:f4:81:1a:f3:ff:c8:e5:7a:2e:0c:6b:a2:67:07: 0b:8a:b3:b8:8d:5f:6b:81:56:1d:b4:30:84:e5:c6:26:f2:60: b0:15:ac:11:db:4e:cd:fe:54:50:c1:14:c6:3a:15:c9:93:3d: 03:e9:0b:d8:27:9b:b6:24:89:7d:5c:3f:95:dd:75:89:11:de: 1a:82:ca:b1:de:e5:59:75:92:b1:11:3c:89:fd:14:b8:5d:76: 93:83:5e:0b:28:fa:79:0f:a8:ab:b4:d7:74:93:79:e5:61:e8: cb:61:44:07:7d:8b:49:9e:2e:61:cc:c7:84:c8:e3:39:c9:bd: c3:9d:53:2b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUawGgGkoetY43lbVuuj82FE41FWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNjA0MTcxODM1MDRaFw0yNjA0MTgyMDI5MDRaMDMxMTAvBgNV BAMTKEFGOTYyMzY1NTY4NjdBOTkzRTJCNzY0ODgwRkIxQjYzMkI0Qjc0OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+b9fa9YiivdDL9oBbQeH23fBe TTsP03taveKxlyHAqm/qmwsYTjL7U78/4G5gmeHaJ2NX8MZ6nQARFtd3uTMs2BOp O2xWslIpcpQraUzQY6DlMaNjaT+W1U0hJP0VholmuNx78Gm8rAn3uUSeEPfWyddX ISpn3C2IMSL0Cd8H9s/+aBdETuJyuvXNvmBi7xO/Sds2uEqzWLyUZoi165m/ADxo l3gEMGeY05Xr07gPwDIO1Opb8QqzNK94ff+AJ8DEdnwwgd+I5DPAZgbdn75gWcLu Sm5yPkEbo9LCRzQhaZGF40vwYdGD5KidaaWMYxJkm8e974K6jUBb8YIy/1+TAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUr5YjZVaGepk+K3ZIgPsbYytLdJAwHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzI1NDA1 Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0QTQ1MzgwQzZENDU1 Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG6fAhtNHt9myuejrNnu zTL1RS/9vZz17PqJ8HDdeawTVBS+llehBly9n+Gi4ZzXrEzzhyLS+d3FASfu20ZY 399sPkarcuu14jks5T9RXOWMS2xPG414BedQzFf8SwNdaw3/JNR+3XECDiZcV0Mx kEJ1ZHWGan16sHTaeR8MuQH6Tb70gRrz/8jlei4Ma6JnBwuKs7iNX2uBVh20MITl xibyYLAVrBHbTs3+VFDBFMY6FcmTPQPpC9gnm7YkiX1cP5XddYkR3hqCyrHe5Vl1 krERPIn9FLhddpODXgso+nkPqKu013STeeVh6MthRAd9i0meLmHMx4TI4znJvcOd Uys= -----END CERTIFICATE-----Generated at Fri Apr 17 22:07:36 2026 by rpki-client