$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json) Hash identifier: wWQBRu0Voo+KRgLM0JiCMdpuqSymt63l3Td7MIQ9zUw= Subject key identifier: F9:5B:3F:07:A0:43:05:0D:D8:D2:65:BA:3C:66:E2:C6:6E:4C:F9:C6 Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 22BF44D7DE9DD15AD36E673BC2C1685BE2D6D546 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft Manifest number: 0371 Signing time: Sat 13 Jun 2026 19:12:28 +0000 Manifest this update: Sat 13 Jun 2026 19:07:28 +0000 Manifest next update: Sun 14 Jun 2026 19:53:28 +0000 Files and hashes: 1: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: AvPgJpOsI1TploqZ0/2ASRnaOVLSsJ7W3kE96A2TVTo=) 2: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: euxWRR2ZYtg37HMWzXkHPbFexlqmjxfqbk58BFa1huk=) 3: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: udhj+Cj6LdKS6F7VmXpps98C6UmzFOStEjpktiC8S+w=) 4: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: KSgTOOL8ZdXrf0lBxQkVAAr95/tmOBwkp7oTrpzhA3k=) 5: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: vn32w0zGgfB0cVJZQUH0tGQAvf+HZ/StuvYLZuELll0=) 6: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: +Pw2Pz/niLR0OIvDdEcfjmpFskGwMua2flzbLEwL+Go=) 7: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: 8j902cWXOhTuCO690tGBwZ7dH1WqGBRJ8B21eNCGG6w=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 13:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:bf:44:d7:de:9d:d1:5a:d3:6e:67:3b:c2:c1:68:5b:e2:d6:d5:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: Jun 13 19:07:28 2026 GMT Not After : Jun 14 19:53:28 2026 GMT Subject: CN=F95B3F07A043050DD8D265BA3C66E2C66E4CF9C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:f2:a8:ea:c1:96:dc:db:03:3c:5f:7c:20: d3:29:ec:fb:73:d5:10:6e:72:ef:ec:07:be:b7:d4: a6:25:2c:4b:1b:34:f6:e6:91:ea:d4:dc:19:5f:45: 2d:63:1f:9f:28:9a:69:0a:2e:cf:f5:26:a6:61:4d: 1d:27:fa:bf:1a:6f:05:60:f2:ae:cf:f3:05:46:04: dd:15:66:61:71:01:52:01:f4:7f:da:78:60:84:f0: 91:05:6c:a5:b4:17:72:7c:66:6d:80:d6:76:e1:66: 3d:50:cd:e4:e5:45:53:23:22:f1:63:d6:f4:b6:23: e9:96:82:76:1f:b6:4d:99:88:f5:a2:67:cd:0d:36: 22:47:e4:7b:47:5d:98:f8:1a:db:16:d7:ba:af:95: f9:58:90:48:fb:6a:b4:f3:1e:66:5e:9f:1b:87:66: d9:4a:6b:6c:c5:f8:a2:b9:97:ec:9f:4d:8c:97:e8: df:94:29:33:dd:e3:ee:5c:58:65:ea:e9:69:4e:7d: bb:0a:0a:f4:53:73:d5:cf:d1:0a:ad:73:a7:70:6a: 67:f9:d8:76:d5:ab:f8:df:45:30:6e:e5:81:34:7d: 01:6a:55:bf:d3:80:88:44:a3:08:06:3a:29:30:43: a2:2d:96:a0:47:b1:64:d4:d4:3e:ad:83:8a:4f:8f: cb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5B:3F:07:A0:43:05:0D:D8:D2:65:BA:3C:66:E2:C6:6E:4C:F9:C6 X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:7f:63:9a:1f:a1:87:31:78:33:58:a7:d4:8d:c9:5c:e3:4b: 01:b3:dd:fb:48:9d:77:d7:3d:3f:d4:09:e6:6c:d6:7d:97:07: 7b:7d:8e:11:73:59:55:28:ce:b8:ac:31:1d:f9:69:ea:12:35: 82:83:6d:9a:ae:c9:e3:f8:41:ad:e2:c3:de:89:fb:9c:d5:1e: 37:70:5f:23:6c:2c:43:2d:eb:82:1d:96:4a:e5:36:53:6e:fb: 36:c7:e7:69:2d:74:e1:08:21:65:06:94:5a:01:62:52:23:04: cd:76:0b:d8:b4:41:32:20:46:29:c9:a7:9f:1c:09:31:f5:31: fe:21:ba:67:8d:cf:0e:d4:72:fd:53:0f:bc:7d:40:f7:6f:80: 5a:2d:01:4e:40:6a:fe:a4:f1:2c:fa:3a:eb:ab:52:aa:a1:dc: 70:b9:2e:d8:2f:49:36:28:5e:32:5c:59:e1:3f:67:e4:67:fd: 6a:21:33:55:ef:23:15:b3:1b:34:41:ca:dd:fa:ec:3f:18:17: 03:57:4c:13:86:98:67:bc:75:e4:1f:01:44:1b:19:1e:74:92: 4c:60:db:97:3f:ad:be:a2:d7:82:9a:b1:3a:44:23:fc:cc:1f: 0a:1a:31:44:70:c0:b3:92:9e:c1:08:38:6a:5d:63:30:0d:47: 5d:78:5d:d5 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUIr9E196d0VrTbmc7wsFoW+LW1UYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNjA2MTMxOTA3MjhaFw0yNjA2MTQxOTUzMjhaMDMxMTAvBgNV BAMTKEY5NUIzRjA3QTA0MzA1MEREOEQyNjVCQTNDNjZFMkM2NkU0Q0Y5QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7r/Ko6sGW3NsDPF98INMp7Ptz 1RBucu/sB7631KYlLEsbNPbmkerU3BlfRS1jH58ommkKLs/1JqZhTR0n+r8abwVg 8q7P8wVGBN0VZmFxAVIB9H/aeGCE8JEFbKW0F3J8Zm2A1nbhZj1QzeTlRVMjIvFj 1vS2I+mWgnYftk2ZiPWiZ80NNiJH5HtHXZj4GtsW17qvlflYkEj7arTzHmZenxuH ZtlKa2zF+KK5l+yfTYyX6N+UKTPd4+5cWGXq6WlOfbsKCvRTc9XP0Qqtc6dwamf5 2HbVq/jfRTBu5YE0fQFqVb/TgIhEowgGOikwQ6ItlqBHsWTU1D6tg4pPj8tnAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU+Vs/B6BDBQ3Y0mW6PGbixm5M+cYwHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzI1NDA1 Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0QTQ1MzgwQzZENDU1 Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALV/Y5ofoYcxeDNYp9SN yVzjSwGz3ftInXfXPT/UCeZs1n2XB3t9jhFzWVUozrisMR35aeoSNYKDbZquyeP4 Qa3iw96J+5zVHjdwXyNsLEMt64IdlkrlNlNu+zbH52ktdOEIIWUGlFoBYlIjBM12 C9i0QTIgRinJp58cCTH1Mf4humeNzw7Ucv1TD7x9QPdvgFotAU5Aav6k8Sz6Ouur Uqqh3HC5LtgvSTYoXjJcWeE/Z+Rn/WohM1XvIxWzGzRByt367D8YFwNXTBOGmGe8 deQfAUQbGR50kkxg25c/rb6i14KasTpEI/zMHwoaMURwwLOSnsEIOGpdYzANR114 XdU= -----END CERTIFICATE-----Generated at Sun Jun 14 06:23:39 2026 by rpki-client